{"report_id":"526fd472-4718-42c8-b8c9-798340e0428e","version":6,"status":"done","tags":[],"date":"2026-02-27T06:41:54Z","url":{"schema":"http","addr":"xwallet.global","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"172.67.205.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xwallet.global/","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"title":"X Wallet","dom":{"size":72778,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45388)","md5":"e69dc2f6887a4f4fa096165dcbd69328","sha1":"d49b2385e345346c7b46fdb911b587024f739d88","sha256":"519530b2ccdd6c03e29762480307f9a341f465c114a2d51cea70fb7f829b45f2","sha512":"f325e849e07663e6784e7537d8926309db00f6698e4adfee35369667a93b3810dede1f82492cebebbb16800ae55d51abc484f24196f1a95736d483d205301018","ssdeep":"1536:DXx/c64Jysq7vnCUgYVrltvlCy6PHjQ97yDth6ymWGRcXqlff6aSVAkHbC1WWUb5:DpCiRcXqRO","tlshash":"0863a5283244163da82b87a5f6d0a73cd07de7c4e6738c5ef3ac00a75bc6d94692b6d4","dom_hash":"domhashfc584500c89a3b182711cca333c17c54","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xwallet.global","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"172.67.205.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-03T06:41:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-27T06:41:33Z","timestamp":1772174493,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":39250,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2026-02-27T06:41:33.297019+0000\",\"flow_id\":1724589300084244,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.34\",\"src_port\":39250,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"tpzxygnpdjctomganeqr.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-02-27T06:41:33.290324+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-27T06:41:33Z","timestamp":1772174493,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":39252,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2026-02-27T06:41:33.299811+0000\",\"flow_id\":2189205977263869,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.34\",\"src_port\":39252,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"tpzxygnpdjctomganeqr.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3441,\"start\":\"2026-02-27T06:41:33.290557+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xwallet.global","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-26T07:08:31.936209Z","last_seen":"2026-02-26T07:08:31.93621Z","alert_count":22,"request_count":22,"received_data":1613994,"sent_data":9613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tpzxygnpdjctomganeqr.supabase.co","ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-11","domain_rank":0,"first_seen":"2026-01-16T14:26:02.230359Z","last_seen":"2026-02-26T07:08:32.495842Z","alert_count":0,"request_count":14,"received_data":15787,"sent_data":13279,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xwallet.global/assets/index-B0k4EELB.js","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c64b32bc50f2d898290ba3a53ad03aae","sha1":"5816cf890733e9bac73caf5c2f2d70d692756de4","sha256":"fc5d1adaec6c164af390da22040b811f8225b9c876aa855c3dfff071b6bb0465","sha512":"b7ea2d7d7df93e9ebf4de3a78dd0f72f32be60874978f4bc3bd29254018bdf9f92f7c3f8c49462258aecb9854e40333fd7d3b75509e7cbfcad7b355cac669007","ssdeep":"24576:UVgDW4xsKWczy9CBUmx2Bd3E0bn9J6lQD:UVgDW4xsKpz2CBUmx2Bd3Rbn9J6+D","tlshash":"e0457d44b151bebdaab709e5a47f8015713e1e44f91f88e0f07c587a2a64106ba37fec","size":1210769,"data":"","first_seen":"2026-02-26T22:00:25.044908Z","last_seen":"2026-02-27T06:41:59.99514Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xwallet.global/favicon.ico","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:33 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 21:44:59 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BVwd2Dgo6vu1SRimYQTdX5Ft4fJUQI6QPl1d2FC8IK06XRtVTq251Iq4m8%2BFc5Spdo4vYuZYYY3bW6oU54Qya7oOwN3N67qD022jWp5\"}]}\r\netag: W/\"69a0bedb-3c2e\"\r\ncontent-encoding: br\r\ncf-ray: 9d45b278bdef8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"532f82ed03b58777ada242c83b9aa35e","sha1":"e64f6fc4d9f812146f0ba8fd94e338494472fc7a","sha256":"a11cc18bbbdbce3a95f332edd9b39820321915ede69abd0cc5695789b4562bbd","sha512":"33980d7d0537699b23e5fbcbfa93d95294bad8de66c7bb6898277531c2419de8d7683b67e0cdde8b9fca7f34257019042bbb1f81ca6f6c61cc418fb0dfafb959","ssdeep":"96:/lmWXeLotQHKq/VedE60U3oD1dYCPj7Si:YW69HRK0oqHJ","tlshash":"3362530a67f31d25c540923d9f62c3311322dc8d41268b0b57e49da37fcfb9b2c165a8","first_seen":"2026-01-16T14:26:06.978518Z","last_seen":"2026-03-19T00:03:44.267265Z","times_seen":29,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tpzxygnpdjctomganeqr.supabase.co/rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"tpzxygnpdjctomganeqr.supabase.co","domain":"tpzxygnpdjctomganeqr.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:39.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"OPTIONS /rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: tpzxygnpdjctomganeqr.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: apikey,authorization,content-type,x-user-id\r\nReferer: https://xwallet.global/\r\nOrigin: https://xwallet.global\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:39 GMT\r\ncontent-length: 0\r\ncf-ray: 9d45b29c3a878deb-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: apikey,authorization,content-type,x-user-id\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: tpzxygnpdjctomganeqr\r\nsb-request-id: 019c9dd4-ddac-7680-a5b8-e241ae11bc62\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=LRVgYHgyomfLPezzc2cuZGsRFAoOHqvUR_VRBsuCEUA-1772174499-1.0.1.1-SgtVNC5xKI92KXQnyPEspgxReIfpSlGoElhqohqXM.j5DYUN5izUkXTumEj8tUEMd0UBmHfXl2UzzCOfRQFDtZg2PP3Y6ECeZ1APWKGXanE; path=/; expires=Fri, 27-Feb-26 07:11:39 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tpzxygnpdjctomganeqr.supabase.co/rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"tpzxygnpdjctomganeqr.supabase.co","domain":"tpzxygnpdjctomganeqr.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:45.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"GET /rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: tpzxygnpdjctomganeqr.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xwallet.global/\r\nContent-Type: application/json\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InRwenh5Z25wZGpjdG9tZ2FuZXFyIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjgxMzA1MjEsImV4cCI6MjA4MzcwNjUyMX0.tdpvbXQ1rQzIpjKkQvkTbaK6ITUGMJyKo9N4TTxQEZE\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InRwenh5Z25wZGpjdG9tZ2FuZXFyIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjgxMzA1MjEsImV4cCI6MjA4MzcwNjUyMX0.tdpvbXQ1rQzIpjKkQvkTbaK6ITUGMJyKo9N4TTxQEZE\r\nx-user-id: anon_46b05870-2d6d-45ca-8416-d004a27019e2\r\nOrigin: https://xwallet.global\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\ncontent-range: */*\r\ncf-ray: 9d45b2c1df598deb-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://xwallet.global\r\ncontent-location: /chat_conversations?limit=1\u0026order=created_at.desc\u0026select=id%2Cstatus\u0026status=in.%28active%2Cwaiting_manager%2Cwith_manager%29\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: tpzxygnpdjctomganeqr\r\nsb-request-id: 019c9dd4-f52e-71cb-b94e-211785a82b02\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 1\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=GCnz_M73WtYhyoLcr.XtenRXbmzz_0xwrXFFSN.E.LI-1772174505-1.0.1.1-LVYvJ0uMZpnO0OH8Nva5HV_3gXuHZ33Q1AlfJbFFLcRuILl0x5EjI4NEPDoo5TsqxaOQO3PnL2LFF_gunz7xQCIvizYazh13oEeHr7i9Bmk; path=/; expires=Fri, 27-Feb-26 07:11:45 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-05-02T07:31:01.039332Z","times_seen":255992,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/jp.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /jp.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/jp.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /jp.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:33 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 21:44:59 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69a0bedb-7b2f\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9Du10v5R9Dtz8gibd5acd%2BsyWMUIRL0OfpO6GGfmCO1EqISNHJL4XCWoMj8Y1iDPInNDvr1HNd%2FTd6s4nzoNYoBtHUAMc85LKE1mEaM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45b276bcd08be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3000 x 2000, 8-bit colormap, non-interlaced","md5":"4f7aabdfaf998d0db88a9b7757566ba3","sha1":"4341e9001bae43347d2e491172d63ddc7f5c4019","sha256":"342e5af699d8231387fd3e8b5f7248ca533d5445dc6162ae8643a35750853e7f","sha512":"71f6ffa6c14202453b8bcdec8e20daad48a20bf1062568c52bd1f43c64c07c0655b266370c73f9d5c07648fb2e588f2c17e3d8ee98f7b3e103e0f49d5fdbec5d","ssdeep":"384:ZOdtQcgYxndQ8q2fUJNBLEepfLpRrev7XhykHROOY47llboK7qT9BepqBCRvXPIv:ZsaGhqd/BLEYpRr0jx8OY4qT9ls3m6I","tlshash":"9ee2e17791b711d5ee7e47b8eae920c071a9850660fc75ca03e327a63dcc2cd431da65","first_seen":"2024-08-19T21:53:44.428584Z","last_seen":"2026-04-22T12:47:33.993073Z","times_seen":40,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tpzxygnpdjctomganeqr.supabase.co/rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"tpzxygnpdjctomganeqr.supabase.co","domain":"tpzxygnpdjctomganeqr.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"OPTIONS /rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: tpzxygnpdjctomganeqr.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: apikey,authorization,content-type,x-user-id\r\nReferer: https://xwallet.global/\r\nOrigin: https://xwallet.global\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:33 GMT\r\ncontent-length: 0\r\ncf-ray: 9d45b2773f0235a6-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: apikey,authorization,content-type,x-user-id\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: tpzxygnpdjctomganeqr\r\nsb-request-id: 019c9dd4-c68b-7689-b46b-d6b2822465df\r\nset-cookie: __cf_bm=SIKVExxwxJKGtSk7L6XqH6ozo9nBkO5EL_tdfc.ewNs-1772174493-1.0.1.1-djcWcv3tiPnjerlTFx5ytbTiaZTvJehKNcEICFsDwfQrjcvThOUewPTmRwGstNvOHnZm3EQyS9i4EzJ_x8M7Oe2BD_zMcWencRbrgZ3byN4; path=/; expires=Fri, 27-Feb-26 07:11:33 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":53,"dns":35,"connect":1,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tpzxygnpdjctomganeqr.supabase.co/rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"tpzxygnpdjctomganeqr.supabase.co","domain":"tpzxygnpdjctomganeqr.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:39.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"GET /rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: tpzxygnpdjctomganeqr.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xwallet.global/\r\nContent-Type: application/json\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InRwenh5Z25wZGpjdG9tZ2FuZXFyIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjgxMzA1MjEsImV4cCI6MjA4MzcwNjUyMX0.tdpvbXQ1rQzIpjKkQvkTbaK6ITUGMJyKo9N4TTxQEZE\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InRwenh5Z25wZGpjdG9tZ2FuZXFyIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjgxMzA1MjEsImV4cCI6MjA4MzcwNjUyMX0.tdpvbXQ1rQzIpjKkQvkTbaK6ITUGMJyKo9N4TTxQEZE\r\nx-user-id: anon_46b05870-2d6d-45ca-8416-d004a27019e2\r\nOrigin: https://xwallet.global\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\ncontent-range: */*\r\ncf-ray: 9d45b29c5b4c8deb-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://xwallet.global\r\ncontent-location: /chat_conversations?limit=1\u0026order=created_at.desc\u0026select=id%2Cstatus\u0026status=in.%28active%2Cwaiting_manager%2Cwith_manager%29\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: tpzxygnpdjctomganeqr\r\nsb-request-id: 019c9dd4-ddbf-78f4-9b51-bbefe545fe35\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 2\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=fllzXBAuGzzJVLmS1K76fPRrSlXDCUpWsGCeBhPUBd0-1772174499-1.0.1.1-fWK8SX4NIYWLiWfuhibCzhQ0iXG7OiiQjLTlCjFt1cIaK..aNGh_kS5fLgx3Unr_4kMdVOFQ9wljpYlAkBjam99ivUwBxnQjTlyPBPvh83g; path=/; expires=Fri, 27-Feb-26 07:11:39 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-05-02T07:31:01.039332Z","times_seen":255992,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tpzxygnpdjctomganeqr.supabase.co/rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"tpzxygnpdjctomganeqr.supabase.co","domain":"tpzxygnpdjctomganeqr.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:45.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"OPTIONS /rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: tpzxygnpdjctomganeqr.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: apikey,authorization,content-type,x-user-id\r\nReferer: https://xwallet.global/\r\nOrigin: https://xwallet.global\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:45 GMT\r\ncontent-length: 0\r\ncf-ray: 9d45b2c1bed48deb-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: apikey,authorization,content-type,x-user-id\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: tpzxygnpdjctomganeqr\r\nsb-request-id: 019c9dd4-f51f-7fb8-bf68-4c15b207a513\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=KcM0QA1GVFrJ6rhVTmWPLutpNh5oH93aZ6TOC8CrvPw-1772174505-1.0.1.1-MMUqpz1WWX6GiqNDzMSyTUENl3SaMEOT.iju3C4Sv4vdyVyb06PNsuMVdCL58X5xdnWsDfQPYeRSlBS0p4T5N1gu4X6bpZpDa6yQ54JsxUc; path=/; expires=Fri, 27-Feb-26 07:11:45 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tpzxygnpdjctomganeqr.supabase.co/rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"tpzxygnpdjctomganeqr.supabase.co","domain":"tpzxygnpdjctomganeqr.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:48.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"GET /rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: tpzxygnpdjctomganeqr.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xwallet.global/\r\nContent-Type: application/json\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InRwenh5Z25wZGpjdG9tZ2FuZXFyIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjgxMzA1MjEsImV4cCI6MjA4MzcwNjUyMX0.tdpvbXQ1rQzIpjKkQvkTbaK6ITUGMJyKo9N4TTxQEZE\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InRwenh5Z25wZGpjdG9tZ2FuZXFyIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjgxMzA1MjEsImV4cCI6MjA4MzcwNjUyMX0.tdpvbXQ1rQzIpjKkQvkTbaK6ITUGMJyKo9N4TTxQEZE\r\nx-user-id: anon_46b05870-2d6d-45ca-8416-d004a27019e2\r\nOrigin: https://xwallet.global\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\ncontent-range: */*\r\ncf-ray: 9d45b2d4ae108deb-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://xwallet.global\r\ncontent-location: /chat_conversations?limit=1\u0026order=created_at.desc\u0026select=id%2Cstatus\u0026status=in.%28active%2Cwaiting_manager%2Cwith_manager%29\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: tpzxygnpdjctomganeqr\r\nsb-request-id: 019c9dd5-00ee-7a20-9276-3470acf9f5ef\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 1\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=bkVf9q5u0V3wRh2qhb2pZTJB3dftOs5AiZzwPxsL70I-1772174508-1.0.1.1-5g1n_zCJwd4cVLHhj7PbBb9Ea88vRt4tP7TRYF7qvM_lZe7NZlKYFwEmKMdiaRM7hJEXvwgqHSl1g0YPC9jUFX6mTldQZNaHWsmdBQXvRWk; path=/; expires=Fri, 27-Feb-26 07:11:48 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-05-02T07:31:01.039332Z","times_seen":255992,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/square.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /square.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/tesla.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /tesla.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:33 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 21:44:59 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69a0bedb-1810\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z0wo%2B8fre1nFuImkfN0WSSEj6TML1Xxjq2jgAW39pXqGz1crchk56u1eyBMzM65HKXqXQbE7gnKgaLYiRq1qwZGt%2BiCVzeqg9fIzqNXZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45b276bccd8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2500 x 319, 8-bit colormap, non-interlaced","md5":"53cbffc97fa3f330a79c4728d6d853b2","sha1":"766ec5a3d3ad8b84b9166e9ad087149d27ec3be3","sha256":"b3e44c8123a36370edfd79d57cbfb845cb328c3d8b2d2c2730c1053054ffe7f5","sha512":"32fb21aed9e15e9ab06b0960fc231ed922be58a39e42555368eaf6800dfb7fe9aa3071606d43576fd694eefb470b68271c80f5fd70bf9a3c63420050f04490b7","ssdeep":"96:dsM8s+MaTbS75K4HdVnygpFOEIQG/upbBqOS0dgggQh5c08dt/qr:a1DbUs0F0QQupbBkYgggkK0Os","tlshash":"a5d13cffe00647f4c9509837e27eda3819bbabb4cd63964652b2b826612d3c30647407","first_seen":"2024-12-28T11:37:25.234566Z","last_seen":"2026-04-22T12:47:33.991098Z","times_seen":37,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tpzxygnpdjctomganeqr.supabase.co/rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"tpzxygnpdjctomganeqr.supabase.co","domain":"tpzxygnpdjctomganeqr.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:51.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"GET /rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: tpzxygnpdjctomganeqr.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xwallet.global/\r\nContent-Type: application/json\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InRwenh5Z25wZGpjdG9tZ2FuZXFyIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjgxMzA1MjEsImV4cCI6MjA4MzcwNjUyMX0.tdpvbXQ1rQzIpjKkQvkTbaK6ITUGMJyKo9N4TTxQEZE\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InRwenh5Z25wZGpjdG9tZ2FuZXFyIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjgxMzA1MjEsImV4cCI6MjA4MzcwNjUyMX0.tdpvbXQ1rQzIpjKkQvkTbaK6ITUGMJyKo9N4TTxQEZE\r\nx-user-id: anon_46b05870-2d6d-45ca-8416-d004a27019e2\r\nOrigin: https://xwallet.global\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\ncontent-range: */*\r\ncf-ray: 9d45b2e76ccc8deb-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://xwallet.global\r\ncontent-location: /chat_conversations?limit=1\u0026order=created_at.desc\u0026select=id%2Cstatus\u0026status=in.%28active%2Cwaiting_manager%2Cwith_manager%29\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: tpzxygnpdjctomganeqr\r\nsb-request-id: 019c9dd5-0cab-7c97-b391-9f9d5e5d246f\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 2\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=kZhlHP_1StXM2sa.T4jBubZ.QZE5bTsInFLrVPxUXQM-1772174511-1.0.1.1-VCq9Byzh.mQ1BVPWOq7hDUwyI8s5r7wXEV2YPMqpnDLA2yiTeEQMKQswvU6fPJFQUYa85vMEciWvpNgZzvF3sn0BPKiaEf.D8FdGeZzT090; path=/; expires=Fri, 27-Feb-26 07:11:51 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-05-02T07:31:01.039332Z","times_seen":255992,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/space.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /space.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:33 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 21:44:59 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69a0bedb-b2c\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNHe105yMcvFGq2p2ipSScKSlzBI1g8Zc5hRrzHsi8j%2FhPUIxqlF2%2BucpdphYJCcX0rzU64Od7Cl5Jq9cQKvxNKRTs1%2BImaKM27H1RhU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45b276ccdd8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2860,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 37, 8-bit colormap, non-interlaced","md5":"db74d42aedcf5b7ad7a1ea1327d1d41a","sha1":"3c681a6aadca628fb4d998ca328d286503f85de2","sha256":"076a0c3fb85f9327843338c5362d5b238589a66e051e25bbe586123f7cc87635","sha512":"950b28660f1847d96d1451422b0ac9c6e441a78a5d614c75b2a093ff0da4d0b23c16c41419b23c3ae9e2df49c67a8531f326f86d470cbaee9bbfa7659b7f74b4","ssdeep":"","tlshash":"db516dd7c043670e443055a5aef6fd1136a38af04ec04733a501751b5dc6198745d3f9","first_seen":"2024-12-28T11:37:25.226868Z","last_seen":"2026-03-19T00:03:44.270955Z","times_seen":11,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/bit.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /bit.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:33 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 21:44:59 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69a0bedb-9a94\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8LiRGB9lgDxScES53P6TZHWcgSHkwpDkVorwbGwGWYAyDlQLnwYOUS3StbMGpDPXiQa6JFIP0wKGvBmhcBnl3zNHjKgzV7RGcx8lXk0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45b276ccf18be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3000 x 2000, 8-bit colormap, non-interlaced","md5":"b11d84dc856ec4c11e09c6a887e56cd0","sha1":"c7ef494db37ea750a1e17a59b3f55b5850d62b2b","sha256":"2de9c673cea8ff2f3c0dc012230a045463297251d85039ef88f948a3912fe043","sha512":"cba282ad82300734250886575374674a644f872e645d89ce73663f7d9abbcf2709cb97925a9f4cc4cef4fb27ebac32c249c0f49ef760a063d30714666ee00843","ssdeep":"768:HZ5KsRB5zIleagutKZJbsqOfP3UIIYmwC4jxN87pVkPsa3pb9V0dp:HZ5KcB5EQbwqOnkIflCejYpSsWpb9V0D","tlshash":"d103e0eff8472771f57202328526851cad2953d1ab893acd03ac14f185b0ca97dfa5b2","first_seen":"2024-12-28T11:37:25.211486Z","last_seen":"2026-04-22T12:47:34.002845Z","times_seen":43,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tpzxygnpdjctomganeqr.supabase.co/rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"tpzxygnpdjctomganeqr.supabase.co","domain":"tpzxygnpdjctomganeqr.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"GET /rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: tpzxygnpdjctomganeqr.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xwallet.global/\r\nContent-Type: application/json\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InRwenh5Z25wZGpjdG9tZ2FuZXFyIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjgxMzA1MjEsImV4cCI6MjA4MzcwNjUyMX0.tdpvbXQ1rQzIpjKkQvkTbaK6ITUGMJyKo9N4TTxQEZE\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InRwenh5Z25wZGpjdG9tZ2FuZXFyIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjgxMzA1MjEsImV4cCI6MjA4MzcwNjUyMX0.tdpvbXQ1rQzIpjKkQvkTbaK6ITUGMJyKo9N4TTxQEZE\r\nx-user-id: anon_46b05870-2d6d-45ca-8416-d004a27019e2\r\nOrigin: https://xwallet.global\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\ncontent-range: */*\r\ncf-ray: 9d45b277c98035a6-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://xwallet.global\r\ncontent-location: /chat_conversations?limit=1\u0026order=created_at.desc\u0026select=id%2Cstatus\u0026status=in.%28active%2Cwaiting_manager%2Cwith_manager%29\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: tpzxygnpdjctomganeqr\r\nsb-request-id: 019c9dd4-c6ea-796c-91d2-55561d7829d3\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 1\r\nset-cookie: __cf_bm=X1oBIReyrkmO4nLc3fMKVkOyE2rX_ui8i2JZPW8Fzjc-1772174493-1.0.1.1-Lj6PbaZCZavomec3DKnm69I4NGl_pc_kgi82IX3N1GnWglxBGFgI.09Uv3w.miOrXsY7wi0Y5KcDZ_Hnfs2bVnu1IDBRer76i54V3D6gl_g; path=/; expires=Fri, 27-Feb-26 07:11:33 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-05-02T07:31:01.039332Z","times_seen":255992,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tpzxygnpdjctomganeqr.supabase.co/rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"tpzxygnpdjctomganeqr.supabase.co","domain":"tpzxygnpdjctomganeqr.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:36.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"GET /rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: tpzxygnpdjctomganeqr.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xwallet.global/\r\nContent-Type: application/json\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InRwenh5Z25wZGpjdG9tZ2FuZXFyIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjgxMzA1MjEsImV4cCI6MjA4MzcwNjUyMX0.tdpvbXQ1rQzIpjKkQvkTbaK6ITUGMJyKo9N4TTxQEZE\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InRwenh5Z25wZGpjdG9tZ2FuZXFyIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjgxMzA1MjEsImV4cCI6MjA4MzcwNjUyMX0.tdpvbXQ1rQzIpjKkQvkTbaK6ITUGMJyKo9N4TTxQEZE\r\nx-user-id: anon_46b05870-2d6d-45ca-8416-d004a27019e2\r\nOrigin: https://xwallet.global\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\ncontent-range: */*\r\ncf-ray: 9d45b289af2d8deb-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://xwallet.global\r\ncontent-location: /chat_conversations?limit=1\u0026order=created_at.desc\u0026select=id%2Cstatus\u0026status=in.%28active%2Cwaiting_manager%2Cwith_manager%29\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: tpzxygnpdjctomganeqr\r\nsb-request-id: 019c9dd4-d218-7014-9b36-e9d2944db954\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 1\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=eMcTuIX6M7thswBlC6Ke54ZpK42.hIpksCdu1_Nqnhg-1772174496-1.0.1.1-tvGWqy6u8cd.I9NNrCO9CNZKbnfcHp3Fzh_pbxv5_iPGex0vNeDrp4zjwHaEBykENBxYjykeeWtaTm_UJn9zKSuk7TQ5qlv3o_hP2kGgiYU; path=/; expires=Fri, 27-Feb-26 07:11:36 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-05-02T07:31:01.039332Z","times_seen":255992,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/grok-logo.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /grok-logo.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:33 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 21:44:59 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69a0bedb-78f8\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2FjFUXQ5UZvx8rzmKmyZz7RpLyWsPFG21C%2Fvb9iQWLGUnghdp%2FkMUWUB6ft3r1%2FNwqOvKX5vae9mOzThmrQ3KVZfNn6aAP4AAKskJ0Ph\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45b276ac7a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30968,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"18b63ae0449e9a94083435cfd1ee64de","sha1":"208c3ccd26aaa62496fe7d097289df13846899b9","sha256":"36eb518517fbff7718f7a72d765142b7e1e5403b3c6c6a3a8dace520e79d63ed","sha512":"00b11a4229c986b25b659be830ad477bef7e517a76297ba5cf7862100e4ab94426f1e54cba732897278a0f96d102df36d4b2b6f0d7b09abf5fef276c7c847ba4","ssdeep":"768:Ndf+RMCPskk8POI8BFN4UCguGO56bJ+eynGBwUA:NK3PskeI8zN47NB8TTA","tlshash":"ecd2d02a922ad434c6b2d9bcda7de1bf4e53fa5be66848cb758c51c701214b90f601e8","first_seen":"2025-11-29T10:23:48.816719Z","last_seen":"2026-03-19T00:03:44.268298Z","times_seen":27,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/grok-logo.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /grok-logo.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/Binance-Vertical-Logo.wine.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /Binance-Vertical-Logo.wine.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/coin.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /coin.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/bit.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /bit.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tpzxygnpdjctomganeqr.supabase.co/rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"tpzxygnpdjctomganeqr.supabase.co","domain":"tpzxygnpdjctomganeqr.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:36.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"OPTIONS /rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: tpzxygnpdjctomganeqr.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: apikey,authorization,content-type,x-user-id\r\nReferer: https://xwallet.global/\r\nOrigin: https://xwallet.global\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:36 GMT\r\ncontent-length: 0\r\ncf-ray: 9d45b2897bd635a6-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: apikey,authorization,content-type,x-user-id\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: tpzxygnpdjctomganeqr\r\nsb-request-id: 019c9dd4-d1fa-7609-8e8c-5688f736926d\r\nset-cookie: __cf_bm=VKniTScdxlSHTQFdXG.hMWRCIvmSjj3OZS._HX8BKIo-1772174496-1.0.1.1-AWI0W4NOkx1CiCsSxrijcKRo.y57fiPU3.5ff8OnMVmRnWhb0Y8uXsSd52adLKHpVWdrrNwdFlviZHHvg1HMfFHi8CyQMupWUSpHYwL040M; path=/; expires=Fri, 27-Feb-26 07:11:36 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tpzxygnpdjctomganeqr.supabase.co/rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"tpzxygnpdjctomganeqr.supabase.co","domain":"tpzxygnpdjctomganeqr.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:42.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"OPTIONS /rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: tpzxygnpdjctomganeqr.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: apikey,authorization,content-type,x-user-id\r\nReferer: https://xwallet.global/\r\nOrigin: https://xwallet.global\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:42 GMT\r\ncontent-length: 0\r\ncf-ray: 9d45b2aef9228deb-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: apikey,authorization,content-type,x-user-id\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: tpzxygnpdjctomganeqr\r\nsb-request-id: 019c9dd4-e964-73cb-8d0b-19336a4e3b85\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=Kfvrk1jUsvGI4RCwNhiOisxceH2ns7o.P09GSQOOKnQ-1772174502-1.0.1.1-CpA2kGJ2Y1VcFYGvCJDmFyrWX8giFWXPJdk.3vWwzPfI8o3_PxeVaSHh0Bshi9IIXe_QV4VdYt9Q3Hrxmt4yrk9nfmyvvNRy9Zr5IAc0pBU; path=/; expires=Fri, 27-Feb-26 07:11:42 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/tesla.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /tesla.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/space.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /space.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/square.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /square.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:33 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 21:44:59 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69a0bedb-d74b\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LcxkUsnMIuHX8TMy%2FMFAk3sGZmFafl%2BCIDWsOb7b5mqPXQsXue7Hc1C%2Fq8OOBchq2RH5dic8JUvL3ITPbuUuOfVP9EcDTEovaBbHZBPx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45b276ccd28be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3000 x 434, 8-bit/color RGBA, non-interlaced","md5":"ca6754048e9e7b58023fbc9d0ef90410","sha1":"3cbe5254ad3ea93f4afb4d8c7181ad67f288216b","sha256":"8856e038a6eead28952aed095607e193c4368b17a65494502378f77599b530ec","sha512":"f95b7a87dde32c5b210150ab33baede2c694ef1df7ae5418bf11f4fda250ffe598397feb6bf1016518bf55f61a3c01cfb5e8012371e51b51e117c8a9f4b1cf38","ssdeep":"1536:A308QfYP4AWY48TN0JZOMFBJJ3QNZq1U/3/:A3Uf6C8KZOeBQNZH/3/","tlshash":"8833019099e0e916df6801f10ccc2b3e3772164d022a4bd9eb0a5e943ff3a41ae3a1c0","first_seen":"2024-12-28T11:37:25.232923Z","last_seen":"2026-04-22T12:47:34.002049Z","times_seen":37,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tpzxygnpdjctomganeqr.supabase.co/rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"tpzxygnpdjctomganeqr.supabase.co","domain":"tpzxygnpdjctomganeqr.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:42.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"GET /rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: tpzxygnpdjctomganeqr.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xwallet.global/\r\nContent-Type: application/json\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InRwenh5Z25wZGpjdG9tZ2FuZXFyIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjgxMzA1MjEsImV4cCI6MjA4MzcwNjUyMX0.tdpvbXQ1rQzIpjKkQvkTbaK6ITUGMJyKo9N4TTxQEZE\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InRwenh5Z25wZGpjdG9tZ2FuZXFyIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjgxMzA1MjEsImV4cCI6MjA4MzcwNjUyMX0.tdpvbXQ1rQzIpjKkQvkTbaK6ITUGMJyKo9N4TTxQEZE\r\nx-user-id: anon_46b05870-2d6d-45ca-8416-d004a27019e2\r\nOrigin: https://xwallet.global\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\ncontent-range: */*\r\ncf-ray: 9d45b2af19998deb-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://xwallet.global\r\ncontent-location: /chat_conversations?limit=1\u0026order=created_at.desc\u0026select=id%2Cstatus\u0026status=in.%28active%2Cwaiting_manager%2Cwith_manager%29\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: tpzxygnpdjctomganeqr\r\nsb-request-id: 019c9dd4-e976-7e96-924d-e801d947b1b0\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 1\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=0jAWvs1aEb7Qz0PSaLDJtXqramSaL76hZhG2mw.C.yY-1772174502-1.0.1.1-pcQ_EG0urH559PHDvHdhBd_gdORy_h7i1fP6HKFhfiFBroytCIBq3.vdC.l4vSewMZZVxpYpB8wvCu.hNkz_fSs2AMEaUcu3U20H0jRepuQ; path=/; expires=Fri, 27-Feb-26 07:11:42 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-05-02T07:31:01.039332Z","times_seen":255992,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tpzxygnpdjctomganeqr.supabase.co/rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"tpzxygnpdjctomganeqr.supabase.co","domain":"tpzxygnpdjctomganeqr.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:48.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"OPTIONS /rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: tpzxygnpdjctomganeqr.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: apikey,authorization,content-type,x-user-id\r\nReferer: https://xwallet.global/\r\nOrigin: https://xwallet.global\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:48 GMT\r\ncontent-length: 0\r\ncf-ray: 9d45b2d48d8f8deb-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: apikey,authorization,content-type,x-user-id\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: tpzxygnpdjctomganeqr\r\nsb-request-id: 019c9dd5-00db-7b61-8f60-1a5c2c483aab\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=cBm5MUa6XloGavfUVTXBIWCKugGPbw2F0twtdo7u64A-1772174508-1.0.1.1-Zu6jrUY5JJ1uXZfjfrjWlzEYOcaYzrHY6EOGTK5gVU8ApFco8OmrM7VkwNrESOhpRxRQDNtiN7bFPVByNbG2a_fuolwT3Sg4Zh7ruV0vRoA; path=/; expires=Fri, 27-Feb-26 07:11:48 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T06:41:32.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 26 Feb 2026 21:44:59 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kD7hRzakKVg4dOynBCnyZ8WGR9PFg8yZlQzpJy9DQrnyoYJWORwYjaaWLwuNaf4T54ZJMukr1bEy%2BFteNVqIll%2FHwu%2BEyVLKiyP7OaBv\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d45b270dcf976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":814,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"2769c4bb0872b1362cf6e03c18c7919b","sha1":"2566c6f4b0a96394cf101d795d44f2c2a17b9c22","sha256":"a57478514d5af5a56761d85a5135d5a8dec47afc1ef9cc674f8cc4249d32e447","sha512":"f61719cb47275db8bbcc11bb52eed8121fc6828c881931a25d28783c2d861203a7ce148648e2f6c75145189ac10687aedc024b04a8a6af92131dacf22e955439","ssdeep":"","tlshash":"b60166074a086f1a0378572c1981b0ac82779e06c210ace1669620bf1cc5f85cabb5b6","first_seen":"2026-02-26T22:00:25.038948Z","last_seen":"2026-02-27T06:41:59.982712Z","times_seen":2,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":56,"dns":36,"connect":1,"send":0,"wait":163,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/assets/index-B0k4EELB.js","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:32.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /assets/index-B0k4EELB.js HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 21:44:59 GMT\r\npriority: u=3,i=?0\r\netag: W/\"69a0bedb-127991\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NOqQK2qqRofNewAsfgkYWEFKWdeNgQuYIvrn7FB7txLz%2B6wBTStpmEoim2nO61GbcNfqMGiIIWNegT2PaGtRMSMCt3fgia4nFYTgmgPa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45b2736d4e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1210769,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37550)","md5":"2aaa681814586d38ae5de7941ba20de0","sha1":"d1b2a33d37e1e5c13b7880eb37f87e6ae9045154","sha256":"4b05adeb1a98d0d324b8ec5d6447b98c69faa438e3b9f9230e218b320e1ede05","sha512":"07f565aef911d0e4f1dead0e26fb4b73887266c13729848b9cbaea940a9153c1ef4b1fc0260b12270fa99a4d417414ae8c3320188a6a91018815a2dfed899b46","ssdeep":"12288:Uj/RWuVlO5TD0Rd4xsKWczy9CBHI/73iAuxDW+8Bd3E0bnCAJ67:UVgDW4xsKWczy9CBUmx2Bd3E0bn9J67","tlshash":"8f259e84b191ba7daba705e5907f4011b13e1a44f81f84a0f13c9cbb2a64506b67bffd","first_seen":"2026-02-26T22:00:25.042193Z","last_seen":"2026-02-27T06:41:59.987281Z","times_seen":2,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/open.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /open.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/coin.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /coin.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:33 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 21:44:59 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69a0bedb-8230\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WR6Lg4etmYb6lhpm2y%2F4C7dPB94AN3BJBke2erZJDbomEHWXJY%2BJRpi9Kz7UsAGW%2F4SviRJdNQkurISGKHmxeXp71%2F%2FOlIoH7axAPIdz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45b276ccd58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33328,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3000 x 2000, 8-bit colormap, non-interlaced","md5":"f802fbd7e28278d80f2cd5037c4eeb5b","sha1":"ae941aa397b7cc291f93bf0d354dd962d55626a5","sha256":"8371437f6f39fa493411ed5a2ce5f692da2de044590e33bd4dd67d64c062e12c","sha512":"d0151ab1ab68e61a2c935d2a52fd164fefe93635d1d75b3922dc01af363072e627c17365da630b81bbbcc220d1f3f6887cae88c1bc185e968755b8e5d043293c","ssdeep":"768:0inc7a0a7oVUiq5ou9F4aTE37tEg5zeypF:0Baor4F4gs7tEgteyH","tlshash":"b2e2d0bf1aca4bf4d4ef8b37a19ef824c122699d101889c38816edd9b81c577b701d2d","first_seen":"2024-12-28T11:37:25.210113Z","last_seen":"2026-04-22T12:47:34.006998Z","times_seen":39,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tpzxygnpdjctomganeqr.supabase.co/rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"tpzxygnpdjctomganeqr.supabase.co","domain":"tpzxygnpdjctomganeqr.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:51.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"OPTIONS /rest/v1/chat_conversations?select=id,status\u0026user_id=eq.anon_46b05870-2d6d-45ca-8416-d004a27019e2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: tpzxygnpdjctomganeqr.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: apikey,authorization,content-type,x-user-id\r\nReferer: https://xwallet.global/\r\nOrigin: https://xwallet.global\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:51 GMT\r\ncontent-length: 0\r\ncf-ray: 9d45b2e73c128deb-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: apikey,authorization,content-type,x-user-id\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: tpzxygnpdjctomganeqr\r\nsb-request-id: 019c9dd5-0c91-7004-8f0b-5b7381121630\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=BqZ40ilS7OD_NiU13ro7DKmqyBgiJdCby6IurksPfMs-1772174511-1.0.1.1-H5XTSReovGndWmvqHXgFk7fMtDpaKB..Ee9SooijspJwKry1bTomcQvjjH9BIZLICiw447PSayUiCPewF8USO2ahOQ90BXu.8D2tarG.zGI; path=/; expires=Fri, 27-Feb-26 07:11:51 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T07:30:44.134397Z","times_seen":14514081,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/assets/index-CCLJ3CtF.css","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:32.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /assets/index-CCLJ3CtF.css HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:32 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 21:44:59 GMT\r\npriority: u=2,i=?0\r\netag: W/\"69a0bedb-1db1d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TKUCAGhcTlU%2FsVDn2WMAt0JKPCBF84fgN2nLKCkANge9jpfElxWmBextYTLXFxt1Ayd7BBWm8XnvMpmB7MQUPtu55wMHYHEavLVkrMPf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45b2736d538be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121629,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"86e0d714bc30ccdf29678f398ce531c5","sha1":"3f3aa11ba38feadb3f36615e156d3c8bb7dfe67d","sha256":"e21b35810e6cb497ebdc114bcb263bafa390cd0ccca4cc179faf19caca1367a1","sha512":"c6083c176223da9427f7b9e54c4794417b2929ad38dc6cdf2a4f9d2ff30df7a742580c99848ddc48255af59528ab95d3013ef34c350aa1e0593c326bba44e033","ssdeep":"3072:vIxhIbPF/mNGIuQ9gkIgBMUfstGKCu378VQZkt5Ffdnck:v2hIbPF/mNGIuQ9gkIgdkCu378VQZktF","tlshash":"46c36469a968607f7c27b1e4c3cc79acb51ef1d0de3a06a5bd8a411537e23f60c6b904","first_seen":"2026-02-26T07:08:36.936329Z","last_seen":"2026-02-27T06:41:59.991661Z","times_seen":3,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/open.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /open.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:33 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 21:44:59 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69a0bedb-66dc\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D3KIxi7E9RojnKRjTbwc%2F%2FQgouxMHxxGMsornV%2B8JOsAmfokzMqt%2FIbIguzTca%2F4w9rGSEYLkRtIM%2FRZWeAjNo3iwrfshiXycyNv7STE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45b276bcc58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26332,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1800 x 489, 8-bit colormap, non-interlaced","md5":"923bf1f5050e9d98d3c816d9d1cf42f4","sha1":"ffc58dd5473dc131bc4069e69ef434b8a1b2c290","sha256":"05097c77435caca17d58413af3430130e3e74a2181bd273efb5c8bcb65c7d435","sha512":"a14a85fd955e4e6224ebbfa2dd8c93201bee7c6d5b1a68bc54b1c86b30f6068889edceeebd6e7afae9c513e8e69b013323e4b91617ec024a30978e8eef55d6bf","ssdeep":"768:xyr0GQBFepi0p+AzM0pVqou3CiM8usYUpBE3zp6PtI6Ht:xyYGQr4iRAzM0pqS3G8pGtRHt","tlshash":"3ac2d07485240fb3ebcdfb32c6a95afc3723f8ca95262f56142415f8f62245ad08805f","first_seen":"2024-12-28T11:37:25.236322Z","last_seen":"2026-04-22T12:47:34.008085Z","times_seen":37,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xwallet.global/Binance-Vertical-Logo.wine.png","fqdn":"xwallet.global","domain":"xwallet.global","tld":"global"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xwallet.global/","date":"2026-02-27T06:41:33.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xwallet.global","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:42:22 GMT","end":"Mon, 25 May 2026 15:42:21 GMT"},"fingerprint":{"sha1":"87:F5:EC:7B:F9:67:BC:3B:71:F9:9C:DA:1B:F6:24:0A:C0:EA:F4:94","sha256":"97:6E:CB:B3:6A:27:2A:F6:D9:60:BE:2D:4E:3E:C0:5E:AD:CA:EC:43:94:A0:AB:75:0E:9C:2E:BD:97:C1:0F:92"}}},"request":{"raw":"GET /Binance-Vertical-Logo.wine.png HTTP/1.1\r\nHost: xwallet.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xwallet.global/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 06:41:33 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 21:44:59 GMT\r\npriority: u=4,i=?0\r\netag: W/\"69a0bedb-7863\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h9FFS9S7C9C6T5JPxVYggEAqXS1UESerkUWEq%2BVq2%2FwzhIy9aH8L%2B8QowkdwtpuAOB9AYHBrW3pC8Tt3Csj0zHtGSS4C2gUi%2F5ouyBxA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45b276bcc98be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3000 x 2000, 8-bit colormap, non-interlaced","md5":"28c4a8caf11e6e1e8b1429196a648147","sha1":"3de7101287eafd005227f4d58448c30a078ce7c2","sha256":"96bdaae8c92f32b4d427741b898708ad7ae7f8fcd3fcda8952e90bc048d00910","sha512":"588a01913a01715ef88b523c6668bfac6498871a1793937df2809a99fc3df3526fce10954bab8adcf8a918ff9a3b076752a90de450bfc8c345c617d380198d4a","ssdeep":"768:azU/pEx8XXXXXXXXb/5MiSweFsu55aNz17sj:a4pXlSwFFNzOj","tlshash":"c6d2af4ee0129c66fb7d4f35d44750de9067980641a781c9f340f690b2cbae372aeab8","first_seen":"2024-12-28T11:37:25.207282Z","last_seen":"2026-04-22T12:47:34.006374Z","times_seen":44,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"xwallet.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}