technology software

documentation technical

adult content

phishing scam

government public service

English

PHPSESSID

You're looking at domain 'cloudsmsh.ch' on the Swiss country-code top-level domain (.ch). The second-level label 'cloudsmsh' is 9 characters long with two vowels and 7 consonants. Tokenizing the label suggests 3 words: clouds, m, sh. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

_languageCode

LoginForm[username]

LoginForm[password]

code_2fa

remember

3d098b2f915e94a22e1c46e816a2a4e45d8291f650afb7a64a7b2cd4efe63b62

0bd31b45eddff8249846347c01c8bd7ed35c513af1aea500eb580b1667dcae73

5152ea89087d57e823705d55990d60f75f722d02b44e673b118c78214b2e4684

806aedff52ac822f2adc5797073e1e5c5cec32eb9f15f2319cb32a347dcd232b

91041664284577258552181a3e751d13c25db8baed778804547b10ab0e69557c

7bcb09263bf1b3904eaf015bd275e2e558eb40d60ed629a8dbe0c346b0b44c11

0e25ba97070af2c6b277ba3cf71f4fe6b76f6932178622a7fd318699321f7531

e97fba7c6496f3f44e523c08a257c0a05106bc3678f65de83ef56c4cf5934abb

f8eaa2e4e072dc7ba9dd6bc406b493349155b52c8760fde2e920c3de7347760e

da4583e15ff4418fa32b72ff12d60db86f757b0fa8a4f0d6e2c91a3f353a72d6

c1bb04a64b3d17b50865d5d3473eaa0ca40a251c634e18c9f42bb494160212a1

bf27c958991dd20d5bb8f30d656972cee877f50ee087b01b7b962cb00477af02

badc13243a9deec3294dc5b5ca2125b693f0877be076e7afeda66cf096ef3e91

6be3d1ab735bc8adc6d3c0688a8f57ebec85887a53488adb13bbb366faa60da7

6a9b9a1afce7395dcccc0866d1ea5a453cb9af68a588e98a4f0cda464d971a5d

b2b25113cefe741373c579689a2bac11a5ed15857bf4cb071f18fe5a31c7e38e

bef1b38ae0c38217fa1a58be7bfd9858a5ff13a1d6d01f8fff0f47031bfeed21

10fdbfbb18a947e7024457f52fd2dfe94ebddd612156c886731474b02aa45d23

81e5615daa99974315a55151353bbf113f5a7f7c89c3d808dac47544502422f4

89fdcc42a22b5f32b68d453a406e4f30f6bacfb7dc051b219963c14f3a41e313

ef72c4652edf11f33c95a047cde76c432abf7e858b1970bc6f50f74381519300

a7094605a0621db74f31f3b40dfb553bcf85f6d9a82197dad3d9e30967e2a6b6

91e0de66d2c51b2b2e81ac3999fcdd920b29d8f0c9c34fb565adde147dd12a55

935417b65793190fa81d6dde3c3338a7de05759075514166dc8928fee2c58a5b

b962bb5554dc016d6c536c45421dd04c45bbd191c11ff6bb55b2b22fe944eed3

5277e36d1eaaaade1e409de4526a4f5ac50ed34bb26b908902db726dfc084706

6a624ccdaaca898b4701d3646032144962f19761d41d3fd1671b86e4631dc088

7e6d9feb0451763da998a7ada93ef2cf64ddd4cd87037872c62b6136668a14ba

73dc8b156964fffabf2c2ffec2bb4f1e167ee8d2b0bb63e3ac03e3dcac55fc41

21881b2c3a2f822ec0fbad9972ef82fc4475dddd56ca41d46f46c13ba53fd00c

f61bd46c2ced7c04afa333e228a3aa756edc8772c852433c5b3b07ff967ea534

0598817f625f92348bc86a476fcc48765aba8da483e222e9fae07798b98de2ac

2d1cd3f99399c1cdcc40a8203f6448c1006cc81a17c1bc7a94616c6ac757f906

8fda5ac56df81b025428da19a770911f037a78cca6dbe839866e398fe9d62309

3107c300f1651916048791aef71a499ff21c86bf774b5ea3985b993b55f5e9ce

6cdb52432cd8e2d79270fbebd5734e524229ca5b7a2b4a50d3c20482267e616d

8aa23250a12f44f67382f283fec9726a53f9badfc4de5d9eda9fe4b4dfc5e0de

02c480b80eeaa43df4ce642355799ad7fd9df542a9abeb5a8275c2fdec11f425

aa521bc92c52b36910f29703d9814c686597b1fc5b579c6c061302a4fd0fd3ff

a49d12ef8842fbdf9ab519dfdb084ee7b64a20c6a688c2a1ddbd5fc67493126d

78c7cc140bfc1c27abe328aade6aa78585d98e5efe9569aeb179b96af3f9948b

ba619095f7560e0d6fb6230eeb18ea242b487fb8f99c001f37a2ed166a59fd02

ab8d2f88139bc915f5ff75758178a69abbc3e06d6e0d82686ee3bc3c4932eb64

language

SmartShipper shipping was never made smarter

description

CSP header missing - vulnerable to XSS attacks

cloudsmsh.ch

ORG-INS5-RIPE

Rene Luria

Infomaniak Network SA

ORG-NCC1-RIPE

Eric Laporte

Francois Corthesy

Romain Tournier

CH-INFOMANIAK-20190926


S3.countryCode='CH';
var gLoginUrl = "/index.php?r=site/login";
/** ---------------------------------------------------------------------------
Class:    S3_SPACE.profile.parameters
Description: Parameters to pass to S3 backend
----------------------------------------------------------------------------- */
(function(){ // Start local scope
	
S3_SPACE.profile = S3_SPACE.profile || {};
// Start class
S3_SPACE.profile.login = {

currentLanguage:'en',	
/* verify crendential, 
- if they are correct submit the form to Yii
- if not, display error messages */	
sendAfterVerifyingCredential: function(myForm,theAction){
	postData = S3.mergeParam(
		{	'login-verify-credential':1,
			'verify-user-only':0,
			'username':$("#username").val(),
			'password':$("#password").val(),
			'code_2fa':$("#code_2fa").val()
					});
	if ($('#usermagic').val() != '' ){
		postData = merge_options(postData,{'verify-cs':$('#usermagic').val()});
	}
	$.ajax({
    type: "POST",
    url: "s3lib/S3ProfileRegisterAction.php",
    data: postData,
    dataType:'html',
    timeout:20000,
    success: function(msg) {
    	
    	var status = S3.parseAjaxResponse(msg);
    	var credential = status[1];
    	switch(credential){
    		
    		case 'OK': // OK, we know that we can save the cookie
    		/* 2015-03-05 */
    		if (typeof(postData['verify-cs'])=='undefined'){
    			S3.countryCode = status[2];
    		}
    		//S3.countryCode = status[2];
    		//console.log($('#remember:checked'));
    		if ($('#remember:checked').length) {
    			//console.log("save user cookies")
    			S3_SPACE.profile.cookies.saveUserCookie($("#username").val(),$("#password").val());
    		}
    		else{
    			S3_SPACE.profile.cookies.resetUserCookie();
    			S3_SPACE.profile.cookies.resetLanguageCookie();
    		}
    		//return;
    		switch(theAction){
    			case 'submit':
    				$('#login-form').prop('action',gLoginUrl+"&_appCountry="+S3.countryCode);
    				
    				if (typeof(postData['verify-cs'])!=='undefined'){
    					var userCountry=S3.responseStatus[4];
    					$('#login-form').prop('action',gLoginUrl+"&_appCountry="+userCountry);
    				}
    				myForm.submit();
    			break;
    			case 'usermagic':
    				if (S3.responseLines[1]!=''){
    					S3.userGroup = 'Tnt-user';
    					S3.secureString=S3.responseLines[1];
    					$('#usermagic').prop('disabled','');
    					$('#csCountry').val(S3.responseStatus[3]);
    					S3_SPACE.grid.autocompletion.initializeField('usermagic','user');
    				}
    				else{
    					$('#csCountry').val('');
    					$('#usermagic').prop('disabled','disabled');
    					$('#usermagic').val('');
    				}
    			break;
    		}
    		break;
    		
    		case 'INVALID_USER':
    		$("#username").removeClass("warning").addClass("warning");
    		$("label.warning").remove();
    		S3.showValidationError($("<label>"+_l('Login/Mask/Message/UnknowUsername')+"</label>"),$("#username"));
    		S3.displayIncompleteZone();
    		break;
    		
    		case 'INVALID_AUTH':
    		$("#usermagic").removeClass("warning").addClass("warning");
    		$("label.warning").remove();
    		S3.showValidationError($("<label>Autorisation too high for you</label>"),$("#usermagic"));
    		S3.displayIncompleteZone();
    		break;

        case 'SEND_2FA':
          $.jGrowl('Two Factors Authentification (2FA) code has been sent to your email address. Please copy this code and enter it in the field below.',{ header:'' , life:5000,theme:'growlinfo',position:'center' });	
        //S3.displayMessage(,'');
        $('#login_code').show();
    		S3.displayIncompleteZone();
    		break;

        case 'INVALID_2FA':
    		$("#code_2fa").removeClass("warning").addClass("warning");
    		$("label.warning").remove();
    		S3.showValidationError($("<label>2FA code is wrong</label>"),$("#code_2fa"));
    		S3.displayIncompleteZone();
    		break;
    		
    		case 'INVALID_PASSW':
    		$("#password").removeClass("warning").addClass("warning");
    		$("label.warning").remove();
    		S3.showValidationError($("<label>"+_l('Login/Mask/Message/InvalidPassword')+"</label>"),$("#password"));
    		S3.displayIncompleteZone();
    		break;
    		
    		default:
    		if (S3.responseSuccess==false){
  				S3.endingBlockUI(msg);
  				return;
  			}
    	}
    },
    error: function (jqXHR, textStatus, errorThrown){
    	if (errorThrown==''){
    		S3.endingBlockUI();
    	}
    	else{
    		S3.endingBlockUIWithError(jqXHR, textStatus, errorThrown);
    	}
    	return false;
    }
    
	}); 
},

/* PASSWORD LOST MANAGEMENT

Verify the username, if he is correct submit the form 
used for password lost */
sendAfterVerifyingUserName: function(myForm){
	postData = S3.mergeParam(
		{	'login-verify-credential':1,
			'verify-user-only':1,
			'username':$("#lostPasswordUsername").val()
		});
	$.ajax({
    type: "POST",
    url: "s3lib/S3ProfileRegisterAction.php",
    data: postData,
    dataType:'html',
    timeout:20000,
    success: function(msg) {	
    	var status = S3.parseAjaxResponse(msg);
    	var credential = status[1];
    	switch(credential){
    		case 'OK': // OK SUBMIT PASSWORD		
    		myForm.submit();
    		// display a message
    		return true;
    		break;
    		case 'INVALID_USER':
    		$("#lostPasswordUsername").removeClass("warning").addClass("warning");
    		$("label.warning").remove();
    		S3.displayIncompleteZone();
    		S3.showValidationError($("<label>"+_l('Login/Mask/Message/UnknowUsername')+"</label>"),$("#lostPasswordUsername"));
    		break;
    		default:
    		if (S3.responseSuccess==false){
  				S3.endingBlockUI(msg);
  				return;
  			}
    	}
    },
    error: function (jqXHR, textStatus, errorThrown){
    	S3.endingBlockUIWithError(jqXHR, textStatus, errorThrown);
    	return false;
    }   
	}); 
},

logonValidate:null,
lostPasswordValidate:null,

/* INITIALIZE LOGIN FORM */
initialize: function(){
	/* read the cookies */

	jcheck($('#remember'));
	S3_SPACE.profile.cookies.readUserCookie();
	S3_SPACE.profile.cookies.readLanguageCookie('0',S3_SPACE.profile.login.currentLanguage);
	

	self.logonValidate = $("#login-form").validate({
		errorClass: "warning",
		messages: {},
		errorPlacement: function(error, element) {
				S3.showValidationError(error,element);
  	},
		onkeyup: false,
		onblur: false,
		invalidHandler: function(){
			S3.incompleteZone = '#messageInfo';
			S3.displayIncompleteZone();
		},
		submitHandler: function(form) {	
			S3.eraseIncompleteZone();
			self.sendAfterVerifyingCredential(form,'submit');
			return false;
		}
		
	});	
	
	
	$("#LostPasswordButton").unbind('click').bind('click',function(){
		/* SHOW LOST PASSWORD DIALOG */	
		var _m = 'Login/LostPassword/Dialog';
		var _b = 'Login/LostPassword/Button';
		var content = _lp('Content',[_l('Resent',_b)],_m);
		content += '<br /><br /><input type="hidden" name="_languageCode" id="_languageCode" value="'+S3_SPACE.profile.login.currentLanguage+'"/><table><tr> \
		<td align=right><label for="lostPasswordUsername" class="input required"></label>'+
			_l('UsernameEmail',_m)+'</td> \
		<td align=left> \
			<input name="lostPasswordUsername" id="lostPasswordUsername" type=text size=30 \
			class="inputclass required" \
			title="' + _l('Login/Mask/Message/ValidUsername') +'" \
		</td> \
</tr> \
</table>';

		S3.messageDialog(_l('Title',_m),content,{
			width:500,
			height:200,
  		button:{
  			left:{id:'closeButton',name:_l('All/Dialog/Button/Close'),'desc':_l('All/Dialog/Button/Close') },
  			right:{id:'requestPassword',name:_l('Resent',_b),'desc':_l('Resent_D',_b)}, 
  			close:1 
  		},
  		form:{
  			action:'/index.php?r=site/login',
  			id:'formLostPassword'
  		}
  	});

	$("#requestPassword").unbind('click').bind("click",(function(){
		$("#formLostPassword").submit();
	}));
	
	// definition of the form	
	self.lostPasswordValidate = $("#formLostPassword").validate({
		errorClass: "warning",
		messages: {},
		errorPlacement: function(error, element) {
			S3.showValidationError(error,element);
  	},
		onkeyup: false,
		onblur: false,
		submitHandler: function(form) {	
			var x = self.lostPasswordValidate.form();
			if (x){
				self.sendAfterVerifyingUserName(form);
			}
			return false;
		}
	});
	
	}); /* click event when opening dialog box */
	
	$('#getClient').unbind('click').bind("click",(function(){
		self.sendAfterVerifyingCredential($("#login-form"),'usermagic');
	}));
	
	$('#Username').unbind('change').bind('change',(function(){
		$('#usermagic').prop('disabled','disabled');
    $('#usermagic').val('');
	}));
	
}


}; // End class
     
var self = S3_SPACE.profile.login;
})(); // End local scope

function postSubmit(responseText, statusText, xhr)  { 
	var res = S3.glowAjaxResponse(responseText);
} 

function bodyOnload(){
	S3.serverName='cloudsmsh.ch';
	S3_SPACE.profile.login.initialize();
	$('label.required').html(gRequiredLabel);
	if(0){
		S3.glowAjaxResponse("INFO| ");
	}
	
	 $("body, input, textarea").keypress(function(e){
      if(e.which==13) $("#yt0").click();
   });
	_setFooterSize();
}




Requests	IP Address	Location	AS Autonomous System
64	45.157.191.194	Switzerland	AS29222Infomaniak Network SA
64	1	-	-

Security Scan Report: cloudsmsh.ch

Summary

AI Security Verdict

Confirmed Scam

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History