Login - ems-app
https://ems.codeinrussia.com/en/login
Case summary
The target, observed result, and important findings.
- Status
- Current evaluation
Score 8: risk 15 less 7 for assurance evidence.
Limited evidence: interaction stalled, navigation error, unclassified response missing
- Findings
- 6Medium
- Impersonated brand
- HiworksOther cases impersonating Hiworks Search for this value.
- Kit source work
Loading related source work…
Discover or upload kit source- Submitted URL
- http://ems.codeinrussia.com/ Search for this value.
- Domain registration
- codeinrussia.comMore than 90 days oldRegistered 2017-05-30 · Registrar IONOS SE
- Language
- Detecting...
- Network
- 43 requests across 5 hosts
- Cookies
- 17 observed
- Infrastructure
- Loading...
- Behavior
- 0 recorded events
- Interaction
3 actions · 1 submission · stopped: repeated state · download stage: no payload control
- 1. fillsucceededtext | | Email |
- 2. fillsucceededpassword | input-10-1 | Password |
- 3. submitsucceededSign In
Document-source diagnostics
These records identify rejected document reads. A current epoch does not prove that a replacement read succeeded. Later success does not erase an earlier evidence limit.
Inspect 5 rejected reads
An epoch identifies a document generation. Superseded means the document changed. Internal means a browser-owned document. Unavailable means the source identity could not be read.
Ordinals are zero-based. Unknown navigation indexes remain unknown. Scroll the table horizontally to inspect all columns.
| Ordinal | Source epoch | Current epoch | Milestone | Artifact | State | Observed at (UTC) |
|---|---|---|---|---|---|---|
| 0 | Generation 2Navigation 1 | Generation 3Navigation 1 | document_ready | admission | superseded | |
| 1 | Generation 4Navigation 2 | Generation 5Navigation 3 | document_ready | admission | superseded | |
| 2 | Generation 7Navigation 5 | Generation 8Navigation 5 | document_ready | admission | superseded | |
| 3 | Generation 9Navigation 6 | Generation 10Navigation 7 | document_ready | admission | superseded | |
| 4 | Generation 6Navigation 5 | Generation 10Navigation 7 | document_ready | screenshot | superseded |
Browser-observed navigation status
The browser status can differ from the normalized origin response, including during a proxy failure. Inspect the recorded document request for origin response evidence.
| Navigation | Browser-observed HTTP status | Recorded requests |
|---|---|---|
| 0 | 307 | Inspect navigation 0 requests |
| 1 | 200 | Inspect navigation 1 requests |
| 3 | Not recorded | Inspect navigation 3 requests |
| 4 | 301 | Inspect navigation 4 requests |
| 5 | 200 | Inspect navigation 5 requests |
| 7 | Not recorded | Inspect navigation 7 requests |