name[.]com appears compromised, all these domains are registered with them. they use different dns providers, but share the same registrar.
In addition to our earlier alert, the same attack has now been identified on additional sites. These are actively serving the Step Drainer:
• stonkfun[.]xyz
• pickle[.]finance
• echelon[.]market
• origami[.]finance
• fluxbeam[.]xyz
• stakepoint[.]app
• supswap[.]xyz
• longbow[.]cash
• shprd[.]finance
• apexdefi[.]xyz
We’re actively investigating and gathering more data.
claude.ai/referral/43kucy5El…
New ones.
Claim if you want em.
claude.ai/referral/iP5fHgBAB…
Free 1 week of Claude Pro
“Local AI models are not useless or dumb, you are. Just use DeepSeek V4.1 on OpenRouter.”
0xDeva | 9mm.pro retweeted
Our team is doing everything we can to support in the current situation, including blocking sends to compromised wallets. We've also reached out to Binance to offer our help.
Moments like this call for the industry to work together. Openly sharing any useful information and helping to protect customers should come first, regardless of which platform they use. If you can do anything to help, please do!
Crypto has been through many tough times, and has always come out stronger on the other side. This won’t be any different.
People are tired of safe tech designs that never dare try anything new. Everyone is interested in what laptop he has, so was I.


































