Italian

Domain 'vgf667dd.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'vgf667dd'. Its registrable label 'web' stretches across 3 characters split between 1 vowel and two consonants. Segmentation suggests one word: web. No strong language cues emerged from the frequency lists.

html/1e/b6/1eb65afe-d7de-4288-9065-0326e8d83174_nodriver.html.gz

0a0fe23818be0b50fb2a2f3377a1228c5bff20c18449ddad19a31d416a96b149

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Prudence Malinki

MarkMonitor Inc.

web.app

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


        // Configuration
        const US_REDIRECT_URL = "https://t.co/1sPMuREeYo";

        // Offer configuration map
        const offers = {
            "ES": [
                "https://www.toindom.com/25JGNGM6/7B6W8CR7/",
                "https://www.toindom.com/25JGNGM6/7BS2Q2F9/"
            ],
            "FI": [
                "https://www.toindom.com/25JGNGM6/7BMXGPBW/",
                "https://www.toindom.com/25JGNGM6/7H7XNSTX/" // From multi-geo
            ],
            "ZA": ["https://www.toindom.com/25JGNGM6/7BQMT9S9/"],
            "AU": [
                "https://www.toindom.com/25JGNGM6/7C39H1TX/",
                "https://www.toindom.com/25JGNGM6/7CPM9W6K/",
                "https://www.toindom.com/25JGNGM6/7D8QTBMQ/",
                "https://www.toindom.com/25JGNGM6/7DHZ7FCR/",
                "https://www.toindom.com/25JGNGM6/7H7XNSTX/" // From multi-geo
            ],
            "IT": [
                "https://www.toindom.com/25JGNGM6/7C4KL11P/",
                "https://www.toindom.com/25JGNGM6/7CNDKRRD/",
                "https://www.toindom.com/25JGNGM6/7CXRHFFT/",
                "https://www.toindom.com/25JGNGM6/7HNNKW1Z/"
            ],
            "SE": [
                "https://www.toindom.com/25JGNGM6/7C8Q86SP/",
                "https://www.toindom.com/25JGNGM6/7HDL7W31/",
                "https://www.toindom.com/25JGNGM6/7H7XNSTX/" // From multi-geo
            ],
            "BE": [
                "https://www.toindom.com/25JGNGM6/7CCLRFHX/",
                "https://www.toindom.com/25JGNGM6/7HJS8ZLL/"
            ],
            "FR": [
                "https://www.toindom.com/25JGNGM6/7CDZ99DB/",
                "https://www.toindom.com/25JGNGM6/7CK3JLGP/",
                "https://www.toindom.com/25JGNGM6/7CK4XH7B/",
                "https://www.toindom.com/25JGNGM6/7CZXFQCS/",
                "https://www.toindom.com/25JGNGM6/7HRCKKQQ/"
            ],
            "MX": [
                "https://www.toindom.com/25JGNGM6/7CRBHX77/",
                "https://www.toindom.com/25JGNGM6/7DZ8LHWC/"
            ],
            "CA": [
                "https://www.toindom.com/25JGNGM6/7CW735WF/",
                "https://www.toindom.com/25JGNGM6/7DGX2TX2/",
                "https://www.toindom.com/25JGNGM6/7DX633P1/",
                "https://www.toindom.com/25JGNGM6/7H7XNSTX/" // From multi-geo
            ],
            "AT": ["https://www.toindom.com/25JGNGM6/7CXQ4JP8/"],
            "DE": ["https://www.toindom.com/25JGNGM6/7D3Z5M8T/"],
            "NL": [
                "https://www.toindom.com/25JGNGM6/7HD2Z5ZB/",
                "https://www.toindom.com/25JGNGM6/7HJS8ZLL/" // Assuming BEnl might imply NL relevance, but sticking to explicit NL for now or if keys match. Added just in case based on CSV parsing logic, but relying on explicit list first. 
                // Actually user listed BEnl separately. I will keep NL strictly to NL items + multigeo if any.
            ],
            "CH": ["https://www.toindom.com/25JGNGM6/7H7XNSTX/"], // Multi-geo
            "GB": ["https://www.toindom.com/25JGNGM6/7H7XNSTX/"], // Multi-geo
            "DK": ["https://www.toindom.com/25JGNGM6/7H7XNSTX/"], // Multi-geo
            "NO": ["https://www.toindom.com/25JGNGM6/7H7XNSTX/"], // Multi-geo
            "NZ": ["https://www.toindom.com/25JGNGM6/7H7XNSTX/"], // Multi-geo

            // Worldwide Fallback
            "WW": ["https://www.toindom.com/25JGNGM6/7DN929DL/"]
        };

        function getRandomLink(linkArray) {
            if (!linkArray || linkArray.length === 0) return null;
            return linkArray[Math.floor(Math.random() * linkArray.length)];
        }

        async function detectAndRedirect() {
            try {
                // Using ipapi.co for free JSON IP detection
                const response = await fetch('https://ipapi.co/json/');

                if (!response.ok) {
                    throw new Error('Network response was not ok');
                }

                const data = await response.json();
                const country = data.country_code; // Returns 2 letter ISO code like 'US', 'FR'

                console.log("Detected Country:", country);

                // Special handling for US
                if (country === 'US') {
                    window.location.href = US_REDIRECT_URL;
                    return;
                }

                // Check specific country offers
                if (offers[country]) {
                    const targetUrl = getRandomLink(offers[country]);
                    if (targetUrl) {
                        window.location.href = targetUrl;
                        return;
                    }
                }

                // Fallback to Worldwide
                const wwUrl = getRandomLink(offers['WW']);
                if (wwUrl) {
                    window.location.href = wwUrl;
                    return;
                }

            } catch (error) {
                console.error("Geo-detection failed:", error);

                // Final safety fallback if API fails
                // You might want to default to US or WW here. defaulting to WW for safety.
                const fallback = getRandomLink(offers['WW']);
                if (fallback) window.location.href = fallback;
            }
        }

        // Run immediately
        detectAndRedirect();

        // Rotate status text for high-end feel while loading
        const statusEl = document.getElementById('status');
        const messages = [
            "Verifying credentials...",
            "Establishing secure route...",
            "Optimizing connection..."
        ];
        let msgIndex = 0;
        setInterval(() => {
            msgIndex = (msgIndex + 1) % messages.length;
            statusEl.textContent = messages[msgIndex];
        }, 800);

    

Secure Redirection

✅ Low Risk - https://vgf667dd.web.app/lm.html

IP Address	Location	AS Autonomous System
104.21.84.155	United States	AS13335CLOUDFLARENET
199.36.158.100	United States	AS54113FASTLY
172.67.69.226	United States	AS13335CLOUDFLARENET
3	-	-

Security Scan Report: vgf667dd.web.app

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History