{"report_id":"518a01d4-1e83-4940-97a8-0078a2559287","version":6,"status":"done","tags":[],"date":"2026-03-06T10:10:27Z","url":{"schema":"http","addr":"822951-recovery.com","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"822951-recovery.com/","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"title":"Recovery - Sign In | Coinbase","dom":{"size":16629,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16163)","md5":"8173e8997ec53d62999d4a722d707593","sha1":"346abb02b204814e6f5046f7c40819e762247811","sha256":"49bb2648f27d587505c04dbeeacd695afec0c6e4793e87a01734a64c4e308018","sha512":"badfef1aefbb3c46be813ba94fd04cdc35c348c83efb791e1a7bfeec5def84ee2ff4a70593df3ff3de9a67d1c8c236687ecac8a77be45686426bf18ecfec2aa7","ssdeep":"384:pMdhurfrFfBkFKdxzQr9oSNFr4ylrFb2WPlU07yEX/L8qOIcgJnD:pMbuvFfBkuxzG74yFFOiyEzx9h","tlshash":"1472d76bfc04de0aac679e5c603eae3e50dc817bd564896ca39dc9e81751ef01bd1980","dom_hash":"domhashba4e8487288067a40788609fc13bac8b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"822951-recovery.com","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T10:10:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-06T10:10:06Z","timestamp":1772791806,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":37138,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2026-03-06T10:10:06.787948+0000\",\"flow_id\":1351143695246574,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":37138,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"zdbxbhqywgqrlnwddapn.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":934,\"bytes_toclient\":3514,\"start\":\"2026-03-06T10:10:06.779502+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-06T10:10:06Z","timestamp":1772791806,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":37150,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2026-03-06T10:10:06.805475+0000\",\"flow_id\":1678527577338053,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":37150,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"zdbxbhqywgqrlnwddapn.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-03-06T10:10:06.798917+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"822951-recovery.com","ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-03-03","domain_rank":0,"first_seen":"2026-03-06T10:10:29.232256Z","last_seen":"2026-03-06T10:10:29.232256Z","alert_count":52,"request_count":26,"received_data":1256231,"sent_data":12524,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":37,"received_data":42817,"sent_data":33942,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/3337476739009024.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"66763d775e3e4700a85242abef26f133","sha1":"72192a20d5a1bc2bdc13fe81bae8de31c8d99452","sha256":"39f55d14657527fbacb855f9abc9ebb3cd2e031493d31c7098611148a9661718","sha512":"0991ea9601575ccdbcdd2ef730aa7297c310be34291396a7b097df0ecfb43741f55590bda7aaaea4cef8e53c38d0751f94fde6ea03a7fff50aae78e528733de2","ssdeep":"","tlshash":"5dd02b742290f9d44086a0cc8836424bf569287262fe3495e7ae8cb16174f0c51e1955","size":281,"data":"","first_seen":"2025-12-14T10:05:37.449663Z","last_seen":"2026-06-07T05:12:51.611026Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-06-08T20:56:41.362817Z","times_seen":52994,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-06-08T21:09:11.822644Z","times_seen":156864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c434289786fe643864f91178a256fd26","sha1":"40d8b89e62e681a9d0e5175055e56771958bebf3","sha256":"9ba4f4f3f1bc2a6fbeecb18ed24a2088a990c65e7e6046d9d9a516af414c62e9","sha512":"7114586c88c6396021c6ae4a08f917d27de9b32264e72652479370cefdf243e42f81f754d756741f59dfbbea533ca59352af955d958b084b526b6c461e36a084","ssdeep":"","tlshash":"1c31d60af51bea44bc30de5f122b2f7798c4ddb680b4145df79ecdd909218668b889a2","size":1565,"data":"","first_seen":"2026-03-06T10:10:35.735111Z","last_seen":"2026-03-06T11:09:14.641548Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/13e130d36132d73e.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1350c8f31b36e3cc68614d4ce2400a3","sha1":"b31286f950f536602f68b10f7c2776ad7eac582a","sha256":"4074dee602c22606ba4c4dea451ad70e5c298fcf3ffba167b63b42830e7191d3","sha512":"76c7800196ff52dc08c27feeae6479ed02ad935fb6f92fb471ce4d5d50e3454e83841b01236496938abb436225f7c90a3cb339b21a9ea6a1a0563539f1e4db63","ssdeep":"384:g78l17CWCmLgG4AYHfcseD1eFFbKDRP1JnppTh4vyfmybZznCjLDoq9ggZrIwi+P:rl1OJ4nTNx4LDoq9ggZrIK","tlshash":"3a03b5b172d4faa2025744f0d83f101af23d4c7621ad74b0a7e4ccdbb99858d92b6f99","size":39262,"data":"","first_seen":"2025-12-16T03:35:31.869639Z","last_seen":"2026-04-28T18:25:11.466393Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/7af99b4fe779898e.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8a56d4d89a50246b38ae41a252e653f","sha1":"8f03d29d93b28ebf10c3273209c5750cf9e7819c","sha256":"b63b6b7c8c8b75f7859f44b952075a63c33a623206642f7f7b51b115f07dd31a","sha512":"09e16b8f025924a2fe7811c05b89d40c2de7b52a61f3bb05580b105e5621fefef698c555d0d347ac4b93a98dfcf6bac3c1517bd9599bd672a807c30e0e03766b","ssdeep":"768:7mFYmHlSuyBKywJr8EU6KtsdDvVI4Bu51Bb1beAvrtmaP8apfY47q6F3PwNNPug9:Kb254FcLrDr0EUxuioyoyqTfqR","tlshash":"b983d6f936d0f8920bab45a6c07f0005f31c4d77245e78b4a3e5ddda316459ea0e2faa","size":85404,"data":"","first_seen":"2025-12-14T10:05:37.44573Z","last_seen":"2026-05-19T05:04:34.637982Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/294e24011b7e0011.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"096a31632ceb47fb0c1fadb27906ccef","sha1":"58b210244c38ffb96e3a91ca2a5951cacd0b5601","sha256":"9b11da762d8df1a718bdee9883e90f460f2b444ecf6a93fe7f9b270b4f974f4b","sha512":"64191ed930354a2c695b0916d1d37405f36663225b5f65d1a3f9c60ea717a67e547f3d46551832add597a3011ddb8990bbcec3cb12ea8e285634c6d824442b55","ssdeep":"6144:OvpSH/6PMFLEIGnrNdF059bJ6t0nYkzZbJ6t02rQz5zwiqGhtVdKamAu6qRnmnzV:XH/6PMSIGrybJ6t0JbJ6t0RzwixhtVdX","tlshash":"ed641944b212bfbdf56b4598a46e910db12f5b98fa0f4874fabd382d26084c07b53bc5","size":332428,"data":"","first_seen":"2026-03-06T10:10:35.720963Z","last_seen":"2026-03-06T11:09:14.628616Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/turbopack-1fd100bc21fc3abe.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c980466e411df0eee2b61e5f63a563dd","sha1":"86c720b477c7ed837c40eefb5d06d9521df1be78","sha256":"b9a6c77719ceb1a14eef424d7bc82be260e695d87b7ca6a233e1465c15547228","sha512":"9af4ef50b40ae53ca3f5193020d69053bc823bbd14151b5baced19f60ab894991eedefee1f17f1058b24f28337462c0297127c77a6be7fd07368d319aac50177","ssdeep":"192:CQwMSiHG+J8iEsuRnAEY8iaWkUmlGVhFd2mKKW9PZPKFXVqXmHyLxg:xwMSiHhylWkUmlQ8mKDZZyzyLxg","tlshash":"bd22b6ea37a6f07343afa0e6803f4144e1799469146d581c935ce8fa28788ae45e3f27","size":10420,"data":"","first_seen":"2026-03-06T10:10:35.684417Z","last_seen":"2026-03-06T11:09:14.617604Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/06eb1c0795625fa8.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3299d8cfee4983fe1a17cc5605ad08f","sha1":"6c2f0d8495752921d11d46b1f6772683e7c1b4fb","sha256":"f268a63e27becc761b902459f460b2323d55beab8f9d103b1390cfda5acc2a41","sha512":"7a447aac382631b5328b1905ef6675be3fb1cc8196175825bd8801a8ab5d7292cb1c8010338eeff31b4279cc5eb5b532c1133d154e52fb4bf17e87702f5a644f","ssdeep":"192:KleA4yRFf2jJQTv/yZ2DlRs2BjCceS2/Iw2BnuHDDBs63RduFYGVlzEt1R8E5L44:g6aFTUUl3tp2/IwKCBsOuFYusLFCXG","tlshash":"fd620ab532a9fcc6129bc2c4d83f400df7654c71617d70a4b7d948a96aa0989a0b2f7b","size":15358,"data":"","first_seen":"2026-03-06T10:10:35.699341Z","last_seen":"2026-03-06T11:09:14.612093Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/e1e73461228f2d3c.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"46bc303bcfd9ec18bdabb436a8df5efc","sha1":"e9931dddf890b5275c77659596ec0669ff8cf15f","sha256":"2c6eedce1fde1178f3a4e2a86a89e1f91ac9111440413a41930269ca07026672","sha512":"d729b2f84823935126e36c003c2827be55d68adf9a73b1124e6f0a651eaf90d5cd61441a63c5f4d2aa48738b760bb4a514eb0fcadf2fdad5f50098a54170fcba","ssdeep":"3072:yMLzpLeh21pCpKs1n4YHjbprm4/pFdFtl:yMfpLe+ezjVjxFdFtl","tlshash":"31240ae83d55f6626eb302b710af1803733c252b280d4d60a611fd9eb57845eb17bf9a","size":214812,"data":"","first_seen":"2026-01-03T00:49:49.650733Z","last_seen":"2026-06-01T12:46:07.995608Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/069c0a854c309979.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"73e3c0d2612eeec4efeea71107c113fe","sha1":"b0d28e8b48d13943a98aca39b4eb7aa5dea04b4d","sha256":"bf69bc1718eee243cfc3b6bd6c011e0ed1841e5168fa1cbee0aabf9069218141","sha512":"107ceeebb17dfc052ceab14865ef3ec2e724088d130cdd014b025de46fcaba4e51ef9b928a87d9ac8aebe1e0991c1387690ae8bf1cc1650b65fd29832b9638b2","ssdeep":"6144:XxPB9EMZf+KStQaaafXFCqcWNalxYMTPnyCfzZ8b9:3+KSiu","tlshash":"b9242bc573b6b03247d195a594361803f27ca61eb81d802cb76d5edf2a98948eb3bf31","size":214835,"data":"","first_seen":"2026-03-06T10:10:35.715454Z","last_seen":"2026-03-06T11:09:14.635665Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7128bc0dd01de0b5ab3450681358f80","sha1":"8834996f64dd185182b70b3bdf779af6db407abc","sha256":"dc7ffb941f9c4c9a68d21000b3a32f738b86e6ec60a0b503f247d9fb6e4e31a7","sha512":"62035b0a0dcbd7a53d8e6e5d93ae3301cdf20528a4703993e6ea0b8da63a47a642472c5b9a1121cbe8020669e3b5683084b9697fa2404082c16afb9168f859a4","ssdeep":"","tlshash":"0571af2e7805de4bec7e3c6d023e9d3a10cc897b4794deb8869dce140a4647a27d6dc1","size":3523,"data":"","first_seen":"2026-03-06T10:10:35.737462Z","last_seen":"2026-03-06T11:09:14.643083Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/cc1c88799edfe106.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"daf7d884cc19abcd99ba76518ce46398","sha1":"bd58ed5ec94119cb19b93f7714e4baad50ac8761","sha256":"3415b81ffc4e3c99b1bcc01f4e18264093e080df1d270e15e23f833f4f256d4f","sha512":"f0d69b4c21365951d11974f91560ba872764293c668384874927aac7c70fc3353d009c204ae1a0b4810944cb8da15262209d6202c4fb3e85a295b2902387bddd","ssdeep":"384:oO0+4IZDHYaW/Egmmk8llDPNhtQUV7H8oWDmuRgE0S:Q+4IZDHs/mgZPxtwXaE0S","tlshash":"e4c2a5b27391f9a212db85d9c0371005f2650c3621ae24b0b785ccef769dcd991bafa9","size":27854,"data":"","first_seen":"2026-01-14T22:21:30.971778Z","last_seen":"2026-03-17T12:36:58.312968Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/218c272dd29e1284.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cf77ed69cce5e0d9e42a72ed9fc2348","sha1":"2edbf658680ae7c0b0cfdbf679f2ca15a6dd7888","sha256":"94048db49c3b218fb45b9fb936324029adcb95d662fce398f9149c1996a4d345","sha512":"e5c51e6c99f9ffe97574850f3d181eb01dc0d5c2cdb716368ad2bc5310add3ae9052af6e61c97d823b3559aad43033fc9458591d3e5f775dec0564a2097060f3","ssdeep":"","tlshash":"4a61536572d9f9c1114a90d88c3b5006f2391e3666bd70e0b799cdf939d408e92f2f9a","size":3324,"data":"","first_seen":"2026-03-06T10:10:35.726798Z","last_seen":"2026-05-19T05:04:34.627762Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"14cca1cdf4e02f191386a78d1b6522ae","sha1":"39323120ca9d8cdcb11eb8ecd9b8f8644c319a60","sha256":"faf7f7e8b08a4922b0a23263025ee322960f71dab36acb70315e9a5932d55189","sha512":"ef3cc968d4fbece9f4af091172b903dbeadf08f6b61308c61aab47649595369ecf5663edaea8a5c9890d9e0019dffe650b82910c762ca153b8e615f2e2a09a3b","ssdeep":"","tlshash":"3ed0c2a1dc12dc0dc7965f29283a2d2521cddab406466147b895c93859c6d340aa0e86","size":286,"data":"","first_seen":"2026-03-06T10:10:35.739844Z","last_seen":"2026-03-17T12:36:58.329216Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"28f5f40e2b1556ef00bf37a965b17de4","sha1":"8526e03d6fe72c9c7ece644b529b8a8350fc4994","sha256":"9b5a48839d11282b62fcd1003f7bc14ef9f6cb0a6235433f2736d7352a1bc538","sha512":"c67861f8adfcab3767d149cc5b188077922a02ee6aba79751aee9233a6a95a352e56508f5c7768f9647265d90b1d939f338f28a0ea3effb3f9df4979bc1ab579","ssdeep":"","tlshash":"2e217076ed14ed08eb828d193d3a7da950d8d39191e4790aba9ccde80292b706fe1261","size":1434,"data":"","first_seen":"2026-03-06T10:10:35.741099Z","last_seen":"2026-03-14T13:06:54.556311Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4f58df8ef556437633bb90cc31469c4","sha1":"c1c713bb5046a54cb79a8e7537b6d7fca624fd45","sha256":"2dcb2e50c883929aebb7a64a7a22cfe2260d856a3c36a6926c082da19c552b7b","sha512":"54c8a79f5897cd198db689700c24f950ad7fe19eed815f8bfa0e47428701d8c84a1fd8f677a6f1b2a4f1443f35f2dbd19e6f456ceeebfb1c59275bb356e1a5e9","ssdeep":"","tlshash":"bfc02b041427c47b421c6f4dc02243d4e4b020bcdc492480801d181800d0c313b40cd6","size":130,"data":"","first_seen":"2025-03-25T18:26:20.414558Z","last_seen":"2026-06-08T20:18:47.960409Z","times_seen":40468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"00933d3d76fccf8f1d330b001b6dc118","sha1":"72a3f9f693a7d05bb6f1b38fd381a0f4e8bb5c7a","sha256":"4009527b06902e2fcd3c2ce78c0652caf43bda1783d1577198d0c3919782c607","sha512":"8fce1ced1efcaf7f17f0fbc71664f0ca59f5f7bddc682fdbc8b9ef3862def740a845bc3cd5cc3926c09b98782296d14c9b38d50b2dd6cb53b296ec76ba558602","ssdeep":"","tlshash":"090156a9f328199a66d92fbfa06a570c7460603e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T23:30:20.291724Z","last_seen":"2026-06-08T20:56:41.363608Z","times_seen":39799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/c3f31ae7688b1ab0.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f690b1f27ca6c278f30ebffe8c057ad","sha1":"3852d6015b41a072b465efd6a2f533c7fb36ce18","sha256":"a0c2f8422a7b1b9dfd966a747adf6251909b1e616b1fb260bec40ca68e15287c","sha512":"7174cd121b621d339d385a77c2bd579ea3e337f8817a22109387b96708c1d0258114c0716bf3215b65d66e848f270da26a22458bdbe7ad17a67d7e2875ae5203","ssdeep":"","tlshash":"8e5155ee31e1f46c63ba13e1413b1356b7781f6cd04e90586298d83d3a38dd79462eae","size":2537,"data":"","first_seen":"2025-12-14T10:05:37.436213Z","last_seen":"2026-06-07T04:58:42.696516Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/73fc282fee4c4fe2.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90af8bef9f1b0cb96e1e42e7b8dd904f","sha1":"e8b1e3de25ecf488078ddc06ff8d21b13db6e4a7","sha256":"453431f6c9934da37624f5704008351303868b82a1d6f17ebbd58cfdb20500a6","sha512":"ee4b1276de42e8f42937c04366edf04d56771df454fb123fb447d5cfde6a0bd37d6fb3471624ae86e5b30987c4e4b27ed717821e8ce739a75bb82ae73af2ebfb","ssdeep":"768:OYRijlM8ycxb9Xl2hSBWqLu2GfKcozd+a9INR+xTd+JXRQAPSKB:voeCbvvoTJozVINMxTd+BRfPSKB","tlshash":"f603facd75a5b0910fb396b1802f401bb23e1937188d48a0d3a3dde9b8b94add237f59","size":41036,"data":"","first_seen":"2026-03-06T10:10:35.723691Z","last_seen":"2026-05-19T05:04:34.629806Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/340820ca5a1417a0.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"39140bde28e747cc18c2d96ea8f962d0","sha1":"60b3642cf55b9ce1c23dd8f680cd87920e313d59","sha256":"74e7ddbc780d1a41db1c6ef099b76eff62d3e3f287c9d6967969cacd25c683bd","sha512":"7fd12f2683b75acd8a9751d2a5b6ba01a79133c85684447f91c71c8ca7e956b218c07f160b317dcf4cb788f2f57bffe697db3d6491bba2f9b35cb46f502d023e","ssdeep":"192:DyGTMk5dQfzDwP9+HN6fT1arO+1pgwh1ebDPSA7EGpErj3+yPCwid/iXYfaIwX5q:DydxbdYwrOUpybT4LuyPCwiQrIwX8","tlshash":"309295a571d5f9c1069b80e8c83b4016f32e0e7610ad74d4e7e1cce679a095ed1b2fba","size":21124,"data":"","first_seen":"2026-02-11T15:34:34.013898Z","last_seen":"2026-05-19T08:46:02.83435Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4533235bc340f56829dea0a7d50f01e1","sha1":"57e36d2d5ea0be6ffc8e6001b28f5b4f3b865a43","sha256":"a7b184efc6db3070eb138216ce988c4adb40b13a54bbbc308b9ff0be71f9e0eb","sha512":"dd0bfc5260b16d9a9b387ef134ba454aa5ed7636fab9b79e5034e229418ca5f0e6fd99dca3c881fa091df55204dfaf7e77e4526050a60e8110ed49b41ea4e831","ssdeep":"","tlshash":"1c60000000c000ff0000f0c03ccf0c000c0cf000300c00000003c3000000000030300c","size":16,"data":"","first_seen":"2023-03-08T20:20:25Z","last_seen":"2026-06-08T19:32:32.32512Z","times_seen":23753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_vercel/insights/script.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e699b6e4471fd6950176e39c5f1ace0","sha1":"a3957a826a0c77a338e1bd9b408b90c6215491f8","sha256":"79bf638dd4acdeb9b80c5a4009a3e1986968d615e9557dcf23d91b5e8ad158d8","sha512":"c49b40fbcbe959fab505da0d27a9f3c273a3740f07b34433619e5bc88cd7dd54564609284f4ee30ae219a1572a0a255fe9af92f2f948931b761cbc1be3605e2f","ssdeep":"","tlshash":"2251a5ea74a1e16d4ad79275817f1204f37f2a92fc05000132d99c9d3539d1dea73f99","size":2495,"data":"","first_seen":"2026-02-17T21:27:06.661745Z","last_seen":"2026-06-08T21:03:27.435438Z","times_seen":13000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/turbopack-1fd100bc21fc3abe.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-1fd100bc21fc3abe.js HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2734\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"turbopack-1fd100bc21fc3abe.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"2dbf945672ab5807aca9fc2e501daf9d\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/turbopack-1fd100bc21fc3abe.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f6t76-1772791806289-6bb77af15bd0\r\ncontent-length: 4297\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10420,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6194)","md5":"c980466e411df0eee2b61e5f63a563dd","sha1":"86c720b477c7ed837c40eefb5d06d9521df1be78","sha256":"b9a6c77719ceb1a14eef424d7bc82be260e695d87b7ca6a233e1465c15547228","sha512":"9af4ef50b40ae53ca3f5193020d69053bc823bbd14151b5baced19f60ab894991eedefee1f17f1058b24f28337462c0297127c77a6be7fd07368d319aac50177","ssdeep":"192:CQwMSiHG+J8iEsuRnAEY8iaWkUmlGVhFd2mKKW9PZPKFXVqXmHyLxg:xwMSiHhylWkUmlQ8mKDZZyzyLxg","tlshash":"bd22b6ea37a6f07343afa0e6803f4144e1799469146d581c935ce8fa28788ae45e3f27","first_seen":"2026-03-06T10:10:35.684417Z","last_seen":"2026-03-06T11:09:14.617604Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/x-component\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\nnext-action: 60bb3f5d1fc8f1b8c68d7feaf525187f1d15e6895e\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 123\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-action-revalidated: [[],0,0]\r\nx-matched-path: /\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::f6t76-1772791806769-c416ac2fbe90\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"06bad50705f35b0eb23b92d4d680b20d","sha1":"cad0678952b40b3dab487afdd1d4a5efbf25b072","sha256":"1a038f5eb0870e447ddc9c032f332c2e6c6a48fd4744aeeb5d36db80c67a88db","sha512":"b3bbc6fe803f694ef482a7e33785d1abe133d6726e8674c4cbb65ee5280246303bf0f5e349cb6b5898a945c032148118facd8fb9c1a95fce59c7fff9780b16b0","ssdeep":"","tlshash":"eca02202cc2082a2c08bac0008eb08208ccec020f0cc2002fb88be32802e80022c20bf","first_seen":"2026-03-06T10:10:35.6871Z","last_seen":"2026-03-06T11:09:14.63083Z","times_seen":2,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:08.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:08 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091a4ff6932fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-4320-72af-8422-bd44d1001ef4\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=1BfQPKYVj_iDxPlVw2e6Zs9RCsB9JZyrtqE_Ldd.fM0-1772791808-1.0.1.1-UPe0jGUFh_LGJBLj5UL6.jNzD22hcRzUckLd8pSLaC2i8ycLdWL9JND57JCn1BaKrSJC2Z5Hzao16Pmm.NOI82PtZmp9fBmc2iW94rz.g24; path=/; expires=Fri, 06-Mar-26 10:40:08 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:14.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:14 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\ncontent-length: 20\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091ca9fff32fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-location: /settings?key=eq.active_brand\u0026select=value\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-5aa9-7baf-bbf4-e0b9bd79d703\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 3\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=2p0ldF01O99nlR8PBJOHCqgtUNnE0x4wqHTZ4__ubnY-1772791814-1.0.1.1-4OLIdjF8JfXkHh5A0wgS7uzQca4pEEjzSWq3ZBKdOfNga.9E3owRm3nUtI96gb8zSzR5ehGAaayYlFfrVnobjIOZFkjuG72xrMiL10zS6PE; path=/; expires=Fri, 06-Mar-26 10:40:14 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"7fd823320ee4a8b480a80ef8a70e0a92","sha1":"1bce408e971326dec050489cf0dd1495cf73a675","sha256":"413bac213a95b28f332e6ff689c8c3d5c417b4d5d7c73db2ad2096b4410d4a26","sha512":"97e9c8c4c3e32ed89df5b52722b9e2464f40df94d35dd14f1dd4de1673f989d89e56f8cf2ef831530a33c2441adbad2c7bb9a6440f84d5d5720207760db8a9f0","ssdeep":"","tlshash":"367000202008282a3000808020208002a000000030f000c300a882c02f00a002003080","first_seen":"2026-03-06T10:10:35.692308Z","last_seen":"2026-05-19T05:04:34.626683Z","times_seen":6,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:22.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:22 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091fc5c7032fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-79eb-726c-b2a6-054a2539719e\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=L4yBZA6WQKrAOqEucITpl5RrYfQhxqt3xBMQL0bWjAI-1772791822-1.0.1.1-6jGXRwJL.42CA.lMvqeunk4j2PCZ1y5UwLXJXF7uQLxm0Jsn_SYzxC6EQrVgxPz73vhFbvtIt9V7IyxV.aMye6_2Ho0Ozv4jdL7jfRGg3v4; path=/; expires=Fri, 06-Mar-26 10:40:22 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/media/caa3a2e1cccd8315-s.p.853070df.woff2","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/media/caa3a2e1cccd8315-s.p.853070df.woff2 HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2736\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"caa3a2e1cccd8315-s.p.853070df.woff2\"\r\ncontent-type: font/woff2\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"18bae71b1e1b2bb25321090a3b563103\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/caa3a2e1cccd8315-s.p.853070df.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5dcws-1772791806277-11f68e6a678a\r\ncontent-length: 28388\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28388, version 1.0","md5":"18bae71b1e1b2bb25321090a3b563103","sha1":"a636827d1fb47f9fddf94d55ed8f25e85155d1ea","sha256":"a29f900a6d603e989449327956e7ac61ea3e6b26ca7426f64e7cccf2cd4aed37","sha512":"e6560e1f68d236883884afa1fa4c2de5ddd6c75e69ddf1057c97f525015aa4306a14fb56c1526141bf2067d24b2ca72ea78e0e518b2bcbaf162056ee4a2b327a","ssdeep":"768:KD+2Y2za0bgeumM+doeWITKGOgUT3CbeZq:KDFzfKJ+SHIGGOh3CbeZq","tlshash":"9dd2e1a0bb98461d35fe1ba096ed42bf4a1d7f4ded7c1a65093b2b80174d4df20d8c68","first_seen":"2025-09-14T11:55:19.751418Z","last_seen":"2026-06-08T20:21:25.830048Z","times_seen":22695,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/06eb1c0795625fa8.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/chunks/06eb1c0795625fa8.js HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2734\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"06eb1c0795625fa8.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"ef4a84aca3b770eb057cdf368c32c0d2\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/06eb1c0795625fa8.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l24hs-1772791806287-355bc2acc928\r\ncontent-length: 5892\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15358,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6843)","md5":"f3299d8cfee4983fe1a17cc5605ad08f","sha1":"6c2f0d8495752921d11d46b1f6772683e7c1b4fb","sha256":"f268a63e27becc761b902459f460b2323d55beab8f9d103b1390cfda5acc2a41","sha512":"7a447aac382631b5328b1905ef6675be3fb1cc8196175825bd8801a8ab5d7292cb1c8010338eeff31b4279cc5eb5b532c1133d154e52fb4bf17e87702f5a644f","ssdeep":"192:KleA4yRFf2jJQTv/yZ2DlRs2BjCceS2/Iw2BnuHDDBs63RduFYGVlzEt1R8E5L44:g6aFTUUl3tp2/IwKCBsOuFYusLFCXG","tlshash":"fd620ab532a9fcc6129bc2c4d83f400df7654c71617d70a4b7d948a96aa0989a0b2f7b","first_seen":"2026-03-06T10:10:35.699341Z","last_seen":"2026-03-06T11:09:14.612093Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:10.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:10 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091b17b0e32fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-encoding: gzip\r\ncontent-location: /sessions?id=eq.afb62aa5-e931-4614-a292-7a373de48f74\u0026select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-4afb-7451-80c1-3f8d382b5967\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 4\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=j_YSAJXHs7FnMw1QPulvXMoNYN1l0uS0BFsuGZ.F8D4-1772791810-1.0.1.1-p1D7aZ_wns.Z1KHC8ImOwqRYikTXBAZB_2zOh0.GDYkHzzkMKKBza_KdyOVhW8ZMjz_sanwUsBGJJNNrbiiVsOOqVUf4nYI_PyiBxeUEZjQ; path=/; expires=Fri, 06-Mar-26 10:40:10 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":175,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"f48e3baabea4f237d022df1d1a198c94","sha1":"d501439c2bcae7f0ce9f3ee21c55eaf2db2754f4","sha256":"3fee59619c456c0bcc8c5fb4d7070c3f23f1a2aab6074f3891a180d3ad4d8e52","sha512":"7bcb448163af8d8c31c93114d2646152c67052c099d7e34433291c82d9235cdf92a95d15e5a3adba387ec26cbe8b1f618226dd0877e100f87a8ac00af7a3978d","ssdeep":"","tlshash":"9ac08c1c20fd0c38465a052370083e284a2e4a83d84a5e3d2ecc8f4e81e41b8b3c1882","first_seen":"2026-03-06T10:10:35.705392Z","last_seen":"2026-03-17T12:36:58.31553Z","times_seen":6,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:18.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:18 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091e35fda32fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-6a22-7e4a-825c-5eace1f17b33\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=wQ7M54fc5CH4mzs8SZgFY7J6JFB9dridAaOKvEy.gmQ-1772791818-1.0.1.1-zEom9YbeqT8pmn3AJh2hpicbLdexZ0mi.XQ77pSgdSYzhXURfnd2ySTAwuHwfSC0_oyZE8FFAgu9uodxLdr5FpcXNtxsn1r54lTbngbkbJI; path=/; expires=Fri, 06-Mar-26 10:40:18 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:24.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:24 GMT\r\ncontent-length: 0\r\ncf-ray: 9d809208eda232fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-81a1-73fc-9fc2-2712e0c659e9\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=Th82XhWWlN8KMxodN7d2lUfvl_yxmAMx2orwYqAtu_Y-1772791824-1.0.1.1-ug85bwBG1WxW0o59CcokFA5sJfX2lGcWUGge62X.9OySxnhob8dHYATWX2dxqQ6svPA5bYecGgHeIuEl1N5K27j4rE6lY7rKU7ArBf_xVi4; path=/; expires=Fri, 06-Mar-26 10:40:24 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:24.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:24 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\ncontent-length: 20\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8092091ecc32fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-location: /settings?key=eq.active_brand\u0026select=value\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-81c1-728a-9fb1-060defbfb40b\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 1\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=96zQRSYfwz36l4Y2zvcHoLpcEq24DycfVf51KtRsu9I-1772791824-1.0.1.1-7vGKIZu6gERpc5dLtDWnUhMVdwk7EQgGLdrje6urnw_IN.KRQgM43LCP5t_EBFRFNl6BHB26LmEOw_hEl5uf9KuU0YWIWUxE0Xt.sP3bAH8; path=/; expires=Fri, 06-Mar-26 10:40:24 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"7fd823320ee4a8b480a80ef8a70e0a92","sha1":"1bce408e971326dec050489cf0dd1495cf73a675","sha256":"413bac213a95b28f332e6ff689c8c3d5c417b4d5d7c73db2ad2096b4410d4a26","sha512":"97e9c8c4c3e32ed89df5b52722b9e2464f40df94d35dd14f1dd4de1673f989d89e56f8cf2ef831530a33c2441adbad2c7bb9a6440f84d5d5720207760db8a9f0","ssdeep":"","tlshash":"367000202008282a3000808020208002a000000030f000c300a882c02f00a002003080","first_seen":"2026-03-06T10:10:35.692308Z","last_seen":"2026-05-19T05:04:34.626683Z","times_seen":6,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/13e130d36132d73e.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/chunks/13e130d36132d73e.js HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2735\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"13e130d36132d73e.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"c45bde5c2093233a5449f2c466dd6e6e\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/13e130d36132d73e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f6t76-1772791806281-9be551354a18\r\ncontent-length: 9278\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":39262,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28591)","md5":"e1350c8f31b36e3cc68614d4ce2400a3","sha1":"b31286f950f536602f68b10f7c2776ad7eac582a","sha256":"4074dee602c22606ba4c4dea451ad70e5c298fcf3ffba167b63b42830e7191d3","sha512":"76c7800196ff52dc08c27feeae6479ed02ad935fb6f92fb471ce4d5d50e3454e83841b01236496938abb436225f7c90a3cb339b21a9ea6a1a0563539f1e4db63","ssdeep":"384:g78l17CWCmLgG4AYHfcseD1eFFbKDRP1JnppTh4vyfmybZznCjLDoq9ggZrIwi+P:rl1OJ4nTNx4LDoq9ggZrIK","tlshash":"3a03b5b172d4faa2025744f0d83f101af23d4c7621ad74b0a7e4ccdbb99858d92b6f99","first_seen":"2025-12-16T03:35:31.869639Z","last_seen":"2026-04-28T18:25:11.466393Z","times_seen":22,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/cc1c88799edfe106.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/chunks/cc1c88799edfe106.js HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2734\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"cc1c88799edfe106.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"29ef703c5a457feda48f73f53f869487\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/cc1c88799edfe106.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5dcws-1772791806287-42bc9f85f32a\r\ncontent-length: 7210\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27854,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27852), with no line terminators","md5":"daf7d884cc19abcd99ba76518ce46398","sha1":"bd58ed5ec94119cb19b93f7714e4baad50ac8761","sha256":"3415b81ffc4e3c99b1bcc01f4e18264093e080df1d270e15e23f833f4f256d4f","sha512":"f0d69b4c21365951d11974f91560ba872764293c668384874927aac7c70fc3353d009c204ae1a0b4810944cb8da15262209d6202c4fb3e85a295b2902387bddd","ssdeep":"384:oO0+4IZDHYaW/Egmmk8llDPNhtQUV7H8oWDmuRgE0S:Q+4IZDHs/mgZPxtwXaE0S","tlshash":"e4c2a5b27391f9a212db85d9c0371005f2650c3621ae24b0b785ccef769dcd991bafa9","first_seen":"2026-01-14T22:21:30.971778Z","last_seen":"2026-03-17T12:36:58.312968Z","times_seen":9,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/api/favicon","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /api/favicon HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/favicon\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::wg8pn-1772791806454-41dbd6adbe55\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":314,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd8970b15f2ac5d6b5c08b88850ee0f7","sha1":"1185d009d389de463837a765d327fa3cc5eabe3f","sha256":"1e58d981754525730a8ca5c52cbceeef1493e0c6bdf194dec4836bba617d4b87","sha512":"7ede3fe9ad86fa6a1ca2f5b978035fbd0104206253ce1babfc481e4cd84b5026e85b71ac5ee1bf727d4c7ccd1724a5f3ab106d36527370eafd89401ef3b567a1","ssdeep":"","tlshash":"17e07df19348b09c93a4450c5e3c20627093617b684480aafad6eb6e5042dc139b6afd","first_seen":"2026-03-06T10:10:35.708393Z","last_seen":"2026-05-19T05:04:34.62876Z","times_seen":6,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/api/favicon","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:07.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /api/favicon HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 06 Mar 2026 10:10:07 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/favicon\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::f6t76-1772791807183-1a0535416740\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":314,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd8970b15f2ac5d6b5c08b88850ee0f7","sha1":"1185d009d389de463837a765d327fa3cc5eabe3f","sha256":"1e58d981754525730a8ca5c52cbceeef1493e0c6bdf194dec4836bba617d4b87","sha512":"7ede3fe9ad86fa6a1ca2f5b978035fbd0104206253ce1babfc481e4cd84b5026e85b71ac5ee1bf727d4c7ccd1724a5f3ab106d36527370eafd89401ef3b567a1","ssdeep":"","tlshash":"17e07df19348b09c93a4450c5e3c20627093617b684480aafad6eb6e5042dc139b6afd","first_seen":"2026-03-06T10:10:35.708393Z","last_seen":"2026-05-19T05:04:34.62876Z","times_seen":6,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:12.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:12 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091bddd8b32fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-52c4-75ed-82c3-57dff407fc2f\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=wRNBwkZAMQD_16PuM3jvaGY8G3k9QHW_4VVAQY6xF.w-1772791812-1.0.1.1-bGmeerlqMm5oFfYg7gPJMXLGhFf9wb30Gj.RpnmGZ9bp9rqNmtvBNzzsZlKoW_SUs1f89rKz9kGEwSx.bIiRLGpcAlHr1VVJcr_KDBOve6c; path=/; expires=Fri, 06-Mar-26 10:40:12 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:20.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:20 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\ncontent-length: 20\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091f02f7d32fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-location: /settings?key=eq.active_brand\u0026select=value\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-721e-7257-914c-7ff3067357eb\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 2\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=SORdDYnMPzvkGKc3eJIBZ4vAG1IZJ8z4G_xwXJeqhmA-1772791820-1.0.1.1-3wA9BMqF4sa.GG44gODCvcotUlzg007w9Tm5DaxnQBIQ6m4JGaGuGMQvAIcz8AUvwLhtYU5S4SAna1ERsMSkZyZleh3ysWePDpdRQY3N.HE; path=/; expires=Fri, 06-Mar-26 10:40:20 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"7fd823320ee4a8b480a80ef8a70e0a92","sha1":"1bce408e971326dec050489cf0dd1495cf73a675","sha256":"413bac213a95b28f332e6ff689c8c3d5c417b4d5d7c73db2ad2096b4410d4a26","sha512":"97e9c8c4c3e32ed89df5b52722b9e2464f40df94d35dd14f1dd4de1673f989d89e56f8cf2ef831530a33c2441adbad2c7bb9a6440f84d5d5720207760db8a9f0","ssdeep":"","tlshash":"367000202008282a3000808020208002a000000030f000c300a882c02f00a002003080","first_seen":"2026-03-06T10:10:35.692308Z","last_seen":"2026-05-19T05:04:34.626683Z","times_seen":6,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/media/797e433ab948586e-s.p.dbea232f.woff2","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/media/797e433ab948586e-s.p.dbea232f.woff2 HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2736\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"797e433ab948586e-s.p.dbea232f.woff2\"\r\ncontent-type: font/woff2\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"da83d5f06d825c5ae65b7cca706cb312\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/797e433ab948586e-s.p.dbea232f.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::h8d24-1772791806277-60ef0b7452ef\r\ncontent-length: 31288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":31288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31288, version 1.0","md5":"da83d5f06d825c5ae65b7cca706cb312","sha1":"3820bcdc2e187ff5332ab0d5dc8529f8e10fd574","sha256":"b7ac144b394cbd81052d6397ec0c33397977b1d7e9bc095e744e652a378c6fb3","sha512":"c8b02f1655b30d6fd6e0b3ee92280d175fb0410938a71f625354fe79e009fb2928ed55b45d0000db9e527a388e8f3eb42875c6965c80eb4b03046c50f49ed187","ssdeep":"768:N4C8ya3ZZij3h4s0iIfv/x/tV3167X/27IwwlsUxCkegAeyTrJD7/kX:Z8Pzf3JF67eqlsZXLTrJcX","tlshash":"47e2f1e7f5578489abb26e7102e105d5c5ed4aa105bfd1fb642c70660d3aa0e0fc0b27","first_seen":"2024-12-09T15:40:29.87187Z","last_seen":"2026-06-08T20:21:25.830675Z","times_seen":23978,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_vercel/insights/script.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:07.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_vercel/insights/script.js HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 324\r\ncache-control: public, max-age=2678400\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 06 Mar 2026 10:10:07 GMT\r\netag: \"3cbd3d764f83ec900bccffe70a3ebd08\"\r\nlast-modified: Fri, 06 Mar 2026 09:09:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1:arn1:arn1::f6t76-1772791807054-016dd15cb599\r\ncontent-length: 1300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2495,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2495), with no line terminators","md5":"8e699b6e4471fd6950176e39c5f1ace0","sha1":"a3957a826a0c77a338e1bd9b408b90c6215491f8","sha256":"79bf638dd4acdeb9b80c5a4009a3e1986968d615e9557dcf23d91b5e8ad158d8","sha512":"c49b40fbcbe959fab505da0d27a9f3c273a3740f07b34433619e5bc88cd7dd54564609284f4ee30ae219a1572a0a255fe9af92f2f948931b761cbc1be3605e2f","ssdeep":"","tlshash":"2251a5ea74a1e16d4ad79275817f1204f37f2a92fc05000132d99c9d3539d1dea73f99","first_seen":"2026-02-17T21:27:06.661745Z","last_seen":"2026-06-08T21:03:27.435438Z","times_seen":13000,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:18.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:18 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\ncontent-length: 20\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091e3788032fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-location: /settings?key=eq.active_brand\u0026select=value\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-6a37-77f4-8213-9d5f244040da\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 1\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=gqbJzp5_neNstS9ZGxHnx6ckD2wLuVx_E47Kli59y48-1772791818-1.0.1.1-S5PDJ_CCSG3WNxg9lW4UoywUXdGiM4pV3FEMWgZhGdDgG5qxFmsTgETz8gpvB664cA7ooDLP5XhHk7K5W_bRKLGmntW1yUhZrlYEBk2niKQ; path=/; expires=Fri, 06-Mar-26 10:40:18 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"7fd823320ee4a8b480a80ef8a70e0a92","sha1":"1bce408e971326dec050489cf0dd1495cf73a675","sha256":"413bac213a95b28f332e6ff689c8c3d5c417b4d5d7c73db2ad2096b4410d4a26","sha512":"97e9c8c4c3e32ed89df5b52722b9e2464f40df94d35dd14f1dd4de1673f989d89e56f8cf2ef831530a33c2441adbad2c7bb9a6440f84d5d5720207760db8a9f0","ssdeep":"","tlshash":"367000202008282a3000808020208002a000000030f000c300a882c02f00a002003080","first_seen":"2026-03-06T10:10:35.692308Z","last_seen":"2026-05-19T05:04:34.626683Z","times_seen":6,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:22.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:22 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091fc5c5c32fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-79fd-763c-88e0-27a8b24dcd6c\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=AgTvyZ5qL56.R_WLL3PDoWXOcIbI8yAN5LKTzc1L.Y8-1772791822-1.0.1.1-qOSJ3l0ozUl_Vkbh9_.J50Nrbu9X85T0eFRfccQDsxsR2XpaVn_bT4MSfJhSrXeFwSDOwPHy99Iu6pm96jLHEq5R5P8uvEgLwQTbVm5y1y4; path=/; expires=Fri, 06-Mar-26 10:40:22 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/e1e73461228f2d3c.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/chunks/e1e73461228f2d3c.js HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2735\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"e1e73461228f2d3c.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"76d1bfd0ce5a75e5fc31c7a10d43f1c4\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/e1e73461228f2d3c.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2ksr6-1772791806280-7bb4de3a9ca2\r\ncontent-length: 68668\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":214812,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"46bc303bcfd9ec18bdabb436a8df5efc","sha1":"e9931dddf890b5275c77659596ec0669ff8cf15f","sha256":"2c6eedce1fde1178f3a4e2a86a89e1f91ac9111440413a41930269ca07026672","sha512":"d729b2f84823935126e36c003c2827be55d68adf9a73b1124e6f0a651eaf90d5cd61441a63c5f4d2aa48738b760bb4a514eb0fcadf2fdad5f50098a54170fcba","ssdeep":"3072:yMLzpLeh21pCpKs1n4YHjbprm4/pFdFtl:yMfpLe+ezjVjxFdFtl","tlshash":"31240ae83d55f6626eb302b710af1803733c252b280d4d60a611fd9eb57845eb17bf9a","first_seen":"2026-01-03T00:49:49.650733Z","last_seen":"2026-06-01T12:46:07.995608Z","times_seen":39,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/c3f31ae7688b1ab0.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/chunks/c3f31ae7688b1ab0.js HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 78546\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"c3f31ae7688b1ab0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"b8ac729c9af75d01402c8f922ecbd456\"\r\nlast-modified: Thu, 05 Mar 2026 12:20:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/c3f31ae7688b1ab0.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ddsnq-1772791806287-4e7cb0e30c66\r\ncontent-length: 1291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2537,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2537), with no line terminators","md5":"9f690b1f27ca6c278f30ebffe8c057ad","sha1":"3852d6015b41a072b465efd6a2f533c7fb36ce18","sha256":"a0c2f8422a7b1b9dfd966a747adf6251909b1e616b1fb260bec40ca68e15287c","sha512":"7174cd121b621d339d385a77c2bd579ea3e337f8817a22109387b96708c1d0258114c0716bf3215b65d66e848f270da26a22458bdbe7ad17a67d7e2875ae5203","ssdeep":"","tlshash":"8e5155ee31e1f46c63ba13e1413b1356b7781f6cd04e90586298d83d3a38dd79462eae","first_seen":"2025-12-14T10:05:37.436213Z","last_seen":"2026-06-07T04:58:42.696516Z","times_seen":117,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:10.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:10 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091b15a4b32fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-4ae3-7d49-b744-63bd529100ca\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=CyQ1i1lFbTfrYpdUbhR1wHHZvqX21hKEezHd0Rgrf7Q-1772791810-1.0.1.1-jEJnbbdd_6q9DExDqmHr6JLydfmicAJ49O7RxxlEvSbB7N6iEhObODGXxVrYjaZAidmgbER6R6cnz6dLZ2W3DAW1ME_msArLscvrNc1VelE; path=/; expires=Fri, 06-Mar-26 10:40:10 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:20.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:20 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091efde1332fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-71f4-71d2-9909-9e08c3674533\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=czPBz9SPkTSFCjCaKEcfpXYUJKyj9Po7mclQDAhp_2Y-1772791820-1.0.1.1-lEwtMiCjLoLCFhAgf08rhE8aT.XVpLQR.R9WwWji65RA1p5CVajW6vOiWy5c1THjH4H45h7B8jS0sH3JCPMeR6dU_QQvJQB2Ipyvs8JUygg; path=/; expires=Fri, 06-Mar-26 10:40:20 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:20.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:20 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091efee4232fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-71fe-786b-94ed-054a621a7009\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=9sHhVKUb7goW9FyVEyeMnSay0fjCEtNY8pCP43tbKE8-1772791820-1.0.1.1-8hDJqw.id.cB8vz0bYfswt.wwx_G0ZhqCW2bUeZuBeaCf5QjAynopCXv0ebOn.9PkJT.Tf2LWNwfyiKQPor4uaemcQrrl4P18x02dniYpss; path=/; expires=Fri, 06-Mar-26 10:40:20 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:20.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:20 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091f01f3632fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-encoding: gzip\r\ncontent-location: /sessions?id=eq.afb62aa5-e931-4614-a292-7a373de48f74\u0026select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-7218-753b-9d36-8c2b4d10cd03\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 3\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=3yfF67CtWZ1QJizayYPERdwmOjQs_dfnoVtxrer9h8o-1772791820-1.0.1.1-kBMl6Hdu7mLC78waYJj1cO56SrCSzWn0s2U16vjDQfiAiUn4ErLwlGzmfS8PjvPRcjV4CTR2GgBJZO2VrkQy6XgYA3qxUgaagpupKX5fhOM; path=/; expires=Fri, 06-Mar-26 10:40:20 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":175,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"f48e3baabea4f237d022df1d1a198c94","sha1":"d501439c2bcae7f0ce9f3ee21c55eaf2db2754f4","sha256":"3fee59619c456c0bcc8c5fb4d7070c3f23f1a2aab6074f3891a180d3ad4d8e52","sha512":"7bcb448163af8d8c31c93114d2646152c67052c099d7e34433291c82d9235cdf92a95d15e5a3adba387ec26cbe8b1f618226dd0877e100f87a8ac00af7a3978d","ssdeep":"","tlshash":"9ac08c1c20fd0c38465a052370083e284a2e4a83d84a5e3d2ecc8f4e81e41b8b3c1882","first_seen":"2026-03-06T10:10:35.705392Z","last_seen":"2026-03-17T12:36:58.31553Z","times_seen":6,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T10:10:05.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\nlink: \u003c/_next/static/media/797e433ab948586e-s.p.dbea232f.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/caa3a2e1cccd8315-s.p.853070df.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /\r\nx-powered-by: Next.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::5dcws-1772791805936-7526339b3d88\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":11158,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (10738)","md5":"e2be1f60a44d7249e9b6030f149b35c0","sha1":"b48aea10ee98a194cc075f6a13765216b84d9e2d","sha256":"0ff2517f8d534622ba2fcffcad6484539bb453acf5eb21d627f5421ecafd53bf","sha512":"1bad32ebce6efd628eaca2b906d6e1b0b81c246148c0ee3b907f1c6bebbe0f9ee7f1fe22ff53794f60af10ce2b9aabb5a87ed45e93cf47bf520ee4402df1cbd0","ssdeep":"192:hzBdvUOVafvnvjWKgnqzcpm6UgUQ77yEX/L8qOV97A:h9dcOMffvjWPlU07yEX/L8qOVZA","tlshash":"e232622bfc05de0aec66ad6d103eae3e50cc957bc5749c2ca6cccdd80651ab61bd2c81","first_seen":"2026-03-06T10:10:35.713257Z","last_seen":"2026-03-06T11:09:14.610302Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":48,"dns":19,"connect":1,"send":0,"wait":10,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/7af99b4fe779898e.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/chunks/7af99b4fe779898e.js HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 248624\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"7af99b4fe779898e.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"a01cc5a9fc38db610620a55b3775de21\"\r\nlast-modified: Tue, 03 Mar 2026 13:06:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/7af99b4fe779898e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::x5l9f-1772791806281-5d36189dfb9a\r\ncontent-length: 23614\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85404,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e8a56d4d89a50246b38ae41a252e653f","sha1":"8f03d29d93b28ebf10c3273209c5750cf9e7819c","sha256":"b63b6b7c8c8b75f7859f44b952075a63c33a623206642f7f7b51b115f07dd31a","sha512":"09e16b8f025924a2fe7811c05b89d40c2de7b52a61f3bb05580b105e5621fefef698c555d0d347ac4b93a98dfcf6bac3c1517bd9599bd672a807c30e0e03766b","ssdeep":"768:7mFYmHlSuyBKywJr8EU6KtsdDvVI4Bu51Bb1beAvrtmaP8apfY47q6F3PwNNPug9:Kb254FcLrDr0EUxuioyoyqTfqR","tlshash":"b983d6f936d0f8920bab45a6c07f0005f31c4d77245e78b4a3e5ddda316459ea0e2faa","first_seen":"2025-12-14T10:05:37.44573Z","last_seen":"2026-05-19T05:04:34.637982Z","times_seen":109,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/069c0a854c309979.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/chunks/069c0a854c309979.js HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 78545\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"069c0a854c309979.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"51b9d52419f507c9134c02aa02c51a31\"\r\nlast-modified: Thu, 05 Mar 2026 12:21:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/069c0a854c309979.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wg8pn-1772791806288-df5649807479\r\ncontent-length: 59367\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":214835,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33610)","md5":"73e3c0d2612eeec4efeea71107c113fe","sha1":"b0d28e8b48d13943a98aca39b4eb7aa5dea04b4d","sha256":"bf69bc1718eee243cfc3b6bd6c011e0ed1841e5168fa1cbee0aabf9069218141","sha512":"107ceeebb17dfc052ceab14865ef3ec2e724088d130cdd014b025de46fcaba4e51ef9b928a87d9ac8aebe1e0991c1387690ae8bf1cc1650b65fd29832b9638b2","ssdeep":"6144:XxPB9EMZf+KStQaaafXFCqcWNalxYMTPnyCfzZ8b9:3+KSiu","tlshash":"b9242bc573b6b03247d195a594361803f27ca61eb81d802cb76d5edf2a98948eb3bf31","first_seen":"2026-03-06T10:10:35.715454Z","last_seen":"2026-03-06T11:09:14.635665Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:16.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:16 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091d6dab232fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-6254-7a8b-ae83-ea454c981ec8\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=7Ar.sW5KBaEV_ndKicnUc_60kJ9AuH4pwpwEX8vCZSs-1772791816-1.0.1.1-obAx20n7QVd6JCTKMMvxPfOrNRyzMPdNkdtmZLCuKSQJQILth4HwbocGEjjq1okxGZrVBQ13KWRNLc.4QX3kgVqcsfUzS6KL1RWwKj.kCPY; path=/; expires=Fri, 06-Mar-26 10:40:16 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:22.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:23 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091fd5a1a32fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-encoding: gzip\r\ncontent-location: /sessions?id=eq.afb62aa5-e931-4614-a292-7a373de48f74\u0026select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-7a73-793a-be85-8566d8da0cc1\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 3\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=usjrIid_2VCVjJr7WFIwWkzTxt.7za_1ZOxrTifko2U-1772791823-1.0.1.1-gRaup1DBEQa6VbYD0Vl94TWlHNrU7W.uK44vK_tK2NZd0BshZMHuYFLZi6ZbSgPLua5PGk2hnKNBIhu0j.44tIBsW7hngkKYq173OCZSc28; path=/; expires=Fri, 06-Mar-26 10:40:23 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":175,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"f48e3baabea4f237d022df1d1a198c94","sha1":"d501439c2bcae7f0ce9f3ee21c55eaf2db2754f4","sha256":"3fee59619c456c0bcc8c5fb4d7070c3f23f1a2aab6074f3891a180d3ad4d8e52","sha512":"7bcb448163af8d8c31c93114d2646152c67052c099d7e34433291c82d9235cdf92a95d15e5a3adba387ec26cbe8b1f618226dd0877e100f87a8ac00af7a3978d","ssdeep":"","tlshash":"9ac08c1c20fd0c38465a052370083e284a2e4a83d84a5e3d2ecc8f4e81e41b8b3c1882","first_seen":"2026-03-06T10:10:35.705392Z","last_seen":"2026-03-17T12:36:58.31553Z","times_seen":6,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/api/favicon?t=1772791806757","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /api/favicon?t=1772791806757 HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_vercel/insights/view","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:07.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"POST /_vercel/insights/view HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\nContent-Type: application/json\r\nContent-Length: 131\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":131,"data":"{\"o\":\"https://822951-recovery.com/\",\"sv\":\"0.1.3\",\"sdkn\":\"@vercel/analytics/next\",\"sdkv\":\"1.3.1\",\"ts\":1772791807077,\"dp\":\"/\",\"r\":\"\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 06 Mar 2026 10:10:07 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 999\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::f6t76-1772791807085-384a640a1b8e\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-06-08T21:13:36.018444Z","times_seen":319272,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:08.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:08 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091a4ff7532fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-4325-7cf2-96e8-ee99a69d22a2\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=UCMC1QwPpryf2.vIi_XdyaS2MWqghcj7Ln8mfbCjkKA-1772791808-1.0.1.1-RRZu.j8.BumzOTNQaYJNhXfKzY3ri7qM1kf9Te2Wj5FnVNiM_UPIzT3WFaUITAuYYKnA6x99zwqf5FYPEHsTnn46NY8hMjOd.cfszdi1pL4; path=/; expires=Fri, 06-Mar-26 10:40:08 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:12.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:12 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091bddd8832fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-52b9-75ee-b01a-92f5c042137a\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=HtlFtAQtBnczxCt3.yUtFmpLJPzni7B1lz3dk7Bmgp4-1772791812-1.0.1.1-A2_mVXmfBhRAqUD_rhY4Rad1RtOMm0zg4Ujp61CPUtKH5YUpsqGaXDIPlswRWeR4PzDha_QU9R24fsDc1QBgvRbOzjPjlQAVWMFz_efVnns; path=/; expires=Fri, 06-Mar-26 10:40:12 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:14.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:14 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091ca6edb32fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-5a86-7e2d-8944-c3add5c8ea4d\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=W0MwtE74YL.mZkW6wj4Jt5TygrcDDLupdOpXKZRRnrc-1772791814-1.0.1.1-vpv1qO91lsdtN7CVaZDYfqaic3LxhgVCEIHx81kdT3BBb3Ofo1yUV3nUAgHVAIEHytc9p2TJ4t3Q.8S0q0LhJkQnPeyOJoBWt8ABu6lXC8o; path=/; expires=Fri, 06-Mar-26 10:40:14 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/x-component\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\nnext-action: 006f13b9e2f69030646f5e35fd7dc927edd2b42fdd\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-action-revalidated: [[],0,0]\r\nx-matched-path: /\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::f6t76-1772791806479-0c952c2dc6bf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"ac9a9fa884608f1c1d58095363547a95","sha1":"db7fedd406dcc0e0ab8a051ce2193026d229a4d8","sha256":"db7627686a4e2a8ba9b93b012a8897cb21b0b89cadcc65813316a019ad0eb507","sha512":"76448d710eb1ee1bbd6f94d20e63e754f528c85dfa3ef8443ddae9240ee8d3377a884846133f45b80958979e0ab285c7bd89bba68fbc45830d8eb27e2f17d803","ssdeep":"","tlshash":"1fa00260c929a269848b8c0118d75043c98ec15471dc6593ff857fb2511ea0462d5077","first_seen":"2026-03-06T10:10:35.717268Z","last_seen":"2026-03-06T11:09:14.637701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"zdbxbhqywgqrlnwddapn.supabase.co/realtime/v1/websocket?apikey=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\u0026vsn=2.0.0","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /realtime/v1/websocket?apikey=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\u0026vsn=2.0.0 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://822951-recovery.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 6YfFI5idVlsc7JNpd+Y5AA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 06 Mar 2026 10:10:07 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: LOqmXJJWvfCijG0dKK205h3i/2c=\r\nCF-Ray: 9d8091989f6fb28a-OSL\r\nCF-Cache-Status: DYNAMIC\r\nCache-Control: max-age=0, private, must-revalidate\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-3bb0-7e49-bdc1-1c7a2f8c9a4e\r\nSet-Cookie: __cf_bm=j7nlGxOtuo.UgYY0coIHwtN3LDfLJcSoK0j5tARIdfQ-1772791807-1.0.1.1-y8DhFw5VrITqs9wuu4aoT23AF4VlU8Czn90KFhhod9Ani2n8sUzlAH7cQpKFx4qAENNEjyEd6Z_VzBrzxagcKxzXIq7nA9Yr9NvPjem_Tn8; path=/; expires=Fri, 06-Mar-26 10:40:07 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":0,"dns":20,"connect":20,"send":0,"wait":332,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:14.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:14 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091ca8fc932fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-encoding: gzip\r\ncontent-location: /sessions?id=eq.afb62aa5-e931-4614-a292-7a373de48f74\u0026select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-5aac-7bfc-95d6-92aeef9acbe1\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 3\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=ydAOZvq9On7duxKjLgHNyNnWeRY8UXTBpeNDWA4zA5k-1772791814-1.0.1.1-NMj6n.M9xpdHjehWvTl1egAyknODq5hpiHwCeQxox_kE0DUadE1ppqVU4ZdIM.UHoTgRP4NyTTC5RztZQixRiQDpApv5TVDpbWNAM709Gr4; path=/; expires=Fri, 06-Mar-26 10:40:14 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":175,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"f48e3baabea4f237d022df1d1a198c94","sha1":"d501439c2bcae7f0ce9f3ee21c55eaf2db2754f4","sha256":"3fee59619c456c0bcc8c5fb4d7070c3f23f1a2aab6074f3891a180d3ad4d8e52","sha512":"7bcb448163af8d8c31c93114d2646152c67052c099d7e34433291c82d9235cdf92a95d15e5a3adba387ec26cbe8b1f618226dd0877e100f87a8ac00af7a3978d","ssdeep":"","tlshash":"9ac08c1c20fd0c38465a052370083e284a2e4a83d84a5e3d2ecc8f4e81e41b8b3c1882","first_seen":"2026-03-06T10:10:35.705392Z","last_seen":"2026-03-17T12:36:58.31553Z","times_seen":6,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:16.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:16 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091d6ead532fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-625f-7976-9357-381ded7045f7\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=zUbyO0a49RJD64xmq3Zzkyf2D342KLNlA2TSBno6T7o-1772791816-1.0.1.1-cEq.8lnSI3A.sB8YpHukI9gfHQO6qLrDeSE41NdKFLwRnY8bzRIlVFu15ZqTFBXo3JBkVH2BmDd1AIRYxdrRqFpdo20d2WWFyOVbmGLVx54; path=/; expires=Fri, 06-Mar-26 10:40:16 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:22.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:23 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\ncontent-length: 20\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091fd498932fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-location: /settings?key=eq.active_brand\u0026select=value\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-7a65-71c6-bcdd-97cb09f5f62b\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 2\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=sG0ijLrHTIf5Sy6yM5xaXzjo5W0_mWp9ZHfa676SfLc-1772791823-1.0.1.1-rLgSxoiBKxJZHL6KFZF2e2vkzQaNRVnp8FAzUFgHSzbAzqdo1scc7eUi5PXCHzYFVVfymyohqi1txmg26eGDxR_BWqLNkIroj1iZY66ejzE; path=/; expires=Fri, 06-Mar-26 10:40:23 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"7fd823320ee4a8b480a80ef8a70e0a92","sha1":"1bce408e971326dec050489cf0dd1495cf73a675","sha256":"413bac213a95b28f332e6ff689c8c3d5c417b4d5d7c73db2ad2096b4410d4a26","sha512":"97e9c8c4c3e32ed89df5b52722b9e2464f40df94d35dd14f1dd4de1673f989d89e56f8cf2ef831530a33c2441adbad2c7bb9a6440f84d5d5720207760db8a9f0","ssdeep":"","tlshash":"367000202008282a3000808020208002a000000030f000c300a882c02f00a002003080","first_seen":"2026-03-06T10:10:35.692308Z","last_seen":"2026-05-19T05:04:34.626683Z","times_seen":6,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/4eec666bb2ba1ba3.css","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/chunks/4eec666bb2ba1ba3.css HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2736\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"4eec666bb2ba1ba3.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"fc1e3ecfb7a521da08fe900a2e1b9a8b\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/4eec666bb2ba1ba3.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6sgkb-1772791806278-62a95b873114\r\ncontent-length: 26226\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157011,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2b08d0704d9c5e9d8be69ce5d548708f","sha1":"ac0079c2f73c6b154bbc86082d6fbace10252503","sha256":"6659869e6f6833c02564fb533fa748696f4fae80768b990336b9888541186b57","sha512":"978985876c06336f902232b31e15f3654b954f481f20dc881a57d0efd2b1fe2766c6ac227926668481ec8f56876b43b662065d3380161ead11f71065d967b8a7","ssdeep":"3072:X9hsS169Zu3kagv5a94gGWUsUWrfAgMno+WDAm+A9vnjA:thsS169Zu3kaf4gRUpWrfAgMno+WDAmY","tlshash":"6be3b4a0b139e53fbd27a8be13dcf89c91097081dd6943edfa25a22152c7bf26973504","first_seen":"2026-03-06T10:10:35.719873Z","last_seen":"2026-03-06T11:09:14.627347Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/294e24011b7e0011.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/chunks/294e24011b7e0011.js HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2734\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"294e24011b7e0011.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"00977ad6ea70a3088a7d0dada56e03e5\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/294e24011b7e0011.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hvlgp-1772791806287-59d1d21a7b3d\r\ncontent-length: 72611\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":332428,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"096a31632ceb47fb0c1fadb27906ccef","sha1":"58b210244c38ffb96e3a91ca2a5951cacd0b5601","sha256":"9b11da762d8df1a718bdee9883e90f460f2b444ecf6a93fe7f9b270b4f974f4b","sha512":"64191ed930354a2c695b0916d1d37405f36663225b5f65d1a3f9c60ea717a67e547f3d46551832add597a3011ddb8990bbcec3cb12ea8e285634c6d824442b55","ssdeep":"6144:OvpSH/6PMFLEIGnrNdF059bJ6t0nYkzZbJ6t02rQz5zwiqGhtVdKamAu6qRnmnzV:XH/6PMSIGrybJ6t0JbJ6t0RzwixhtVdX","tlshash":"ed641944b212bfbdf56b4598a46e910db12f5b98fa0f4874fabd382d26084c07b53bc5","first_seen":"2026-03-06T10:10:35.720963Z","last_seen":"2026-03-06T11:09:14.628616Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:08.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:09 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\ncontent-length: 20\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091a5183532fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-location: /settings?key=eq.active_brand\u0026select=value\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-4335-730e-8fda-7e3f17ae76ef\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 3\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=mPkyFTW.ud3YG8nrqlddgr5auy2Si_j9a.og4F1bMpA-1772791809-1.0.1.1-dY2XseG8c4hJiJgl9sxERUpSJgilKMeNIue5UIOmnqYlqMd5kBMbrRISjmgzp4j9JMLCbxBGUm.52FQ1WKXMPCWmcZ5yvFUj9kN_WEUNSXE; path=/; expires=Fri, 06-Mar-26 10:40:09 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"7fd823320ee4a8b480a80ef8a70e0a92","sha1":"1bce408e971326dec050489cf0dd1495cf73a675","sha256":"413bac213a95b28f332e6ff689c8c3d5c417b4d5d7c73db2ad2096b4410d4a26","sha512":"97e9c8c4c3e32ed89df5b52722b9e2464f40df94d35dd14f1dd4de1673f989d89e56f8cf2ef831530a33c2441adbad2c7bb9a6440f84d5d5720207760db8a9f0","ssdeep":"","tlshash":"367000202008282a3000808020208002a000000030f000c300a882c02f00a002003080","first_seen":"2026-03-06T10:10:35.692308Z","last_seen":"2026-05-19T05:04:34.626683Z","times_seen":6,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/73fc282fee4c4fe2.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/chunks/73fc282fee4c4fe2.js HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2735\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"73fc282fee4c4fe2.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"e9bf8abfa3c5f246c3e5441a7baf4874\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/73fc282fee4c4fe2.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4lmmv-1772791806279-1685213f8c55\r\ncontent-length: 13429\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41036,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41036), with no line terminators","md5":"90af8bef9f1b0cb96e1e42e7b8dd904f","sha1":"e8b1e3de25ecf488078ddc06ff8d21b13db6e4a7","sha256":"453431f6c9934da37624f5704008351303868b82a1d6f17ebbd58cfdb20500a6","sha512":"ee4b1276de42e8f42937c04366edf04d56771df454fb123fb447d5cfde6a0bd37d6fb3471624ae86e5b30987c4e4b27ed717821e8ce739a75bb82ae73af2ebfb","ssdeep":"768:OYRijlM8ycxb9Xl2hSBWqLu2GfKcozd+a9INR+xTd+JXRQAPSKB:voeCbvvoTJozVINMxTd+BRfPSKB","tlshash":"f603facd75a5b0910fb396b1802f401bb23e1937188d48a0d3a3dde9b8b94add237f59","first_seen":"2026-03-06T10:10:35.723691Z","last_seen":"2026-05-19T05:04:34.629806Z","times_seen":10,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:10.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:10 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\ncontent-length: 20\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091b19b7232fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-location: /settings?key=eq.active_brand\u0026select=value\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-4b03-73fe-b77c-ede00df3ce99\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 2\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=nwS5.KoNM8NofUr6JNjBS2BwWJ2wf7CFPAFGOum3JvE-1772791810-1.0.1.1-zlWwrS_NdrxyT88PI328jrfi3Ww0m1jciLFMxkY4sxs0EJdfsQfSmdIlVQIyn1027Ep1YeUAzeYo2i8epuMdEOEjTR8nDwp5GkOtPjdjXyU; path=/; expires=Fri, 06-Mar-26 10:40:10 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"7fd823320ee4a8b480a80ef8a70e0a92","sha1":"1bce408e971326dec050489cf0dd1495cf73a675","sha256":"413bac213a95b28f332e6ff689c8c3d5c417b4d5d7c73db2ad2096b4410d4a26","sha512":"97e9c8c4c3e32ed89df5b52722b9e2464f40df94d35dd14f1dd4de1673f989d89e56f8cf2ef831530a33c2441adbad2c7bb9a6440f84d5d5720207760db8a9f0","ssdeep":"","tlshash":"367000202008282a3000808020208002a000000030f000c300a882c02f00a002003080","first_seen":"2026-03-06T10:10:35.692308Z","last_seen":"2026-05-19T05:04:34.626683Z","times_seen":6,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/340820ca5a1417a0.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/chunks/340820ca5a1417a0.js HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2735\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"340820ca5a1417a0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"809b84d890ca2f7f6579adeb16226b9f\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/340820ca5a1417a0.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wg8pn-1772791806280-a3d38e8e6a2c\r\ncontent-length: 6162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":21124,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21124), with no line terminators","md5":"39140bde28e747cc18c2d96ea8f962d0","sha1":"60b3642cf55b9ce1c23dd8f680cd87920e313d59","sha256":"74e7ddbc780d1a41db1c6ef099b76eff62d3e3f287c9d6967969cacd25c683bd","sha512":"7fd12f2683b75acd8a9751d2a5b6ba01a79133c85684447f91c71c8ca7e956b218c07f160b317dcf4cb788f2f57bffe697db3d6491bba2f9b35cb46f502d023e","ssdeep":"192:DyGTMk5dQfzDwP9+HN6fT1arO+1pgwh1ebDPSA7EGpErj3+yPCwid/iXYfaIwX5q:DydxbdYwrOUpybT4LuyPCwiQrIwX8","tlshash":"309295a571d5f9c1069b80e8c83b4016f32e0e7610ad74d4e7e1cce679a095ed1b2fba","first_seen":"2026-02-11T15:34:34.013898Z","last_seen":"2026-05-19T08:46:02.83435Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/favicon.ico","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:12.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:13 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091bea9b132fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-encoding: gzip\r\ncontent-location: /sessions?id=eq.afb62aa5-e931-4614-a292-7a373de48f74\u0026select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-5339-7289-9008-d9c378cb7d2c\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 2\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=6WEe2wkL5ZrEhkI648QviXMdLz3DbLrfWD3Cx1qIqrU-1772791813-1.0.1.1-CRHvj1Mlu4tVm2AuEKJQFfd0SgGpYLM904JWNgVHbSALcDI.nLoLZwEPYIJ.K4N0zp.6DVsSUhykhSxl3AZvnmaqg6NLfkC5Ksh.t..FVmM; path=/; expires=Fri, 06-Mar-26 10:40:13 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"f48e3baabea4f237d022df1d1a198c94","sha1":"d501439c2bcae7f0ce9f3ee21c55eaf2db2754f4","sha256":"3fee59619c456c0bcc8c5fb4d7070c3f23f1a2aab6074f3891a180d3ad4d8e52","sha512":"7bcb448163af8d8c31c93114d2646152c67052c099d7e34433291c82d9235cdf92a95d15e5a3adba387ec26cbe8b1f618226dd0877e100f87a8ac00af7a3978d","ssdeep":"","tlshash":"9ac08c1c20fd0c38465a052370083e284a2e4a83d84a5e3d2ecc8f4e81e41b8b3c1882","first_seen":"2026-03-06T10:10:35.705392Z","last_seen":"2026-03-17T12:36:58.31553Z","times_seen":6,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:14.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:14 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091ca5eaf32fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-5a86-7835-bf12-65cc8ae7aabe\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=gc2AwxcyXmxJ5wYl95v5.SEywlU75i8rOzQ.d3AoE.g-1772791814-1.0.1.1-_mDHCy26o6mR6Thm3i69xPVSnI0koOJ_iR5i7XBcJaMvs__P_eBcoRbBHnSfn7VqWyGntVfYQ4_HjLgRm9xVfMhfRHzMgWdYwfRIRjAjVXQ; path=/; expires=Fri, 06-Mar-26 10:40:14 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:24.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:24 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8092090e9532fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-encoding: gzip\r\ncontent-location: /sessions?id=eq.afb62aa5-e931-4614-a292-7a373de48f74\u0026select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-81b8-7dc2-a28f-b80728b679f4\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 5\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=HNdFL6Akqayed3vYf14pLrxbdkAb61hUj7LcWuNxKDw-1772791824-1.0.1.1-9he7805uDRxSXG89ERthPgqTkLJKvE3GnOToJzldjZ4KAiTt0MtHjAf2LV2LoGVFhUNXPi1p16yH4IFT25kcc50jiTQNxc2.tTZSSc6Z7Ew; path=/; expires=Fri, 06-Mar-26 10:40:24 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":175,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"f48e3baabea4f237d022df1d1a198c94","sha1":"d501439c2bcae7f0ce9f3ee21c55eaf2db2754f4","sha256":"3fee59619c456c0bcc8c5fb4d7070c3f23f1a2aab6074f3891a180d3ad4d8e52","sha512":"7bcb448163af8d8c31c93114d2646152c67052c099d7e34433291c82d9235cdf92a95d15e5a3adba387ec26cbe8b1f618226dd0877e100f87a8ac00af7a3978d","ssdeep":"","tlshash":"9ac08c1c20fd0c38465a052370083e284a2e4a83d84a5e3d2ecc8f4e81e41b8b3c1882","first_seen":"2026-03-06T10:10:35.705392Z","last_seen":"2026-03-17T12:36:58.31553Z","times_seen":6,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/218c272dd29e1284.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/chunks/218c272dd29e1284.js HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2735\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"218c272dd29e1284.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"450a2c90482cc5eec633f8b817e4e19e\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/218c272dd29e1284.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::98q78-1772791806279-3be62150b79c\r\ncontent-length: 1275\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3324,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3324), with no line terminators","md5":"0cf77ed69cce5e0d9e42a72ed9fc2348","sha1":"2edbf658680ae7c0b0cfdbf679f2ca15a6dd7888","sha256":"94048db49c3b218fb45b9fb936324029adcb95d662fce398f9149c1996a4d345","sha512":"e5c51e6c99f9ffe97574850f3d181eb01dc0d5c2cdb716368ad2bc5310add3ae9052af6e61c97d823b3559aad43033fc9458591d3e5f775dec0564a2097060f3","ssdeep":"","tlshash":"4a61536572d9f9c1114a90d88c3b5006f2391e3666bd70e0b799cdf939d408e92f2f9a","first_seen":"2026-03-06T10:10:35.726798Z","last_seen":"2026-05-19T05:04:34.627762Z","times_seen":10,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/3337476739009024.js","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/chunks/3337476739009024.js HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2734\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3337476739009024.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"66763d775e3e4700a85242abef26f133\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/3337476739009024.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wg8pn-1772791806286-d4d8e14a296c\r\ncontent-length: 281\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":281,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"66763d775e3e4700a85242abef26f133","sha1":"72192a20d5a1bc2bdc13fe81bae8de31c8d99452","sha256":"39f55d14657527fbacb855f9abc9ebb3cd2e031493d31c7098611148a9661718","sha512":"0991ea9601575ccdbcdd2ef730aa7297c310be34291396a7b097df0ecfb43741f55590bda7aaaea4cef8e53c38d0751f94fde6ea03a7fff50aae78e528733de2","ssdeep":"","tlshash":"5dd02b742290f9d44086a0cc8836424bf569287262fe3495e7ae8cb16174f0c51e1955","first_seen":"2025-12-14T10:05:37.449663Z","last_seen":"2026-06-07T05:12:51.611026Z","times_seen":176,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:16.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:17 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\ncontent-length: 20\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091d71bd132fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-location: /settings?key=eq.active_brand\u0026select=value\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-6278-75a0-9ca4-53343312ffe1\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 1\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=qYaBLoV41KNHyMXIIAaeYkCkYZ.zxKwivmkeVwu.gzk-1772791817-1.0.1.1-mDMEbEQy1sPki0hqKQcAHjsoh308NcBHzedGlLz7GFhLff8HFOEU5Bq6bxiRm..oZTod3zOn4NirMzCYRqsmrGoC4mCT_TRpr9.EcDg1pdY; path=/; expires=Fri, 06-Mar-26 10:40:17 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"7fd823320ee4a8b480a80ef8a70e0a92","sha1":"1bce408e971326dec050489cf0dd1495cf73a675","sha256":"413bac213a95b28f332e6ff689c8c3d5c417b4d5d7c73db2ad2096b4410d4a26","sha512":"97e9c8c4c3e32ed89df5b52722b9e2464f40df94d35dd14f1dd4de1673f989d89e56f8cf2ef831530a33c2441adbad2c7bb9a6440f84d5d5720207760db8a9f0","ssdeep":"","tlshash":"367000202008282a3000808020208002a000000030f000c300a882c02f00a002003080","first_seen":"2026-03-06T10:10:35.692308Z","last_seen":"2026-05-19T05:04:34.626683Z","times_seen":6,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:18.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:18 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091e35ff332fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-6a27-7754-8306-70983275cbc1\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=8Djnt8CEbK7SVMLul6m3Eqn_XqR6SbK95PfE1gJEE.w-1772791818-1.0.1.1-4mIiuGUs9MpYukMuUHkauk8ouaRupzvfvQmLPEH.Jn9BNzp1zvv7aAEkSeQAq5apiQfnfIMPYPgdT.i22LB1JxWiChzBC2JAzW93jUHeG88; path=/; expires=Fri, 06-Mar-26 10:40:18 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:18.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:18 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091e3786032fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-encoding: gzip\r\ncontent-location: /sessions?id=eq.afb62aa5-e931-4614-a292-7a373de48f74\u0026select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-6a38-7ab2-bb48-fc8e5624681b\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 3\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=tFFGpYVfspeIHd7uYYBL10NvnWtX.rfhR1.a7HJjfQ8-1772791818-1.0.1.1-UqvbJGeyDKYd5W_nicLkgpzEphnCgcswMqjC_xQNGnAbRifWikXAzS1C5C_jVZZfseTyuzRWa3.GFma.LAJV1fTzwYTdL_A073ZmqfO7bYw; path=/; expires=Fri, 06-Mar-26 10:40:18 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":175,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"f48e3baabea4f237d022df1d1a198c94","sha1":"d501439c2bcae7f0ce9f3ee21c55eaf2db2754f4","sha256":"3fee59619c456c0bcc8c5fb4d7070c3f23f1a2aab6074f3891a180d3ad4d8e52","sha512":"7bcb448163af8d8c31c93114d2646152c67052c099d7e34433291c82d9235cdf92a95d15e5a3adba387ec26cbe8b1f618226dd0877e100f87a8ac00af7a3978d","ssdeep":"","tlshash":"9ac08c1c20fd0c38465a052370083e284a2e4a83d84a5e3d2ecc8f4e81e41b8b3c1882","first_seen":"2026-03-06T10:10:35.705392Z","last_seen":"2026-03-17T12:36:58.31553Z","times_seen":6,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:08.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:09 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091a5182032fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-encoding: gzip\r\ncontent-location: /sessions?id=eq.afb62aa5-e931-4614-a292-7a373de48f74\u0026select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-4334-757f-a1f7-788eeaa46c54\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 2\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=FHrsX_hA1GVws5NukG5zaFP3.S6Lyx2APx1bY..rWTU-1772791809-1.0.1.1-LuTgh5RC75SzjNuPh2KOUUA.J56gSm2Suw_9I0bjjZ1ITPcgx61SqGof1gXKfLdyvHsv2kBkg38VYCeJongTbeeGRJfIkj5ygmcib5Zkw9Y; path=/; expires=Fri, 06-Mar-26 10:40:09 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":175,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"f48e3baabea4f237d022df1d1a198c94","sha1":"d501439c2bcae7f0ce9f3ee21c55eaf2db2754f4","sha256":"3fee59619c456c0bcc8c5fb4d7070c3f23f1a2aab6074f3891a180d3ad4d8e52","sha512":"7bcb448163af8d8c31c93114d2646152c67052c099d7e34433291c82d9235cdf92a95d15e5a3adba387ec26cbe8b1f618226dd0877e100f87a8ac00af7a3978d","ssdeep":"","tlshash":"9ac08c1c20fd0c38465a052370083e284a2e4a83d84a5e3d2ecc8f4e81e41b8b3c1882","first_seen":"2026-03-06T10:10:35.705392Z","last_seen":"2026-03-17T12:36:58.31553Z","times_seen":6,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:10.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:10 GMT\r\ncontent-length: 0\r\ncf-ray: 9d8091b15a6c32fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-4ae9-7aa6-9dda-ac7f65f6eb9c\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=K9rsTkTwh9tAPkRQUQ3pjrlCiplkzBq96VLfRI31stw-1772791810-1.0.1.1-OpxgvSnrICf4A5eK7huDLd86LyTjDaTBMIs3C1Jhta9XkMqJBtHTWket1870U2CPIXfEdVzcRqR1JpSjTz_S8fqoWQRKO97F14oa0Pw24lU; path=/; expires=Fri, 06-Mar-26 10:40:10 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/settings?select=value\u0026key=eq.active_brand","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:12.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/settings?select=value\u0026key=eq.active_brand HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:13 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\ncontent-length: 20\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091be3f5f32fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-location: /settings?key=eq.active_brand\u0026select=value\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-5300-7f7e-ae24-03f8c907ef38\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 1\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=OJ2Blou_eBI4Ml6VIhajZLqfwr0ETnd0DmE2nNfQZ6A-1772791813-1.0.1.1-RjozX2jyvEePMXz9MHJKVEo_d9rr.FtS94wlPCycrG26Vn93aStrnHpt4IJfk155W1FWS5Ghp2NldjMMGV1Ukip7Odm5R9ZMiPcQyNrUudc; path=/; expires=Fri, 06-Mar-26 10:40:13 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"7fd823320ee4a8b480a80ef8a70e0a92","sha1":"1bce408e971326dec050489cf0dd1495cf73a675","sha256":"413bac213a95b28f332e6ff689c8c3d5c417b4d5d7c73db2ad2096b4410d4a26","sha512":"97e9c8c4c3e32ed89df5b52722b9e2464f40df94d35dd14f1dd4de1673f989d89e56f8cf2ef831530a33c2441adbad2c7bb9a6440f84d5d5720207760db8a9f0","ssdeep":"","tlshash":"367000202008282a3000808020208002a000000030f000c300a882c02f00a002003080","first_seen":"2026-03-06T10:10:35.692308Z","last_seen":"2026-05-19T05:04:34.626683Z","times_seen":6,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:24.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"OPTIONS /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://822951-recovery.com/\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:24 GMT\r\ncontent-length: 0\r\ncf-ray: 9d809208dd8332fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-819b-7230-b183-0196915f4c3a\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=NsGU5d2ZbvJBCUKhGRT.VX6XBUvjOhikB4sa7Nvk1uw-1772791824-1.0.1.1-LytvErxA6RgdJGiVzX_3zllAvydC8ouR19Gac.b_2mstdIBQ4PBLCaMo83SsvzXapYpqObNG4VwNOO1qtZRMPvgya0w7FJ3clixwcsizS7Y; path=/; expires=Fri, 06-Mar-26 10:40:24 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdbxbhqywgqrlnwddapn.supabase.co/rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74","fqdn":"zdbxbhqywgqrlnwddapn.supabase.co","domain":"zdbxbhqywgqrlnwddapn.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:16.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 06:43:00 GMT","end":"Sun, 31 May 2026 07:42:47 GMT"},"fingerprint":{"sha1":"9E:9E:40:F8:56:B5:7F:B2:5C:52:C4:07:26:47:4E:69:AD:77:F0:96","sha256":"39:8B:CC:E2:D9:95:CB:23:CB:09:2A:93:7B:5B:58:BD:95:B4:08:A4:5F:BF:89:AB:7B:B1:14:03:47:89:AE:7D"}}},"request":{"raw":"GET /rest/v1/sessions?select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\u0026id=eq.afb62aa5-e931-4614-a292-7a373de48f74 HTTP/1.1\r\nHost: zdbxbhqywgqrlnwddapn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.pgrst.object+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://822951-recovery.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InpkYnhiaHF5d2dxcmxud2RkYXBuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzA0MjIwNzEsImV4cCI6MjA4NTk5ODA3MX0.-Q0hGWVwhe09ppezPb_AQlDTuoNYWlPtW3ssGQG3CWI\r\nx-client-info: supabase-ssr/0.8.0 createBrowserClient\r\nOrigin: https://822951-recovery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:10:17 GMT\r\ncontent-type: application/vnd.pgrst.object+json; charset=utf-8\r\nserver: cloudflare\r\ncontent-range: 0-0/*\r\ncf-ray: 9d8091d70b9d32fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://822951-recovery.com\r\ncontent-encoding: gzip\r\ncontent-location: /sessions?id=eq.afb62aa5-e931-4614-a292-7a373de48f74\u0026select=current_step%2Cstatus%2Cadmin_message%2Credirect_url%2Cphone_last4%2Cemail_for_code%2Csecurity_location%2Csecurity_phone_last4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: zdbxbhqywgqrlnwddapn\r\nsb-request-id: 019cc2a0-6276-70c5-b410-6197ed6e38e7\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 3\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=WSeY2nUbywlEgVFCwBhZLPhgWBEDSea8A8Qc_Yzh_qA-1772791817-1.0.1.1-82c4.WDGPM01cRhQoiE5PeGJaUZuCyGHZszSL855H0QxtSRKNL0l3X0U0RFd6gh6BxBFyf6I7XTBcJftTlQVmbfsFmtH7dX1Br6GxJDH9qw; path=/; expires=Fri, 06-Mar-26 10:40:17 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175,"size_decoded":0,"mime_type":"application/vnd.pgrst.object+json; charset=utf-8","magic":"JSON text data","md5":"f48e3baabea4f237d022df1d1a198c94","sha1":"d501439c2bcae7f0ce9f3ee21c55eaf2db2754f4","sha256":"3fee59619c456c0bcc8c5fb4d7070c3f23f1a2aab6074f3891a180d3ad4d8e52","sha512":"7bcb448163af8d8c31c93114d2646152c67052c099d7e34433291c82d9235cdf92a95d15e5a3adba387ec26cbe8b1f618226dd0877e100f87a8ac00af7a3978d","ssdeep":"","tlshash":"9ac08c1c20fd0c38465a052370083e284a2e4a83d84a5e3d2ecc8f4e81e41b8b3c1882","first_seen":"2026-03-06T10:10:35.705392Z","last_seen":"2026-03-17T12:36:58.31553Z","times_seen":6,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"822951-recovery.com/_next/static/chunks/8a80e7184ad3a13f.css","fqdn":"822951-recovery.com","domain":"822951-recovery.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://822951-recovery.com/","date":"2026-03-06T10:10:06.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.822951-recovery.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 11:51:57 GMT","end":"Mon, 01 Jun 2026 11:51:56 GMT"},"fingerprint":{"sha1":"6B:3D:2C:51:1D:48:DF:70:B4:9C:F8:4C:64:07:78:79:D7:63:BE:4C","sha256":"CF:A0:43:86:45:09:FC:40:58:96:39:A1:1A:2D:7E:CC:20:E1:46:63:8E:6B:C4:CE:79:01:63:D1:43:B6:C8:CE"}}},"request":{"raw":"GET /_next/static/chunks/8a80e7184ad3a13f.css HTTP/1.1\r\nHost: 822951-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://822951-recovery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 78546\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"8a80e7184ad3a13f.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:10:06 GMT\r\netag: \"0261e7dd5c820bdae6309b3d4bd8971d\"\r\nlast-modified: Thu, 05 Mar 2026 12:20:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/8a80e7184ad3a13f.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c7jw9-1772791806278-12a30f2a3f92\r\ncontent-length: 663\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2200,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"CSV ASCII text","md5":"125447d233c37760bd6802d783ee2c0b","sha1":"aaf3829e337597ea5dc51c78e70f8b89037ab233","sha256":"a886fc5ec3ebbafcd8960b7a6610d99dc905d12d46b6b3cc8d3f04752232b11b","sha512":"d9f241981ba141eb43d3a34b9dc38b90292e7a3103780595d3b400a8a3efe0a6df3c24c3241a368919401c7ed98a33c6dda7afcef18ee612393fe19fad83cc67","ssdeep":"","tlshash":"c441c234442ea409d6e78c6330cf3ea3241564254bee2663993d1eb84eeb47f13e1724","first_seen":"2025-10-27T14:52:15.049814Z","last_seen":"2026-06-07T05:12:51.632437Z","times_seen":377,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"822951-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}