Skip to main content

Browser Console Security Warning

When you open the browser developer console on ViGrise's products and services, you may see a security warning. This page explains why this warning exists and how to stay safe.

Why Do We Show This Warning?

The browser console is a powerful tool intended for developers. Unfortunately, scammers often exploit it to trick users into compromising their own accounts through a technique called Self-XSS (Self Cross-Site Scripting).

What is Self-XSS?

Self-XSS is a social engineering attack where scammers convince users to paste malicious code into their browser console. The scammer might promise:

  • Free premium features
  • Account upgrades
  • Access to hidden functionality
  • Bonus credits or rewards

These are always lies. Pasting unknown code into your console can:

  • Steal your session tokens and cookies
  • Access your personal data
  • Perform actions on your behalf
  • Compromise your account security

How to Stay Safe

Never paste code you don't understand

If someone asks you to paste code into your browser console, it's almost certainly a scam. Legitimate support staff will never ask you to do this.

Recognize common scam tactics

Scammers often use phrases like:

  • "Paste this code to unlock a free feature"
  • "This hack will give you premium access"
  • "Enter this to see who viewed your profile"
  • "Copy this to get free credits"

What to do if you encounter a scam

  1. Do not paste any code into your console
  2. Report the scammer to our support team
  3. Warn others who might be targeted

For Developers

If you are a legitimate developer working with the ViGrise Platform:

  • Only run code that you have written or thoroughly reviewed
  • Be cautious with code snippets from untrusted sources
  • Use our official API documentation and SDKs
  • Report any security vulnerabilities through our responsible disclosure program

Need Help?

If you believe your account has been compromised or you have questions about security, please contact our support team immediately.