phishing scam

Spanish

__cf_bm

store_login_session

store_session_payload_4698676

The domain 'www.decampomendoza.com' uses the commercial generic top-level domain (.com) with subdomain 'www'. The second-level label 'decampomendoza' is 14 characters long with six vowels and 8 consonants. Word splitting yields three words: de, campo, mendoza. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

password

html/5a/5f/5a5f3514-a67d-4058-9d67-30f7c332f82f.html.gz

frame-ancestors 'self' mitiendanube.com *.mitiendanube.com lojavirtualnuvem.com.br *.lojavirtualnuvem.com.br mitiendanube.com.ar *.mitiendanube.com.ar mitiendanube.com.mx *.mitiendanube.com.mx mitiendanube.com.co *.mitiendanube.com.co mitiendanube.cl *.mitiendanube.cl; upgrade-insecure-requests

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

7ec9661b3c7984fe1a28d3ee6dffa4d79bfff7fec1df2269522cbd1102c1f199

540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441

8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f

parseHTML() executes scripts in event handlers

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

8a665bb9bf4101b52e75b07bb213d01378a1ac3e7e73dc33a29a52fe8dfcaab4

9e038814fddbb1778cda0d78feb8504fd6f9dad215608167a21863464c6b05fd

9a33b40f415b7c8d3cd6ff186603939da01035788060ec9f2d730f90482f38ee

01784ec330b64d9938a61cbbcec726d3628b8002cde1f5becbf263b09b25e946

6e20efbdfb4b1ab673e0a9d796063a975cbf5f529c4584061646ca74d8791a1d

5c852f5409446d8e4076781ef5d8a040cdb561987932831f62a639f8bde26181

ce2600fd2828b91b71590034c611db963b034a1d752ce1813e3999f875462a1a

b5ae146f14d927e5a4273b8e52ffcf8ac86d38a6979a2846add0fddd7cd5c483

f7d31d9edee75c486bc8ce594b5e3106a89e80feec010f3527724ef50882b75d

viewport

description

//d26lpennugtm8s.cloudfront.net/assets/common/img/logos/payment/new_logos_payment/nuvempago@2x.png

nuvempay-logo

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

html/5a/5f/5a5f3514-a67d-4058-9d67-30f7c332f82f_nodriver.html.gz

HOSTINGER operations, UAB

DECAMPOMENDOZA.COM

Abuse

Google LLC

GOOGLE


        window.recaptchaEnabled = true;
        window.recaptchaV2 = { siteKey: '6Ldp6lUqAAAAAEmZBhIVl_tzMi70KlSohR77QfLc' };
        window.recaptchaV3 = { siteKey: '6LezGnQcAAAAAD5T1ReYv_OMo1EJbDUfPu7srRhU' };
    


    window.enableNativeLibraries = true;
    window.hasMetricsTag = false;
    window.hasFixFilterPaginationTag = false;
    window.hasUpdatingCartStatusTag = false;
    window.hasMaxPaymentDiscountFixTag = false;



            window.skipJQuery = true;
    
    LS.ready.then(() =>  {
        if (!window.jQueryNuvem) {
            window.jQueryNuvem = $
        }
    });




    function ga_send_event(category, action, label, value) {
                    return;
            }

    


    function amplitude_log_event(event, properties) {
        // dummy function
        return true;
    }



    {
        "@context": "https://schema.org/",
        "@type": "WebPage",
        "name": "",
                "breadcrumb": {
            "@type": "BreadcrumbList",
            "itemListElement": [
            {
                "@type": "ListItem",
                "position": 1,
                "name": "Inicio",
                "item": "https://www.decampomendoza.com"
            },                                                    ]
        }    }
    

Requests	IP Address	Location	AS Autonomous System
5	104.16.79.73	United States	AS13335Cloudflare, Inc.
2	216.58.206.42	United States	AS15169Google LLC
2	185.133.35.14	Brazil	AS273584LINKED STORE BRASIL CRIACAO E DESENVOL DE SOFTWARE
2	142.251.208.10	United States	AS15169Google LLC
2	216.58.206.67	United States	AS15169Google LLC
13	5	-	-

Security Scan Report: www.decampomendoza.com

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History