{"report_id":"543ff0e2-fc4a-4d6b-99be-332f79bc67b2","version":6,"status":"done","tags":[],"date":"2026-02-01T20:47:33Z","url":{"schema":"https","addr":"xchain-wallet.com/auth","fqdn":"xchain-wallet.com","domain":"xchain-wallet.com","tld":"com"},"ip":{"addr":"104.21.11.85","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xchain-wallet.com/auth","fqdn":"xchain-wallet.com","domain":"xchain-wallet.com","tld":"com"},"title":"X Wallet","dom":{"size":29881,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14648)","md5":"535f0d6ac726a49941bba2ab89762fc4","sha1":"dba73797f2695cab3bb27e7a6367b9deba81518f","sha256":"63e74758bd0f0518e827025e73c9f23fecada972f670681c2e9773c2a0d9e3d5","sha512":"205e68f54cce2b830799f73ee2880d1afe5d9c989ac4066d3fc8dbdbee1be25b0f03786816222545647b76c2ab1ecf710e769723d59ef06862d2d71a0a41e130","ssdeep":"768:EdsnB7cxksc64Jysq7vHiEhoQQqYlXgYVrltfYdYscidoAH9:EdXx/c64Jysq7vSgYVrltyMAH9","tlshash":"f1d2c754600c123d6e3f9764f9d5a33cd029f541eea7482ab14d009bf6c3ff529aba94","dom_hash":"domhasha2ea102e8bc9e1c4b89560314c9f1d81","first_seen":"2026-02-01T20:47:40.419315Z","last_seen":"2026-02-01T20:47:40.419315Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xchain-wallet.com/auth","fqdn":"xchain-wallet.com","domain":"xchain-wallet.com","tld":"com"},"ip":{"addr":"104.21.11.85","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T20:47:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-01T20:47:22Z","timestamp":1769978842,"ip_dst":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":49194,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2026-02-01T20:47:22.928344+0000\",\"flow_id\":1797438375072443,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":49194,\"dest_ip\":\"172.64.149.246\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"lhdutqqujotkzdsxlcaw.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":934,\"bytes_toclient\":3519,\"start\":\"2026-02-01T20:47:22.922299+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-01T20:47:22Z","timestamp":1769978842,"ip_dst":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":49206,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2026-02-01T20:47:22.932407+0000\",\"flow_id\":506186522301307,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":49206,\"dest_ip\":\"172.64.149.246\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"lhdutqqujotkzdsxlcaw.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":934,\"bytes_toclient\":1654,\"start\":\"2026-02-01T20:47:22.922491+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"xchain-wallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"xchain-wallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"lhdutqqujotkzdsxlcaw.supabase.co","ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-11","domain_rank":0,"first_seen":"2026-01-31T22:52:01.750918Z","last_seen":"2026-01-31T22:52:01.750918Z","alert_count":0,"request_count":2,"received_data":2230,"sent_data":1945,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"mpc2-prod-29-is5qnl632q-uc.a.run.app","ip":{"addr":"34.143.77.2","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2018-04-05","domain_rank":0,"first_seen":"2026-01-06T11:59:10.228587Z","last_seen":"2026-01-30T14:59:03.219309Z","alert_count":0,"request_count":1,"received_data":419,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}]},{"fqdn":"xchain-wallet.com","ip":{"addr":"104.21.11.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-01-31T22:52:01.759569Z","last_seen":"2026-01-31T22:52:01.759569Z","alert_count":12,"request_count":6,"received_data":1226696,"sent_data":2865,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"connect.facebook.net","ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"domain_registered":"2004-04-01","domain_rank":1088,"first_seen":"2012-05-22T02:51:28Z","last_seen":"2026-01-30T09:03:08.771621Z","alert_count":0,"request_count":2,"received_data":726775,"sent_data":1890,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.facebook.com","ip":{"addr":"31.13.72.36","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"domain_registered":"1997-03-29","domain_rank":357,"first_seen":"2012-05-21T02:23:41Z","last_seen":"2026-01-26T07:41:04.234162Z","alert_count":0,"request_count":1,"received_data":468,"sent_data":880,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"connect.facebook.net/signals/config/1294520532707254?v=2.9.256\u0026r=stable\u0026domain=xchain-wallet.com\u0026hme=18f1088ef3e8892a74f943ddaee05e3bbd28c980d3b65c4c57d9fe86969d4bce\u0026ex_m=95%2C158%2C135%2C20%2C67%2C68%2C128%2C63%2C42%2C129%2C72%2C62%2C10%2C142%2C81%2C15%2C94%2C123%2C116%2C70%2C73%2C122%2C139%2C103%2C144%2C7%2C3%2C4%2C6%2C5%2C2%2C82%2C92%2C145%2C226%2C170%2C56%2C228%2C229%2C49%2C185%2C27%2C69%2C234%2C233%2C173%2C29%2C55%2C9%2C58%2C88%2C89%2C90%2C96%2C119%2C28%2C26%2C121%2C118%2C117%2C136%2C71%2C138%2C137%2C44%2C54%2C112%2C14%2C141%2C39%2C215%2C217%2C180%2C23%2C24%2C25%2C17%2C18%2C38%2C34%2C36%2C35%2C77%2C83%2C87%2C101%2C127%2C130%2C40%2C102%2C21%2C19%2C108%2C64%2C32%2C132%2C131%2C133%2C124%2C22%2C31%2C53%2C100%2C140%2C65%2C16%2C134%2C105%2C76%2C61%2C30%2C195%2C165%2C285%2C213%2C156%2C198%2C191%2C166%2C98%2C120%2C75%2C110%2C48%2C41%2C43%2C104%2C109%2C115%2C52%2C59%2C114%2C47%2C50%2C46%2C91%2C143%2C0%2C113%2C13%2C111%2C11%2C1%2C51%2C84%2C57%2C60%2C107%2C80%2C79%2C146%2C147%2C85%2C86%2C8%2C93%2C45%2C125%2C78%2C74%2C66%2C106%2C97%2C37%2C126%2C33%2C99%2C12%2C148","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ddbc75ebe4dce09f2f307f1683d76d1","sha1":"bee30697dbbdc8c84b4125bd09e464f88a149285","sha256":"f5933b8a5cc47cd3d2dd8aedbc2e4919bc2e0733d42fb807c081e3b312d303ed","sha512":"329eb7524faa200469c4a00334495fef82e0fdf74d7346735b6d38af339edf4c9ffaf440831afc55674e76beb41ee570d8ac61d82a16ae54624cb208d64770a8","ssdeep":"6144:6N/di5p6JGCooi0lj6fYfXYXqRbhixwz0wDPJS5CQ35:6meJpooi0IqsiVi+z0wDPJS5C2","tlshash":"90744bcdbac0b0624362f67859bf210f61b99952784dc890e66ddcd8bc7858e5023f6f","size":362227,"data":"","first_seen":"2026-02-01T20:47:40.422091Z","last_seen":"2026-02-01T20:47:40.422091Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xchain-wallet.com/assets/index-CKJ7499r.js","fqdn":"xchain-wallet.com","domain":"xchain-wallet.com","tld":"com"},"ip":{"addr":"104.21.11.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1da607ed1dd7c923294d73ae49015a44","sha1":"06ba4b739eacbf5a9498565aa29e281dfc43e276","sha256":"ef555c65f8d50fdec19367433ad70371a241cef1f3db3f56854e84152e48c6e6","sha512":"d3fd0c067245537cf125dc97aad66fb6a50fc60e3658e482f23c7629f73cf5d699ed9bb8727a90132d9e55b34bd8d1185e37738193adeb48edf6baa16fbb466c","ssdeep":"24576:PVoGV7QywIZWrADFiMYJsPrjQAv+GpGJmxM8:PVoGV7QywIZWrADFiMusPrjQAv+GpGJo","tlshash":"7b357d84b151bebd9aa708e5a47f4015b13e1e54f81f84e0f17c587a2a6410aba37ffc","size":1061725,"data":"","first_seen":"2026-02-01T20:47:40.430115Z","last_seen":"2026-02-01T20:47:40.430115Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xchain-wallet.com/auth","fqdn":"xchain-wallet.com","domain":"xchain-wallet.com","tld":"com"},"ip":{"addr":"104.21.11.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a576f0b9b46c0c2e386198052043cb5","sha1":"488b20d03184e82e4b692b417161b00d31bb129f","sha256":"f18fc24168678e266108f7a1cf0a08d0d0f86a83926139ef03a82f79a2e6bcd1","sha512":"648fa1f979ca91b9866ee25807677e91bec9ad5843f3a98476232fbd0f1e202b9d1d496ad153f2fa2a9d28cc62453a8a59fb98b21f2f09635a2cf2c17107bdb6","ssdeep":"","tlshash":"41f0c0992e5ef06f0ed4b06d9e3b8ccf353c15e1656012137ea89418385092f4ce994c","size":589,"data":"","first_seen":"2026-02-01T20:47:40.430975Z","last_seen":"2026-02-01T20:47:40.430975Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/en_US/fbevents.js","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e87a2fae81d17c92e1fccca14dbe9de7","sha1":"2bc803036e246c7b6728a60e3f96091bf368139e","sha256":"8ecba1ce3ae993afc9213ba8f6e8605300c8b1ab6db79c4ba5cc6fdc339c1035","sha512":"8379e301da7b428a6d047d1d70f513e5a802a98254fb77e61013456902a08364d35edd5d4b96beef6fd6924b30e9cbace2f13305a557c97e9ab117e0d15e968e","ssdeep":"6144:o7gAQewVkQ6B/xNF/ddurj/Gae5LdgWtkzFz1O5vBU:rStxTdkELdgWtkJ","tlshash":"3074d7c971e1b0a103b6796c966f900bb2bbd5a534ccc960e51dedc8297c49e4133ebb","size":354829,"data":"","first_seen":"2026-01-31T04:00:29.344393Z","last_seen":"2026-05-23T14:06:29.164028Z","times_seen":463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xchain-wallet.com/assets/index-CKJ7499r.js","fqdn":"xchain-wallet.com","domain":"xchain-wallet.com","tld":"com"},"ip":{"addr":"104.21.11.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xchain-wallet.com/auth","date":"2026-02-01T20:47:12.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xchain-wallet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 08:56:31 GMT","end":"Tue, 28 Apr 2026 09:55:03 GMT"},"fingerprint":{"sha1":"6A:8F:84:26:13:3B:B2:E5:DC:0C:42:6B:89:03:DA:A6:D2:BE:A3:F5","sha256":"47:6B:0F:3B:A8:45:CC:37:EC:10:9A:C6:5D:3D:89:4F:DC:28:75:84:FE:EE:E6:26:97:9C:76:1D:09:AE:D3:78"}}},"request":{"raw":"GET /assets/index-CKJ7499r.js HTTP/1.1\r\nHost: xchain-wallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xchain-wallet.com/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:47:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 01 Feb 2026 13:07:38 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"697f501a-10335d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ykmGzH1KVYFdFbxbP5mVqv2qVLAX%2FhUiZjV9JEoP0SO9qGJSyxGZapbrA5IdJrJJ%2B0nny14hSuvVUiG%2FZS4LUkaV8L8ALt%2FXPodXT1IfXu2N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c744d764cc14e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1061725,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"d9e8a774c3ddadaa0ab30c2d55148485","sha1":"32c09e9cd506ebce8b6be9a9e0baa7cc75370751","sha256":"a2650fe9179bbe996335b91bdd2b2cd0a2240ed1afa4f725b6c81ad8a69a1ee7","sha512":"6ef2be89fdff4b7935b00ba0101a694266ce8c13e0afc2a0da9a4d92166c788dc32bf2b382c511336490231a020ab4f73636b72d3b007c16a877306dbefc21d3","ssdeep":"24576:PVoGV7QywIZWrADFiMYJsPrjQAv+GpGJmxMw:PVoGV7QywIZWrADFiMusPrjQAv+GpGJc","tlshash":"00257d84b151babd9aa704e5a47f4015b13e1e54f81f84e0f17c5cba2a6410aba37ffc","first_seen":"2026-02-01T20:47:40.420939Z","last_seen":"2026-02-01T20:47:40.420939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"xchain-wallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"xchain-wallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/signals/config/1294520532707254?v=2.9.256\u0026r=stable\u0026domain=xchain-wallet.com\u0026hme=18f1088ef3e8892a74f943ddaee05e3bbd28c980d3b65c4c57d9fe86969d4bce\u0026ex_m=95%2C158%2C135%2C20%2C67%2C68%2C128%2C63%2C42%2C129%2C72%2C62%2C10%2C142%2C81%2C15%2C94%2C123%2C116%2C70%2C73%2C122%2C139%2C103%2C144%2C7%2C3%2C4%2C6%2C5%2C2%2C82%2C92%2C145%2C226%2C170%2C56%2C228%2C229%2C49%2C185%2C27%2C69%2C234%2C233%2C173%2C29%2C55%2C9%2C58%2C88%2C89%2C90%2C96%2C119%2C28%2C26%2C121%2C118%2C117%2C136%2C71%2C138%2C137%2C44%2C54%2C112%2C14%2C141%2C39%2C215%2C217%2C180%2C23%2C24%2C25%2C17%2C18%2C38%2C34%2C36%2C35%2C77%2C83%2C87%2C101%2C127%2C130%2C40%2C102%2C21%2C19%2C108%2C64%2C32%2C132%2C131%2C133%2C124%2C22%2C31%2C53%2C100%2C140%2C65%2C16%2C134%2C105%2C76%2C61%2C30%2C195%2C165%2C285%2C213%2C156%2C198%2C191%2C166%2C98%2C120%2C75%2C110%2C48%2C41%2C43%2C104%2C109%2C115%2C52%2C59%2C114%2C47%2C50%2C46%2C91%2C143%2C0%2C113%2C13%2C111%2C11%2C1%2C51%2C84%2C57%2C60%2C107%2C80%2C79%2C146%2C147%2C85%2C86%2C8%2C93%2C45%2C125%2C78%2C74%2C66%2C106%2C97%2C37%2C126%2C33%2C99%2C12%2C148","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xchain-wallet.com/auth","date":"2026-02-01T20:47:12.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":"Meta Platforms, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 11 Nov 2025 00:00:00 GMT","end":"Mon, 09 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"43:A7:04:57:57:96:02:F5:47:AD:BF:86:F4:FF:1C:C4:11:EF:9F:70","sha256":"4B:4C:D7:03:FC:50:66:95:54:1F:D0:BF:36:F8:61:3A:B9:5D:04:01:B3:55:74:46:D4:3C:73:D3:64:D2:57:40"}}},"request":{"raw":"GET /signals/config/1294520532707254?v=2.9.256\u0026r=stable\u0026domain=xchain-wallet.com\u0026hme=18f1088ef3e8892a74f943ddaee05e3bbd28c980d3b65c4c57d9fe86969d4bce\u0026ex_m=95%2C158%2C135%2C20%2C67%2C68%2C128%2C63%2C42%2C129%2C72%2C62%2C10%2C142%2C81%2C15%2C94%2C123%2C116%2C70%2C73%2C122%2C139%2C103%2C144%2C7%2C3%2C4%2C6%2C5%2C2%2C82%2C92%2C145%2C226%2C170%2C56%2C228%2C229%2C49%2C185%2C27%2C69%2C234%2C233%2C173%2C29%2C55%2C9%2C58%2C88%2C89%2C90%2C96%2C119%2C28%2C26%2C121%2C118%2C117%2C136%2C71%2C138%2C137%2C44%2C54%2C112%2C14%2C141%2C39%2C215%2C217%2C180%2C23%2C24%2C25%2C17%2C18%2C38%2C34%2C36%2C35%2C77%2C83%2C87%2C101%2C127%2C130%2C40%2C102%2C21%2C19%2C108%2C64%2C32%2C132%2C131%2C133%2C124%2C22%2C31%2C53%2C100%2C140%2C65%2C16%2C134%2C105%2C76%2C61%2C30%2C195%2C165%2C285%2C213%2C156%2C198%2C191%2C166%2C98%2C120%2C75%2C110%2C48%2C41%2C43%2C104%2C109%2C115%2C52%2C59%2C114%2C47%2C50%2C46%2C91%2C143%2C0%2C113%2C13%2C111%2C11%2C1%2C51%2C84%2C57%2C60%2C107%2C80%2C79%2C146%2C147%2C85%2C86%2C8%2C93%2C45%2C125%2C78%2C74%2C66%2C106%2C97%2C37%2C126%2C33%2C99%2C12%2C148 HTTP/1.1\r\nHost: connect.facebook.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xchain-wallet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/x-javascript; charset=utf-8\r\ntiming-allow-origin: *\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", coep_report=\"https://www.facebook.com/browser_reporting/coep/?minimize=0\", permissions_policy=\"https://www.facebook.com/ajax/browser_error_reports/\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":86400,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coep\\/?minimize=0\"}],\"group\":\"coep_report\"}, {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ncontent-security-policy: default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-G2E9lKtt' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c\u0026minimize=0;require-trusted-types-for 'script';\r\nx-frame-options: DENY\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy-report-only: require-corp;report-to=\"coep_report\"\r\ncross-origin-opener-policy: same-origin-allow-popups\r\npragma: public\r\ncache-control: public, max-age=1200\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\nx-fb-debug: uIyv2JZfp9EpdhvQAO3HJNvN5mW8vuxclgGiWCOstgcYK5gQNNGSPTEx9cbhxtfJXLI82i3Z7n8BR+uA3xU7RA==\r\ndate: Sun, 01 Feb 2026 20:47:12 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=26, rtx=0, c=24, mss=1232, tbw=5206, tp=10, tpl=0, uplat=227, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":362227,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36908)","md5":"6ddbc75ebe4dce09f2f307f1683d76d1","sha1":"bee30697dbbdc8c84b4125bd09e464f88a149285","sha256":"f5933b8a5cc47cd3d2dd8aedbc2e4919bc2e0733d42fb807c081e3b312d303ed","sha512":"329eb7524faa200469c4a00334495fef82e0fdf74d7346735b6d38af339edf4c9ffaf440831afc55674e76beb41ee570d8ac61d82a16ae54624cb208d64770a8","ssdeep":"6144:6N/di5p6JGCooi0lj6fYfXYXqRbhixwz0wDPJS5CQ35:6meJpooi0IqsiVi+z0wDPJS5C2","tlshash":"90744bcdbac0b0624362f67859bf210f61b99952784dc890e66ddcd8bc7858e5023f6f","first_seen":"2026-02-01T20:47:40.422091Z","last_seen":"2026-02-01T20:47:40.422091Z","times_seen":1,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.facebook.com/tr/?id=1294520532707254\u0026ev=PageView\u0026dl=https%3A%2F%2Fxchain-wallet.com\u0026rl=\u0026if=false\u0026ts=1769978833013\u0026sw=1280\u0026sh=1024\u0026v=2.9.256\u0026r=stable\u0026ec=0\u0026o=4124\u0026fbp=fb.1.1769978833011.39701066105781156\u0026eid=ob3_plugin-set_94554ebedea9bfcb6d092c5aa6d08239f1e7395294f939e7142981bbfd860d54\u0026pm=1\u0026hrl=f02e28\u0026ler=empty\u0026it=1769978832593\u0026coo=false\u0026cs_cc=1\u0026cas=33390093973969820\u0026dlc=1\u0026cf=1\u0026expv2[0]=pl1\u0026expv2[1]=el3\u0026expv2[2]=bc1\u0026expv2[3]=mr0\u0026expv2[4]=im0\u0026expv2[5]=hf2\u0026rqm=GET","fqdn":"www.facebook.com","domain":"facebook.com","tld":"com"},"ip":{"addr":"31.13.72.36","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xchain-wallet.com/auth","date":"2026-02-01T20:47:13.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":"Meta Platforms, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 11 Nov 2025 00:00:00 GMT","end":"Mon, 09 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"43:A7:04:57:57:96:02:F5:47:AD:BF:86:F4:FF:1C:C4:11:EF:9F:70","sha256":"4B:4C:D7:03:FC:50:66:95:54:1F:D0:BF:36:F8:61:3A:B9:5D:04:01:B3:55:74:46:D4:3C:73:D3:64:D2:57:40"}}},"request":{"raw":"GET /tr/?id=1294520532707254\u0026ev=PageView\u0026dl=https%3A%2F%2Fxchain-wallet.com\u0026rl=\u0026if=false\u0026ts=1769978833013\u0026sw=1280\u0026sh=1024\u0026v=2.9.256\u0026r=stable\u0026ec=0\u0026o=4124\u0026fbp=fb.1.1769978833011.39701066105781156\u0026eid=ob3_plugin-set_94554ebedea9bfcb6d092c5aa6d08239f1e7395294f939e7142981bbfd860d54\u0026pm=1\u0026hrl=f02e28\u0026ler=empty\u0026it=1769978832593\u0026coo=false\u0026cs_cc=1\u0026cas=33390093973969820\u0026dlc=1\u0026cf=1\u0026expv2[0]=pl1\u0026expv2[1]=el3\u0026expv2[2]=bc1\u0026expv2[3]=mr0\u0026expv2[4]=im0\u0026expv2[5]=hf2\u0026rqm=GET HTTP/1.1\r\nHost: www.facebook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xchain-wallet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\naccess-control-allow-origin: \r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-length: 0\r\nserver: proxygen-bolt\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=20, rtx=0, c=10, mss=1380, tbw=4142, tp=-1, tpl=-1, uplat=0, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Sun, 01 Feb 2026 20:47:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T01:49:07.654675Z","times_seen":17790798,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":52,"dns":1,"connect":20,"send":0,"wait":21,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xchain-wallet.com/favicon.ico","fqdn":"xchain-wallet.com","domain":"xchain-wallet.com","tld":"com"},"ip":{"addr":"104.21.11.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xchain-wallet.com/auth","date":"2026-02-01T20:47:14.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xchain-wallet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 08:56:31 GMT","end":"Tue, 28 Apr 2026 09:55:03 GMT"},"fingerprint":{"sha1":"6A:8F:84:26:13:3B:B2:E5:DC:0C:42:6B:89:03:DA:A6:D2:BE:A3:F5","sha256":"47:6B:0F:3B:A8:45:CC:37:EC:10:9A:C6:5D:3D:89:4F:DC:28:75:84:FE:EE:E6:26:97:9C:76:1D:09:AE:D3:78"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xchain-wallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xchain-wallet.com/auth\r\nCookie: _fbp=fb.1.1769978833011.39701066105781156\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:47:14 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Sun, 01 Feb 2026 13:07:38 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"697f501a-3c2e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8nOMsx9HYWX2%2FTCHCJJGj3r961HHhwXltHiMKjpcZSmtqX3yQboHvDcr6j2D6RmpvORLDhdGP%2Bhq0o2KyXxAxa8K2SqFv6UikfNX4dfGu4K\"}]}\r\ncf-ray: 9c744d841f094e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"532f82ed03b58777ada242c83b9aa35e","sha1":"e64f6fc4d9f812146f0ba8fd94e338494472fc7a","sha256":"a11cc18bbbdbce3a95f332edd9b39820321915ede69abd0cc5695789b4562bbd","sha512":"33980d7d0537699b23e5fbcbfa93d95294bad8de66c7bb6898277531c2419de8d7683b67e0cdde8b9fca7f34257019042bbb1f81ca6f6c61cc418fb0dfafb959","ssdeep":"96:/lmWXeLotQHKq/VedE60U3oD1dYCPj7Si:YW69HRK0oqHJ","tlshash":"3362530a67f31d25c540923d9f62c3311322dc8d41268b0b57e49da37fcfb9b2c165a8","first_seen":"2026-01-16T14:26:06.978518Z","last_seen":"2026-03-19T00:03:44.267265Z","times_seen":29,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"xchain-wallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"xchain-wallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xchain-wallet.com/grok-logo.png","fqdn":"xchain-wallet.com","domain":"xchain-wallet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xchain-wallet.com/auth","date":"2026-02-01T20:47:22.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xchain-wallet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 08:56:31 GMT","end":"Tue, 28 Apr 2026 09:55:03 GMT"},"fingerprint":{"sha1":"6A:8F:84:26:13:3B:B2:E5:DC:0C:42:6B:89:03:DA:A6:D2:BE:A3:F5","sha256":"47:6B:0F:3B:A8:45:CC:37:EC:10:9A:C6:5D:3D:89:4F:DC:28:75:84:FE:EE:E6:26:97:9C:76:1D:09:AE:D3:78"}}},"request":{"raw":"GET /grok-logo.png HTTP/1.1\r\nHost: xchain-wallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xchain-wallet.com/auth\r\nCookie: _fbp=fb.1.1769978833011.39701066105781156\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T01:49:07.654675Z","times_seen":17790798,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"xchain-wallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"xchain-wallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xchain-wallet.com/grok-logo.png","fqdn":"xchain-wallet.com","domain":"xchain-wallet.com","tld":"com"},"ip":{"addr":"104.21.11.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xchain-wallet.com/auth","date":"2026-02-01T20:47:22.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xchain-wallet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 08:56:31 GMT","end":"Tue, 28 Apr 2026 09:55:03 GMT"},"fingerprint":{"sha1":"6A:8F:84:26:13:3B:B2:E5:DC:0C:42:6B:89:03:DA:A6:D2:BE:A3:F5","sha256":"47:6B:0F:3B:A8:45:CC:37:EC:10:9A:C6:5D:3D:89:4F:DC:28:75:84:FE:EE:E6:26:97:9C:76:1D:09:AE:D3:78"}}},"request":{"raw":"GET /grok-logo.png HTTP/1.1\r\nHost: xchain-wallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xchain-wallet.com/auth\r\nCookie: _fbp=fb.1.1769978833011.39701066105781156\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:47:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 13:07:38 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"697f501a-78f8\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U7eNYbUXNPv0IOwYAALlLYgRfv%2BPcuLUuE3ABKtcHRmPYLYmkd4l6h28SENC6CxoVxy1wDLf0E0MfvTDCMW28oHt5XoQSRfwFoRUvMtWSZhs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c744db8094c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30968,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"18b63ae0449e9a94083435cfd1ee64de","sha1":"208c3ccd26aaa62496fe7d097289df13846899b9","sha256":"36eb518517fbff7718f7a72d765142b7e1e5403b3c6c6a3a8dace520e79d63ed","sha512":"00b11a4229c986b25b659be830ad477bef7e517a76297ba5cf7862100e4ab94426f1e54cba732897278a0f96d102df36d4b2b6f0d7b09abf5fef276c7c847ba4","ssdeep":"768:Ndf+RMCPskk8POI8BFN4UCguGO56bJ+eynGBwUA:NK3PskeI8zN47NB8TTA","tlshash":"ecd2d02a922ad434c6b2d9bcda7de1bf4e53fa5be66848cb758c51c701214b90f601e8","first_seen":"2025-11-29T10:23:48.816719Z","last_seen":"2026-03-19T00:03:44.268298Z","times_seen":27,"resource_available":false,"data":null}},"time_used":7040,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7039,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"xchain-wallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"xchain-wallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lhdutqqujotkzdsxlcaw.supabase.co/rest/v1/chat_conversations?select=id,status\u0026guest_id=eq.guest-ecd7f467-de51-42f8-bcff-1e14214ebfe2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"lhdutqqujotkzdsxlcaw.supabase.co","domain":"lhdutqqujotkzdsxlcaw.supabase.co","tld":"supabase.co"},"ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xchain-wallet.com/auth","date":"2026-02-01T20:47:22.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"OPTIONS /rest/v1/chat_conversations?select=id,status\u0026guest_id=eq.guest-ecd7f467-de51-42f8-bcff-1e14214ebfe2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: lhdutqqujotkzdsxlcaw.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: apikey,authorization,content-type,prefer,x-user-id\r\nReferer: https://xchain-wallet.com/\r\nOrigin: https://xchain-wallet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 20:47:23 GMT\r\ncontent-length: 0\r\ncf-ray: 9c744db86d2232fa-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: apikey,authorization,content-type,prefer,x-user-id\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: lhdutqqujotkzdsxlcaw\r\nsb-request-id: 019c1af5-cf49-7567-ba21-2bb71481f415\r\nset-cookie: __cf_bm=raYIWzZZPSq2AWduJq_1RohfpJZk_myFmwfb9iamWkc-1769978843-1.0.1.1-cRwIraTHDeRdScW2fggGG3GVluzR7zHswqGbmgnlh2XG1a.JbvnR47Frf5iA1kizc1sgOXSa99F5Vgn4L7owTNjp_5bGxqmRTVg5S9fvS54; path=/; expires=Sun, 01-Feb-26 21:17:23 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T01:49:07.654675Z","times_seen":17790798,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":55,"dns":35,"connect":1,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xchain-wallet.com/auth","fqdn":"xchain-wallet.com","domain":"xchain-wallet.com","tld":"com"},"ip":{"addr":"104.21.11.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T20:47:11.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xchain-wallet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 08:56:31 GMT","end":"Tue, 28 Apr 2026 09:55:03 GMT"},"fingerprint":{"sha1":"6A:8F:84:26:13:3B:B2:E5:DC:0C:42:6B:89:03:DA:A6:D2:BE:A3:F5","sha256":"47:6B:0F:3B:A8:45:CC:37:EC:10:9A:C6:5D:3D:89:4F:DC:28:75:84:FE:EE:E6:26:97:9C:76:1D:09:AE:D3:78"}}},"request":{"raw":"GET /auth HTTP/1.1\r\nHost: xchain-wallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 20:47:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 01 Feb 2026 13:07:38 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LXWzsmLuR6JB8kXZ5S7VG3nINqHMBHMdu8IAxhLF5qYamIb0B4bsvNzIvARELvjWA0ESDIUxowCaqN7pjEhiBtlXA8l22hlzfZGGUWUm%2FVUY\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c744d73bc33723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1749,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"d32b51e319bbc566842ae08556abe54e","sha1":"570db48a1bdbee37afa87d1e0b8026bfce032c7f","sha256":"8964d495651c5a8b3412cee77c67701ccff446023dc9bae709d5f91d30211e89","sha512":"344987c0ad418c4f295166853782170865d962ec408d5317edfec6c867a02591e4261a065ce0cb66b251fe9e442b5d2b6e614608d3358699be9e62b5d6a4d07a","ssdeep":"","tlshash":"523112160d0dff1f0b78a31c7d32a59d513f5e16821068d265d5502e3cc0e9acebb5a9","first_seen":"2026-02-01T20:47:40.426029Z","last_seen":"2026-02-01T20:47:40.426029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":28,"dns":11,"connect":1,"send":0,"wait":136,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"xchain-wallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"xchain-wallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xchain-wallet.com/assets/index-BepMSRlR.css","fqdn":"xchain-wallet.com","domain":"xchain-wallet.com","tld":"com"},"ip":{"addr":"104.21.11.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xchain-wallet.com/auth","date":"2026-02-01T20:47:12.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xchain-wallet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 08:56:31 GMT","end":"Tue, 28 Apr 2026 09:55:03 GMT"},"fingerprint":{"sha1":"6A:8F:84:26:13:3B:B2:E5:DC:0C:42:6B:89:03:DA:A6:D2:BE:A3:F5","sha256":"47:6B:0F:3B:A8:45:CC:37:EC:10:9A:C6:5D:3D:89:4F:DC:28:75:84:FE:EE:E6:26:97:9C:76:1D:09:AE:D3:78"}}},"request":{"raw":"GET /assets/index-BepMSRlR.css HTTP/1.1\r\nHost: xchain-wallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xchain-wallet.com/auth\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:47:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 01 Feb 2026 13:07:38 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"697f501a-1bb6c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpTgXsWaUvTdLTUub0Ax8Gf3Xwpo9o2tGEjSUcqT3QQu%2F4Ci%2FRRTvuxo1NzZeBDz49NeVSfIPvRWKX9m3GJWjoH5tC0vAzViEvc1QfaCtEkh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c744d764cc24e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113516,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"00fdc1e5322cc6357cbaab4dabb32b29","sha1":"58a39b0a38e1609b612e56ddb6347da7d54b10e4","sha256":"9b433656f36456feb2f006a27edf376a0d9078ac213f9c4b746e51fe0e466932","sha512":"11a54027f6a132c8952720138500a391007dc35098a0458ba5072a08d175d6f34ffbb521c71c8de4144f71f2b45c2e29c9cc1f1801145f15926883f2a0c76964","ssdeep":"3072:KshIesz/JIuIOkIgBUItGiCU378VQZkt5Ff+noD:3hIesz/JIuIOkIgFCU378VQZkt5Ff+nC","tlshash":"d6b38569a969607f7c27b1e4c3cc79acb51ef1c0de3a06b9bd86411427e23f60c6b914","first_seen":"2026-01-31T22:52:06.0458Z","last_seen":"2026-02-01T20:48:27.298576Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"xchain-wallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"xchain-wallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/en_US/fbevents.js","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xchain-wallet.com/auth","date":"2026-02-01T20:47:12.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":"Meta Platforms, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 11 Nov 2025 00:00:00 GMT","end":"Mon, 09 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"43:A7:04:57:57:96:02:F5:47:AD:BF:86:F4:FF:1C:C4:11:EF:9F:70","sha256":"4B:4C:D7:03:FC:50:66:95:54:1F:D0:BF:36:F8:61:3A:B9:5D:04:01:B3:55:74:46:D4:3C:73:D3:64:D2:57:40"}}},"request":{"raw":"GET /en_US/fbevents.js HTTP/1.1\r\nHost: connect.facebook.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xchain-wallet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/x-javascript; charset=utf-8\r\ntiming-allow-origin: *\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", coep_report=\"https://www.facebook.com/browser_reporting/coep/?minimize=0\", permissions_policy=\"https://www.facebook.com/ajax/browser_error_reports/\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":86400,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coep\\/?minimize=0\"}],\"group\":\"coep_report\"}, {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ncontent-security-policy: default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-jo50hdaX' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c\u0026minimize=0;require-trusted-types-for 'script';\r\nx-frame-options: DENY\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy-report-only: require-corp;report-to=\"coep_report\"\r\ncross-origin-opener-policy: same-origin-allow-popups\r\npragma: public\r\ncache-control: public, max-age=1200\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\nx-fb-debug: sFid0hh9EqANzcslNOU5HKKMM8iI2Y2NWqVBqxRbV8aLWZCqFqOlINnS5EokY2Qi9rbFRaKWUXr8Edk55daJtg==\r\ncontent-length: 94313\r\ndate: Sun, 01 Feb 2026 20:47:12 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=13, mss=1380, tbw=3431, tp=-1, tpl=-1, uplat=0, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":354829,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9255)","md5":"e87a2fae81d17c92e1fccca14dbe9de7","sha1":"2bc803036e246c7b6728a60e3f96091bf368139e","sha256":"8ecba1ce3ae993afc9213ba8f6e8605300c8b1ab6db79c4ba5cc6fdc339c1035","sha512":"8379e301da7b428a6d047d1d70f513e5a802a98254fb77e61013456902a08364d35edd5d4b96beef6fd6924b30e9cbace2f13305a557c97e9ab117e0d15e968e","ssdeep":"6144:o7gAQewVkQ6B/xNF/ddurj/Gae5LdgWtkzFz1O5vBU:rStxTdkELdgWtkJ","tlshash":"3074d7c971e1b0a103b6796c966f900bb2bbd5a534ccc960e51dedc8297c49e4133ebb","first_seen":"2026-01-31T04:00:29.344393Z","last_seen":"2026-05-23T14:06:29.164028Z","times_seen":463,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":50,"dns":4,"connect":7,"send":0,"wait":9,"receive":22,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mpc2-prod-29-is5qnl632q-uc.a.run.app/events?cee=no","fqdn":"mpc2-prod-29-is5qnl632q-uc.a.run.app","domain":"mpc2-prod-29-is5qnl632q-uc.a.run.app","tld":"a.run.app"},"ip":{"addr":"34.143.77.2","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xchain-wallet.com/auth","date":"2026-02-01T20:47:13.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a.run.app","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:20 GMT","end":"Mon, 06 Apr 2026 08:36:19 GMT"},"fingerprint":{"sha1":"AD:5B:94:C2:C2:7B:27:BB:43:E1:1C:39:36:12:9A:E1:2E:96:56:66","sha256":"05:B5:A5:1F:A9:C8:B7:3D:00:EA:74:26:4D:C9:19:C8:7F:E9:1F:4D:1F:2D:62:CA:9F:8A:7A:92:CD:6B:64:63"}}},"request":{"raw":"POST /events?cee=no HTTP/1.1\r\nHost: mpc2-prod-29-is5qnl632q-uc.a.run.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xchain-wallet.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 535\r\nOrigin: https://xchain-wallet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":535,"data":"{\"event_name\":\"PageView\",\"fb.dynamic_product_ads\":{},\"custom_data\":{},\"event_id\":\"ob3_plugin-set_94554ebedea9bfcb6d092c5aa6d08239f1e7395294f939e7142981bbfd860d54\",\"fb.pixel_id\":\"1294520532707254\",\"fb.advanced_matching\":{},\"website_context\":{\"location\":\"https://xchain-wallet.com/auth\",\"referrer\":\"\",\"isInIFrame\":false},\"fb.fbp\":\"fb.1.1769978833011.39701066105781156\",\"event_meta_info\":{\"experiment_detail\":{\"name\":\"CEE_STRONG_PII\",\"is_exposed\":false,\"is_in_control\":false,\"is_in_treatment\":true},\"cc_info\":{\"cas\":\"33390093973969820\"}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nvary: origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://xchain-wallet.com\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: application/json\r\nx-cloud-trace-context: 7edc45465c31ce35161d09f886b18906\r\ndate: Sun, 01 Feb 2026 20:47:13 GMT\r\nserver: Google Frontend\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T01:49:07.654675Z","times_seen":17790798,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":90,"dns":20,"connect":8,"send":0,"wait":140,"receive":10,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lhdutqqujotkzdsxlcaw.supabase.co/rest/v1/chat_conversations?select=id,status\u0026guest_id=eq.guest-ecd7f467-de51-42f8-bcff-1e14214ebfe2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1","fqdn":"lhdutqqujotkzdsxlcaw.supabase.co","domain":"lhdutqqujotkzdsxlcaw.supabase.co","tld":"supabase.co"},"ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xchain-wallet.com/auth","date":"2026-02-01T20:47:23.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"GET /rest/v1/chat_conversations?select=id,status\u0026guest_id=eq.guest-ecd7f467-de51-42f8-bcff-1e14214ebfe2\u0026status=in.(active,waiting_manager,with_manager)\u0026order=created_at.desc\u0026limit=1 HTTP/1.1\r\nHost: lhdutqqujotkzdsxlcaw.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xchain-wallet.com/\r\nContent-Type: application/json\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImxoZHV0cXF1am90a3pkc3hsY2F3Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3Njk4Mzk1ODYsImV4cCI6MjA4NTQxNTU4Nn0.ueLv0lIk1A4C1kiKoJAqLUX7Vom4eyVLiJivsxPLh8E\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImxoZHV0cXF1am90a3pkc3hsY2F3Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3Njk4Mzk1ODYsImV4cCI6MjA4NTQxNTU4Nn0.ueLv0lIk1A4C1kiKoJAqLUX7Vom4eyVLiJivsxPLh8E\r\nx-user-id: guest-ecd7f467-de51-42f8-bcff-1e14214ebfe2\r\nPrefer: return=minimal\r\nOrigin: https://xchain-wallet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 20:47:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\ncontent-range: */*\r\ncf-ray: 9c744db8eeb232fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://xchain-wallet.com\r\ncontent-location: /chat_conversations?guest_id=eq.guest-ecd7f467-de51-42f8-bcff-1e14214ebfe2\u0026limit=1\u0026order=created_at.desc\u0026select=id%2Cstatus\u0026status=in.%28active%2Cwaiting_manager%2Cwith_manager%29\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: lhdutqqujotkzdsxlcaw\r\nsb-request-id: 019c1af5-cf97-7ef3-b34b-0fc4850e18f4\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 113\r\nset-cookie: __cf_bm=kfLVZhpA2r.2QJyKHXlqniC.FTiI5KwEC8U9B3FadpE-1769978843-1.0.1.1-VJCmF3nVVt5Qcrcm2mB4Oryo84Yi7CUxFVGzSUQxuQBTPeEyCdQFSk3aIn3NQPfW1QS3nj7xr6.JL2TZ27yjxbnjkdoecAcMXToPiI62cLw; path=/; expires=Sun, 01-Feb-26 21:17:23 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-09T01:45:02.080566Z","times_seen":315074,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
