3 ms·

Well, I suppose it's nice we now have a canonical example of how not to do messaging around a successful credential stuffing attack...