TheDinarian
News • Business • Investing & Finance
Tool used in Ledger hack altered file domains since November
December 15, 2023
post photo preview

Since late November, Angel Drainer, the tool used in the Ledger hack, has been leveraging a smart contract to modify static file domains.

Angel Drainer, in essence, is a type of malicious software, or malware, that specializes in draining cryptocurrency assets from wallets. Etherscan data shows that the tool has been used since last month to update five static file domains to redirect users to compromised versions of software or web pages, thereby enabling unauthorized access to their crypto assets. 

Event Background

Since 2022, various phishing gangs with the “Drainer” moniker have been emerging. For example, Pink Drainer obtained Discord Tokens through social engineering techniques for phishing purposes. Venom Drainer, a phishing service provider, tricked users into giving permissions or approvals to steal their assets. Monkey Drainer is a cyber phishing organization that lures victims through fake KOL Twitter accounts and Discord channels, releasing counterfeit NFT-related sites with malicious Mint functions, robbing tens of millions of dollars, check out our states here: Monkey Drainer statistics. Then there’s Inferno Drainer, which specializes in multi-chain scams.

As time progressed, some Drainers have stepped away from the cryptocurrency spotlight. However, two recent incidents have brought a previously low-profile phishing gang — Angel Drainer — to the forefront of public attention.

Event One: Balancer DNS Hijacking Attack

On September 19, 2023, Balancer issued an urgent warning asking users to stop accessing its official website, as its DNS had been hijacked, leading to its interface being compromised by malicious actors. Upon accessing the website’s link, wallets would be subjected to a phishing attack. According to MistTrack analysis, the funding behind the attackers came from the cyber phishing organization Angel Drainer. The current stolen amount from victims stands at a minimum of $350,000.

In other words, the attacker (Angel Drainer) lured users to “Approve” after compromising the Balancer website, and then used “transferFrom” to transfer funds to themselves (Angel Drainer). Based on the intelligence we have gathered, the attacker might have ties with Russian hackers. After analysis, it was discovered that the front-end of app.balancer.fi contained malicious JavaScript code.

Upon users connecting their wallets to the app.balancer.fi site, the malicious script would automatically assess the connected user’s balance and execute a phishing attack.

Event Two: Galxe DNS Hijacking Attack

On October 6, 2023, several community members reported that their assets were stolen after signing and authorizing Web3 credential data on the Galxe platform using their wallets. Subsequently, Galxe’s official team announced that their website was shut down and they were addressing the issue. According to MistTrack’s analysis, there were multiple interactions between the Galxe Hacker’s address and the Angel Drainer’s address, suggesting they might be the same hacker or group.

On October 7, Galxe released a statement indicating that their website had been fully restored. The detailed sequence of the event is as follows: On October 6, an unidentified individual contacted the domain service provider, Dynadot, pretending to be an authorized Galxe member. Using forged documents, this impersonator bypassed security procedures. Subsequently, the imposter gained unauthorized access to the domain account’s DNS. They used this access to redirect users to a fraudulent website where transactions were signed to siphon off their funds. Approximately 1,120 users who interacted with this malicious site were affected, with an estimated theft amounting to $270,000.

Below is an analysis specifically focused on some of the phishing materials and wallet addresses associated with this gang:

Phishing Website and Tactics:

Upon analysis, we found that the gang’s primary method of attack is social engineering targeted at domain service providers. Once they obtain relevant domain account permissions, they modify the DNS resolution direction and redirect users to fake websites. Data provided by SlowMist’s partner, ScamSniffer, indicates that this gang’s phishing attacks targeting the crypto industry involve over 3,000 domains.

By examining the related information of these domains, it was found that the earliest registration dates trace back to January 2023:

The website impersonated a Web3 game project called “Fight Out,” which is currently inaccessible. Interestingly, under Fight Out’s official social media platforms, multiple users reported that the project itself seemed to be a scam.

Upon inspecting the phishing website’s related address 0x00002644e79602F056B03235106A9963826d0000 through MistTrack, it was shown that the first transaction from this address took place on May 7.

We discovered that this address is associated with 107 phishing sites, encompassing not only NFT projects, authorization management tools like RevokeCash, and exchanges like Gemini, but also cross-chain bridges such as Stargate Finance, among others.

Tracing back further from this address to March 16, 2023, we identified an address labeled as Fake_Phishing76598: 0xe995269255777303Ea6800bA0351C055C0C264b8. This address is associated with 17 phishing sites, primarily focusing on the NFT project Pollen and the public chain Arbitrum. All of these phishing websites are currently inaccessible.

Reviewing one of the gang’s recently deployed phishing websites, blur[.]app-io.com.co:

By investigating the Access Key, we linked to another phishing website: unsiwap[.]app.se.net. The correct spelling is “Uniswap,” but the attacker confused users by swapping the positions of the letters ‘s’ and ‘i’.

This website also exists in our dataset and began its operation in August.

Below are screenshots of a series of websites linked to this domain:

A global search using ZoomEye revealed that 73 phishing sites are concurrently running and deployed under this domain.

Further tracking showed that Angel Drainer conducts sales in both English and Russian. The offerings include 24/7 support, a deposit of $40,000, a 20% fee, support for multiple chains and NFTs, and an automatic site cloning tool.

Here’s an overview of the seller:

Following the contact details provided on the page, we found a Bot. The addresses involved in the image below currently have no transaction records, leading us to speculate that it might be a bot impersonating Angel Drainer.

Selecting a site at random for inspection, when users click on “Claim”, the website evaluates whether the user has a balance. Depending on the tokens and balance held by each victim’s address, it employs a combination of attacks: Approve — Permit/Permit2 signature — transferFrom.

For users with a lower sense of security awareness, they might inadvertently grant the attacker unlimited permission to their addresses. If new funds are transferred to the user’s address, the attacker will immediately transfer those funds away.

Due to space constraints, we won’t delve further into the analysis here.

MistTrack Analysis

By analyzing the aforementioned 3,000+ phishing URLs and correlating them with the SlowMist AML malicious address database, we identified a total of 36 malicious addresses (on the ETH blockchain) associated with the Angel Drainer phishing gang. Of these, there are two hot wallet addresses belonging to Angel Drainer, spanning multiple chains, with the ETH and ARB chains involving significant amounts of funds.

Based on the 36 malicious addresses linked and set as our on-chain analysis dataset, we derived the following conclusions about this phishing group on the Ethereum (ETH) chain:

  • The earliest activity time of the on-chain address set dates back to April 14, 2023. (Transaction ID: 0x664b157727af2ea75201a5842df3b055332cb69fe70f257ab88b7c980d96da3)
  • Stolen funds: According to preliminary estimates, the gang has profited approximately 2 million USD via phishing. This includes a profit of 708.8495 ETH, equivalent to approximately 1,093,520.8976 USD. They are also involved with 303 ERC20 Tokens, valued at around 1 million USD, primarily consisting of LINK, STETH, DYDX, RNDR, VRA, WETH, WNXM, APE, and BAL. (Note: Prices are based on the rates as of October 13, 2023, with data sourced from CoinMarketCap.)
  • Analyzing the related malicious addresses’ Ethereum data post-April 14, 2023, for the first two layers, we observed that out of the profit funds, a total of 1652.67 ETH was transferred to Binance, 389.29 ETH to eXch, 116.57 ETH to Bybit, 25.839 ETH to OKX, and 21 ETH to Tornado Cash. The remaining funds were transferred to other individual addresses.
We would like to extend our gratitude to ScamSniffer for helping us gather this data

Conclusion

This article, pivoting on the Balancer Hack and Galxe Hack incidents, delves into the phishing group Angel Drainer, extrapolating several characteristic features of this organization. As Web3 continues to innovate, the methodologies targeting Web3 phishing are also diversifying, catching many off-guard.

For users, it’s imperative to be informed about the risk profile of the target address before making on-chain transactions. Platforms like MistTrack can be used to input the target address and check its risk score and malicious labels. This can significantly reduce the risk of financial losses.

For wallet project developers, a holistic security audit is paramount. Emphasis should be on enhancing the user interaction security segment, fortifying the ‘what you see is what you sign’ mechanism, thereby minimizing the users’ susceptibility to phishing. Here are some specific measures to consider:

  • Phishing Site Alerts: Harness the power of the ecosystem or community to compile various phishing sites. Prominently warn and alert users when they interact with these phishing sites.
  • Signature Recognition and Alerts: Identify and alert requests for signatures such as eth_sign, personal_sign, and signTypedData. Emphasize the risks associated with eth_sign blind signing.
  • What You See Is What You Sign: Implement an extensive parsing mechanism within the wallet for contract calls. This will prevent ‘Approve’ phishing and inform users of the detailed content constructed during DApp transactions.
  • Pre-execution Mechanism: By using a transaction pre-execution system, users can understand the effects after the transaction broadcast. This aids users in predicting the outcome of transaction executions.
  • Same Suffix Scam Alerts: When displaying addresses, prominently remind users to check the complete target address, preventing scams that utilize identical suffixes. Implement a whitelist address mechanism, allowing users to add frequently used addresses to a whitelist and avoid attacks that exploit identical suffixes.
  • AML Compliance Alerts: During transactions, utilize AML (Anti-Money Laundering) mechanisms to alert users if the target address for their transfers might trigger AML rules.

SlowMist, as a leading blockchain security company, has been deeply involved in threat intelligence for many years. We primarily serve our vast clientele through security audits and anti-money laundering tracing services, establishing a solid network for threat intelligence collaboration. Security audits not only reassure users but also serve as a means to reduce potential attacks. However, due to data silos among various institutions, it’s challenging to identify money laundering gangs that operate across different platforms, presenting a significant challenge for anti-money laundering efforts. For project owners, promptly blocking and preventing the transfer of funds from malicious addresses is of paramount importance.

Our MistTrack anti-money laundering tracing system has accumulated labels for more than 200 million addresses, capable of identifying various wallet addresses from major global trading platforms. This includes more than a thousand address entities, over 100,000 threat intelligence data sets, and over 90 million risk addresses. If needed, you can contact us to access our API. In conclusion, we hope that everyone can join hands to make the blockchain ecosystem safer and better.

About SlowMist

SlowMist is a blockchain security firm established in January 2018. The firm was started by a team with over ten years of network security experience to become a global force. Their goal is to make the blockchain ecosystem as secure as possible for everyone. They are now a renowned international blockchain security firm that has worked on various well-known projects such as Huobi, OKX, Binance, imToken, Crypto.com, Amber Group, Klaytn, EOS, 1inch, PancakeSwap, TUSD, Alpaca Finance, MultiChain, Cheers UP, etc.

SlowMist offers a variety of services that include by are not limited to security audits, threat information, defense deployment, security consultants, and other security-related services. They offer AML (Anti-money laundering) software, Vulpush (Vulnerability monitoring) , SlowMist Hacked (Crypto hack archives), FireWall.x (Smart contract firewall) , Safe Staking and other SaaS products. They have partnerships with domestic and international firms such as Akamai, BitDefender, FireEye, RC², TianJi Partners, IPIP, etc.

By delivering a comprehensive security solution customized to individual projects, they can identify risks and prevent them from occurring. Their team was able to find and publish several high-risk blockchain security flaws. By doing so, they could spread awareness and raise the security standards in the blockchain ecosystem.

💬Website 🐦Twitter ⌨️GitHub

 

community logo
Join the TheDinarian Community
To read more articles like this, sign up and join my community today
0
What else you may like…
Videos
Podcasts
Posts
Articles
🇺🇸 Jerome Powell said banks are free to provide Bitcoin and crypto services

TRILLIONS incoming 🚀

00:00:24
This Is A CONGRESSWOMAN, LISTEN..

🚨 “Something Big Is Being Hidden… 3IATLAS” – Congresswoman Luna Breaks Silence 🚨

Congresswoman Anna Paulina Luna has spoken out about the mystery of 3I/ATLAS, showing her full support for Harvard scientist Avi Loeb’s investigation. She’s now teaming up with Loeb to uncover what the government might be hiding about non-human life forms, and why access to key footage is being blocked from the public.

Luna says this fight for UFO and ET disclosure is a bipartisan battle, but warns that powerful forces inside the intelligence community and the Department of Defense are pushing back hard to keep the truth hidden.

Meanwhile, sources claim that NASA’s Mars Reconnaissance Orbiter (MRO) captured rare images of 3I/ATLAS on October 2–3, but those pictures still haven’t been released — adding even more mystery to the case.

Could this be the moment the truth finally breaks through? 👀

00:03:33
🚨BREAKING: Today, the LAST Penny will be minted!

🚨BREAKING: IT'S OFFICIAL: The US Mint will officially STOP minting pennies. Today, the LAST Penny will be minted!

One Penny Costs the U.S Taxpayer $0.37 cents to Mint.

U.S. Mint lost $85,300,000,000 BILLION minting pennies in FY2024 alone.

00:01:00
👉 Coinbase just launched an AI agent for Crypto Trading

Custom AI assistants that print money in your sleep? 🔜

The future of Crypto x AI is about to go crazy.

👉 Here’s what you need to know:

💠 'Based Agent' enables creation of custom AI agents
💠 Users set up personalized agents in < 3 minutes
💠 Equipped w/ crypto wallet and on-chain functions
💠 Capable of completing trades, swaps, and staking
💠 Integrates with Coinbase’s SDK, OpenAI, & Replit

👉 What this means for the future of Crypto:

1. Open Access: Democratized access to advanced trading
2. Automated Txns: Complex trades + streamlined on-chain activity
3. AI Dominance: Est ~80% of crypto 👉txns done by AI agents by 2025

🚨 I personally wouldn't bet against Brian Armstrong and Jesse Pollak.

👉 Coinbase just launched an AI agent for Crypto Trading
Pyth’s TradFi arc is here 🏛️

Pyth Pro is bringing a wave of institutional demand: record inbound leads, new firms connecting to the network, and the expansion of real-world data coverage.

Q3 was Pyth’s biggest step yet. Full @MessariCrypto breakdown ⬇️

https://messari.io/report/state-of-pyth-q3-2025

post photo preview

🚨 BITCOIN PRICE FALLS BELOW 100K DESPITE US GOVERNMENT REOPENING 🚨

Bitcoin’s price has dropped below 100,000 despite the reopening of the US government. This decline comes as a surprise, given the expected liquidity boost from the end of the government shutdown.

🔑 Key Points

  • Price Decline: Bitcoin’s price has fallen below 100,000, marking a significant drop from its previous levels. This decline is attributed to a combination of factors, including market fatigue and profit-taking.

  • US Government Reopening: The US government has reopened, which was expected to inject liquidity back into the markets. However, Bitcoin’s price has not responded positively to this development.

  • Market Sentiment: Analysts suggest that the decline could be due to profit-taking by large holders and a general market cooldown. The reopening of the government has not yet translated into a significant liquidity boost for crypto markets.

💡 Why It Matters

  • Market Dynamics: The decline in Bitcoin’s price ...
post photo preview
XRP ETFs & Funds On Deck 👀

Proposed XRP ETFs and funds:

  • Bitwise XRP ETF
  • Grayscale XRP ETF
  • 21Shares Core XRP Trust ETF
  • Canary Capital XRP ETF
  • WisdomTree XRP Fund
  • CoinShares XRP ETF
  • Invesco XRP ETF
  • VanEck XRP ETF
  • Fidelity XRP ETF
  • ARK Invest XRP ETF
  • Galaxy Digital XRP ETF
  • ProShares XRP ETF
  • Hashdex XRP ETF
  • Volatility Shares XRP ETF
  • Volatility Shares 2x XRP ETF (a leva doppia)
  • Volatility Shares -1x XRP ETF (inverso)
  • Franklin Templeton XRP ETF
  • Franklin Templeton Spot XRP ETF (cboe)
post photo preview
post photo preview
3I/ATLAS — Secret Laws Of Gravity
Unlocking the future of space travel through the precise calculation of time and orbital trajectories.

"My preliminary analysis suggests two principal hypotheses regarding the reported phenomenon known as '3I/Atlas':

  1. A Coordinated Psychological Operation (PsyOp): The phenomenon may constitute a calculated effort to manipulate public sentiment or induce fear, potentially preceding a planned, large-scale deception (referred to informally as 'Project Bluebeam').

  2. A Highly Anomalous Object: Alternatively, the phenomenon represents an authentic, significant anomaly warranting serious scientific or intelligence scrutiny.

Regardless of its origin, '3I/Atlas' represents an historically noteworthy development that necessitates close, informed observation."

 

~Crypto Michael | The Dinarian 🙏

Abstract Introduction:

New data is now showing something that arrived early and its changing colors as we previously predicted.

In orbital mechanics where trajectories are calculated centuries in advance with accurate precision measured in seconds.

A 11-minute deviation is not a rounding error.

It’s not a typo in the database.

It’s not close enough.

"It’s Physically impossible.”

Now The longest government shutdown in U.S. history still blocking NASA releases while the object executed its closest Fly-by approaches to Mars, The Sun and Venus at the moment of maximum observational blackout.

But orbital mechanics don’t care about “government shutdowns.”

Our observations Don’t Stop.

And the math doesn’t wait for “Press releases.”

The math says this:

“If 3I/ATLAS is natural, it should have lost about 5.5 billion tons of mass.”

It didn't.

1. The 5.5 Billion Ton Problem:

Let’s start with what everyone agrees on: 3I/ATLAS “now” arrived earlier than pure gravitational predictions would allow. Even though we have been mentioning this trajectory change over 2 Weeks ago (October 21st Article HERE) TRACKING 3I/ATLAS .

The scientific consensus explanation? “Natural outgassing” the "rocket effect." As water ice sublimates near the Sun, it creates thrust, like a slow-motion rocket engine powered by evaporating ice. Comets do this all the time. It’s normal. It’s natural. It’s explainable.

Except for ONE problem.

The Physics Don’t Add Up!”

To generate enough thrust to arrive approximately “11 minutes early” would require shedding a staggering amount of mass.

Our calculations show “over 5.5 billion tons” of gas ejected over the perihelion passage.

Think about that for a moment.

That’s not a little puff of vapor.

That’s not some gas leaking from surface cracks.

That’s 15% of the object’s total estimated mass.

If 3I/ATLAS lost that much material naturally, it would create a debris cloud larger than Jupiter’s magnetosphere—visible to amateur telescopes from Earth. Absolutely impossible to miss in professional observations, and bright enough to be catalogued by every sky survey on the planet.

1.1 ~ The Plume Paradox:

Here’s where it gets interesting:

No such cloud has yet to be observed.

Not by Hubble. Not by JWST. Not by ground-based observatories. Not by the Mars orbiters that watched it pass at 30 million kilometers.

The brightness remained within “expected limits.” The coma showed stable & geometric shifting features. The tail structure now disappeared (but that’s another story). The main one is that: “The debris cloud that should exist — simply doesn’t.”

This isn't a minor discrepancy.

This is complete, mathematical failure of the natural comet hypothesis.

Part 2: The Industrial Signature:

So if natural sublimation didn't create the thrust, what did?

The answer is hidden in the chemistry—specifically, in what shouldn’t be there. “The Nickel Anomaly.” When multiple astronomers analyzed 3I/ATLAS’s spectral signature, they found something extraordinary: “nickel vapor” (Ni) at extreme distances from the Sun, where temperatures should be far too cold for metals to vaporize naturally.

Nickel doesn't just evaporate on its own at those temperatures.

It needs HELP.

And there’s only one known process—natural or industrial—that produces a volatile nickel-carbon compound at cold temperatures which we have said several times previously;

Nickel Tetracarbonyl: Ni(CO)₄

This is not a natural cosmic process.

This is an “industrial chemical pathway” used on EARTH for metal refinement!!!

It forms at 120°C and decomposes at 180°C allowing nickel to vaporize at temperatures where water ice would remain frozen solid.

It is LITERALLY, an industrial refrigerant for metal processing.

The presence of Ni(CO)₄ in the plume tells us two things:

  • The core is not ice — It’s a nickel-rich, engineered structure.
  • The process is not passive sublimation — it’s an active, controlled system.

The nickel vapor isn’t contamination.

It’s not a coincidence.

It’s Exhaust.

3. Secret Gravity (SOEG) Model:

This is where our research team proposes something NEW.

We call it The “Self-Optimizing Ejection Guidance (SOEG) Model”

A Brand New Scientifically defensible framework that explains the acceleration not as chaotic outgassing, but as “controlled propulsion.”

The SOEG Model (Project EE / 3IE)

The System:
• Volatile Reservoir — CO₂ ice + Nickel-rich metallic core.
• Solar Heating — Perihelion triggers sublimation at optimal moment.
• Magnetic Ionization — Internal magnetic field ionizes nickel vapor into plasma.
• Anisotropic Jets — Plasma channeled through focused nozzles. (not random cracks)
• Thrust Optimization — Maximum momentum transfer with minimal mass loss.

Unlike natural cometary outgassing—which is chaotic, omnidirectional, and wildly inefficient. The SOEG Model Fully Represents: (CONTROLLED, DIRECTIONAL, OPTIMIZED PROPULSION.)

It’s the engineering solution to interstellar navigation: Using a “magnetofluidic drive” that uses the Sun’s + Nearby Planets & Star energy to activate a propulsion system that was BUILT.

The secret is in the magnetic field. By ionizing the nickel-carbon vapor into a high-velocity plasma jet, the system achieves thrust efficiencies that natural sublimation could never match.

This isn’t science fiction. This is “magnetohydrodynamics” the same physics that powers experimental plasma thrusters being developed by NASA and ESA for deep-space missions.

The difference?

We’re building prototypes…

Someone else already perfected it.

4. The Scientific Statistical Test:

Here’s what makes it undeniable.

Natural comets exhibit HIGH temporal variance in their acceleration parameters.

Technical terms like (A₁) and (A₂) that describe how thrust changes over time. Natural outgassing is messy, chaotic & unpredictable.

Our Prediction:

We formally predict that when sufficient post-perihelion data is published — expected from JUICE observations (data release February 2026) and ground-based telescopes through December 2025— 3I/ATLAS WILL show:

  • (A₂ parameter near zero) — phase-locked rotational coherence.
  • Temporal drift < 0.5σ — stability far beyond natural variance.
  • “Thrust vector alignment” with rotational axis — body-fixed engine signature.

If ALL 3 conditions are met.

The probability that 3I/ATLAS is a natural comet drops below 0.01% (a >4σ statistical rejection).

This is not speculation. This is a time-stamped, falsifiable prediction.

By February — March 2026, we will either be proven right or wrong.

The data doesn’t care about our theories. It only cares about what actually happens.

5. The Blue Hue 🔵:

Now there’s one more piece of evidence—and it’s visible to the naked eye (well, through a telescope). “The Color Anomaly.”

Natural comets scatter sunlight off dust particles, producing a yellowish-red glow. At 1.36 AU from the Sun, 3I/ATLAS should have appeared reddish-orange from thermal emission.

Instead, observers noted something strange: “A distinct blue fluorescence” in the coma.

What Blue Light Means?

Blue emission in a comet’s coma comes from highly ionized species—primarily “CO” (carbon monoxide ions) and certain excited metallic vapors. This requires enormous, “FOCUSED” energy to achieve.

You don’t get this level of ionization from passive solar heating. You get it from ~ Active Plasma Generation. The blue hue is the visible proof of the SOEG engine operating at perihelion. It’s the "engine glow" of a magnetofluidic drive generating high-energy plasma to achieve maximum thrust efficiency.

Compare:
- Natural comets (Hale-Bopp, NEOWISE, 67P, Etc.): Usual Yellowish-red dust scattering.
- Expected for 3I/ATLAS at 1.36 AU: Reddish-orange thermal glow.
- Observed in 3I/ATLAS: Distinct “Blue” plasma fluorescence.

This isn't subtle.

This is the difference between reflected sunlight and an active thruster firing.

5.5 ~ Convergence of Evidence:

Let's put it all together.

The Self-Optimizing Ejection Guidance (SOEG) Model is not speculation. It’s not wild theorizing. It’s one of the only frameworks that coherently explains:

✅ The early arrival— non-gravitational acceleration without natural explanation.

✅ The missing 5.5-billion-ton debris cloud — controlled thrust with minimal mass loss.

✅ The Ni(CO)₄ industrial signature — engineered propulsion chemistry.

✅ The blue plasma glow — active ionization system visible during perihelion.

✅ The statistical impossibility — phase-locked stability beyond natural variance. (pending verification)

However each piece of evidence, standing alone, is anomalous but potentially explainable.

Together, they form an interlocking pattern that demands a technological origin.

But then there’s the Silence.

Venus conjunction: Still offline.

This is not incompetence.

This is recognition.

THEY know something we’re still calculating.

December 19, 2025: 3I/ATLAS reaches closest approach to Earth at 167 million miles.

“If the calculations are correct, the 5.5-billion-ton debris cloud should be impossible to miss. Every telescope on the planet will be watching.”

All of this new information scheduled to be released should definitely include the following: High-resolution spectroscopy, morphological analysis, particle environment data and MOST CRITICALLY the astrometric parameters that will confirm or refute our SOEG model’s predictions.

“If the A₂ parameter shows phase-locked stability, the SOEG model is confirmed.”

Conclusion:

The Numbers Don’t Lie. The orbital path was not set by gravity alone. The acceleration was not powered by ice. The chemistry was not natural. And the timing is not “coincidental.”

3I/ATLAS is a message written in orbital mechanics, plasma physics, and industrial chemistry—a message we have “74 days” left to fully decode.

The mathematics are clear.

The predictions are calculated.

We don't have to speculate about what it is.

We just have to (wait) for the complete data packet to arrive.”

And when it does, one of two things will happen:

Either the natural hypothesis survives (unlikely, given the evidence). Or we confirm what the numbers have been screaming to us since October are TRUE.

Something pushed it. Something controlled it. Something arrived exactly when it needed to.”

Or The A-parameters will lock.

The plasma signature will confirm.

The debris cloud will be absent.

And the institutional silence will make perfect sense.

Because you don’t announce a discovery like this through a press release.

You announce it through a “Calculated Strategy.”

Analogy Conclusion:

The orbital path was set by laws that were not known,
For where the starlight failed, a force was subtly sown.

No dust and ice, but Nickel in the plume’s blue gleam,
A pulse of hidden power, of controlled, forgotten dreams.

The A-Parameter locks, The true secret of the sphere,
The Simultaneous Truth arrives, When all the numbers are near.

— Earth Exists

Additional Reference & Data Source Links 🖇️:

EARTH EXISTS Documentation:
- [Previous article. 35 Days of Silence — 3I/ATLAS]

Source

🙏 Donations Accepted 🙏

If you find value in my content, consider showing your support via:

💳 PayPal: 
1) Simply scan the QR code below 📲
2) or visit https://www.paypal.me/thedinarian


🔗 Crypto Donations👇
XRP: r9pid4yrQgs6XSFWhMZ8NkxW3gkydWNyQX
XLM: GDMJF2OCHN3NNNX4T4F6POPBTXK23GTNSNQWUMIVKESTHMQM7XDYAIZT
XDC: xdcc2C02203C4f91375889d7AfADB09E207Edf809A6

Read full Article
post photo preview
BlackRock Is Manipulating The Price Of Bitcoin👀

Blackrock possess a strategic depth that goes far beyond initial appearances. When the general market perceives selling and traders respond with emotion, these major players are often operating on a much more profound level. They adeptly identify and leverage every available mechanism to influence market dynamics. Their power isn't in direct control of the asset, but in understanding how to move the market without ever taking direct ownership.

What entity has become the most prominent corporate champion of Bitcoin ($BTC)?

It's the one with the massive treasury holdings, known as Microstrategy.

 

However, the major strategic challenge lies here: the size of their Bitcoin position is fundamentally linked to their external financing, typically in the form of debt.

This reliance on significant debt creates an inherent vulnerability—a dependence on creditors and shareholders. When an entity's position is highly leveraged, that dependence makes them susceptible to market manipulation or strategic pressure from external financial forces.

When a highly leveraged corporate holder of a significant asset (like $BTC) faces external financial stress, that pressure inevitably transfers to the asset itself.

Blackrock's goal isn't to induce a market crash, but rather to establish a dominant position and control.

Any substantial sale of major cryptocurrencies like $BTC or $ETH initiated by Blackrock, can be interpreted not as routine trading, but as a deliberate effort to manipulate market sentiment and pricing.

Blackrock is deploying a sophisticated combination of tactics: they simultaneously generate market volatility through strategic sales of the asset ($BTC) while accumulating shares in key corporate holders (the stock symbolized by $MSTR).

The deeper intent is to leverage this equity stake to direct the corporate strategy of the highly leveraged Bitcoin champion.

With a sufficiently large ownership percentage, this influence becomes highly effective. The resulting market power is therefore a function of both manipulating price movement and controlling corporate policy.

Is Microstrategy (the company represented by the $MSTR stock) vulnerable to this kind of pressure? The evidence suggests yes.

A substantial stake held by Blackrock grants them effective leverage to influence and manipulate the company itself.

When the company's shares experience a significant decline, the leadership is often compelled to take action, potentially buying back their own stock. This action is driven by the fact that falling share prices directly intensify financial and market pressure on the entire organization.

If the stock of Microstrategy continues a sustained decline, lenders will inevitably begin to re-evaluate and revise the terms of existing loans. This is a critical point of failure for the entire strategy.

The fundamental operational model of this corporate champion works like a closed loop:

  • It secures debt financing (taking loans) to acquire $BTC.

  • Alternatively, it issues new equity (selling shares) to acquire $BTC.

Crucially, the ongoing interest payments on this substantial debt are often managed by the mechanism of issuing even more shares, creating a continuous cycle of dilution and reliance on a high stock price.

A major consequence of rising leverage is the escalating cost of borrowing, requiring Microstrategy to source even larger amounts of capital.

The most straightforward solution—to issue and sell more stock—proved to be insufficient.

In fact, the situation worsened: the company’s recent attempt to raise funds through a stock offering did not fully sell out. This failure directly resulted in a significant liquidity shortfall, hamstringing Microstrategy’s ability to meet its financial obligations and continue its asset acquisition strategy.

And the ultimate shock came when Microstrategy—the very entity that vowed it would never liquidate its holdings—began to sell.

These weren't insignificant trades; the sales were valued at billions of dollars.

The key question now becomes: Does this sudden, massive reversal signal the imminent collapse of Microstrategy, or is it simply a necessary, albeit drastic, maneuver of 'business as usual' under extreme duress?

There appear to be two primary strategic objectives behind Blackrock's calculated moves:

  • Scenario A (Direct Dominance): Blackrock aims to neutralize its most prominent competitor (the corporate Bitcoin accumulator) in order to seize the title as the largest holder of $BTC.

  • Scenario B (Indirect Control): The institution’s goal is to establish absolute market control and influence, preferring to leverage Microstrategy to execute the most aggressive or politically difficult actions.

The outright financial destruction of Microstrategy is highly improbable. Such an action would trigger a severe market crash that could take years to fully repair.

The far more intelligent strategy is integration and control.

Under this model, Microstrategy remains operational, while Blackrock secretly dictates strategy. This allows Microstrategy to absorb the market blame for any necessary but controversial manipulation, a classic and often dirty tactic used by high-powered financial entities.

In the immediate future, the market will continue to exhibit strong reactions to the strategic maneuvers of Blackrock.

When they execute sales, it instantly captures headlines, is aggressively amplified by the media, and causes fearful retail traders ('weak hands') to panic and exit their positions.

Every decrease in price that results from this panic directly translates into a superior entry point for Blackrock. This clearly illustrates that the current market environment is driven purely by emotion, making it a survival game reserved only for those with the strongest resolve.

In the long run, the nature of $BTC will likely shift, moving away from its original ideals of being completely free and decentralized.

The vast majority of the available supply is projected to become highly concentrated within a small number of major corporations and investment funds.

Consequently, the price cycles will no longer be reliably tied to events like halvings or popular narratives. Instead, they will be driven primarily by government and central bank policy decisions, overarching macroeconomic conditions, and the internal political maneuverings of the world's most dominant funds and corporations.

Blackrock's goal is not to eliminate $BTC; instead, they are focused on constructing an elaborate system of control around the asset.

Microstrategy (the stock symbolized by $MSTR) remains a powerful tool, but it now operates under terms and directives that the company's leadership no longer fully dictates.

Since direct command over the decentralized asset is impossible, control is established through strategic influence over the largest corporate and fund custodians. Moving forward, Blackrock will be the primary entity determining the market's trajectory.

🙏 Donations Accepted 🙏

If you find value in my content, consider showing your support via:

💳 PayPal: 
1) Simply scan the QR code below 📲
2) or visit https://www.paypal.me/thedinarian

🔗 Crypto Donations👇


XRP: r9pid4yrQgs6XSFWhMZ8NkxW3gkydWNyQX
XLM: GDMJF2OCHN3NNNX4T4F6POPBTXK23GTNSNQWUMIVKESTHMQM7XDYAIZT
XDC: xdcc2C02203C4f91375889d7AfADB09E207Edf809A6

Read full Article
post photo preview
A Request for NASA to Release Scientific Data on 3I/ATLAS

During my recent podcast interview with Joe Rogan (accessible here), I had mentioned the unfortunate circumstances, under which NASA had not released for four weeks the images collected by the HiRISE camera onboard the Mars Reconnaissance Orbiter. These images were taken on October 2–3, 2025, when the interstellar object 3I/ATLAS passed within 30 million kilometers from Mars. The images are extremely valuable scientifically because they possess a spatial resolution of 30 kilometers per pixel, about 3 times better than the spatial resolution achieved in the best publicly available image from the Hubble Space Telescope, taken on July 21, 2025 (accessible here and analyzed here). Whereas the Hubble image was taken from an edge-on perspective since Earth and the Sun were separated by only ~10 degrees relative to distant 3I/ATLAS, the HiRISE image offers a sideways perspective, valuable in decoding the mass loss geometry and glow around as it approached the Sun.

The delay in the data release was argued to be the result of the government shutdown on October 1, 2025. Nevertheless, conspiracy theorists suggested that it may have to do with evidence for extraterrestrial intelligence in the HiRISE images. When asked about it, I suggested that the delay is probably not a sign of extraterrestrial intelligence but rather of terrestrial stupidity. We should not hold science hostage to the shutdown politics of the day. The scientific community would have greatly benefited from the dissemination of this time-sensitive data as astronomers plan follow-up observations in the coming months.

Joe Rogan suggested that I contact the interim NASA administrator, Sean Duffy. The following day, I corresponded with congresswoman Anna Paulina Luna regarding a related formal request from NASA. Following our exchange, Representative Luna wrote a brilliant letter to NASA’s acting administrator Duffy.

We all owe a debt of deep gratitude for the visionary support displayed by Representative Luna to frontier science through her letter, attached below.

Avi Loeb is the head of the Galileo Project, founding director of Harvard University’s — Black Hole Initiative, director of the Institute for Theory and Computation at the Harvard-Smithsonian Center for Astrophysics, and the former chair of the astronomy department at Harvard University (2011–2020). He is a former member of the President’s Council of Advisors on Science and Technology and a former chair of the Board on Physics and Astronomy of the National Academies. He is the bestselling author of “Extraterrestrial: The First Sign of Intelligent Life Beyond Earth” and a co-author of the textbook “Life in the Cosmos”, both published in 2021. The paperback edition of his new book, titled “Interstellar”, was published in August 2024.

Source

🙏 Donations Accepted 🙏

If you find value in my content, consider showing your support via:

💳 PayPal: 
1) Simply scan the QR code below 📲
2) or visit https://www.paypal.me/thedinarian

🔗 Crypto Donations👇
XRP: r9pid4yrQgs6XSFWhMZ8NkxW3gkydWNyQX
XLM: GDMJF2OCHN3NNNX4T4F6POPBTXK23GTNSNQWUMIVKESTHMQM7XDYAIZT
XDC: xdcc2C02203C4f91375889d7AfADB09E207Edf809A6

Read full Article
See More
Available on mobile and TV devices
google store google store app store app store
google store google store app tv store app tv store amazon store amazon store roku store roku store
Powered by Locals