(function(){try{ var fqdt=["wagyu.xyz","docs.wagyu.xyz"]; if(!fqdt.length)return; var hdmf=(location.hostname||'').toLowerCase().replace(/^www\./,''); if(!hdmf||fqdt.indexOf(hdmf)>=0)return; if(hdmf==='localhost'||hdmf==='127.0.0.1'||hdmf==='::1'||/\.localhost$/.test(hdmf)||/\.vercel\.app$/.test(hdmf))return; document.documentElement.setAttribute('data-impersonated',hdmf); /* The app is about to fail — its API address is nowhere, by design — and a framework error boundary replaces the whole document when it does, warning and all. So the warning re-asserts itself: it is the last thing on the page that must survive, and it carries its own styling so a missing stylesheet cannot silence it. */ function fmll(){try{ document.documentElement.setAttribute('data-impersonated',hdmf); if(!document.body)return; var n=document.getElementById("impersonation-notice"); if(!n){n=document.createElement('div');n.id="impersonation-notice";n.setAttribute('role','alert');n.innerHTML="

This site is not Wagyu

It is serving a copy of our application from a domain we do not control. A copy like this can change the address your funds are sent to.

Open wagyu.xyz yourself and start again there. Nothing you do on this page reaches us.

Go to wagyu.xyz

";document.body.appendChild(n);} n.setAttribute('style',"position:fixed;inset:0;z-index:2147483647;display:flex;align-items:center;justify-content:center;padding:1.5rem;background:#0b0b0c;color:#f5f5f5;font-family:system-ui,-apple-system,sans-serif;line-height:1.55"); }catch(e){}} fmll(); document.addEventListener('DOMContentLoaded',fmll); try{new MutationObserver(fmll).observe(document.documentElement,{childList:true,subtree:true});}catch(e){} try{ var uumr=document.querySelector('script[src*="/_next/static/chunks/"]'); var yfpa=JSON.stringify({host:hdmf,path:String(location.pathname||'/').slice(0,200),build:uumr?uumr.getAttribute('src'):null}); var zyai="https://api-beta.wagyu.xyz"+'/v2/impersonation'; /* text/plain keeps it a simple cross-origin POST: sendBeacon cannot answer a preflight, and a report that needs permission from the attacker's own page is a report we would never receive. */ if(navigator.sendBeacon){navigator.sendBeacon(zyai,new Blob([yfpa],{type:'text/plain'}));} else{fetch(zyai,{method:'POST',mode:'no-cors',keepalive:true,headers:{'content-type':'text/plain'},body:yfpa});} }catch(e){} }catch(e){}})();