technology software

documentation technical

cryptocurrency blockchain

government public service

healthcare medical

English

PHPSESSID

Within the Sri Lankan country-code top-level domain (.lk), 'oms.cybercore.lk' is registered; it also runs on subdomain 'oms'. The second-level label 'cybercore' is 9 characters long split between three vowels and six consonants. Splitting it apart reveals 2 words: cyber, core. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

email

password

remember_device

html/ac/3d/ac3d26fd-5580-4c4c-8d77-3e568ccca565.html.gz

f948564f54b4858d7dc31fb7241165cd0dae2bbebbf6e8fb6a70be87f2983765

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

html/ac/3d/ac3d26fd-5580-4c4c-8d77-3e568ccca565_nodriver.html.gz

Login | CYBERCORE OMS

cybercore.lk

Abuse Department

Dave Aninowsky

Network Operations

The Constant Company, LLC

CONSTANT


/* ════════════════════════════════════════════════════
   TRUSTED DEVICE  — localStorage key: cc_td_v2
   Payload: { token, email, name, expiry (ms timestamp) }
   Server validates hashed token in tbl_user_devices.
════════════════════════════════════════════════════ */
const LS_KEY = 'cc_td_v2';

function getStored() {
    try {
        const raw = localStorage.getItem(LS_KEY);
        if (!raw) return null;
        const d = JSON.parse(raw);
        if (!d || !d.token || !d.email) { localStorage.removeItem(LS_KEY); return null; }
        // Client-side expiry pre-check (server always re-validates)
        if (Date.now() > (d.expiry || 0)) { localStorage.removeItem(LS_KEY); return null; }
        return d;
    } catch(e) { return null; }
}

function saveStored(data) {
    try { localStorage.setItem(LS_KEY, JSON.stringify(data)); } catch(e) {}
}

function clearStored() {
    try { localStorage.removeItem(LS_KEY); } catch(e) {}
}

/* ── On load: show trusted banner if saved data found ── */
function initPage() {
    const d = getStored();
    if (!d) return;

    document.getElementById('trustedBanner').classList.add('show');
    document.getElementById('orDivider').classList.add('show');

    const parts = (d.name || d.email).trim().split(/\s+/);
    const initials = parts.length >= 2
        ? (parts[0][0] + parts[parts.length - 1][0]).toUpperCase()
        : (d.name || d.email).slice(0, 2).toUpperCase();

    document.getElementById('trustedAvatar').textContent = initials;
    document.getElementById('trustedName').textContent   = d.name  || d.email;
    document.getElementById('trustedEmail').textContent  = d.email || '';
}

/* ── Quick login via device token ── */
function doQuickLogin() {
    const d = getStored();
    if (!d) { switchUser(); return; }

    const btn     = document.getElementById('btnQuickLogin');
    const spinner = document.getElementById('qlSpinner');
    const icon    = document.getElementById('qlIcon');
    const errBox  = document.getElementById('qlError');

    btn.disabled         = true;
    spinner.style.display = 'block';
    icon.style.display    = 'none';
    errBox.style.display  = 'none';

    const fd = new FormData();
    fd.append('action',       'device_login');
    fd.append('device_email', d.email);
    fd.append('device_token', d.token);

    fetch('login_process.php', { method: 'POST', body: fd })
    .then(r => r.json())
    .then(res => {
        if (res.status === 'ok') {
            // Rolling token — store fresh token so 30-day window slides
            saveStored({
                token:  res.new_token,
                email:  d.email,
                name:   d.name,
                expiry: Date.now() + (30 * 24 * 60 * 60 * 1000)
            });
            window.location.href = res.redirect || 'add_order.php';
        } else {
            clearStored();
            errBox.style.display = 'flex';
            document.getElementById('qlErrorMsg').textContent =
                res.reason === 'suspended'
                    ? 'Account suspended. Contact your administrator.'
                    : 'Session expired. Please sign in with your password.';
            btn.disabled          = false;
            spinner.style.display = 'none';
            icon.style.display    = 'inline';
        }
    })
    .catch(() => {
        errBox.style.display = 'flex';
        document.getElementById('qlErrorMsg').textContent = 'Network error. Please try again.';
        btn.disabled          = false;
        spinner.style.display = 'none';
        icon.style.display    = 'inline';
    });
}

/* ── Switch user (clear stored) ── */
function switchUser() {
    clearStored();
    document.getElementById('trustedBanner').classList.remove('show');
    document.getElementById('orDivider').classList.remove('show');
    document.getElementById('emailInput').focus();
}

/* ── Password visibility ── */
document.getElementById('togglePwd').addEventListener('click', function() {
    const pw  = document.getElementById('pwdInput');
    const ico = document.getElementById('eyeIcon');
    const show = pw.type === 'password';
    pw.type       = show ? 'text'           : 'password';
    ico.className = show ? 'bi bi-eye-slash' : 'bi bi-eye';
});

/* ── Form submit spinner (prevents double-submit too) ── */
document.getElementById('loginForm').addEventListener('submit', function(e) {
    const email = document.getElementById('emailInput').value.trim();
    const pwd   = document.getElementById('pwdInput').value;
    if (!email || !pwd) { e.preventDefault(); return; }

    const btn = document.getElementById('loginBtn');
    if (btn.disabled) { e.preventDefault(); return; }   // prevent double submit

    btn.disabled = true;
    document.getElementById('loginSpinner').style.display = 'block';
    document.getElementById('loginBtnTxt').innerHTML      = 'Signing in…';
});

initPage();


Requests	IP Address	Location	AS Autonomous System
5	139.84.221.250	United States	AS20473The Constant Company, LLC
4	104.16.174.226	United States	AS13335Cloudflare, Inc.
9	2	-	-

Security Scan Report: oms.cybercore.lk

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History