finance banking

cryptocurrency blockchain

documentation technical

technology software

government public service

English

You're looking at domain 'admin-aetherforge-baxundtbrr.edgeone.app' on the application-focused generic top-level domain (.app) with subdomain 'admin-aetherforge-baxundtbrr'. The core label 'edgeone' covers 7 characters split between four vowels and three consonants. Segmentation suggests 2 words: edge, one. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

html/d9/04/d9040394-2f97-4246-8cb3-553225b7a874.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15

abc82b6861a989fa86dbb4149208761426b9f572adb7e80576dd6463386afa73

8dff82a144c2c9dc1a642c635be42445e68d5f7c7dca75e61b1b3b7646468454

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Prudence Malinki

MarkMonitor Inc.

edgeone.app

IRT-SG-ACE

ACE administrator

ACE-SG


    import { initializeApp } from "https://www.gstatic.com/firebasejs/12.12.0/firebase-app.js";
    import { getAuth, signInWithEmailAndPassword, onAuthStateChanged, signOut } from "https://www.gstatic.com/firebasejs/12.12.0/firebase-auth.js";
    import { getFirestore, collection, getDocs, doc, updateDoc, getDoc, setDoc, serverTimestamp } from "https://www.gstatic.com/firebasejs/12.12.0/firebase-firestore.js";

    const firebaseConfig = { apiKey: "AIzaSyDLEc4thmpAn-GcwK44Le1Kkk5SGeM9pVQ", authDomain: "aetherforge-27e28.firebaseapp.com", projectId: "aetherforge-27e28", storageBucket: "aetherforge-27e28.firebasestorage.app", messagingSenderId: "76042006852", appId: "1:76042006852:web:581744357f11fc59cc2711" };
    const app = initializeApp(firebaseConfig); const auth = getAuth(app); const db = getFirestore(app);

    const ADMIN_UID = "JvZjcMmRumdrcGbjVVNYwL9A7hp1";

    let allUsers = []; let allTransactions = [];

    function showToast(msg, isError = false) { const t = document.createElement('div'); t.className = 'toast' + (isError ? ' error' : ''); t.textContent = msg; document.body.appendChild(t); setTimeout(() => t.remove(), 4000); }
    function fmt(n) { return (n||0).toLocaleString('en-US', {minimumFractionDigits:2, maximumFractionDigits:2}); }

    // AUTH
    document.getElementById('loginForm').addEventListener('submit', async (e) => {
        e.preventDefault();
        try { await signInWithEmailAndPassword(auth, document.getElementById('email').value, document.getElementById('password').value); } catch(err) { alert('Login failed: ' + err.message); }
    });

    onAuthStateChanged(auth, user => {
        if (user) {
            document.getElementById('sidebarUid').textContent = 'UID: ' + user.uid;
            if (user.uid === ADMIN_UID) {
                document.getElementById('authScreen').classList.add('hidden');
                document.getElementById('adminPanel').classList.remove('hidden');
                updateDebugAuth(user);
                refreshData();
            } else {
                alert('Access Denied.\n\nYour UID: ' + user.uid + '\nRequired: ' + ADMIN_UID);
                signOut(auth);
            }
        } else {
            document.getElementById('authScreen').classList.remove('hidden');
            document.getElementById('adminPanel').classList.add('hidden');
        }
    });

    window.logout = () => signOut(auth);

    function updateDebugAuth(user) {
        document.getElementById('debugAuthInfo').innerHTML = `
            <div><span class="text-slate-500">Logged in:</span> <span class="text-green-400">Yes</span></div>
            <div><span class="text-slate-500">Email:</span> ${user.email}</div>
            <div><span class="text-slate-500">UID:</span> <span class="font-mono text-indigo-400">${user.uid}</span></div>
            <div><span class="text-slate-500">Is Admin:</span> <span class="${user.uid === ADMIN_UID ? 'text-green-400' : 'text-red-400'}">${user.uid === ADMIN_UID ? 'YES' : 'NO — UID mismatch!'}</span></div>
            <div><span class="text-slate-500">Required UID:</span> <span class="font-mono">${ADMIN_UID}</span></div>
        `;
    }

    // NAVIGATION
    window.switchView = (view, el) => {
        document.querySelectorAll('[id^="view-"]').forEach(v => v.classList.add('hidden'));
        document.getElementById('view-' + view).classList.remove('hidden');
        document.querySelectorAll('.nav-item').forEach(n => n.classList.remove('active'));
        if(el) el.classList.add('active');
        document.getElementById('pageTitle').textContent = view.charAt(0).toUpperCase() + view.slice(1);
        if (window.innerWidth < 768) document.getElementById('sidebar').classList.remove('open');
    };
    window.toggleSidebar = () => document.getElementById('sidebar').classList.toggle('open');

    // DATA FETCHING
    window.refreshData = async () => {
        try {
            logDebug('Fetching users from Firestore...', 'warn');
            const userSnap = await getDocs(collection(db, "users"));
            logDebug('Firestore query succeeded. Documents found: ' + userSnap.size, 'ok');
            
            allUsers = []; allTransactions = [];
            let totalBal = 0, totalDep = 0;

            userSnap.forEach(d => {
                const u = { id: d.id, ...d.data() };
                allUsers.push(u);
                totalBal += u.totalPortfolio || 0;
                totalDep += u.depositTotal || 0;
            });

            logDebug('Loading transactions for ' + allUsers.length + ' users...', 'warn');
            for (const u of allUsers) {
                try {
                    const txSnap = await getDocs(collection(db, "users", u.id, "transactions"));
                    txSnap.forEach(t => allTransactions.push({ id: t.id, userId: u.id, userEmail: u.email, ...t.data() }));
                } catch(e) { logDebug('Could not read txs for ' + u.id + ': ' + e.message, 'err'); }
            }

            allTransactions.sort((a,b) => ((b.timestamp?.seconds||0) - (a.timestamp?.seconds||0)));

            document.getElementById('statUsers').textContent = allUsers.length;
            document.getElementById('statDeposits').textContent = '$' + fmt(totalDep);
            document.getElementById('statBalance').textContent = '$' + fmt(totalBal);

            renderDashRecent(); renderUsers(); renderTransactions();
            showToast('Data loaded! ' + allUsers.length + ' users, ' + allTransactions.length + ' transactions');

        } catch(e) {
            console.error("Fetch Error:", e);
            logDebug('ERROR: ' + e.message, 'err');
            logDebug('Code: ' + e.code, 'err');
            showToast('Error: ' + e.message, true);
        }
    };

    // DASHBOARD
    function renderDashRecent() {
        const el = document.getElementById('dashRecent');
        const recent = allTransactions.slice(0, 8);
        if (!recent.length) { el.innerHTML = '<div class="text-center py-6 text-slate-600">No transactions yet</div>'; return; }
        el.innerHTML = recent.map(tx => `<div class="flex justify-between py-2 border-b border-slate-700 last:border-0"><div><span class="text-indigo-400 font-medium">${(tx.type||'').toUpperCase()}</span> - ${tx.userEmail || 'Unknown'}<br><span class="text-xs text-slate-500">${tx.asset||''} ${tx.network?'('+tx.network+')':''}</span></div><div class="text-right"><div class="font-medium">$${fmt(tx.amount)}</div><span class="badge ${tx.status==='completed'?'badge-completed':tx.status==='failed'?'badge-failed':'badge-pending'}">${tx.status}</span></div></div>`).join('');
    }

    // USERS TABLE
    window.renderUsers = () => {
        const search = document.getElementById('userSearch').value.toLowerCase();
        const filtered = allUsers.filter(u => (u.email||'').toLowerCase().includes(search) || (u.id||'').toLowerCase().includes(search));
        
        if(filtered.length === 0) {
            document.getElementById('userTableBody').innerHTML = '<tr><td colspan="8" class="text-center text-slate-500 py-8">No users found in Firestore. Check Debug tab.</td></tr>';
            return;
        }

        document.getElementById('userTableBody').innerHTML = filtered.map(u => {
            const created = u.createdAt?.toDate ? u.createdAt.toDate().toLocaleDateString() : '-';
            return `<tr>
                <td class="text-slate-500 text-xs font-mono max-w-[120px] truncate" title="${u.id}">${u.id.substring(0,12)}...</td>
                <td class="text-sm">${u.email||'—'}</td>
                <td>${u.firstName||'-'} ${u.lastName||''}</td>
                <td class="font-bold text-indigo-400">$${fmt(u.totalPortfolio)}</td>
                <td class="text-emerald-400">$${fmt(u.depositTotal)}</td>
                <td><span class="badge badge-completed">VIP ${u.vipLevel||0}</span></td>
                <td class="text-xs text-slate-500">${created}</td>
                <td><button class="btn btn-primary text-xs py-1.5 px-4" onclick="openEditModal('${u.id}')">Edit</button></td>
            </tr>`;
        }).join('');
    };

    // TRANSACTIONS TABLE
    window.renderTransactions = () => {
        const filter = document.getElementById('txFilter').value;
        const filtered = allTransactions.filter(tx => filter === 'all' || tx.status === filter);
        
        if(filtered.length === 0) {
            document.getElementById('txTableBody').innerHTML = '<tr><td colspan="7" class="text-center text-slate-500 py-8">No transactions found</td></tr>';
            return;
        }

        document.getElementById('txTableBody').innerHTML = filtered.map(tx => {
            const d = tx.timestamp?.toDate ? tx.timestamp.toDate().toLocaleString() : 'Pending';
            return `<tr>
                <td class="text-xs text-slate-500 whitespace-nowrap">${d}</td>
                <td class="text-xs">${tx.userEmail || 'Unknown'}</td>
                <td class="font-medium">${(tx.type||'').toUpperCase()}</td>
                <td class="text-xs">${tx.asset||''} ${tx.network?'('+tx.network+')':''}</td>
                <td class="font-medium">$${fmt(tx.amount)}</td>
                <td><span class="badge ${tx.status==='completed'?'badge-completed':tx.status==='failed'?'badge-failed':'badge-pending'}">${tx.status}</span></td>
                <td class="whitespace-nowrap">
                    ${tx.status==='pending' ? `
                        <button class="btn btn-success text-xs py-1 px-2" onclick="approveTx('${tx.userId}','${tx.id}',${tx.amount},'${tx.type}')">Approve</button> 
                        <button class="btn btn-danger text-xs py-1 px-2" onclick="failTx('${tx.userId}','${tx.id}')">Fail</button>
                    ` : '—'}
                </td>
            </tr>`;
        }).join('');
    };

    // EDIT USER
    window.openEditModal = (uid) => {
        const user = allUsers.find(u => u.id === uid);
        if (!user) { showToast('User not found in local data', true); return; }
        document.getElementById('editUid').value = uid;
        document.getElementById('editUserIdLabel').textContent = 'User ID: ' + uid + ' | Email: ' + (user.email||'N/A');
        document.getElementById('editBalance').value = user.totalPortfolio || 0;
        document.getElementById('editDeposit').value = user.depositTotal || 0;
        document.getElementById('editVip').value = user.vipLevel || 0;
        document.getElementById('editModal').classList.remove('hidden');
    };
    window.closeModal = () => document.getElementById('editModal').classList.add('hidden');

    document.getElementById('editForm').addEventListener('submit', async (e) => {
        e.preventDefault();
        const uid = document.getElementById('editUid').value;
        const data = { totalPortfolio: parseFloat(document.getElementById('editBalance').value) || 0, depositTotal: parseFloat(document.getElementById('editDeposit').value) || 0, vipLevel: parseInt(document.getElementById('editVip').value) || 0 };
        try { await updateDoc(doc(db, "users", uid), data); showToast('User updated!'); closeModal(); refreshData(); } catch(err) { alert('Error: ' + err.message); }
    });

    // CREATE USER
    window.openCreateUserModal = () => document.getElementById('createModal').classList.remove('hidden');
    window.closeCreateModal = () => document.getElementById('createModal').classList.add('hidden');

    document.getElementById('createModalForm').addEventListener('submit', async (e) => {
        e.preventDefault();
        const uid = document.getElementById('cmUid').value.trim();
        const email = document.getElementById('cmEmail').value.trim();
        if (!uid || !email) { alert('UID and Email are required'); return; }
        try {
            const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789'; let code = 'AF-'; for (let i = 0; i < 6; i++) code += chars[Math.floor(Math.random() * chars.length)];
            await setDoc(doc(db, "users", uid), {
                email: email,
                firstName: document.getElementById('cmFirst').value || '',
                lastName: document.getElementById('cmLast').value || '',
                phone: '',
                referredBy: null,
                totalPortfolio: parseFloat(document.getElementById('cmBalance').value) || 0,
                depositTotal: 0,
                dailyPnl: 0,
                yieldEarned: 0,
                activePositions: 0,
                vipLevel: parseInt(document.getElementById('cmVip').value) || 0,
                referralCode: code,
                referralCount: 0,
                referralEarned: 0,
                referralActive: 0,
                createdAt: serverTimestamp()
            });
            showToast('User document created!');
            closeCreateModal();
            refreshData();
        } catch(err) { alert('Error: ' + err.message); }
    });

    document.getElementById('createUserForm').addEventListener('submit', async (e) => {
        e.preventDefault();
        const uid = document.getElementById('createUid').value.trim();
        const email = document.getElementById('createEmail').value.trim();
        if (!uid || !email) { alert('UID and Email required'); return; }
        try {
            const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789'; let code = 'AF-'; for (let i = 0; i < 6; i++) code += chars[Math.floor(Math.random() * chars.length)];
            await setDoc(doc(db, "users", uid), { email, firstName: document.getElementById('createFirst').value||'', lastName: document.getElementById('createLast').value||'', phone:'', referredBy:null, totalPortfolio:0, dailyPnl:0, yieldEarned:0, activePositions:0, depositTotal:0, vipLevel:0, referralCode:code, referralCount:0, referralEarned:0, referralActive:0, createdAt:serverTimestamp() });
            showToast('User created!'); e.target.reset(); refreshData();
        } catch(err) { alert('Error: ' + err.message); }
    });

    // TX ACTIONS
    window.approveTx = async (userId, txId, amount, type) => {
        if (!confirm('Approve and credit balance?')) return;
        try {
            await updateDoc(doc(db, "users", userId, "transactions", txId), { status: 'completed' });
            if (type === 'deposit') {
                const userRef = doc(db, "users", userId);
                const userSnap = await getDoc(userRef);
                if (userSnap.exists()) { const d = userSnap.data(); await updateDoc(userRef, { totalPortfolio: (d.totalPortfolio||0)+amount, depositTotal: (d.depositTotal||0)+amount }); }
            }
            showToast('Approved!'); refreshData();
        } catch(err) { alert('Error: ' + err.message); }
    };
    window.failTx = async (userId, txId) => {
        if (!confirm('Mark as failed?')) return;
        try { await updateDoc(doc(db, "users", userId, "transactions", txId), { status: 'failed' }); showToast('Marked as failed.'); refreshData(); } catch(err) { alert('Error: ' + err.message); }
    };

    // DEBUG
    function logDebug(msg, type = '') { const el = document.getElementById('debugLog'); const line = document.createElement('div'); line.className = type === 'ok' ? 'log-ok' : type === 'err' ? 'log-err' : type === 'warn' ? 'log-warn' : ''; line.textContent = '[' + new Date().toLocaleTimeString() + '] ' + msg; el.appendChild(line); el.scrollTop = el.scrollHeight; }

    window.runFirestoreTest = async () => {
        const el = document.getElementById('debugLog'); el.innerHTML = '';
        logDebug('Starting Firestore connection test...', 'warn');
        logDebug('Project ID: ' + firebaseConfig.projectId, '');
        logDebug('Auth UID: ' + (auth.currentUser?.uid || 'NOT LOGGED IN'), auth.currentUser?.uid === ADMIN_UID ? 'ok' : 'err');
        
        try {
            logDebug('Test 1: Reading users collection...', 'warn');
            const snap = await getDocs(collection(db, "users"));
            logDebug('Test 1 PASSED — Found ' + snap.size + ' user documents', 'ok');
            
            if (snap.size > 0) {
                const firstDoc = snap.docs[0];
                logDebug('First user ID: ' + firstDoc.id, '');
                logDebug('First user data: ' + JSON.stringify({...firstDoc.data(), id: firstDoc.id}).substring(0, 200), '');
            } else {
                logDebug('Collection is EMPTY! Users may exist in Firebase Auth but not Firestore.', 'err');
                logDebug('Fix: Use the "Create User Document" form below, or register a new user from the main app.', 'warn');
            }

            logDebug('Test 2: Writing test document...', 'warn');
            const testRef = doc(db, "users", "_admin_test_" + Date.now());
            await setDoc(testRef, { test: true, createdAt: serverTimestamp() });
            logDebug('Test 2 PASSED — Write succeeded', 'ok');
            
            logDebug('Test 3: Deleting test document...', 'warn');
            const { deleteDoc } = await import("https://www.gstatic.com/firebasejs/12.12.0/firebase-firestore.js");
            await deleteDoc(testRef);
            logDebug('Test 3 PASSED — Delete succeeded', 'ok');
            
            logDebug('ALL TESTS PASSED — Firestore is working correctly!', 'ok');
        } catch(e) {
            logDebug('TEST FAILED: ' + e.message, 'err');
            logDebug('Error code: ' + e.code, 'err');
            if (e.code === 'permission-denied') {
                logDebug('FIX: Your Firestore rules are blocking this operation.', 'warn');
                logDebug('Go to Firebase Console → Firestore → Rules and use the open rules for testing.', 'warn');
            }
        }
    };


Tailwind CSS

AetherForge — Admin Panel

✅ Low Risk - https://admin-aetherforge-baxundtbrr.edgeone.app/

Requests	IP Address	Location	AS Autonomous System
3	192.178.183.94	United States	AS15169Google LLC
2	172.67.68.11	United States	AS13335Cloudflare, Inc.
2	192.178.183.95	United States	AS15169Google LLC
2	43.152.26.58	Singapore	AS139341ACE
2	142.250.154.94	United States	AS15169Google LLC
11	5	-	-

Security Scan Report: admin-aetherforge-baxundtbrr.edgeone.app

Summary

AI Security Verdict

Moderate Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History