HTML Suspicious Developer

[bantuporijourneys]

Hi there,

I have my friend's tour website www.kilisatours.com, But we suspect there is a dirty trick involved. We can monitor everything on our booking page https://kilisatours.com/contact-us, we can see visitors visit the page and place their bookings but we don't see the emails when a client books a trip with us.

In this code, is there anything fishy? or is there any way our developer can steal our clients?

<form action="" class="contact-form" method="post" id="tm_form">
                                <div class="form-group">
                                    <input type="text" class="form-control" id="tm_fullname" name="tm_fullname" placeholder="Name" >
                                </div>
                                <div class="form-group form_left">
                                    <input type="text" class="form-control" id="tm_email" name="tm_email" placeholder="Email">
                                </div>
                                <div class="form-group">
                                    <input type="text" class="form-control" id="tm_phone" name="tm_phone" onkeypress="return isNumberKey(event);" placeholder="Phone Number">
                                    <input type="hidden" name="task" value="savemydata">
                                    <input type="hidden" name="baseurl" value="https://kilisatours.com/">
                                </div>
                                <div class="form-group">
                                    <textarea class="form-control textarea-contact" rows="5" id="tm_message" name="tm_message" placeholder="Type Your Message/Feedback here..."></textarea>
                                    <br>
                                </div>
                                <div class="form-group">
                                    <div class="col-md-12 col-lg-12 col-sm-12 col-xs-12" style="padding: 0;">
                                        <div class="alert alert-danger" id="tm_msg" style="border-radius:0px !important;">
                                            <strong>Error !</strong> Please Fill Email ...!!!!!!
                                        </div>
                                    </div>
                                </div>
                                <div class="form-group">
                                    <input type="button" value="Submit" class="red-a" id="submit_me">
                                </div>
                            </form>

Any help would help guys, we are in Africa and we feel like our small travel business is dying.

Asante Sana

 

[Antero360]

Hi there,

I have my friend's tour website www.kilisatours.com, But we suspect there is a dirty trick involved. We can monitor everything on our booking page https://kilisatours.com/contact-us, we can see visitors visit the page and place their bookings but we don't see the emails when a client books a trip with us.

In this code, is there anything fishy? or is there any way our developer can steal our clients?

<form action="" class="contact-form" method="post" id="tm_form">
                                <div class="form-group">
                                    <input type="text" class="form-control" id="tm_fullname" name="tm_fullname" placeholder="Name" >
                                </div>
                                <div class="form-group form_left">
                                    <input type="text" class="form-control" id="tm_email" name="tm_email" placeholder="Email">
                                </div>
                                <div class="form-group">
                                    <input type="text" class="form-control" id="tm_phone" name="tm_phone" onkeypress="return isNumberKey(event);" placeholder="Phone Number">
                                    <input type="hidden" name="task" value="savemydata">
                                    <input type="hidden" name="baseurl" value="https://kilisatours.com/">
                                </div>
                                <div class="form-group">
                                    <textarea class="form-control textarea-contact" rows="5" id="tm_message" name="tm_message" placeholder="Type Your Message/Feedback here..."></textarea>
                                    <br>
                                </div>
                                <div class="form-group">
                                    <div class="col-md-12 col-lg-12 col-sm-12 col-xs-12" style="padding: 0;">
                                        <div class="alert alert-danger" id="tm_msg" style="border-radius:0px !important;">
                                            <strong>Error !</strong> Please Fill Email ...!!!!!!
                                        </div>
                                    </div>
                                </div>
                                <div class="form-group">
                                    <input type="button" value="Submit" class="red-a" id="submit_me">
                                </div>
                            </form>

Any help would help guys, we are in Africa and we feel like our small travel business is dying.

Asante Sana

Hi there,
I took a quick glance at the javascript of the site, and nothing seems out of the ordinary. Ran it past VirusTotal, and no sign of any malicious files. Also ran it through urlscan.io, and everything seems to be in order. In regards to the email situation:
My suggestion:
1) look at your email service provider and your Domain Name System, and make sure everything is configured properly
2) Look at your spam folder and make sure that no emails are being sent there. If they are, all you have to do is whitelist the email of the site
3) have your developer, or if you don't trust them anymore, find someone who can spend the time to look for possible spelling mistakes in the code

 

[OldMan]

Just using the code you provided I see NO action to the form - That's where the form is sent
AND the input button doesn't do anything.

I went to the site and find nothing like this form anywhere.

 

[bantuporijourneys]

Hi there,
I took a quick glance at the javascript of the site, and nothing seems out of the ordinary. Ran it past VirusTotal, and no sign of any malicious files. Also ran it through urlscan.io, and everything seems to be in order. In regards to the email situation:
My suggestion:
1) look at your email service provider and your Domain Name System, and make sure everything is configured properly
2) Look at your spam folder and make sure that no emails are being sent there. If they are, all you have to do is whitelist the email of the site
3) have your developer, or if you don't trust them anymore, find someone who can spend the time to look for possible spelling mistakes in the code

Thank you a lot, Thank you for taking the time to answer my concerns.