2025-10-21

🕵️ Follow The Money

image.png

Extract the emails

image.png

Find the phishing URL in the emails, email 5 - FTM.eml
[https://evergatetltle.netlify.app/](https://evergatetltle.netlify.app/)

image.png

On the submission, spammeda few things, -1 in all fields. go this encoded value:

aHR0cHM6Ly9uMHRydXN0eC1ibG9nLm5ldGxpZnkuYXBwLw

Base64 encoded to

https://n0trustx-blog.netlify.app/

image.png

image.png

image.png

Go to the github

image.png

image.png

image.png

ZmxhZ3trbDF6a2xqaTJkeWNxZWRqNmVmNnltbHJzZjE4MGQwZn0=<

Base64 encoded to

flag{kl1zklji2dycqedj6ef6ymlrsf180d0f}
If you wanted to input a value.

471082

image.png

image.png

image.png