discovered 2026-05-27
Wave 1 package from terminal3airport. Contains Scramjet-based web proxy (Lucide Proxy) with popunder ads, external ad/tracking scripts, and Google Analytics. Disguised as tutoring website.
