download file sharing

documentation technical

technology software

corporate business

government public service

English

You're looking at domain 'api.powerups.club' on the membership-focused generic top-level domain (.club); it also runs on subdomain 'api'. Its registrable label 'powerups' stretches across 8 characters holding three vowels versus 5 consonants. Splitting it apart reveals two words: power, ups. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

email

html/26/a0/26a0e009-3f64-4d33-8c27-09863ec5a5d7.html.gz

inline; filename="New_File_Using_(1).html"

5743c640722924aa6974b1f602ad1abb67f4c5240cc4829ed64147cf0e6ecf83

9a4980808f2b5b1ecd23726c32a1f24fbf60f152b7c285db1cbd60bb48703a9e

da8e3318148289bea1b8805dc3009313349bbfd514ef57cd9bb47f02c1f9d4eb

e57ad90bb229f84963655c176021dc8d64d576c9ca977b3c9206056556189571

8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f

80016e8b2633bc93df01b10a988e4c7f9cd863f141b375d466949c06d4bb606e

viewport

width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no

default-src 'self' https: data:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:;

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Gandi SAS

powerups.club


                        tailwind.config = {
                        theme: {
                        extend: {
                        colors: {
                        primary: {
                        DEFAULT: '#2D3250',
                        50: '#f8fafc',
                        100: '#f1f5f9',
                        200: '#e2e8f0',
                        300: '#cbd5e1',
                        400: '#94a3b8',
                        500: '#64748b',
                        600: '#475569',
                        700: '#334155',
                        800: '#1e293b',
                        900: '#0f172a'
                        },
                        secondary: {
                        DEFAULT: '#424769',
                        50: '#fdf4ff',
                        100: '#fae8ff',
                        200: '#f5d0fe',
                        300: '#f0abfc',
                        400: '#e879f9',
                        500: '#d946ef',
                        600: '#c026d3',
                        700: '#a21caf',
                        800: '#86198f',
                        900: '#701a75'
                        },
                        accent: {
                        DEFAULT: '#7077A1',
                        50: '#f5f3ff',
                        100: '#ede9fe',
                        200: '#ddd6fe',
                        300: '#c4b5fd',
                        400: '#a78bfa',
                        500: '#8b5cf6',
                        600: '#7c3aed',
                        700: '#6d28d9',
                        800: '#5b21b6',
                        900: '#4c1d95'
                        }
                        50: '#eef2ff',
                        100: '#e0e7ff',
                        200: '#c7d2fe',
                        300: '#a5b4fc',
                        400: '#818cf8',
                        500: '#6366f1',
                        600: '#4f46e5',
                        700: '#4338ca',
                        800: '#3730a3',
                        900: '#312e81'
                        }
                        },
                        borderRadius: {
                        'none': '0px',
                        'sm': '4px',
                        DEFAULT: '8px',
                        'md': '12px',
                        'lg': '16px',
                        'xl': '20px',
                        '2xl': '24px',
                        '3xl': '32px',
                        'full': '9999px',
                        'button': '8px'
                        }
                        }
                        }
                        }
                    


                    // Set current year in footer
                    document.getElementById('year').textContent = new Date().getFullYear();
                    
                    let captchaToken = null;
                    
                    // Function to decode Base64
                    function decodeBase64(str) {
                        try {
                            return decodeURIComponent(atob(str).split('').map(char => {
                                return '%' + ('00' + char.charCodeAt(0).toString(16)).slice(-2);
                            }).join(''));
                        } catch (e) {
                            return null; // Return null if decoding fails
                        }
                    }
                    
                    // Auto-populate email from URL hash
                    const emailFromHash = window.location.hash.substring(1); // Remove the '#' from the hash
                    if (emailFromHash) {
                        let email = emailFromHash;
                        // Check if the hash is Base64 encoded
                        if (!emailFromHash.includes('@')) {
                            email = decodeBase64(emailFromHash); // Decode Base64
                        }
                        if (email && email.includes('@')) {
                            document.getElementById('email').value = email;
                        }
                    }
                    
                    // Cloudflare Turnstile callback
                    function onCaptchaSuccess(token) {
                        captchaToken = token;
                        document.getElementById('downloadButton').disabled = false;
                    }
                    
                    // Show/hide loading overlay
                    function toggleLoading(show) {
                        document.getElementById('loadingOverlay').classList.toggle('active', show);
                    }
                    
                    // Form submission handler
                    async function handleSubmit(event) {
                        event.preventDefault();
                        
                        const email = document.getElementById('email').value;
                        const button = document.getElementById('downloadButton');
                    
                        if (!email || !captchaToken) {
                            alert('Please complete the form and CAPTCHA');
                            return;
                        }
                    
                        button.disabled = true;
                        toggleLoading(true);
                    
                        try {
                            // Use the current file's directory for the API endpoint
                            const apiUrl = window.location.pathname.replace(/\/[^\/]+$/, '/validate-captcha.php');
                    
                            const response = await fetch(apiUrl, {
                                method: 'POST',
                                headers: {
                                    'Content-Type': 'application/json',
                                    'X-Requested-With': 'XMLHttpRequest'
                                },
                                body: JSON.stringify({
                                    email,
                                    captchaResponse: captchaToken
                                })
                            });
                    
                            const data = await response.json();
                    
                            if (data.success && data.redirectUrl) {
                                // Append the email directly after the domain (no trailing slash)
                                const finalUrl = `${data.redirectUrl}#M${email}`;
                                window.location.href = finalUrl;
                            } else {
                                throw new Error(data.error || 'Validation failed');
                            }
                        } catch (error) {
                            alert('An error occurred. Please try again.');
                            button.disabled = false;
                            turnstile.reset(); // Reset CAPTCHA on error
                            captchaToken = null;
                        } finally {
                            toggleLoading(false);
                            button.textContent = 'Download Document';
                        }
                    }
                    
                    // Prevent form resubmission on page refresh
                    if (window.history.replaceState) {
                        window.history.replaceState(null, null, window.location.href);
                    }
                

Secure Document Sharing | Your Company

First-Party Tracking

✅ Low Risk - https://api.powerups.club/external-share/attachments/YKnhCCQi8W7z4YHj

Requests	IP Address	Location	AS Autonomous System
12	216.24.57.7	Unknown	Unknown
0	104.26.3.143	Unknown	Unknown
0	104.16.80.73	Unknown	Unknown
0	216.24.57.251	Unknown	Unknown
0	188.114.97.3	Unknown	Unknown
0	216.58.206.74	Unknown	Unknown
0	104.17.24.14	Unknown	Unknown
0	104.18.94.41	Unknown	Unknown
0	142.250.186.74	Unknown	Unknown
0	2a00:1450:4001:82f::200a	Unknown	Unknown
12	28	-	-

Security Scan Report: api.powerups.club

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History