Dangertrace · Ethereum
conf100%
Sent to a flagged address: Deployed 3 malicious contracts (+1 more). Treat this wallet's flows with suspicion.
- Address-poisoning bait. A lookalike only ever sent dust here: 0x3c7776ed1938dfe9905ef0760019dbec4bd641ab — it copies the first & last 4 characters of 0x3c7779d27348017415a9184acadc0d62052841ab (a counterparty this wallet sends funds to) but the middle differs. A copy-paste trap; always verify the FULL address, not just the ends.
- Sent to a flagged address: Deployed 3 malicious contracts. 0x4e59…956c is flagged in GoPlus's malicious-address database: Deployed 3 malicious contracts. This wallet sent funds to it.
Fund flow (10)
- IN0xc81c…35a971 in · CATE
- OUT0x4e59…956c13 out
- OUT0xa27e…62d212 out
- IN0xe02b…5f5110 in0.0001 ETH
- OUT0x6441…705610 out · <3
- OUT0x231b…8e639 out
- IN0xc7c7…7a4a8 in
- IN0xdd23…802e8 in
- IN0xbf7d…5590
- Counterparties
- 127 (sampled)
- In (ETH)
- 0.0716 ETH
- Out (ETH)
- 224.094 ETH
- Address poisoning
- 1 bait address detected
- Top source
- 0xc81c…35a9 (71×)
- Top destination
- 0x4e59…956c (13×)
- Destination age
- first seen ~11mo
- Next hop
- → 0xfa70…a4b9
⚠ Only the 25 busiest of 127 counterparties were OFAC-screened this run — a sanctioned address among the rest would be unflagged. Only the 5 busiest of 127 unlabeled counterparties were reputation-screened this run — a flagged address among the rest would be unflagged. Flow is sampled from recent transfers (most recent ~200 each), not the full lifetime ledger. 0x3c77…41ab then forwarded funds onward to 0xfa70…a4b9 (one-hop trace).
