static web page of attack on web app