{"report_id":"ea9ec484-25a6-421a-ae33-d331007ed3b5","version":6,"status":"done","tags":[],"date":"2026-04-17T03:59:09Z","url":{"schema":"http","addr":"update-start-hub.lovable.app","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":0,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"https","addr":"update-start-hub.lovable.app/","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"title":"AT\u0026T Update Available","dom":{"size":11187,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2986)","md5":"e4f6b30644534067a41cfcd902bd18f5","sha1":"6f8cc6d9fc871f72cfaa15f23112fd9a9484d96e","sha256":"32aea31c7b6d9b5799f6bc98c9008cfdc32bff37deb22601f4e082014ba138ad","sha512":"df6e16be8948f74eeda7edc77b49b83eaf0f853cb7371873ef9ae438d085a86c4dbffa2d0a26e954f4cf68e69dfb5822a468ef8ea09ea841fd5e69d588d8b788","ssdeep":"96:nG9/+1CTU15OA3lghaoX9DSjxpeHTAMtgt6g2+3wehaBQ8VjKx3NuZkTmB0qMcSy:GZ+1CTUqYv2jywAcQSyUZxBmFrxHXQ","tlshash":"be32f8d2c328b63e5392d1ecbfd9e4c8566990f7ea058ce1b49e0a3512c669ce107f50","dom_hash":"domhashe8d372a3db9954b489e020640dd6001f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"update-start-hub.lovable.app","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":0,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-22T03:59:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-17T03:58:48Z","timestamp":1776398328,"ip_dst":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"ip_src":{"addr":"Client IP","port":45102,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO AI Service Domain (lovable .app) in TLS SNI","source":"{\"timestamp\":\"2026-04-17T03:58:48.281172+0000\",\"flow_id\":935833376403630,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":45102,\"dest_ip\":\"185.41.148.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2063043,\"rev\":1,\"signature\":\"ET INFO AI Service Domain (lovable .app) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2025_06_18\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0042\"],\"mitre_tactic_name\":[\"Resource_Development\"],\"mitre_technique_id\":[\"T1587\"],\"mitre_technique_name\":[\"Develop_Capabilities\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2025_06_18\"]}},\"tls\":{\"sni\":\"update-start-hub.lovable.app\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":930,\"bytes_toclient\":3516,\"start\":\"2026-04-17T03:58:48.274606+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"update-start-hub.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.gpteng.co","ip":{"addr":"104.18.29.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-26","domain_rank":776423,"first_seen":"2024-12-08T00:48:33.877309Z","last_seen":"2026-04-15T00:50:53.989981Z","alert_count":0,"request_count":1,"received_data":134511,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"update-start-hub.lovable.app","ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":24,"request_count":8,"received_data":450834,"sent_data":5890,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"update-start-hub.lovable.app/assets/main-aRA7N40r.js","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8c84d0e31e140bf8d909b45314ba5cb","sha1":"28938b34cd6ab0e70e58de2ba24fb64bcd171bc2","sha256":"0a080cb5ab587197a73ec659d0c2661714bb0f6f5a94242ba2cfd21fbb18c46a","sha512":"0f2bda8f4f5cc3d2dfd579ee107fffe9d27d6e68e6bc6b7a0c5b25ab7127378be1c410012183baa8dd1819b55d736534fb437d906e5e2f4a9c00ec5cb89ff828","ssdeep":"6144:zwHTtfjo3si1zvb2PcRgBhTsn6FwJilnmqNsRp5RWFJPxwoL1590h6KkpGUhTsHj:kx7oBNCPcesn6FwUnmqNsRPcF7wox5eZ","tlshash":"92642be831aeb5225fe355f5406f1107b1782823340c88b1f168ee9a7a7544a91bbffd","size":325156,"data":"","first_seen":"2026-04-17T03:59:14.744169Z","last_seen":"2026-04-17T12:11:35.953267Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"update-start-hub.lovable.app/assets/index-DHBKZcUw.js","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a91212b1f8c3ecefc0f5f5b31d33427f","sha1":"36518d8ae0cbc9b955f4b4d13f526523c81975e7","sha256":"3acab260a54b056764f6a4b40559eff167f79e00b908c5c563534240dd5ed2b0","sha512":"84ccf1a51de583d0c85f06d00c64941de9b4375a720576218ee98d6a1e0ccd644bf4f895d5e3f83f6a20c6a47af1c5c353bc2e9461f66669d82455e5edfc510b","ssdeep":"","tlshash":"6211d44811445fbe692314d87b6df005f00aca58cb6fc99ee1ed311329910267eb77dc","size":930,"data":"","first_seen":"2026-04-17T03:59:14.745581Z","last_seen":"2026-04-17T12:11:35.954674Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"update-start-hub.lovable.app/","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"639295fd8bda90d17f9f4a12be96d0a1","sha1":"aa2740a1d5b42a6cfd348603200ba755fc85d223","sha256":"fc32261202fb0dbb320eb10f2c88cbb4e43510b23ad8c6b362686a248c22403c","sha512":"0fdc323dd638ee333a1d73acf35fa2f9648878a666ff41fe5367c27eca44dac0dae953ac1b42fa35d72fa7a461b91237c62024e020cedf2fa5960cfe37eb42a9","ssdeep":"","tlshash":"a401dcfb48121648706cb98f70307a800290080079fae6bcb6bfe8899841ede557ae30","size":747,"data":"","first_seen":"2026-04-17T03:59:14.748076Z","last_seen":"2026-04-17T03:59:14.748076Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"update-start-hub.lovable.app/","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2acd3d73bbc8d3ba3f35629bb52bdc87","sha1":"1ceb5cdb1aaef828d045f93c024d676b2a173ff5","sha256":"b6ca917f8a08af4a6ad8cc558c1aa032e1e0648b79ce297747c7f6d3a6693807","sha512":"087546aae007202ed3509d48e832308255bf2c81f32242f4fcfc51a4bd81b653856059e7c9abfa88b9fadaa45ed3857d59acc885222f8d6f2234942b235402f7","ssdeep":"","tlshash":"9801afcbe7ec623243a5b4b9185aa5dd3e3800f0eb005bb61c744db43394d5d002ee81","size":829,"data":"","first_seen":"2026-01-07T03:19:54.535133Z","last_seen":"2026-04-21T14:15:52.033592Z","times_seen":493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"update-start-hub.lovable.app/~flock.js","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-04-22T12:26:13.399638Z","times_seen":6530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.gpteng.co/mcp-widgets/v1/fonts/CameraPlainVariable.woff2","fqdn":"cdn.gpteng.co","domain":"gpteng.co","tld":"co"},"ip":{"addr":"104.18.29.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://update-start-hub.lovable.app/","date":"2026-04-17T03:58:49.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gpteng.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 20:25:47 GMT","end":"Sun, 12 Jul 2026 21:25:38 GMT"},"fingerprint":{"sha1":"B5:C2:5D:87:D7:51:E0:73:8D:83:C4:92:3B:A5:57:F0:18:C3:10:15","sha256":"B7:2A:6D:36:CB:2E:C6:82:0E:25:CC:93:EE:AC:6C:04:54:D4:F1:4C:15:85:D1:44:FB:0F:51:54:CB:A0:39:00"}}},"request":{"raw":"GET /mcp-widgets/v1/fonts/CameraPlainVariable.woff2 HTTP/1.1\r\nHost: cdn.gpteng.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://update-start-hub.lovable.app/\r\nOrigin: https://update-start-hub.lovable.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 133760\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=14400\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"c48bd2439e2921fc4d3aaef0e57446be\"\r\nlast-modified: Wed, 10 Dec 2025 13:46:40 GMT\r\nvary: Origin, Accept-Encoding\r\nset-cookie: __cf_bm=BwyGogDQxe5f42xNCseE_AHowoZa_EeXrnqp74BAGCc-1776398329.2389472-1.0.1.1-K4nppa.gQBjMqP6es4WzzqIY92jm8OxuPuN0tzRLAqWPJ8mYFr2kaXb9QjI1Uc30.xhGwKnkKqILle3S.ScKInz7K5eHAWBpuK2kZ4M7YLDUu406bB67khiZImtAcH3f; HttpOnly; Secure; Path=/; Domain=gpteng.co; Expires=Fri, 17 Apr 2026 04:28:49 GMT\r\nexpires: Fri, 17 Apr 2026 07:58:49 GMT\r\ncf-ray: 9ed88375bb91a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":133760,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 133760, version 2.0","md5":"c48bd2439e2921fc4d3aaef0e57446be","sha1":"396596764aebbe25ba1c45f19091f48a7e17a9e5","sha256":"0f4491b0f9f6b9c3e6054a9f0036583e3978fd3a8d8f49ba5da05d63cf875cbb","sha512":"cb9ff1ede5ea280e8586c3e6e84c68685b3749fa492fb1babef3d0bb72ab1b095b1c00531554ead12e31139f226c7aa96399b11fd6ae256ea134639d98d95b64","ssdeep":"3072:OWSP0iIzCkvibLej77I/9GRBm7Xy2TJ46tNP7HlgXffTp/CGZ7YpV/z:OdYGkviXe7l87C2XtBC1/CGin/z","tlshash":"d9d3123e2ad0e463aba505b13a7f65808a2e5f11e3c773c145b274cfd5302a8236da7d","first_seen":"2025-04-23T20:37:12.507957Z","last_seen":"2026-04-22T05:34:28.914998Z","times_seen":584,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":40,"dns":21,"connect":1,"send":0,"wait":58,"receive":8,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"update-start-hub.lovable.app/favicon.ico","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://update-start-hub.lovable.app/","date":"2026-04-17T03:58:49.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 17:48:26 GMT","end":"Wed, 15 Jul 2026 18:48:10 GMT"},"fingerprint":{"sha1":"47:E0:53:E5:D8:75:D5:4F:81:E8:A3:59:B3:EF:A7:86:98:7A:86:13","sha256":"67:82:3B:B1:04:22:D5:15:77:C5:06:B9:83:99:A2:B9:D8:E3:88:2C:E1:25:5D:8D:E6:19:7B:9B:8A:9E:13:74"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: update-start-hub.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://update-start-hub.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=163a7e4c65d88d924d239f370ec18ba70812ebbe01ad065662efbc7740886062; __cf_bm=d8FsP4CXjiSxyXhw3XHEnTa72312LQpEV1EM3KFo_1w-1776398328.2950726-1.0.1.1-47mA16z5nHatEY8k1BdSjx5E8KewdTsxC9_syLlZkAIVHi_QULt45TPel3u_PSJtvTVfm3QCzcK2C3slKnFlYA.bxAvuckY0B7tPig7.Pw13hKNJWKezL404XYMUOxSh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 17 Apr 2026 03:58:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ed88376eec9b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11666,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"b431f7e6187eb3bb6461b26217e2ff96","sha1":"926a8a85a9ce0d7df03e18804e0f98653b7e0e4a","sha256":"ebea372cd930b57a8f80cbcfc5d9dd03c5c4fa2b0d455ae652eed950d48a78cd","sha512":"9c12bb43594eb2a310b22eaf1ef9977996a44d1946fe5692c5d4145784b13e9bbd9f38ba99f175ac54fd4cd1c03d63fa10e71d37059aac29d2ead91bfe9cc055","ssdeep":"96:Ty+qsKyTU15OA3lghaoX9DSjxpeHTw0rShBI04ILK6Gg2+3wehaBQ8VjKx3NuZk6:O+qqTUqYvzj4nXjywAcQSyUZxBH73YXQ","tlshash":"3032e7d2c314b63e5392e1bcbfa5e4c4166990b2e6058de5b8ae497902c7a9ce107f90","first_seen":"2026-04-17T03:59:14.738223Z","last_seen":"2026-04-17T03:59:14.738223Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"update-start-hub.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"update-start-hub.lovable.app/~api/analytics","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://update-start-hub.lovable.app/","date":"2026-04-17T03:58:49.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 17:48:26 GMT","end":"Wed, 15 Jul 2026 18:48:10 GMT"},"fingerprint":{"sha1":"47:E0:53:E5:D8:75:D5:4F:81:E8:A3:59:B3:EF:A7:86:98:7A:86:13","sha256":"67:82:3B:B1:04:22:D5:15:77:C5:06:B9:83:99:A2:B9:D8:E3:88:2C:E1:25:5D:8D:E6:19:7B:9B:8A:9E:13:74"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: update-start-hub.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://update-start-hub.lovable.app/\r\nContent-Type: application/json\r\nContent-Length: 349\r\nOrigin: https://update-start-hub.lovable.app\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=163a7e4c65d88d924d239f370ec18ba70812ebbe01ad065662efbc7740886062; __cf_bm=d8FsP4CXjiSxyXhw3XHEnTa72312LQpEV1EM3KFo_1w-1776398328.2950726-1.0.1.1-47mA16z5nHatEY8k1BdSjx5E8KewdTsxC9_syLlZkAIVHi_QULt45TPel3u_PSJtvTVfm3QCzcK2C3slKnFlYA.bxAvuckY0B7tPig7.Pw13hKNJWKezL404XYMUOxSh; session-id=8559d290-a522-41b1-a455-72fcf0283df3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":349,"data":"{\"timestamp\":\"2026-04-17T03:58:49.488Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"8559d290-a522-41b1-a455-72fcf0283df3\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://update-start-hub.lovable.app/\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:50 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9ed883775efbb517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-04-22T12:58:29.706763Z","times_seen":6662,"resource_available":true,"data":null}},"time_used":1165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"update-start-hub.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"update-start-hub.lovable.app/assets/att-logo-bJ7XsyEO.png","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://update-start-hub.lovable.app/","date":"2026-04-17T03:58:48.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 17:48:26 GMT","end":"Wed, 15 Jul 2026 18:48:10 GMT"},"fingerprint":{"sha1":"47:E0:53:E5:D8:75:D5:4F:81:E8:A3:59:B3:EF:A7:86:98:7A:86:13","sha256":"67:82:3B:B1:04:22:D5:15:77:C5:06:B9:83:99:A2:B9:D8:E3:88:2C:E1:25:5D:8D:E6:19:7B:9B:8A:9E:13:74"}}},"request":{"raw":"GET /assets/att-logo-bJ7XsyEO.png HTTP/1.1\r\nHost: update-start-hub.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://update-start-hub.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=163a7e4c65d88d924d239f370ec18ba70812ebbe01ad065662efbc7740886062; __cf_bm=d8FsP4CXjiSxyXhw3XHEnTa72312LQpEV1EM3KFo_1w-1776398328.2950726-1.0.1.1-47mA16z5nHatEY8k1BdSjx5E8KewdTsxC9_syLlZkAIVHi_QULt45TPel3u_PSJtvTVfm3QCzcK2C3slKnFlYA.bxAvuckY0B7tPig7.Pw13hKNJWKezL404XYMUOxSh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 5335\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 163a7e4c65d88d924d239f370ec18ba70812ebbe01ad065662efbc7740886062\r\nserver: cloudflare\r\ncf-ray: 9ed883737d14b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 145 x 79, 8-bit/color RGBA, non-interlaced","md5":"e8c7918cae60d2f5634217910724d237","sha1":"0e6e04b9c150285bfcbac5e6484f0df5d4039a2f","sha256":"4ea18f0bae0327905f9f1b7668f52c17de79f917ce4c397daef1fa3228970a6d","sha512":"77de1448ea97f48d365fd0843e3fc07d266cd697d8f0aee113954a6c255fa6476a364ae836d7d5862b5623bc6beb6556f7b9d3555813781724ba5e1e7232c16c","ssdeep":"96:RujTcM+K1gCMKv0EVrl4saCnMaRmd5MMM4rEazMFu64Y7WQA3Srlci:ckM+K1gCMKvV5CCgdweAFu64cWH3SpV","tlshash":"1fb17ddab306b5949237f43cce6606bdb08448ddd63bc27a7e023d44a894e255c9f5b1","first_seen":"2026-04-17T03:59:14.740583Z","last_seen":"2026-04-17T12:11:35.950682Z","times_seen":3,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"update-start-hub.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"update-start-hub.lovable.app/~flock.js","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://update-start-hub.lovable.app/","date":"2026-04-17T03:58:48.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 17:48:26 GMT","end":"Wed, 15 Jul 2026 18:48:10 GMT"},"fingerprint":{"sha1":"47:E0:53:E5:D8:75:D5:4F:81:E8:A3:59:B3:EF:A7:86:98:7A:86:13","sha256":"67:82:3B:B1:04:22:D5:15:77:C5:06:B9:83:99:A2:B9:D8:E3:88:2C:E1:25:5D:8D:E6:19:7B:9B:8A:9E:13:74"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: update-start-hub.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://update-start-hub.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=163a7e4c65d88d924d239f370ec18ba70812ebbe01ad065662efbc7740886062; __cf_bm=d8FsP4CXjiSxyXhw3XHEnTa72312LQpEV1EM3KFo_1w-1776398328.2950726-1.0.1.1-47mA16z5nHatEY8k1BdSjx5E8KewdTsxC9_syLlZkAIVHi_QULt45TPel3u_PSJtvTVfm3QCzcK2C3slKnFlYA.bxAvuckY0B7tPig7.Pw13hKNJWKezL404XYMUOxSh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ed883737d17b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-04-22T12:26:13.399638Z","times_seen":6530,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"update-start-hub.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"update-start-hub.lovable.app/assets/styles-Bgta6giW.css","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://update-start-hub.lovable.app/","date":"2026-04-17T03:58:48.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 17:48:26 GMT","end":"Wed, 15 Jul 2026 18:48:10 GMT"},"fingerprint":{"sha1":"47:E0:53:E5:D8:75:D5:4F:81:E8:A3:59:B3:EF:A7:86:98:7A:86:13","sha256":"67:82:3B:B1:04:22:D5:15:77:C5:06:B9:83:99:A2:B9:D8:E3:88:2C:E1:25:5D:8D:E6:19:7B:9B:8A:9E:13:74"}}},"request":{"raw":"GET /assets/styles-Bgta6giW.css HTTP/1.1\r\nHost: update-start-hub.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://update-start-hub.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=163a7e4c65d88d924d239f370ec18ba70812ebbe01ad065662efbc7740886062; __cf_bm=d8FsP4CXjiSxyXhw3XHEnTa72312LQpEV1EM3KFo_1w-1776398328.2950726-1.0.1.1-47mA16z5nHatEY8k1BdSjx5E8KewdTsxC9_syLlZkAIVHi_QULt45TPel3u_PSJtvTVfm3QCzcK2C3slKnFlYA.bxAvuckY0B7tPig7.Pw13hKNJWKezL404XYMUOxSh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:49 GMT\r\ncontent-type: text/css; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 163a7e4c65d88d924d239f370ec18ba70812ebbe01ad065662efbc7740886062\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ed883737d15b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70783,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"34ae3473d2ea2339510bc138389c448e","sha1":"7c91b39fd67c2f8b0645bee277f66d478874b934","sha256":"154ddfcd46ac06c785a381fdeb8b195a3719fb806709c6e840f0cf2db8ed137e","sha512":"bec0972f1d73a6aeb659e91ac452f2b5f2c0109985a4e6ca7421fa82ca2cb7f3beaf20cdadcda05cae0b1f17d4b80b76d3413d68f1f27ad76a422a3493ae0be7","ssdeep":"1536:qw+h1h+QBoywXt6FT6CHjahSsMq+WxFhbuX7AXLP7988R988q:/+h1h+0oy86FT6uiMq+WxFhbRLY","tlshash":"9063d794b229e53f7c33a4f5938cb85c811970c0dd7946edfe16a12216c3bf1adab618","first_seen":"2026-04-17T03:59:14.742449Z","last_seen":"2026-04-17T12:11:35.951262Z","times_seen":3,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"update-start-hub.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"update-start-hub.lovable.app/assets/main-aRA7N40r.js","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://update-start-hub.lovable.app/","date":"2026-04-17T03:58:49.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 17:48:26 GMT","end":"Wed, 15 Jul 2026 18:48:10 GMT"},"fingerprint":{"sha1":"47:E0:53:E5:D8:75:D5:4F:81:E8:A3:59:B3:EF:A7:86:98:7A:86:13","sha256":"67:82:3B:B1:04:22:D5:15:77:C5:06:B9:83:99:A2:B9:D8:E3:88:2C:E1:25:5D:8D:E6:19:7B:9B:8A:9E:13:74"}}},"request":{"raw":"GET /assets/main-aRA7N40r.js HTTP/1.1\r\nHost: update-start-hub.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://update-start-hub.lovable.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=163a7e4c65d88d924d239f370ec18ba70812ebbe01ad065662efbc7740886062; __cf_bm=d8FsP4CXjiSxyXhw3XHEnTa72312LQpEV1EM3KFo_1w-1776398328.2950726-1.0.1.1-47mA16z5nHatEY8k1BdSjx5E8KewdTsxC9_syLlZkAIVHi_QULt45TPel3u_PSJtvTVfm3QCzcK2C3slKnFlYA.bxAvuckY0B7tPig7.Pw13hKNJWKezL404XYMUOxSh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 163a7e4c65d88d924d239f370ec18ba70812ebbe01ad065662efbc7740886062\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ed883754debb517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":325156,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43322)","md5":"e8c84d0e31e140bf8d909b45314ba5cb","sha1":"28938b34cd6ab0e70e58de2ba24fb64bcd171bc2","sha256":"0a080cb5ab587197a73ec659d0c2661714bb0f6f5a94242ba2cfd21fbb18c46a","sha512":"0f2bda8f4f5cc3d2dfd579ee107fffe9d27d6e68e6bc6b7a0c5b25ab7127378be1c410012183baa8dd1819b55d736534fb437d906e5e2f4a9c00ec5cb89ff828","ssdeep":"6144:zwHTtfjo3si1zvb2PcRgBhTsn6FwJilnmqNsRp5RWFJPxwoL1590h6KkpGUhTsHj:kx7oBNCPcesn6FwUnmqNsRPcF7wox5eZ","tlshash":"92642be831aeb5225fe355f5406f1107b1782823340c88b1f168ee9a7a7544a91bbffd","first_seen":"2026-04-17T03:59:14.744169Z","last_seen":"2026-04-17T12:11:35.953267Z","times_seen":3,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"update-start-hub.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"update-start-hub.lovable.app/assets/index-DHBKZcUw.js","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://update-start-hub.lovable.app/","date":"2026-04-17T03:58:49.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 17:48:26 GMT","end":"Wed, 15 Jul 2026 18:48:10 GMT"},"fingerprint":{"sha1":"47:E0:53:E5:D8:75:D5:4F:81:E8:A3:59:B3:EF:A7:86:98:7A:86:13","sha256":"67:82:3B:B1:04:22:D5:15:77:C5:06:B9:83:99:A2:B9:D8:E3:88:2C:E1:25:5D:8D:E6:19:7B:9B:8A:9E:13:74"}}},"request":{"raw":"GET /assets/index-DHBKZcUw.js HTTP/1.1\r\nHost: update-start-hub.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://update-start-hub.lovable.app/assets/main-aRA7N40r.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=163a7e4c65d88d924d239f370ec18ba70812ebbe01ad065662efbc7740886062; __cf_bm=d8FsP4CXjiSxyXhw3XHEnTa72312LQpEV1EM3KFo_1w-1776398328.2950726-1.0.1.1-47mA16z5nHatEY8k1BdSjx5E8KewdTsxC9_syLlZkAIVHi_QULt45TPel3u_PSJtvTVfm3QCzcK2C3slKnFlYA.bxAvuckY0B7tPig7.Pw13hKNJWKezL404XYMUOxSh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 163a7e4c65d88d924d239f370ec18ba70812ebbe01ad065662efbc7740886062\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ed883773ee6b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":930,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (928)","md5":"a91212b1f8c3ecefc0f5f5b31d33427f","sha1":"36518d8ae0cbc9b955f4b4d13f526523c81975e7","sha256":"3acab260a54b056764f6a4b40559eff167f79e00b908c5c563534240dd5ed2b0","sha512":"84ccf1a51de583d0c85f06d00c64941de9b4375a720576218ee98d6a1e0ccd644bf4f895d5e3f83f6a20c6a47af1c5c353bc2e9461f66669d82455e5edfc510b","ssdeep":"","tlshash":"6211d44811445fbe692314d87b6df005f00aca58cb6fc99ee1ed311329910267eb77dc","first_seen":"2026-04-17T03:59:14.745581Z","last_seen":"2026-04-17T12:11:35.954674Z","times_seen":3,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"update-start-hub.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"update-start-hub.lovable.app/","fqdn":"update-start-hub.lovable.app","domain":"update-start-hub.lovable.app","tld":"lovable.app"},"ip":{"addr":"185.41.148.1","port":443,"asn":61207,"as":"Hostek AB","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-17T03:58:48.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 17:48:26 GMT","end":"Wed, 15 Jul 2026 18:48:10 GMT"},"fingerprint":{"sha1":"47:E0:53:E5:D8:75:D5:4F:81:E8:A3:59:B3:EF:A7:86:98:7A:86:13","sha256":"67:82:3B:B1:04:22:D5:15:77:C5:06:B9:83:99:A2:B9:D8:E3:88:2C:E1:25:5D:8D:E6:19:7B:9B:8A:9E:13:74"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: update-start-hub.lovable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 03:58:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: 163a7e4c65d88d924d239f370ec18ba70812ebbe01ad065662efbc7740886062\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=163a7e4c65d88d924d239f370ec18ba70812ebbe01ad065662efbc7740886062; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=d8FsP4CXjiSxyXhw3XHEnTa72312LQpEV1EM3KFo_1w-1776398328.2950726-1.0.1.1-47mA16z5nHatEY8k1BdSjx5E8KewdTsxC9_syLlZkAIVHi_QULt45TPel3u_PSJtvTVfm3QCzcK2C3slKnFlYA.bxAvuckY0B7tPig7.Pw13hKNJWKezL404XYMUOxSh; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Fri, 17 Apr 2026 04:28:48 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ed8836fdb94b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12062,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"82259f59d8f90b3fac7fdd94e8a7d249","sha1":"16662f2b1d74ceba611a994c5d7158403896743b","sha256":"f0e882c65abababea68c126d5e3ca08fcfeccc7a7956df4ca8e2aec99ef95271","sha512":"164b0560f4046291eeb759398d54def71a8a5ba9629bfe636e2417666ce4a3cdd3aeb8279c755b0f0a1345caf2d634f8273a712f13a4d52db252451a1d38fd91","ssdeep":"96:TmRi+qsKgyTU15OA3lghaoX9DSjxpeHTw0M2gi4IZK6Gg2+3wehaBQ8VjKx3NuZr:b+qLTUqYvK4pXjywAcQSyUZxBH73YXQ","tlshash":"184208d2c314b63e5361e1fcbfa5e4c4176990b2e605cde5b49e093912c6a9ce117fa0","first_seen":"2026-04-17T03:59:14.746641Z","last_seen":"2026-04-17T03:59:14.746641Z","times_seen":1,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":27,"dns":8,"connect":1,"send":0,"wait":404,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"update-start-hub.lovable.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"update-start-hub.lovable.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}