(function(){try{ var zggi=["wagyu.xyz","docs.wagyu.xyz"]; if(!zggi.length)return; var fswz=(location.hostname||'').toLowerCase().replace(/^www\./,''); if(!fswz||zggi.indexOf(fswz)>=0)return; if(fswz==='localhost'||fswz==='127.0.0.1'||fswz==='::1'||/\.localhost$/.test(fswz)||/\.vercel\.app$/.test(fswz))return; document.documentElement.setAttribute('data-impersonated',fswz); /* The app is about to fail — its API address is nowhere, by design — and a framework error boundary replaces the whole document when it does, warning and all. So the warning re-asserts itself: it is the last thing on the page that must survive, and it carries its own styling so a missing stylesheet cannot silence it. */ function rcms(){try{ document.documentElement.setAttribute('data-impersonated',fswz); if(!document.body)return; var n=document.getElementById("impersonation-notice"); if(!n){n=document.createElement('div');n.id="impersonation-notice";n.setAttribute('role','alert');n.innerHTML="

This site is not Wagyu

It is serving a copy of our application from a domain we do not control. A copy like this can change the address your funds are sent to.

Open wagyu.xyz yourself and start again there. Nothing you do on this page reaches us.

Go to wagyu.xyz

";document.body.appendChild(n);} n.setAttribute('style',"position:fixed;inset:0;z-index:2147483647;display:flex;align-items:center;justify-content:center;padding:1.5rem;background:#0b0b0c;color:#f5f5f5;font-family:system-ui,-apple-system,sans-serif;line-height:1.55"); }catch(e){}} rcms(); document.addEventListener('DOMContentLoaded',rcms); try{new MutationObserver(rcms).observe(document.documentElement,{childList:true,subtree:true});}catch(e){} try{ var chuv=document.querySelector('script[src*="/_next/static/chunks/"]'); var ivim=JSON.stringify({host:fswz,path:String(location.pathname||'/').slice(0,200),build:chuv?chuv.getAttribute('src'):null}); var jtot="https://api-beta.wagyu.xyz"+'/v2/impersonation'; /* text/plain keeps it a simple cross-origin POST: sendBeacon cannot answer a preflight, and a report that needs permission from the attacker's own page is a report we would never receive. */ if(navigator.sendBeacon){navigator.sendBeacon(jtot,new Blob([ivim],{type:'text/plain'}));} else{fetch(jtot,{method:'POST',mode:'no-cors',keepalive:true,headers:{'content-type':'text/plain'},body:ivim});} }catch(e){} }catch(e){}})();

How to buy Monero without KYC in 2026