{"report_id":"c35b6a0a-9bbc-4e9b-832d-33caf8696e94","version":6,"status":"done","tags":[],"date":"2026-02-25T17:54:44Z","url":{"schema":"http","addr":"faturaitau.lovable.app","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":0,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"https","addr":"faturaitau.lovable.app/","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"title":"Itaú - Consulta de Cartões","dom":{"size":31663,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13112)","md5":"d7ed7e14ffbefc8d565ef30a807b7de3","sha1":"bdbedb429e58475b78c9d977cf8e66169eb13667","sha256":"b219fdc7ee3750d43c9fe7384d68545338eb2588545f91de40ce3f015f59d570","sha512":"bd76ebe44641b0fd70c8c3bf3e3a54131319a2ea8a33f843157d240895a2de585b317ce006e9eaeafdfcd5f5a568c146448f31eefd876b555980d29967d38bb8","ssdeep":"768:i9EqTYNeccxksc64Jysq7vGtY7mYDYYYHEkaNmFy:ex/c64Jysq7vpJkgmY","tlshash":"4de23a41e11c123d6b3bd668fec4a35c6129f023ee978855b14d009ad6c3fe8b5abf94","dom_hash":"domhash7a7029d0021a4ea6dcec05a952cd382a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"faturaitau.lovable.app","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":0,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-01T17:54:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T17:54:21Z","timestamp":1772042061,"ip_dst":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"ip_src":{"addr":"Client IP","port":42764,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO AI Service Domain (lovable .app) in TLS SNI","source":"{\"timestamp\":\"2026-02-25T17:54:21.731197+0000\",\"flow_id\":137349686968774,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.30\",\"src_port\":42764,\"dest_ip\":\"185.41.148.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2063043,\"rev\":1,\"signature\":\"ET INFO AI Service Domain (lovable .app) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2025_06_18\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0042\"],\"mitre_tactic_name\":[\"Resource_Development\"],\"mitre_technique_id\":[\"T1587\"],\"mitre_technique_name\":[\"Develop_Capabilities\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2025_06_18\"]}},\"tls\":{\"sni\":\"faturaitau.lovable.app\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3442,\"start\":\"2026-02-25T17:54:21.672198+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"faturaitau.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"faturaitau.lovable.app","ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"domain_registered":"2023-05-06","domain_rank":0,"first_seen":"2026-02-25T01:31:14.835924Z","last_seen":"2026-02-25T01:31:14.835924Z","alert_count":48,"request_count":12,"received_data":1192139,"sent_data":8245,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cdn.gpteng.co","ip":{"addr":"104.18.28.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-26","domain_rank":776423,"first_seen":"2024-12-08T00:48:33.877309Z","last_seen":"2026-02-23T18:33:26.487963Z","alert_count":0,"request_count":1,"received_data":134511,"sent_data":544,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"faturaitau.lovable.app/","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2acd3d73bbc8d3ba3f35629bb52bdc87","sha1":"1ceb5cdb1aaef828d045f93c024d676b2a173ff5","sha256":"b6ca917f8a08af4a6ad8cc558c1aa032e1e0648b79ce297747c7f6d3a6693807","sha512":"087546aae007202ed3509d48e832308255bf2c81f32242f4fcfc51a4bd81b653856059e7c9abfa88b9fadaa45ed3857d59acc885222f8d6f2234942b235402f7","ssdeep":"","tlshash":"9801afcbe7ec623243a5b4b9185aa5dd3e3800f0eb005bb61c744db43394d5d002ee81","size":829,"data":"","first_seen":"2026-01-07T03:19:54.535133Z","last_seen":"2026-06-07T05:26:16.21982Z","times_seen":947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faturaitau.lovable.app/assets/index-Lo6zoxXh.js","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"afa81ec67b10c4d0725ad505e0efb8ee","sha1":"bdf43c91b58da3034bb69470b94927a039e5b0d2","sha256":"efdbf43d5e33c78c866c5dcdad3a6b4a31248a6ea6d5db2b6eeb06519eb6251f","sha512":"c89f994587a6e6996cb994385b0eb3da6f7b964b05e242d2547c17e3718b490a496280dea89614e2d6eec1933b1aa6cb9d666128350caaab1c0d7446b3062b8f","ssdeep":"12288:rhvJ45GhEGrveAMBBTXLvjHQ7TkFtrDH9yX4gyZzpAwIjF2AzpTKTHA1bpyYFgD7:1QGyAuBTXLvjHQ7TkFtrDH9yX4gyZzpt","tlshash":"40c46c94b095b6b99be345e1903f5106b23d2a15f80e8460f13cec992af154ab277ffc","size":567669,"data":"","first_seen":"2026-02-25T01:31:17.735778Z","last_seen":"2026-02-25T17:54:47.556664Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faturaitau.lovable.app/~flock.js","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-07-23T23:44:21.332141Z","times_seen":14232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"faturaitau.lovable.app/~api/analytics","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://faturaitau.lovable.app/","date":"2026-02-25T17:54:22.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: faturaitau.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://faturaitau.lovable.app/\r\nContent-Type: application/json\r\nContent-Length: 343\r\nOrigin: https://faturaitau.lovable.app\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=a_usKmiFYWTK4w34F3B4sRLBdbB_i_Yytl60_psINcI-1772042061.7648263-1.0.1.1-UvCq6DlNPaUQzC88tLb0s.QvddZW2AhSSB74.uDyIxA7_riKb7lHse1cZEToR.5F5kZvaxceY7bWqUV68A2mJ1kyY_oFEhOz.Ib9JZY07_Qam8bF0OSM0sNilnmd.w62; session-id=3c1b1603-96b7-436d-9a1a-095f7d953691\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":343,"data":"{\"timestamp\":\"2026-02-25T17:54:22.829Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"3c1b1603-96b7-436d-9a1a-095f7d953691\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://faturaitau.lovable.app/\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:54:23 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d39114cce92ebdd-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-07-07T11:17:12.578135Z","times_seen":12919,"resource_available":true,"data":null}},"time_used":1010,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1010,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"faturaitau.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faturaitau.lovable.app/","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-25T17:54:21.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: faturaitau.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:54:22 GMT\r\ncontent-type: text/html\r\nset-cookie: __cf_bm=a_usKmiFYWTK4w34F3B4sRLBdbB_i_Yytl60_psINcI-1772042061.7648263-1.0.1.1-UvCq6DlNPaUQzC88tLb0s.QvddZW2AhSSB74.uDyIxA7_riKb7lHse1cZEToR.5F5kZvaxceY7bWqUV68A2mJ1kyY_oFEhOz.Ib9JZY07_Qam8bF0OSM0sNilnmd.w62; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Wed, 25 Feb 2026 18:24:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"5821ec4e806fbba06957640cfce0bbbe\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d391146082aebdd-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11603,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2980)","md5":"1b9d211c854a235d52ad00a09d98e720","sha1":"1e684e61397199d6816b03cae94ab31ba342d1d4","sha256":"269062feaa23a244b5ec73e9d302ee69f8fada1b5e2d41c6e20b1968fc2ff12b","sha512":"3a3755d2120095680cf4aaf76c2345d02a2872802bf12a794f5ab2d8cae426812de4d5d04190f48c711c81cbbca03d21c41bc2aa56874d4625de22901228fead","ssdeep":"192:2Y9sk6zTUqYv/prrjywAcQSyUZxBH73YXQ:2Y9czTUqYnpv2NjaNH8XQ","tlshash":"ae32c7d2c364b53e9361d1bcafe9f4c41b6990f3e6048de1b59e097806c669ce117f90","first_seen":"2026-02-25T01:31:17.734713Z","last_seen":"2026-02-25T17:54:47.534675Z","times_seen":4,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":94,"dns":17,"connect":27,"send":0,"wait":272,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"faturaitau.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faturaitau.lovable.app/assets/index-mkP3rg9G.css","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faturaitau.lovable.app/","date":"2026-02-25T17:54:22.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET /assets/index-mkP3rg9G.css HTTP/1.1\r\nHost: faturaitau.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://faturaitau.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=a_usKmiFYWTK4w34F3B4sRLBdbB_i_Yytl60_psINcI-1772042061.7648263-1.0.1.1-UvCq6DlNPaUQzC88tLb0s.QvddZW2AhSSB74.uDyIxA7_riKb7lHse1cZEToR.5F5kZvaxceY7bWqUV68A2mJ1kyY_oFEhOz.Ib9JZY07_Qam8bF0OSM0sNilnmd.w62\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:54:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6e77932e46fcde549eca1af558f7d8d3\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d391148d96debdd-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75608,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6e77932e46fcde549eca1af558f7d8d3","sha1":"ea22cb71f0345be6ef5ae0e5923f4c4762175978","sha256":"254f925c32a99a47a41d07d67ca8215e3ee7e362e8d091501370555143fbe775","sha512":"366be08c206ded7899ad3ec4b0e8e199b4c976a79f4157e07f371a32ced789b1850d63892625dfa250efe5e2a676dfe7fa1e0c25faf9183b87738955ab271307","ssdeep":"1536:Ih9JDB3kS6UU42GI8r378VQZkt5FNCoLD:Ih9JNkYU42GI8r378VQZkt5FfLD","tlshash":"7b73851dba19603e3c2790f8c3dcb9eca11af0c0de3a06b57e9a51215ad37f61da7518","first_seen":"2026-02-25T01:31:17.731199Z","last_seen":"2026-02-25T17:54:47.535293Z","times_seen":4,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"faturaitau.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faturaitau.lovable.app/~flock.js","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faturaitau.lovable.app/","date":"2026-02-25T17:54:22.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: faturaitau.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://faturaitau.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=a_usKmiFYWTK4w34F3B4sRLBdbB_i_Yytl60_psINcI-1772042061.7648263-1.0.1.1-UvCq6DlNPaUQzC88tLb0s.QvddZW2AhSSB74.uDyIxA7_riKb7lHse1cZEToR.5F5kZvaxceY7bWqUV68A2mJ1kyY_oFEhOz.Ib9JZY07_Qam8bF0OSM0sNilnmd.w62\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:54:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d391148d973ebdd-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-07-23T23:44:21.332141Z","times_seen":14232,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"faturaitau.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gpteng.co/mcp-widgets/v1/fonts/CameraPlainVariable.woff2","fqdn":"cdn.gpteng.co","domain":"gpteng.co","tld":"co"},"ip":{"addr":"104.18.28.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faturaitau.lovable.app/","date":"2026-02-25T17:54:22.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gpteng.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:44:27 GMT","end":"Thu, 14 May 2026 18:44:26 GMT"},"fingerprint":{"sha1":"94:AF:12:43:D1:04:A1:14:33:F3:1A:48:40:89:E7:94:EE:8C:2C:C6","sha256":"B0:70:CD:E5:CC:40:86:A6:E1:41:07:C4:5C:88:49:CF:85:92:FF:D0:51:57:1B:EE:25:66:4A:3B:5B:1F:74:90"}}},"request":{"raw":"GET /mcp-widgets/v1/fonts/CameraPlainVariable.woff2 HTTP/1.1\r\nHost: cdn.gpteng.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://faturaitau.lovable.app/\r\nOrigin: https://faturaitau.lovable.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:54:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 133760\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=14400\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"c48bd2439e2921fc4d3aaef0e57446be\"\r\nlast-modified: Wed, 10 Dec 2025 13:46:40 GMT\r\nvary: Origin, Accept-Encoding\r\nset-cookie: __cf_bm=JqnTShsV_S0dit8LUdJAEHNDeDMIsdPEpitR8v0rx88-1772042062.3953538-1.0.1.1-Zy9TONdf.23ZqzmBRCDW24SaBQOtgcfdU7aFS4GpvJo5pBZnXTnwUxEE9Kkr99skV7K3ABtFtaAvdTV0hCmETw1KzpwlRYxQGn8j5Ve6xygx6l4ZcjKkqkZSJotk.QAm; HttpOnly; Secure; Path=/; Domain=gpteng.co; Expires=Wed, 25 Feb 2026 18:24:22 GMT\r\nexpires: Wed, 25 Feb 2026 21:54:22 GMT\r\ncf-ray: 9d391149f8c8723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":133760,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 133760, version 2.0","md5":"c48bd2439e2921fc4d3aaef0e57446be","sha1":"396596764aebbe25ba1c45f19091f48a7e17a9e5","sha256":"0f4491b0f9f6b9c3e6054a9f0036583e3978fd3a8d8f49ba5da05d63cf875cbb","sha512":"cb9ff1ede5ea280e8586c3e6e84c68685b3749fa492fb1babef3d0bb72ab1b095b1c00531554ead12e31139f226c7aa96399b11fd6ae256ea134639d98d95b64","ssdeep":"3072:OWSP0iIzCkvibLej77I/9GRBm7Xy2TJ46tNP7HlgXffTp/CGZ7YpV/z:OdYGkviXe7l87C2XtBC1/CGin/z","tlshash":"d9d3123e2ad0e463aba505b13a7f65808a2e5f11e3c773c145b274cfd5302a8236da7d","first_seen":"2025-04-23T20:37:12.507957Z","last_seen":"2026-07-23T16:02:03.213776Z","times_seen":1730,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":42,"dns":22,"connect":1,"send":0,"wait":70,"receive":7,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faturaitau.lovable.app/lovable-uploads/58283f98-7bee-4745-963c-3c8b738a469a.png","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faturaitau.lovable.app/","date":"2026-02-25T17:54:22.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET /lovable-uploads/58283f98-7bee-4745-963c-3c8b738a469a.png HTTP/1.1\r\nHost: faturaitau.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://faturaitau.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=a_usKmiFYWTK4w34F3B4sRLBdbB_i_Yytl60_psINcI-1772042061.7648263-1.0.1.1-UvCq6DlNPaUQzC88tLb0s.QvddZW2AhSSB74.uDyIxA7_riKb7lHse1cZEToR.5F5kZvaxceY7bWqUV68A2mJ1kyY_oFEhOz.Ib9JZY07_Qam8bF0OSM0sNilnmd.w62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"faturaitau.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faturaitau.lovable.app/lovable-uploads/58283f98-7bee-4745-963c-3c8b738a469a.png","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faturaitau.lovable.app/","date":"2026-02-25T17:54:22.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET /lovable-uploads/58283f98-7bee-4745-963c-3c8b738a469a.png HTTP/1.1\r\nHost: faturaitau.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://faturaitau.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=a_usKmiFYWTK4w34F3B4sRLBdbB_i_Yytl60_psINcI-1772042061.7648263-1.0.1.1-UvCq6DlNPaUQzC88tLb0s.QvddZW2AhSSB74.uDyIxA7_riKb7lHse1cZEToR.5F5kZvaxceY7bWqUV68A2mJ1kyY_oFEhOz.Ib9JZY07_Qam8bF0OSM0sNilnmd.w62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:54:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 68814\r\netag: \"65438321f501e863d0a7ad85d1514b8e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d39114b59b7ebdd-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1920, 8-bit/color RGBA, non-interlaced","md5":"65438321f501e863d0a7ad85d1514b8e","sha1":"79735127d921287c34e8fc7ff741debd89b9a54c","sha256":"bf68aa042eaf236458ec81653ad7b7a03ad839a5f4ea667b6ba566b8b9004f1b","sha512":"1cccec4020612a42625acc99dd1e5e9cb2632b52be39e286a941ae6bc40e8b7be41c1fa9593d29fdcf1a0750ad4e7b44194c7717057f68be6d72b4986bc03846","ssdeep":"1536:1GVAj29PnsENj6R9tfRLj8VxD3tAR2PUj1o93IA+EmxE1Sit:1j29PnsEkt9GDWRLj18z5Mit","tlshash":"1563d062cb45c946d860dd3dbd3fcbe1b3a9177a8e122fd50254e408ac8f6f4a70a0d9","first_seen":"2026-02-25T01:31:17.728342Z","last_seen":"2026-02-25T17:54:47.554452Z","times_seen":4,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"faturaitau.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faturaitau.lovable.app/lovable-uploads/1fba6879-282f-4a61-b70d-502eb78a5f91.png","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faturaitau.lovable.app/","date":"2026-02-25T17:54:22.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET /lovable-uploads/1fba6879-282f-4a61-b70d-502eb78a5f91.png HTTP/1.1\r\nHost: faturaitau.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://faturaitau.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=a_usKmiFYWTK4w34F3B4sRLBdbB_i_Yytl60_psINcI-1772042061.7648263-1.0.1.1-UvCq6DlNPaUQzC88tLb0s.QvddZW2AhSSB74.uDyIxA7_riKb7lHse1cZEToR.5F5kZvaxceY7bWqUV68A2mJ1kyY_oFEhOz.Ib9JZY07_Qam8bF0OSM0sNilnmd.w62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Wed, 25 Feb 2026 17:54:22 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d39114b7a31ebdd-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"9e076f5885f5cc16a4b5aeb8de4adff5","sha1":"475c848673a3f79fa778f01c2bd5a721d4c41707","sha256":"e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31","sha512":"4d384838c78c74f56de20de3fe125b9fe4d40b7c9fb5d767b647f05aede6bf63431f4f08ac464e188e77b227becc3ab4ba86272f30b53d91b15003d814e06d2e","ssdeep":"","tlshash":"4a50000c3000030c0000003000c00030000c03000c0000300000c00c000000000000cc","first_seen":"2023-04-05T14:05:15Z","last_seen":"2026-07-23T23:53:43.689911Z","times_seen":9695,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"faturaitau.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faturaitau.lovable.app/lovable-uploads/871a097a-9cdf-4749-bf8e-f002bb47166f.png","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faturaitau.lovable.app/","date":"2026-02-25T17:54:22.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET /lovable-uploads/871a097a-9cdf-4749-bf8e-f002bb47166f.png HTTP/1.1\r\nHost: faturaitau.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://faturaitau.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=a_usKmiFYWTK4w34F3B4sRLBdbB_i_Yytl60_psINcI-1772042061.7648263-1.0.1.1-UvCq6DlNPaUQzC88tLb0s.QvddZW2AhSSB74.uDyIxA7_riKb7lHse1cZEToR.5F5kZvaxceY7bWqUV68A2mJ1kyY_oFEhOz.Ib9JZY07_Qam8bF0OSM0sNilnmd.w62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:54:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 68814\r\netag: \"5d8d2ab7225e423efa8ed08e4b3afed6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d39114c6d40ebdd-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1920, 8-bit/color RGBA, non-interlaced","md5":"5d8d2ab7225e423efa8ed08e4b3afed6","sha1":"e47001e96811ba3c6993fbcec9e1c632d7aea51a","sha256":"032b929cc167c3228fd492a940ea774877d5a239c5d2bfefd7d14e42093523ce","sha512":"169e87d151f5e2b37ec4d666e1079f5fa2a50d7b8810e691edc263e00c55917891c3173b2520da9e3bad9814314c68741175d2c88eab503801c6691cae4a1dd8","ssdeep":"1536:1FlWPnpvD4oG5ATE1uaTtPh8+pHRR2PUj1o93IA+EmzbnOa6E:1FlWPnpvEoGeaTX8MHRRLj18zkME","tlshash":"2963c070cf82cd28c460de3dfa3ecff55b89137aab910fea0295f11529bb2a855460c5","first_seen":"2026-02-25T01:31:17.730186Z","last_seen":"2026-02-25T17:54:47.555937Z","times_seen":4,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"faturaitau.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faturaitau.lovable.app/assets/index-Lo6zoxXh.js","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faturaitau.lovable.app/","date":"2026-02-25T17:54:22.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET /assets/index-Lo6zoxXh.js HTTP/1.1\r\nHost: faturaitau.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://faturaitau.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=a_usKmiFYWTK4w34F3B4sRLBdbB_i_Yytl60_psINcI-1772042061.7648263-1.0.1.1-UvCq6DlNPaUQzC88tLb0s.QvddZW2AhSSB74.uDyIxA7_riKb7lHse1cZEToR.5F5kZvaxceY7bWqUV68A2mJ1kyY_oFEhOz.Ib9JZY07_Qam8bF0OSM0sNilnmd.w62\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:54:22 GMT\r\ncontent-type: text/javascript\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"afa81ec67b10c4d0725ad505e0efb8ee\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d391148d969ebdd-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":567669,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"afa81ec67b10c4d0725ad505e0efb8ee","sha1":"bdf43c91b58da3034bb69470b94927a039e5b0d2","sha256":"efdbf43d5e33c78c866c5dcdad3a6b4a31248a6ea6d5db2b6eeb06519eb6251f","sha512":"c89f994587a6e6996cb994385b0eb3da6f7b964b05e242d2547c17e3718b490a496280dea89614e2d6eec1933b1aa6cb9d666128350caaab1c0d7446b3062b8f","ssdeep":"12288:rhvJ45GhEGrveAMBBTXLvjHQ7TkFtrDH9yX4gyZzpAwIjF2AzpTKTHA1bpyYFgD7:1QGyAuBTXLvjHQ7TkFtrDH9yX4gyZzpt","tlshash":"40c46c94b095b6b99be345e1903f5106b23d2a15f80e8460f13cec992af154ab277ffc","first_seen":"2026-02-25T01:31:17.735778Z","last_seen":"2026-02-25T17:54:47.556664Z","times_seen":4,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"faturaitau.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faturaitau.lovable.app/lovable-uploads/7252fefc-51f8-4bac-bb21-9a38572e35d1.png","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faturaitau.lovable.app/","date":"2026-02-25T17:54:22.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET /lovable-uploads/7252fefc-51f8-4bac-bb21-9a38572e35d1.png HTTP/1.1\r\nHost: faturaitau.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://faturaitau.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=a_usKmiFYWTK4w34F3B4sRLBdbB_i_Yytl60_psINcI-1772042061.7648263-1.0.1.1-UvCq6DlNPaUQzC88tLb0s.QvddZW2AhSSB74.uDyIxA7_riKb7lHse1cZEToR.5F5kZvaxceY7bWqUV68A2mJ1kyY_oFEhOz.Ib9JZY07_Qam8bF0OSM0sNilnmd.w62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"faturaitau.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faturaitau.lovable.app/lovable-uploads/7252fefc-51f8-4bac-bb21-9a38572e35d1.png","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faturaitau.lovable.app/","date":"2026-02-25T17:54:22.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET /lovable-uploads/7252fefc-51f8-4bac-bb21-9a38572e35d1.png HTTP/1.1\r\nHost: faturaitau.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://faturaitau.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=a_usKmiFYWTK4w34F3B4sRLBdbB_i_Yytl60_psINcI-1772042061.7648263-1.0.1.1-UvCq6DlNPaUQzC88tLb0s.QvddZW2AhSSB74.uDyIxA7_riKb7lHse1cZEToR.5F5kZvaxceY7bWqUV68A2mJ1kyY_oFEhOz.Ib9JZY07_Qam8bF0OSM0sNilnmd.w62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:54:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 305611\r\netag: \"2c4ce2796f3c8185588153e6fbff273d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d39114b59bdebdd-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced","md5":"2c4ce2796f3c8185588153e6fbff273d","sha1":"1d258d88fc3e35e35ea97b78120d45b4a4a09ad4","sha256":"4237560620151447b8cc0d102aa0f235b37003ed072d7b8c7cd339823bc902c0","sha512":"f0b1e851bc9bbb59caa0d0e9314766f8d4b0d6a701245773b31ba9aaf066cbd0f1a19647bf8c40140ea51d93b563bf75eadb038b9968a44fd0050a5fb03af11b","ssdeep":"6144:m9HTTx6kw7wluwtzl9xO2nwjSzEGmEdEXRnxdBM6UngSKaTrCv:m9ZC7Yb82nwjRrzLjUgrArCv","tlshash":"3f54238474c3d461ede2ecafbb4753e4de4d7bb38228b82420e7d9f51b3a9824654948","first_seen":"2026-02-25T01:31:17.733286Z","last_seen":"2026-02-25T17:54:47.557528Z","times_seen":4,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"faturaitau.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faturaitau.lovable.app/lovable-uploads/871a097a-9cdf-4749-bf8e-f002bb47166f.png","fqdn":"faturaitau.lovable.app","domain":"faturaitau.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faturaitau.lovable.app/","date":"2026-02-25T17:54:22.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 17:19:43 GMT","end":"Sun, 17 May 2026 18:19:24 GMT"},"fingerprint":{"sha1":"0F:8D:42:E0:96:F5:48:39:7E:49:C9:ED:4C:1B:E4:D5:15:A1:03:64","sha256":"FB:11:B9:D1:AA:F1:F0:D3:E7:B5:F7:E4:35:88:29:2D:8E:44:99:C3:11:3A:44:9A:D8:73:1C:05:F5:24:B2:E3"}}},"request":{"raw":"GET /lovable-uploads/871a097a-9cdf-4749-bf8e-f002bb47166f.png HTTP/1.1\r\nHost: faturaitau.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://faturaitau.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=a_usKmiFYWTK4w34F3B4sRLBdbB_i_Yytl60_psINcI-1772042061.7648263-1.0.1.1-UvCq6DlNPaUQzC88tLb0s.QvddZW2AhSSB74.uDyIxA7_riKb7lHse1cZEToR.5F5kZvaxceY7bWqUV68A2mJ1kyY_oFEhOz.Ib9JZY07_Qam8bF0OSM0sNilnmd.w62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:54:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 68814\r\netag: \"5d8d2ab7225e423efa8ed08e4b3afed6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d39114c6d3cebdd-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1920, 8-bit/color RGBA, non-interlaced","md5":"5d8d2ab7225e423efa8ed08e4b3afed6","sha1":"e47001e96811ba3c6993fbcec9e1c632d7aea51a","sha256":"032b929cc167c3228fd492a940ea774877d5a239c5d2bfefd7d14e42093523ce","sha512":"169e87d151f5e2b37ec4d666e1079f5fa2a50d7b8810e691edc263e00c55917891c3173b2520da9e3bad9814314c68741175d2c88eab503801c6691cae4a1dd8","ssdeep":"1536:1FlWPnpvD4oG5ATE1uaTtPh8+pHRR2PUj1o93IA+EmzbnOa6E:1FlWPnpvEoGeaTX8MHRRLj18zkME","tlshash":"2963c070cf82cd28c460de3dfa3ecff55b89137aab910fea0295f11529bb2a855460c5","first_seen":"2026-02-25T01:31:17.730186Z","last_seen":"2026-02-25T17:54:47.555937Z","times_seen":4,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"faturaitau.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"faturaitau.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}