social media network

documentation technical

technology software

English

The domain name 'spacehero-wm21uqunz1.edgeone.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'spacehero-wm21uqunz1'. Its registrable label 'edgeone' stretches across 7 characters holding four vowels versus 3 consonants. Tokenizing the label suggests 2 words: edge, one. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

html/cb/e4/cbe4d523-bb97-4a70-9e33-166151b632e8_fallback.html.gz

SpaceX Tournament — Professional Dashboard

html/cb/e4/cbe4d523-bb97-4a70-9e33-166151b632e8.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js

b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03

c848f743f2c26d4b23adc16cee39f4504aaf543be2ae1deefb2a4722de202c1f

width=device-width,initial-scale=1,viewport-fit=cover

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


/* ========================================================
   SpaceX Tournament — Mobile-Optimized SPA index.html
   Updated: Referral link format: http://t.me/SpaceX_Tournament_bot/spacex?startapp=[userId]
   ======================================================== */

import { initializeApp } from "https://www.gstatic.com/firebasejs/10.12.2/firebase-app.js";
import { getDatabase, ref, get, onValue, set, update, push } from "https://www.gstatic.com/firebasejs/10.12.2/firebase-database.js";

const VIEWS = { 
  home: document.getElementById('view-home'), 
  task: document.getElementById('view-task'), 
  rank: document.getElementById('view-rank'), 
  profile: document.getElementById('view-profile') 
};
const navBtns = document.querySelectorAll('.nav-btn');
const leaderList = document.getElementById('leaderList');
const UPGRADE_COST = 3.5;
const MIN_WITHDRAW = 2.0;
const PER_INVITE_USDT = 0.01; // per invite earning

let TG_USER = null;
let IS_TG = false;
let UID = null;        // 'tg_<numericId>'
let NUM_ID = null;     // numeric TG id (for startapp param)
let UNAME = 'Guest Player';
let UPHOTO = '';
let DB = null;
let USER_BALANCE = 0.00; // Local balance store
let PLAYER_DATA = {}; // Global store for leaderboard players

// read Telegram WebApp user (if opened inside Telegram)
try {
  if(window.Telegram?.WebApp?.initDataUnsafe?.user){
    TG_USER = window.Telegram.WebApp.initDataUnsafe.user;
    IS_TG = true;
    NUM_ID = TG_USER.id; // numeric id
    UID = 'tg_' + NUM_ID;
    UNAME = TG_USER.first_name || TG_USER.username || 'Player';
    UPHOTO = TG_USER.photo_url || '';
  }
} catch(e){ console.warn('tg error', e); }

// UI elements
const balanceVal = document.getElementById('balanceVal');
const myRankEl = document.getElementById('myRank');
const myHighEl = document.getElementById('myHigh');
const myPrizeEl = document.getElementById('myPrize');
const profilePhoto = document.getElementById('profilePhoto');
const profileName = document.getElementById('profileName');
const profileUsername = document.getElementById('profileUsername');
const profileSmall = document.getElementById('profileSmall');
const playBtn = document.getElementById('playBtn');
const upgradeBtn = document.getElementById('upgradeBtn');
const btnHow = document.getElementById('btnHow');
const btnWithdraw = document.getElementById('btnWithdraw');
const btnChannel = document.getElementById('btnChannel');
const btnReferral = document.getElementById('btnReferral');
const btnTxHistory = document.getElementById('btnTxHistory');

const refLinkInput = document.getElementById('refLinkInput');
const copyRefBtn = document.getElementById('copyRefBtn');
const refCountEl = document.getElementById('refCount');
const refEarnedEl = document.getElementById('refEarned');

const txListEl = document.getElementById('txList');
const noTxEl = document.getElementById('noTx');

if(IS_TG){
  profilePhoto.src = UPHOTO || 'https://i.pravatar.cc/100';
  profileName.textContent = UNAME;
  profileUsername.textContent = (TG_USER.username ? '@' + TG_USER.username : '@telegram');
  profileSmall.textContent = 'Balance: 0 USDT';
} else {
  profilePhoto.src = 'https://i.pravatar.cc/100';
}

/* Modal & toast helpers */
window.showModal = function(id){ document.getElementById(id).classList.add('active'); }
window.hideModal = function(id){ document.getElementById(id).classList.remove('active'); }
function showToast(message){ const toast = document.getElementById('toast-notification'); toast.textContent = message; toast.classList.add('show'); setTimeout(()=>toast.classList.remove('show'),3000); }

/* Player details modal */
window.showPlayerDetails = function(playerId){
  const player = PLAYER_DATA[playerId];
  if(!player){ showToast('Player data not found!'); return; }
  document.getElementById('pdm-name').textContent = player.name;
  document.querySelector('#pdm-photo img').src = player.photo;
  document.getElementById('pdm-username').textContent = player.username.replace('@','');
  document.getElementById('pdm-score').textContent = player.score + ' pts';
  document.getElementById('pdm-balance').textContent = parseFloat(player.balance).toFixed(2) + ' USDT';
  document.getElementById('pdm-level').textContent = player.level;
  document.getElementById('pdm-power').textContent = player.power;
  showModal('playerDetailModal');
}

/* Navigation */
navBtns.forEach(b=>{
  b.addEventListener('click', ()=>{
    const target = b.dataset.view;
    navBtns.forEach(n=>n.classList.remove('active'));
    b.classList.add('active');
    Object.keys(VIEWS).forEach(k=> VIEWS[k].classList.remove('active'));
    VIEWS[target].classList.add('active');
  });
});

/* Buttons */
playBtn.addEventListener('click', ()=>{ window.location.href = 'game.html'; });
upgradeBtn.addEventListener('click', ()=>{ document.getElementById('modalCurLevel').textContent = document.getElementById('shipLevel').textContent.replace('LEVEL ',''); showModal('upgradeModal'); });
document.getElementById('modalUpgradeAction').addEventListener('click', ()=>{ hideModal('upgradeModal'); if(USER_BALANCE < UPGRADE_COST) showToast('Not Enough Balance. Required ' + UPGRADE_COST + ' USDT.'); else showToast('Upgrade in progress...'); });
btnHow.addEventListener('click', ()=>{ showModal('howToPlayModal'); });
btnChannel.addEventListener('click', ()=>{ window.open('https://t.me/spaceX_tour', '_blank'); });
btnWithdraw.addEventListener('click', ()=>{ document.getElementById('modalWithdrawBalance').textContent = USER_BALANCE.toFixed(2) + ' USDT'; document.getElementById('withdrawAmount').value=''; document.getElementById('withdrawAddress').value=''; showModal('withdrawModal'); });

btnReferral.addEventListener('click', async ()=>{ await populateReferralModal(); showModal('referralModal'); });
btnTxHistory.addEventListener('click', async ()=>{ await populateTxModal(); showModal('txModal'); });

copyRefBtn.addEventListener('click', async ()=>{
  const link = refLinkInput.value || '';
  try{ await navigator.clipboard.writeText(link); showToast('Referral link copied'); }
  catch(e){ showToast('Copy failed, long-press to copy'); }
});

/* Prize helper */
function getPrizeForRank(rank){ if(rank===1) return 500; if(rank===2) return 300; if(rank===3) return 150; if(rank>=4 && rank<=20) return 25; return 0; }

/* Firebase init (reads FB.json) */
(async function initFirebase(){
  try{
    const resp = await fetch('FB.json');
    if(!resp.ok){ console.warn('FB.json not found — Firebase disabled'); return; }
    const cfg = await resp.json();
    const app = initializeApp({
      apiKey: cfg.client[0].api_key[0].current_key,
      databaseURL: cfg.project_info.firebase_url,
      projectId: cfg.project_info.project_id
    });
    DB = getDatabase(app);
    console.log('Firebase initialized');
    startLeaderboardListener();

    if(IS_TG){
      try{
        const userRefPath = 'users/' + UID;
        const userRef = ref(DB, userRefPath);
        const snap = await get(userRef);
        if(!snap.exists()){
          await set(userRef, {
            id: UID,
            name: UNAME,
            score: 0,
            balance: 0.00,
            usdt: 0.00,
            spx: 0.00,
            photo: UPHOTO,
            level: 1,
            referrals: 0,
            referredBy: null
          });
        } else {
          const d = snap.val() || {};
          const updates = {};
          if(typeof d.balance === 'undefined') updates.balance = 0.00;
          if(typeof d.usdt === 'undefined') updates.usdt = 0.00;
          if(typeof d.spx === 'undefined') updates.spx = 0.00;
          if(typeof d.referrals === 'undefined') updates.referrals = 0;
          if(typeof d.referredBy === 'undefined') updates.referredBy = null;
          if(Object.keys(updates).length) await update(userRef, updates);
        }

        // --- handle incoming referral via startapp param ---
        const urlParams = new URLSearchParams(window.location.search);
        const startappParam = urlParams.get('startapp'); // expected numeric id
        if(startappParam){
          // refKey in DB is stored as 'tg_<numericId>'
          const refKey = 'tg_' + startappParam;
          // don't credit if refKey === self
          if(refKey !== UID){
            const meSnap = await get(ref(DB, 'users/' + UID));
            const me = meSnap.val() || {};
            if(!me.referredBy){
              const refSnap = await get(ref(DB, 'users/' + refKey));
              if(refSnap.exists()){
                const refData = refSnap.val();
                const newRefCount = (refData.referrals || 0) + 1;
                const incAmount = PER_INVITE_USDT;
                const oldBal = parseFloat(refData.balance || 0);
                const newBal = oldBal + incAmount;

                await update(ref(DB, 'users/' + refKey), { referrals: newRefCount, balance: parseFloat(newBal.toFixed(4)) });

                // add transaction entry for referrer
                const txRef = ref(DB, 'transactions/' + refKey);
                await push(txRef, {
                  type: 'referral_reward',
                  amount: incAmount,
                  time: Date.now(),
                  note: 'Referral reward for inviting ' + UID
                });

                // mark current user as referred
                await update(ref(DB, 'users/' + UID), { referredBy: refKey });

                console.log('Referral credited to', refKey);
              }
            }
          }
        }
      }catch(e){ console.warn('init user node failed', e); }
    }

    refreshMyStats();
  }catch(e){ console.warn('firebase init failed', e); }
})();

/* Leaderboard listener */
function startLeaderboardListener(){
  if(!DB) return;
  const usersRef = ref(DB, 'users');
  onValue(usersRef, (snap)=>{
    const data = snap.val() || {};
    const arr = Object.keys(data).map(k => ({ id:k, ...(data[k]||{}) }))
                  .filter(u => (u.score || 0) > 0)
                  .sort((a,b)=> (b.score||0) - (a.score||0));
    renderLeaderboard(arr);
    if(IS_TG){
      const idx = arr.findIndex(x => x.id === UID);
      if(idx !== -1){
        const rank = idx + 1;
        myRankEl.textContent = '#' + rank;
        myHighEl.textContent = (arr[idx].score || 0);
        myPrizeEl.textContent = '$' + getPrizeForRank(rank).toFixed(2);
      } else { myRankEl.textContent = '—'; }
    }
  }, { onlyOnce: false });
}

/* Render leaderboard */
function renderLeaderboard(arr){
  leaderList.innerHTML = '';
  PLAYER_DATA = {};
  arr.forEach((p,i)=>{
    const rankNum = i+1;
    let rankClass = '';
    if(rankNum===1) rankClass='lb-rank-1'; else if(rankNum===2) rankClass='lb-rank-2'; else if(rankNum===3) rankClass='lb-rank-3';
    const prize = getPrizeForRank(rankNum);
    const playerLevel = p.level || (rankNum<4?5:(rankNum<10?3:1));
    const playerBalance = p.balance || (prize>0 ? (prize/100).toFixed(2) : (Math.random()*0.5).toFixed(2));
    const playerPower = (playerLevel * 250);
    const playerUsername = (p.username || (p.name ? p.name.toLowerCase().replace(/\s/g,'_') : 'guest_player')) || '@telegram_user';

    PLAYER_DATA[p.id] = { name: p.name || 'Player', username: playerUsername, photo: p.photo || 'https://i.pravatar.cc/80', score: p.score || 0, level: playerLevel, balance: playerBalance, power: playerPower };

    const card = document.createElement('div');
    card.className = 'lb-card' + (IS_TG && p.id===UID? ' lb-highlight' : '');
    card.setAttribute('onclick', `showPlayerDetails('${p.id}')`);
    card.style.cursor = 'pointer';
    card.innerHTML = `
      <div class="lb-rank ${rankClass}">${rankNum}</div>
      <div class="lb-photo"><img src="${p.photo || 'https://i.pravatar.cc/80'}" alt=""></div>
      <div class="lb-meta"><h4>${p.name || 'Player'}</h4><p>@${playerUsername}</p></div>
      <div class="lb-score-group">
        <div class="lb-score">${p.score || 0} pts</div>
        <div class="lb-prize">${prize > 0 ? '$' + prize : '—'}</div>
      </div>
    `;
    leaderList.appendChild(card);
  });

  if(IS_TG){
    const idx = Array.from(leaderList.children).findIndex(c => c.classList.contains('lb-highlight'));
    if(idx > 3){ leaderList.children[idx].scrollIntoView({behavior:'smooth', block:'center'}); }
  }
}

/* Refresh my stats */
async function refreshMyStats(){
  if(!DB || !IS_TG) return;
  try{
    const snap = await get(ref(DB, 'users/' + UID));
    const d = snap.val() || {};
    if(d){
      myHighEl.textContent = d.score || 0;
      document.getElementById('shipLevel').textContent = `LEVEL ${d.level || 1}`;
      USER_BALANCE = parseFloat(d.balance || 0.00);
      profileSmall.textContent = `Balance: ${USER_BALANCE.toFixed(2)} USDT · Referrals: ${d.referrals || 0}`;
      balanceVal.textContent = `${USER_BALANCE.toFixed(2)} USDT`;
    }
  }catch(e){ console.warn('refresh stats failed', e); }
}

/* initial */
setTimeout(()=>{ refreshMyStats(); }, 800);
setTimeout(()=>{ document.getElementById('navHome').classList.add('active') }, 100);
setTimeout(()=>{ if(!DB){ leaderList.innerHTML = '<div style="color:#bbb;padding:12px;text-align:center;">Leaderboard requires FB.json to be configured (or open in Telegram & run initial sync).</div>'; } }, 1200);

/* ===== Referral & Tx helpers ===== */

async function populateReferralModal(){
  // Bot link format requested:
  // http://t.me/SpaceX_Tournament_bot/spacex?startapp=[userId]
  const numericId = NUM_ID || 'guest';
  const botLink = `http://t.me/SpaceX_Tournament_bot/spacex?startapp=${numericId}`;
  refLinkInput.value = botLink;

  if(!DB || !IS_TG){
    refCountEl.textContent = 0;
    refEarnedEl.textContent = '0.00';
    return;
  }

  try{
    const snap = await get(ref(DB, 'users/' + UID));
    const d = snap.val() || {};
    const count = parseInt(d.referrals || 0);
    const earned = count * PER_INVITE_USDT;
    refCountEl.textContent = count;
    refEarnedEl.textContent = earned.toFixed(4) + ' USDT';
  }catch(e){
    console.warn('populateReferralModal failed', e);
    refCountEl.textContent = 0;
    refEarnedEl.textContent = '0.00';
  }
}

async function populateTxModal(){
  txListEl.innerHTML = '';
  noTxEl.style.display = 'none';
  if(!DB || !IS_TG){
    noTxEl.textContent = 'Transactions require Firebase configured';
    noTxEl.style.display = 'block';
    return;
  }
  try{
    const snap = await get(ref(DB, 'transactions/' + UID));
    const data = snap.val() || {};
    const keys = Object.keys(data || {});
    if(!keys.length){
      noTxEl.style.display = 'block';
      return;
    }
    const sorted = keys.map(k => ({ id: k, ...(data[k]||{}) })).sort((a,b)=> (b.time||0) - (a.time||0));
    sorted.forEach(t => {
      const el = document.createElement('div');
      el.style.padding = '12px';
      el.style.borderRadius = '10px';
      el.style.background = 'rgba(255,255,255,0.02)';
      el.style.border = '1px solid rgba(255,255,255,0.03)';
      el.innerHTML = `
        <div style="display:flex;justify-content:space-between;align-items:center;">
          <div style="font-weight:700">${(t.type||'tx').replace('_',' ').toUpperCase()}</div>
          <div style="font-weight:800">${parseFloat(t.amount||0).toFixed(4)} USDT</div>
        </div>
        <div style="margin-top:6px;color:var(--muted);font-size:13px;">
          ${t.note ? t.note : ''} · ${new Date(t.time || Date.now()).toLocaleString()}
        </div>
      `;
      txListEl.appendChild(el);
    });
  }catch(e){
    console.warn('populateTxModal error', e);
    noTxEl.style.display = 'block';
    noTxEl.textContent = 'No Transaction Yet';
  }
}

/* Withdraw request */
document.getElementById('confirmWithdrawBtn').addEventListener('click', async ()=>{
  if(!DB || !IS_TG){ showToast('Firebase not configured'); return; }
  const addr = document.getElementById('withdrawAddress').value.trim();
  const amt = parseFloat(document.getElementById('withdrawAmount').value || 0);
  if(!addr || addr.length < 10){ showToast('Valid TRC-20 address required'); return; }
  if(isNaN(amt) || amt <= 0){ showToast('Enter valid amount'); return; }
  if(amt < MIN_WITHDRAW){ showToast('Minimum withdraw is ' + MIN_WITHDRAW + ' USDT'); return; }
  if(amt > USER_BALANCE){ showToast('Insufficient balance'); return; }

  try{
    const wrRef = ref(DB, 'withdrawRequests');
    const newReq = { user: UID, amount: parseFloat(amt.toFixed(4)), address: addr, status: 'pending', time: Date.now() };
    await push(wrRef, newReq);

    const userRef = ref(DB, 'users/' + UID);
    const snap = await get(userRef);
    const d = snap.val() || {};
    const curBal = parseFloat(d.balance || 0);
    const newBal = parseFloat((curBal - amt).toFixed(4));
    await update(userRef, { balance: newBal });

    const txRef = ref(DB, 'transactions/' + UID);
    await push(txRef, { type: 'withdraw_request', amount: -amt, time: Date.now(), note: 'Withdraw requested to ' + addr });

    USER_BALANCE = newBal;
    balanceVal.textContent = USER_BALANCE.toFixed(4) + ' USDT';
    profileSmall.textContent = `Balance: ${USER_BALANCE.toFixed(2)} USDT`;
    hideModal('withdrawModal');
    showToast('Withdraw request submitted');
  }catch(e){
    console.warn('withdraw error', e);
    showToast('Withdraw failed');
  }
});



✅ Low Risk - https://spacehero-wm21uqunz1.edgeone.app/

Requests	IP Address	Location	AS Autonomous System
10	13.35.58.96	Unknown	Unknown
1	149.154.171.237	Unknown	Unknown
1	149.154.171.236	Unknown	Unknown
1	172.217.18.3	Unknown	Unknown
1	172.67.154.150	Unknown	Unknown
1	142.250.181.234	Unknown	Unknown
1	142.250.186.35	Unknown	Unknown
1	43.152.26.58	Unknown	Unknown
1	149.154.167.99	Unknown	Unknown
1	46.105.222.162	Unknown	Unknown
50	41	-	-

Security Scan Report: spacehero-wm21uqunz1.edgeone.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History