social media network

finance banking

English

You're looking at domain 'financial-coral-k8dlb48t0e-na5qm7esrt.edgeone.app' on the application-focused generic top-level domain (.app) with subdomain 'financial-coral-k8dlb48t0e-na5qm7esrt'. The second-level label 'edgeone' is 7 characters long split between four vowels and 3 consonants. Breaking it apart gives two words: edge, one. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

html/30/fd/30fd63f2-d840-4b5a-8070-d77c99c83c13.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

020f3c1183635ae710e7334e708938ef5f4fa57776852ae8e79429e40d512294

7928369a406440002cb4b79ce79e2374bb580a6f189a16db2e400cdfa80e3130

6f10791f42de6c8708ada99086c3469eebb1dd55d4aa872dfb9848ddf19dcd2b

b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03

width=device-width, initial-scale=1.0, user-scalable=no

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


        // FIREBASE CONFIG
        const firebaseConfig = {
            apiKey: "AIzaSyA1k7E4EDYQDaKp5eLDKEJN4khKkeRnshY",
            authDomain: "demobottg.firebaseapp.com",
            databaseURL: "https://demobottg-default-rtdb.firebaseio.com",
            projectId: "demobottg",
            storageBucket: "demobottg.firebasestorage.app",
            messagingSenderId: "777874703662",
            appId: "1:777874703662:web:174034a9200fc7eb92e6bf"
        };
        firebase.initializeApp(firebaseConfig);
        const db = firebase.database();
        const tg = window.Telegram.WebApp;
        tg.ready(); tg.expand();

        // APP STATE
        let appState = {
            user: { balance: 0, totalEarned: 0, referrals: 0, dailyAds: {}, taskHistory: {} },
            config: {},
            leaderboard: [],
            history: []
        };

        // --- 1. INITIALIZATION ---
        window.onload = async () => {
            // STRICT TELEGRAM CHECK
            if (!tg.initDataUnsafe || !tg.initDataUnsafe.user) {
                document.getElementById('loader').style.display = 'none';
                document.getElementById('error-screen').style.display = 'flex';
                return;
            }

            const tgUser = tg.initDataUnsafe.user;
            const lStatus = document.getElementById('loader-status');

            try {
                lStatus.innerText = "Syncing Profile...";
                
                // 1. GET CONFIG
                const cSnap = await db.ref('config').once('value');
                appState.config = cSnap.val() || {};

                // 2. GET USER (One-Time Fetch)
                const uRef = db.ref(`users/${tgUser.id}`);
                const uSnap = await uRef.once('value');

                if (!uSnap.exists()) {
                    // NEW USER
                    const refId = tg.initDataUnsafe.start_param;
                    appState.user = {
                        id: tgUser.id, firstName: tgUser.first_name,
                        photoUrl: tgUser.photo_url || '',
                        balance: 0, totalEarned: 0, referrals: 0,
                        referredBy: refId || null, dailyAds: {}, taskHistory: {},
                        lastActive: new Date().toISOString().slice(0, 10),
                        isBanned: false
                    };
                    // Handle Referral
                    if (refId && refId != tgUser.id) {
                        await db.ref(`users/${refId}`).transaction(r => {
                            if (r) { 
                                r.referrals = (r.referrals || 0) + 1; 
                                r.balance = (r.balance || 0) + (appState.config.referralBonus || 0); 
                            }
                            return r;
                        });
                    }
                    await uRef.set(appState.user);
                } else {
                    // EXISTING USER
                    appState.user = uSnap.val();
                    if (appState.user.isBanned) {
                        document.getElementById('loader').style.display = 'none';
                        document.getElementById('ban-screen').style.display = 'flex';
                        return;
                    }
                    // Update Profile if changed
                    if (tgUser.photo_url && appState.user.photoUrl !== tgUser.photo_url) {
                        appState.user.photoUrl = tgUser.photo_url;
                        uRef.update({ photoUrl: tgUser.photo_url });
                    }
                }

                // 3. FETCH LEADERBOARD (Optimized: Sort Client-Side)
                lStatus.innerText = "Updating Rankings...";
                const lbSnap = await db.ref('users').once('value');
                if (lbSnap.exists()) {
                    let allUsers = Object.values(lbSnap.val());
                    // Filter valid users & Sort by Referrals
                    allUsers = allUsers.filter(u => u.firstName);
                    allUsers.sort((a, b) => (b.referrals || 0) - (a.referrals || 0));
                    appState.leaderboard = allUsers.slice(0, 50); // Top 50
                }

                // 4. FETCH HISTORY
                await loadHistoryFromDB(tgUser.id);

                // READY
                renderAll();
                document.getElementById('loader').style.display = 'none';
                document.getElementById('app').style.display = 'block';

            } catch (e) {
                console.error(e);
                lStatus.innerText = "Connection Failed. Retrying...";
                setTimeout(() => location.reload(), 3000);
            }
        };

        // --- HELPER: LOAD HISTORY ---
        async function loadHistoryFromDB(uid) {
            const pSnap = await db.ref('withdrawals/pending').orderByChild('userId').equalTo(uid).limitToLast(5).once('value');
            const cSnap = await db.ref('withdrawals/completed').orderByChild('userId').equalTo(uid).limitToLast(5).once('value');
            const rSnap = await db.ref('withdrawals/rejected').orderByChild('userId').equalTo(uid).limitToLast(5).once('value');
            
            let h = [];
            pSnap.forEach(c => h.push({...c.val(), status:'pending'}));
            cSnap.forEach(c => h.push({...c.val(), status:'completed'}));
            rSnap.forEach(c => h.push({...c.val(), status:'rejected'}));
            
            h.sort((a,b) => b.timestamp - a.timestamp);
            appState.history = h.slice(0, 10);
        }

        // --- RENDER UI ---
        function renderAll() {
            // Config
            const sym = appState.config.currencySymbol || "TK";
            document.querySelectorAll('.currency').forEach(e => e.innerText = sym);
            
            // User Data
            const u = appState.user;
            document.getElementById('u-img').src = u.photoUrl || 'https://via.placeholder.com/50';
            document.getElementById('u-name').innerText = u.firstName;
            document.getElementById('u-id').innerText = `ID: ${u.id}`;
            document.getElementById('u-bal').innerText = u.balance.toFixed(2);
            document.getElementById('u-earn').innerText = u.totalEarned.toFixed(2);
            document.getElementById('u-ref').innerText = u.referrals;
            document.getElementById('ref-link').value = `https://t.me/${appState.config.botUsername}?startapp=${u.id}`;

            renderAds(); 
            renderTasks(); 
            renderLeaderboard(); 
            renderHistory(); 
            renderMethods(); 
            loadAdScripts();
        }

        // --- CORE LOGIC (ADS) ---
        function loadAdScripts() {
            (appState.config.adSlots||[]).forEach(s => {
                if(s.network==='monetag' && !document.querySelector(`script[data-zone="${s.id}"]`)) {
                    let sc=document.createElement('script'); sc.src='//libtl.com/sdk.js'; sc.dataset.zone=s.id; sc.dataset.sdk=`show_${s.id}`; document.body.appendChild(sc);
                } else if(s.network==='gigapub') {
                    let sc=document.createElement('script'); sc.src=`https://ad.gigapub.tech/script?id=${s.id}`; document.body.appendChild(sc);
                }
            });
        }
        function renderAds() {
            const el = document.getElementById('ad-area'); el.innerHTML = '';
            const today = new Date().toISOString().slice(0,10);
            
            // Check Daily Limit Reset
            if (appState.user.lastActive !== today) {
                appState.user.dailyAds = {};
                appState.user.lastActive = today;
                // Sync reset to DB silently
                db.ref(`users/${appState.user.id}`).update({ dailyAds: {}, lastActive: today });
            }

            (appState.config.adSlots||[]).forEach((s, i) => {
                const limit = appState.config.dailyAdLimit || 10;
                const done = (appState.user.dailyAds && appState.user.dailyAds[s.id]) || 0;
                const max = done >= limit;
                
                el.innerHTML += `
                    <div class="ad-card ${max?'disabled':''}" onclick="${max?'':`watchAd('${s.id}','${s.network}')`}">
                        <i class="fas fa-play"></i>
                        <h4>Ad Slot ${i+1}</h4>
                        <span>${done}/${limit} Watched</span>
                    </div>`;
            });
        }
        function watchAd(id, net) {
            toast("Loading Ad..."); tg.HapticFeedback.impactOccurred('light');
            let p;
            if(net==='monetag' && window[`show_${id}`]) p = window[`show_${id}`]();
            else if(net==='gigapub' && window.showGiga) p = window.showGiga();
            else { toast("Ad Not Ready"); return; }

            p.then(async () => {
                const r = appState.config.adReward || 0.5;
                
                // 1. Optimistic Update (UI First)
                appState.user.balance += r;
                appState.user.totalEarned += r;
                if(!appState.user.dailyAds) appState.user.dailyAds = {};
                appState.user.dailyAds[id] = (appState.user.dailyAds[id]||0) + 1;
                renderAll();
                toast(`Success! +${r}`);
                tg.HapticFeedback.notificationOccurred('success');

                // 2. Background Sync (Write to DB)
                await db.ref(`users/${appState.user.id}`).update({
                    balance: appState.user.balance,
                    totalEarned: appState.user.totalEarned,
                    [`dailyAds/${id}`]: appState.user.dailyAds[id]
                });

            }).catch(() => toast("Ad Closed/Failed"));
        }

        // --- CORE LOGIC (TASKS) ---
        function renderTasks() {
            const el = document.getElementById('task-area'); el.innerHTML = '';
            const today = new Date().toISOString().slice(0,10);
            const tasks = appState.config.webTasks || {};
            const sym = appState.config.currencySymbol || "TK";
            
            let pending = [], completed = [];

            Object.keys(tasks).forEach(k => {
                const t = tasks[k];
                const h = (appState.user.taskHistory && appState.user.taskHistory[k]) || {};
                let isDone = false;

                if(t.type === 'onetime' && h.ts) return; // Hide forever
                if(t.type === 'daily' && h.date === today) isDone = true;

                const html = `
                    <div class="task-item" style="opacity:${isDone?0.6:1}">
                        <div class="task-left">
                            <img src="${t.icon||'https://via.placeholder.com/40'}" class="task-icon">
                            <div class="task-info"><h4>${t.name}</h4><small>+${t.reward} ${sym}</small></div>
                        </div>
                        ${isDone 
                            ? `<button class="btn-act btn-wait" disabled>Done</button>` 
                            : `<button id="btn-${k}" class="btn-act btn-start" onclick="runTask('${k}')">Start</button>`}
                    </div>`;
                
                if(isDone) completed.push(html); else pending.push(html);
            });
            el.innerHTML = pending.join('') + completed.join('');
        }

        function runTask(id) {
            const t = appState.config.webTasks[id];
            tg.openLink(t.url); tg.HapticFeedback.impactOccurred('medium');
            
            const btn = document.getElementById(`btn-${id}`);
            let s = 15;
            btn.className = 'btn-act btn-wait'; btn.disabled = true;
            
            const i = setInterval(() => {
                btn.innerText = `${s}s`; s--;
                if(s < 0) {
                    clearInterval(i);
                    btn.className = 'btn-act btn-claim'; btn.innerText = 'Claim'; btn.disabled = false;
                    btn.onclick = () => claimTask(id, t);
                    tg.HapticFeedback.notificationOccurred('success');
                }
            }, 1000);
        }

        async function claimTask(id, t) {
            const today = new Date().toISOString().slice(0,10);
            
            // 1. Optimistic Update
            appState.user.balance += t.reward;
            appState.user.totalEarned += t.reward;
            if(!appState.user.taskHistory) appState.user.taskHistory = {};
            appState.user.taskHistory[id] = { ts: Date.now(), date: today };
            
            renderAll();
            toast("Claimed!");

            // 2. Background Sync
            await db.ref(`users/${appState.user.id}`).update({
                balance: appState.user.balance,
                totalEarned: appState.user.totalEarned,
                [`taskHistory/${id}`]: appState.user.taskHistory[id]
            });
        }

        // --- LEADERBOARD ---
        function renderLeaderboard() {
            const p = document.getElementById('podium-area'); const l = document.getElementById('lb-area');
            p.innerHTML = ''; l.innerHTML = '';
            const top = appState.leaderboard;

            if(top.length === 0) { p.innerHTML='<p style="text-align:center">No Data</p>'; return; }

            // Podium (2-1-3)
            if(top[1]) p.innerHTML += getPodium(top[1], 2);
            if(top[0]) p.innerHTML += getPodium(top[0], 1);
            if(top[2]) p.innerHTML += getPodium(top[2], 3);

            for(let i=3; i<top.length; i++) {
                const u = top[i];
                l.innerHTML += `
                    <div class="lb-item">
                        <span class="lb-rank">#${i+1}</span>
                        <img src="${u.photoUrl||'https://via.placeholder.com/40'}" class="lb-img">
                        <div class="lb-name">${u.firstName}</div>
                        <div class="lb-val">${u.referrals}</div>
                    </div>`;
            }
        }
        function getPodium(u, r) {
            return `<div class="podium-item rank-${r}"><div class="crown"><i class="fas fa-crown"></i></div><img src="${u.photoUrl||'https://via.placeholder.com/60'}" class="podium-img"><div class="podium-name">${u.firstName}</div><div class="podium-score">${u.referrals} Refs</div></div>`;
        }

        // --- WITHDRAW ---
        async function withdraw() {
            const min = appState.config.minWithdrawReferrals || 0;
            if(appState.user.referrals < min) { 
                document.getElementById('w-msg').style.display='block'; 
                document.getElementById('w-msg').innerText=`Need ${min} Referrals!`; return; 
            }
            const amt = parseFloat(document.getElementById('w-amt').value);
            const sym = appState.config.currencySymbol || "TK";
            if(!amt || amt < 10) { toast("Min 10 "+sym); return; }
            if(amt > appState.user.balance) { toast("Insufficient Balance"); return; }

            toast("Processing...");
            
            // Deduct & Sync
            appState.user.balance -= amt;
            renderAll();

            try {
                const k = db.ref('withdrawals/pending').push().key;
                const req = {
                    userId: appState.user.id, userName: appState.user.firstName, 
                    amount: amt, method: document.getElementById('w-method').value,
                    account: document.getElementById('w-acc').value, timestamp: Date.now()
                };
                
                await db.ref(`withdrawals/pending/${k}`).set(req);
                await db.ref(`users/${appState.user.id}/balance`).set(appState.user.balance);
                
                // Refresh History from DB to be consistent
                await loadHistoryFromDB(appState.user.id);
                renderAll();
                toast("Submitted Successfully!"); tg.HapticFeedback.notificationOccurred('success');
            } catch(e) {
                appState.user.balance += amt; // Rollback
                renderAll();
                toast("Network Error");
            }
        }

        function renderHistory() {
            const el = document.getElementById('hist-area'); el.innerHTML = '';
            const h = appState.history;
            const sym = appState.config.currencySymbol || "TK";
            if(h.length === 0) { el.innerHTML='<p style="text-align:center;color:#aaa">No History</p>'; return; }
            h.forEach(x => {
                el.innerHTML += `
                    <div class="hist-item ${x.status}">
                        <div class="hist-info">
                            <h4>${x.method} - ${x.amount} ${sym}</h4>
                            <small>${new Date(x.timestamp).toLocaleDateString()}</small>
                        </div>
                        <span class="status-badge">${x.status}</span>
                    </div>`;
            });
        }

        function renderMethods() {
            const s = document.getElementById('w-method'); if(s.children.length > 0) return;
            (appState.config.withdrawMethods||[]).forEach(m => s.innerHTML+=`<option value="${m.name}">${m.name} (Min ${m.min})</option>`);
        }

        function nav(p, e) {
            document.querySelectorAll('.page').forEach(x => x.classList.remove('active'));
            document.getElementById(p).classList.add('active');
            document.querySelectorAll('.nav i').forEach(x => x.classList.remove('active'));
            e.classList.add('active');
            tg.HapticFeedback.impactOccurred('light');
        }
        function copyRef() { const e = document.getElementById('ref-link'); e.select(); document.execCommand('copy'); toast("Copied!"); }
        function shareTg() { const link = document.getElementById('ref-link').value; tg.openTelegramLink(`https://t.me/share/url?url=${link}&text=Join and Earn!`); }
        function openSupport() { if(appState.config.supportLink) tg.openLink(appState.config.supportLink); else toast("No Support Link"); }
        function toast(m) { const t = document.getElementById('toast'); t.innerText=m; t.classList.add('show'); setTimeout(()=>t.classList.remove('show'),3000); }
    

Earn Wallet

✅ Low Risk - https://financial-coral-k8dlb48t0e-na5qm7esrt.edgeone.app/

Requests	IP Address	Location	AS Autonomous System
3	142.250.186.131	United States	AS15169GOOGLE
3	104.17.25.14	United States	AS13335CLOUDFLARENET
2	43.152.26.58	Singapore	AS139341ACE
2	142.250.186.99	United States	AS15169GOOGLE
1	142.250.185.234	United States	AS15169GOOGLE
1	149.154.167.99	London, England, United Kingdom	AS62041Telegram Messenger Inc
0	104.17.24.14	United States	AS13335CLOUDFLARENET
0	142.250.186.35	United States	AS15169GOOGLE
0	216.58.212.131	United States	AS15169GOOGLE
0	2a00:1450:4001:82a::2003	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
12	15	-	-

Security Scan Report: financial-coral-k8dlb48t0e-na5qm7esrt.edgeone.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History