this is a dual hook

[Luna5829]

the 2 .asar files that are hosted under wallet-injection are dual hooked if you unpack them using npx @electron/asar extract atomic.asar atomic, and npx @electron/asar extract exodus.asar exodus

you can navigate to atomic/dist/electron/vendors.4e0fae9c1075cb883f42.js, and on line 5742 you will find const memonic = "https://mrbfederali.cam/wallet", which is their dual hook address

similarly, if you navigate to exodus/src/app/wallet/index.js, on line 28815 you will find const Passphrase = "https://mrbfederali.cam/wallet", which attempts to hide itself by being 680 spaces from the real code, but if you scroll to the right enough, you will find it