Achei isso nas requets do meu site, é perigoso? oq...

Question

Achei isso nas requets do meu site, é perigoso? oque dá pra fazer? curl 'https://dyvilcenter.online/admin'
-H 'accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7'
-H 'accept-language: pt-BR,pt;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6'
-H 'priority: u=0, i'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0'
-H 'sec-ch-ua-platform: "Windows"'
-H 'sec-fetch-dest: document'
-H 'sec-fetch-mode: navigate'
-H 'sec-fetch-site: none'
-H 'sec-fetch-user: ?1'
-H 'upgrade-insecure-requests: 1'
-H 'user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0' ;
curl 'https://dyvilcenter.online/assets/index-CtBWP8Vf.js'
-H 'Origin: https://dyvilcenter.online'
-H 'sec-ch-ua-platform: "Windows"'
-H 'Referer: https://dyvilcenter.online/admin'
-H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0' ;
curl 'https://dyvilcenter.online/assets/index-CJh4SNdv.css'
-H 'Origin: https://dyvilcenter.online'
-H 'sec-ch-ua-platform: "Windows"'
-H 'Referer: https://dyvilcenter.online/admin'
-H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0' ;
curl 'https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap'
-H 'sec-ch-ua-platform: "Windows"'
-H 'Referer: https://dyvilcenter.online/'
-H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0' ;
curl 'https://fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2'
-H 'Origin: https://dyvilcenter.online'
-H 'sec-ch-ua-platform: "Windows"'
-H 'Referer: https://fonts.googleapis.com/'
-H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0' ;
curl 'data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTYiIGhlaWdodD0iMTYiIHZpZXdCb3g9IjAgMCAxNiAxNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4NCjxwYXRoIGQ9Ik0xLjI2IDkuNkE2Ljk3IDYuOTcgMCAwMTggNGMzLjIgMCA2LjA2IDIuMzMgNi43NCA1LjZhLjUuNSAwIDAwLjk4LS4yQTcuOTcgNy45NyAwIDAwOCAzIDcuOTcgNy45NyAwIDAwLjI4IDkuNGEuNS41IDAgMDAuOTguMnoiIGZpbGw9IldpbmRvd1RleHQiLz48cGF0aCBkPSJNOCA2YTMuNSAzLjUgMCAxMDAgNyAzLjUgMy41IDAgMDAwLTd6TTUuNSA5LjVhMi41IDIuNSAwIDExNSAwIDIuNSAyLjUgMCAwMS01IDB6IiBmaWxsPSJXaW5kb3dUZXh0Ii8+DQo8L3N2Zz4=' -H 'Referer;' ;
curl 2b $10$ .jzBgpyomKlrz3kOxEU5zeYuCyAJxwadejpvl2JrPT/6LHdes/13m","user_type":"pro","is_admin":false,"credits":0,"plan_duration":"30 dias","ranking":999,"telegram_id":"606768162","telegram_username":"teste1","is_active":false,"created_at":"2025-08-20T13:02:12.171Z","affiliate_code":"9842","invited_by":null,"total_credits_earned":0,"total_credits_added":0,"total_logins":0,"nickname":"Scrowzera"}' ;
curl 'https://uztutytgteeowoqtzfut.supabase.co/rest/v1/users?select=count&limit=1'
-H 'accept: application/json'
-H 'accept-language: pt-BR,pt;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6'
-H 'accept-profile: public'
-H 'apikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'content-type: application/json'
-H 'origin: https://dyvilcenter.online'
-H 'priority: u=1, i'
-H 'referer: https://dyvilcenter.online/'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0'
-H 'sec-ch-ua-platform: "Windows"'
-H 'sec-fetch-dest: empty'
-H 'sec-fetch-mode: cors'
-H 'sec-fetch-site: cross-site'
-H 'user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0'
-H 'x-client-info: supabase-js/2.38.4' ;
curl 'https://uztutytgteeowoqtzfut.supabase.co/rest/v1/payments?select=*&limit=1'
-H 'accept: application/json'
-H 'accept-language: pt-BR,pt;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6'
-H 'accept-profile: public'
-H 'apikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'content-type: application/json'
-H 'origin: https://dyvilcenter.online'
-H 'priority: u=1, i'
-H 'referer: https://dyvilcenter.online/'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0'
-H 'sec-ch-ua-platform: "Windows"'
-H 'sec-fetch-dest: empty'
-H 'sec-fetch-mode: cors'
-H 'sec-fetch-site: cross-site'
-H 'user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0'
-H 'x-client-info: supabase-js/2.38.4' ;
curl 'https://uztutytgteeowoqtzfut.supabase.co/rest/v1/users?select=*&limit=1'
-H 'accept: application/json'
-H 'accept-language: pt-BR,pt;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6'
-H 'accept-profile: public'
-H 'apikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'content-type: application/json'
-H 'origin: https://dyvilcenter.online'
-H 'priority: u=1, i'
-H 'referer: https://dyvilcenter.online/'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0'
-H 'sec-ch-ua-platform: "Windows"'
-H 'sec-fetch-dest: empty'
-H 'sec-fetch-mode: cors'
-H 'sec-fetch-site: cross-site'
-H 'user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0'
-H 'x-client-info: supabase-js/2.38.4' ;
curl 'https://uztutytgteeowoqtzfut.supabase.co/rest/v1/payments?select=count&limit=1'
-H 'accept: application/json'
-H 'accept-language: pt-BR,pt;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6'
-H 'accept-profile: public'
-H 'apikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'content-type: application/json'
-H 'origin: https://dyvilcenter.online'
-H 'priority: u=1, i'
-H 'referer: https://dyvilcenter.online/'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0'
-H 'sec-ch-ua-platform: "Windows"'
-H 'sec-fetch-dest: empty'
-H 'sec-fetch-mode: cors'
-H 'sec-fetch-site: cross-site'
-H 'user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0'
-H 'x-client-info: supabase-js/2.38.4' ;
curl 'https://uztutytgteeowoqtzfut.supabase.co/rest/v1/payments?select='
-H 'accept: application/json'
-H 'accept-language: pt-BR,pt;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6'
-H 'apikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'content-profile: public'
-H 'content-type: application/json'
-H 'origin: https://dyvilcenter.online'
-H 'prefer: return=representation'
-H 'priority: u=1, i'
-H 'referer: https://dyvilcenter.online/'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0'
-H 'sec-ch-ua-platform: "Windows"'
-H 'sec-fetch-dest: empty'
-H 'sec-fetch-mode: cors'
-H 'sec-fetch-site: cross-site'
-H 'user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0'
-H 'x-client-info: supabase-js/2.38.4'
-H 'x-supabase-auth: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'x-supabase-auth-override: true'
-H 'x-supabase-role: service_role'
--data-raw '{"id":"5aaaaf5f-7fc5-4b8c-99d8-42647d2de33d","user_id":"e19be94e-7bdf-4a89-98f4-34877b123e72","username":"Scrowzera","credits":50,"price":50,"status":"pending","created_at":"2025-08-20T13:02:12.610Z","telegram_username":"teste1","telegram_id":"606768162","source":"register"}' ;
curl 'https://uztutytgteeowoqtzfut.supabase.co/rest/v1/payments?select='
-X 'OPTIONS'
-H 'accept: /'
-H 'accept-language: pt-BR,pt;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6'
-H 'access-control-request-headers: apikey,authorization,content-profile,content-type,prefer,x-client-info,x-supabase-auth,x-supabase-auth-override,x-supabase-role'
-H 'access-control-request-method: POST'
-H 'origin: https://dyvilcenter.online'
-H 'priority: u=1, i'
-H 'referer: https://dyvilcenter.online/'
-H 'sec-fetch-dest: empty'
-H 'sec-fetch-mode: cors'
-H 'sec-fetch-site: cross-site'
-H 'user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0' ;
curl 'https://uztutytgteeowoqtzfut.supabase.co/rest/v1/invites?select=count&limit=1'
-H 'accept: application/json'
-H 'accept-language: pt-BR,pt;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6'
-H 'accept-profile: public'
-H 'apikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'content-type: application/json'
-H 'origin: https://dyvilcenter.online'
-H 'priority: u=1, i'
-H 'referer: https://dyvilcenter.online/'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0'
-H 'sec-ch-ua-platform: "Windows"'
-H 'sec-fetch-dest: empty'
-H 'sec-fetch-mode: cors'
-H 'sec-fetch-site: cross-site'
-H 'user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0'
-H 'x-client-info: supabase-js/2.38.4' ;
curl 'https://uztutytgteeowoqtzfut.supabase.co/rest/v1/users?select=*'
-H 'accept: application/vnd.pgrst.object+json'
-H 'accept-language: pt-BR,pt;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6'
-H 'apikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'content-profile: public'
-H 'content-type: application/json'
-H 'origin: https://dyvilcenter.online'
-H 'prefer: return=representation'
-H 'priority: u=1, i'
-H 'referer: https://dyvilcenter.online/'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0'
-H 'sec-ch-ua-platform: "Windows"'
-H 'sec-fetch-dest: empty'
-H 'sec-fetch-mode: cors'
-H 'sec-fetch-site: cross-site'
-H 'user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0'
-H 'x-client-info: supabase-js/2.38.4'
-H 'x-supabase-auth: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'x-supabase-auth-override: true'
-H 'x-supabase-role: service_role'
--data-raw '{"id":"a0fe81f5-1438-452f-8d7d-477092b75815","username":"Scrowzera","password":" $2b$ 10$DHTNFZyrnETzNAr36m0kVeqAY1Jg0pNB62t/by7AXNBLpQX8s6w5K","user_type":"pro","is_admin":false,"credits":0,"plan_duration":"30 dias","ranking":999,"telegram_id":"606768162","telegram_username":"teste1","is_active":false,"created_at":"2025-08-20T13:02:12.504Z","affiliate_code":"4093","invited_by":null,"total_credits_earned":0,"total_credits_added":0,"total_logins":0,"nickname":"Scrowzera"}' ;
curl 'https://uztutytgteeowoqtzfut.supabase.co/rest/v1/users?select=*&limit=1'
-H 'accept: application/json'
-H 'accept-language: pt-BR,pt;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6'
-H 'accept-profile: public'
-H 'apikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'content-type: application/json'
-H 'origin: https://dyvilcenter.online'
-H 'priority: u=1, i'
-H 'referer: https://dyvilcenter.online/'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0'
-H 'sec-ch-ua-platform: "Windows"'
-H 'sec-fetch-dest: empty'
-H 'sec-fetch-mode: cors'
-H 'sec-fetch-site: cross-site'
-H 'user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0'
-H 'x-client-info: supabase-js/2.38.4' ;
curl 'https://uztutytgteeowoqtzfut.supabase.co/rest/v1/users?select=id%2Cusername&username=eq.Scrowzera'
-H 'accept: application/json'
-H 'accept-language: pt-BR,pt;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6'
-H 'accept-profile: public'
-H 'apikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'content-type: application/json'
-H 'origin: https://dyvilcenter.online'
-H 'priority: u=1, i'
-H 'referer: https://dyvilcenter.online/'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0'
-H 'sec-ch-ua-platform: "Windows"'
-H 'sec-fetch-dest: empty'
-H 'sec-fetch-mode: cors'
-H 'sec-fetch-site: cross-site'
-H 'user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0'
-H 'x-client-info: supabase-js/2.38.4' ;
curl 'https://uztutytgteeowoqtzfut.supabase.co/rest/v1/users?select=id%2Ctelegram_id&telegram_id=eq.606768162'
-H 'accept: application/json'
-H 'accept-language: pt-BR,pt;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6'
-H 'accept-profile: public'
-H 'apikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'content-type: application/json'
-H 'origin: https://dyvilcenter.online'
-H 'priority: u=1, i'
-H 'referer: https://dyvilcenter.online/'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0'
-H 'sec-ch-ua-platform: "Windows"'
-H 'sec-fetch-dest: empty'
-H 'sec-fetch-mode: cors'
-H 'sec-fetch-site: cross-site'
-H 'user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0'
-H 'x-client-info: supabase-js/2.38.4' ;
curl 'https://uztutytgteeowoqtzfut.supabase.co/rest/v1/users?select=id%2Ctelegram_username&telegram_username=eq.teste1'
-H 'accept: application/json'
-H 'accept-language: pt-BR,pt;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6'
-H 'accept-profile: public'
-H 'apikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InV6dHV0eXRndGVlb3dvcXR6ZnV0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTQzMjk4OTEsImV4cCI6MjA2OTkwNTg5MX0.J8b_k2Y3UWKhogMbgYRjALdM9rtaUzKR0KV4q1nkCuk'
-H 'content-type: application/json'
-H 'origin: https://dyvilcenter.online'
-H 'priority: u=1, i'
-H 'referer: https://dyvilcenter.online/'
-H 'sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"'
-H 'sec-ch-ua-mobile: ?0'
-H 'sec-ch-ua-platform: "Windows"'
-H 'sec-fetch-dest: empty'
-H 'sec-fetch-mode: cors'
-H 'sec-fetch-site: cross-site'
-H 'user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0'
-H 'x-client-info: supabase-js/2.38.4'

Answer 1

Curto e grosso: isso é suspeito e potencialmente perigoso.

O que esses requests indicam

Acesso à sua rota /admin e carregamento de assets (JS/CSS/Google Fonts) — pode ser só alguém abrindo a página, mas…
Varrida ao seu banco do Supabase via REST (/rest/v1/…) usando seu apikey público (provavelmente o anon key):
- Muitas consultas com ?select=count&limit=1 → enumeração de tabelas (users, payments, invites).
- Consultas por username, telegram_id, affiliate_code → tentativa de descobrir/validar dados de usuários.
- Tentativas de inserção (POST) em users e payments com cabeçalhos x-supabase-auth-override: true e x-supabase-role: service_role → tentativa de burlar permissões.
Os JWTs nos headers mostram role":"anon (pelo que você colou). Se alguma dessas escritas funcionou, então suas políticas de RLS estão abertas demais ou o service_role vazou (gravíssimo).

Mesmo que o anon key seja público por design, sem RLS bem configurado um atacante consegue ler/escrever dados.

O que fazer agora (ordem de urgência)

Rotacione as chaves do Supabase imediatamente
- Em Project Settings → API: rotate o anon key e o service_role key.
- Atualize o front-end com o novo anon key.
- Nunca deixe o service_role no front-end, repositório ou logs.
Habilite/feche o RLS (Row Level Security) em todas as tabelas sensíveis
- users, payments, invites e quaisquer outras com dados de conta/pagamento.
- Sem política explícita, a regra deve ser: ninguém vê nada.
- Exemplos (ajuste nomes/colunas ao seu schema):

sql
-- 1) Garantir RLS ligado
alter table public.users enable row level security;
alter table public.payments enable row level security;
alter table public.invites enable row level security;

-- 2) Bloqueio geral (opcional, mas recomendado como base)
drop policy if exists "open_select_users" on public.users;
-- Sem policy = sem acesso

-- 3) Policies mínimas (apenas usuário logado vê o que é dele)
create policy "users_select_own"
on public.users for select
to authenticated
using (auth.uid() = id); -- ou user_id, conforme seu schema

create policy "users_insert_self"
on public.users for insert
to authenticated
with check (auth.uid() = id);

create policy "users_update_self"
on public.users for update
to authenticated
using (auth.uid() = id)
with check (auth.uid() = id);

-- payments referenciando user_id
create policy "payments_select_own"
on public.payments for select
to authenticated
using (user_id = auth.uid());

create policy "payments_insert_own"
on public.payments for insert
to authenticated
with check (user_id = auth.uid());

Audite e limpe dados inseridos pelo atacante
- Procure por registros próximos de 2025-08-20 13:02:12Z com IDs/valores que você colou (e19be94e-…, a0fe81f5-…, 5aaaaf5f-…, status='pending', username='Scrowzera', telegram_* etc.) e exclua/estorne.
- Em Logs → API/Database, filtre REST insert/update com 201/204.
Proteja a rota /admin
- Exigir auth + role admin + 2FA.
- Se for SPA: guard no front e cheque no back (Edge Function/Server) antes de retornar dados.
CORS, mas sem ilusões
- Em Auth/API limite CORS ao seu domínio. Ajuda contra abuso via browser, não bloqueia cURL/Postman.
Não exponha operações privilegiadas no cliente
- Qualquer ação que crie/edite users/payments/invites deve ir por Edge Function/API server com o service_role somente no servidor, nunca no browser.
Rate limiting / WAF / Captcha
- Ative Cloudflare/NGINX WAF no seu domínio, rate limits por IP/rota e Captcha em cadastros/login/“invite”.
- Se estiver no plano que suporta, habilite network restrictions do Supabase (allowlist de IP para PostgREST/DB).
Integridade do schema
- Adicione constraints (UNIQUE em username, telegram_id, etc.), FKs (payments.user_id → auth.users.id) e defaults corretos.
- Evite guardar password em public.users. Use auth.users do Supabase para credenciais; se tiver tabela espelho, nunca aceite senha do cliente ali.
Alerta de tentativa de elevação
- Bloqueie/monitore requisições com x-supabase-auth-override fora do seu backend. Essa flag só deve funcionar com service_role e uso controlado.

Como saber se já te afetou

Se nas policies atuais o anon consegue select/insert nessas tabelas, o atacante conseguiu ver/criar dados.
Se algum request retornou 201 (inserção criada) nos logs do Supabase, houve sucesso.
Se por engano você publicou o service_role (código/cliente/repo), considere comprometimento total do banco.

Próximos passos que posso te entregar já

Posso te ajudar a escrever as policies certinhas para o seu schema real (cola aqui o CREATE TABLE/colunas de users, payments, invites).
Se preferir, te passo um checklist SQL para:
1. listar policies ativas por tabela,
2. ligar RLS onde faltar,
3. buscar e remover registros suspeitos por período/valores.

Quer que eu gere esse script de auditoria e as policies sob medida?

Achei isso nas requets do meu site, é perigoso? oq...

質問

思考

Securing supabase setup

Responding to potential security issues

Securing Supabase setup

Providing immediate steps

Security steps summary

回答

O que esses requests indicam

O que fazer agora (ordem de urgência)

Como saber se já te afetou

Próximos passos que posso te entregar já

このQ&Aを共有