social media network

corporate

English

The domain name 'telefmjw.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'telefmjw' is 8 characters long split between 2 vowels and 6 consonants. Splitting it apart reveals 3 words: telef, mj, w. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

phone

cf793f373e2789c3b4fb409cb5dab6c82a48a195bf2c42beeb08fbebfe243d9e

98d06ca03a0de89ef28b44df2eabe5a1ea123e59975bd7569354266e22f8fd0b

9cee261fa0dde4aee0f90ed379e70f3b229b609b6b82231950bea0930104396f

5b37ffc485b95b3512301920857860fa29e846ad04be80fb2c4bf568cceb3df5

80b43a95d082fa7e71572b673dc5172000abc8e9fe5f8c738a65cc6b4375e8dd

2a87f38bb575096eb0eaf95b59f7a6552bf3a96bb131bf4d019b95b898abd617

6a9762b7c854aab04b9a7bb7d54dca95f2480d57a9c7194763216676197aaa04

f86e619978d9992a4fb28b685b4d075de1f7a05bda8b9ab0dc9373f96e90838c

fb03a544341ceca83acbe963e622fe59156fba798b4d52126d8502e09d369491

title

A secure and fast cloud-based messaging application.

description

width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, shrink-to-fit=no, viewport-fit=cover

viewport

mobile-web-app-capable

apple-mobile-web-app-capable

apple-mobile-web-app-title

application-name

theme-color

google

robots

You have a new message. Open this link in Telegram to read.
https://__SITE_URL__/

twitter:card

twitter:title

twitter:description

twitter:image

NICENIC INTERNATIONAL GROUP CO., LIMITED

TELEFMJW.COM

Cloudflare, Inc.

Cloudflare, Inc

CLOUDFLARENET

/*
 * bundle-shim.js â æµè§å¨ç«¯ JS/CSS bundle è§£å¯è¿è¡æ¶
 *
 * éå build_bundle_encrypted.js ç XOR+ä½ç§» å å¯æ¹æ¡ä½¿ç¨ã
 * å å¯å¬å¼ï¼ä¸ encrypt-tool/build_encrypted_html.js ä¸è´ï¼ï¼
 *   enc[i] = plain[i] ^ KEY[i%4] ^ ((i*7+3) & 0xFF)
 *   KEY = [0x3A, 0x7C, 0xB1, 0xE5]
 *
 * è®¾è®¡ç®æ ï¼
 *  1. æ¦æª <script data-enc-src="./x.js"> å <link data-enc-href="./x.css">
 *     â fetch å å¯å­è â XOR è§£å¯ â Blob URL â ä»¥ç <script>/<link> æ³¨å¥
 *  2. hook HTMLScriptElement.src / HTMLLinkElement.href setter
 *     â æè· webpack dynamic import chunk å è½½ï¼åæº .js/.cssï¼
 *  3. hook fetch (å¯é)ï¼è¦ç XMLHttpRequest â éæè§£å¯ååº
 *
 * å¿é¡»å¨ä»»ä½ä¸å¡ JS ä¹åæ§è¡ï¼å æ­¤ä¼è¢«æ³¨å¥å° plainHTML ç <head> æåé¢ã
 */
(function () {
    'use strict';
    var KEY = [0x3A, 0x7C, 0xB1, 0xE5];
    var ENC_EXT = /\.(js|css)(\?|#|$)/i;

    // XOR+ä½ç§»è§£å¯ï¼å°±å°ï¼
    function decrypt(u8) {
        var n = u8.length;
        for (var i = 0; i < n; i++) {
            u8[i] = u8[i] ^ (KEY[i & 3] ^ ((i * 7 + 3) & 0xFF));
        }
        return u8;
    }

    // å¤æ­ URL æ¯å¦éè¦è§£å¯ï¼åæº .js/.cssï¼
    function isEnc(url) {
        if (!url || typeof url !== 'string') return false;
        if (url.startsWith('blob:') || url.startsWith('data:')) return false;
        // åæºæè§£å¯
        try {
            var u = new URL(url, location.href);
            if (u.origin !== location.origin) return false;
        } catch (e) { return false; }
        return ENC_EXT.test(url);
    }

    // URL â Blob URL ç¼å­
    var cache = new Map();
    function fetchDecryptBlob(url, mime) {
        if (cache.has(url)) return cache.get(url);
        var p = fetch(url, { credentials: 'same-origin' })
            .then(function (r) { return r.arrayBuffer(); })
            .then(function (buf) {
                var plain = decrypt(new Uint8Array(buf));
                return URL.createObjectURL(new Blob([plain], { type: mime }));
            })
            .catch(function (e) {
                console.error('[shim] decrypt fail:', url, e);
                return url;  // ååºç´æ¥è¿åå URL
            });
        cache.set(url, p);
        return p;
    }

    // --- 1) å¤ç DOM ä¸­ç data-enc-src / data-enc-href ---
    function replaceScripts() {
        var list = document.querySelectorAll('script[data-enc-src]');
        list.forEach(function (el) {
            var url = el.getAttribute('data-enc-src');
            var isDefer = el.hasAttribute('defer') || el.defer;
            var isAsync = el.hasAttribute('async') || el.async;
            var isModule = el.type === 'module';
            if (isModule) {
                // æ¨¡åä¸è½ç¨ Blob URLï¼æ æ³è§£æç¸å¯¹ importï¼ï¼ç¨åèææ¬
                // æ³¨æï¼fetch hook å·²èªå¨è§£å¯ååºï¼è¿éç´æ¥ç¨ï¼ä¸å decrypt
                fetch(url, { credentials: 'same-origin' })
                    .then(function (r) { return r.arrayBuffer(); })
                    .then(function (buf) {
                        var s = document.createElement('script');
                        s.type = 'module';
                        if (isAsync) s.async = true;
                        s.textContent = new TextDecoder().decode(new Uint8Array(buf));
                        (el.parentNode || document.head).insertBefore(s, el);
                        el.remove();
                    });
            } else {
                fetchDecryptBlob(url, 'application/javascript').then(function (b) {
                    var s = document.createElement('script');
                    if (isDefer) s.defer = true;
                    if (isAsync) s.async = true;
                    s.src = b;
                    (el.parentNode || document.head).insertBefore(s, el);
                    el.remove();
                });
            }
        });
        var links = document.querySelectorAll('link[data-enc-href]');
        links.forEach(function (el) {
            var url = el.getAttribute('data-enc-href');
            fetchDecryptBlob(url, 'text/css').then(function (b) {
                var l = document.createElement('link');
                l.rel = 'stylesheet';
                l.href = b;
                (el.parentNode || document.head).insertBefore(l, el);
                el.remove();
            });
        });
    }
    if (document.readyState === 'loading') {
        document.addEventListener('DOMContentLoaded', replaceScripts);
    } else {
        replaceScripts();
    }

    // --- 2) hook HTMLScriptElement.src setter ---
    var scriptProto = HTMLScriptElement.prototype;
    var origScriptSrc = Object.getOwnPropertyDescriptor(scriptProto, 'src') ||
        Object.getOwnPropertyDescriptor(HTMLElement.prototype, 'src');
    if (origScriptSrc && origScriptSrc.set) {
        Object.defineProperty(scriptProto, 'src', {
            configurable: true,
            enumerable: true,
            get: function () { return origScriptSrc.get.call(this); },
            set: function (val) {
                var self = this;
                if (isEnc(val)) {
                    if (self.type === 'module') {
                        // æ¨¡åä¸è½ç¨ Blob URLï¼ç¨åèææ¬
                        // fetch hook å·²èªå¨è§£å¯ï¼ç´æ¥ç¨
                        fetch(val, { credentials: 'same-origin' })
                            .then(function (r) { return r.arrayBuffer(); })
                            .then(function (buf) {
                                self.textContent = new TextDecoder().decode(new Uint8Array(buf));
                            });
                    } else {
                        fetchDecryptBlob(val, 'application/javascript').then(function (b) {
                            origScriptSrc.set.call(self, b);
                        });
                    }
                } else {
                    origScriptSrc.set.call(self, val);
                }
            }
        });
    }

    // --- 3) hook HTMLLinkElement.href setter (CSS å¨æå è½½)  ---
    var linkProto = HTMLLinkElement.prototype;
    var origLinkHref = Object.getOwnPropertyDescriptor(linkProto, 'href');
    if (origLinkHref && origLinkHref.set) {
        Object.defineProperty(linkProto, 'href', {
            configurable: true,
            enumerable: true,
            get: function () { return origLinkHref.get.call(this); },
            set: function (val) {
                var self = this;
                // åªå¤ç stylesheet
                if (self.rel === 'stylesheet' && isEnc(val)) {
                    fetchDecryptBlob(val, 'text/css').then(function (b) {
                        origLinkHref.set.call(self, b);
                    });
                } else {
                    origLinkHref.set.call(self, val);
                }
            }
        });
    }

    // --- 4) hook fetchï¼ååºï¼webpack publicPath å¯è½ç´æ¥ç¨ fetch æ chunkï¼ ---
    var _fetch = window.fetch;
    window.fetch = function (input, init) {
        var url = typeof input === 'string' ? input : (input && input.url);
        if (isEnc(url)) {
            return _fetch(input, init).then(function (resp) {
                return resp.arrayBuffer().then(function (buf) {
                    var plain = decrypt(new Uint8Array(buf));
                    return new Response(plain, {
                        status: resp.status,
                        statusText: resp.statusText,
                        headers: resp.headers
                    });
                });
            });
        }
        return _fetch.apply(this, arguments);
    };

    // æ è®°å·²æ³¨å¥ï¼ä¾¿äºçº¿ä¸è¯æ­ï¼
    window.__bundleShimReady = true;
})();



Object.defineProperty(navigator,'language',{get:function(){return 'en-US'}});
Object.defineProperty(navigator,'languages',{get:function(){return ['en-US','en']}});


Requests	IP Address	Location	AS Autonomous System
9	172.67.184.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	1	-	-

Security Scan Report: telefmjw.com

Summary

AI Security Verdict

High Risk

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History