education learning

government public service

technology software

English

driftt_aid

SignInMessage.e53bde00380032c0801c500cb6c4d3d8

dtCookie

AuthorizeRequestCount

_gid

drift_campaign_refresh

idsrv.xsrf

drift_aid

Domain 'aesoponline.com' uses the commercial generic top-level domain (.com) and has no subdomain. Count 11 characters in 'aesoponline' with six vowels and five consonants. Splitting it apart reveals 2 words: aesop, online. Median word length comes out to 5.5 characters. No strong language cues emerged from the frequency lists.

Username

Password

form

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://idgateway.idm.local:35730 https://www.google-analytics.com/analytics.js https://js.driftt.com https://*.audioeye.com; style-src 'self' 'unsafe-inline' 'self' fonts.googleapis.com https://*.audioeye.com; img-src *; font-src 'self' fonts.googleapis.com fonts.gstatic.com https://*.audioeye.com;connect-src 'self' wss://idgateway.idm.local:35730 cdn-global.configcat.com https://*.audioeye.com https://msvc-plat-announcements.use1.frontlineeducation.com; report-uri https://login.frontlineeducation.com/csp/report; frame-src 'self' https://js.driftt.com/

default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://idgateway.idm.local:35730 https://www.google-analytics.com/analytics.js https://js.driftt.com https://*.audioeye.com; style-src 'self' 'unsafe-inline' 'self' fonts.googleapis.com https://*.audioeye.com; img-src *; font-src 'self' fonts.googleapis.com fonts.gstatic.com https://*.audioeye.com;connect-src 'self' wss://idgateway.idm.local:35730 cdn-global.configcat.com https://*.audioeye.com https://msvc-plat-announcements.use1.frontlineeducation.com; report-uri https://login.frontlineeducation.com/csp/report

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:225:0

Drift Widget Chat Window

Drift Widget Chat Controller

1430ceb97b6e49600433a17b4c32bbf1f697f2ae9c07cceb94ccd99eeb4a68f0

e15caed7984a595d8a45ef38e64de2509736a256db37e1544428e714696c73fe

2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515

a4fddc5bde1ef6342627bcb4d600f1b7f63fc17d6bd52a099c491afa2deb86dd

1a65888eadf61c16ff97ac6915531a411845aed6ccde21f314880ae94d58e75c

82aae8238d301a96572a5a90a79152788cde21f94571e95625749cc9ce09b2a3

71183b2715e566a325bf8083c6cfb77a0a3bee01978f453168b4f5c5ae699a47

22db4c2cd0b4cfe69ae78d13f3f0bc3b1661155f4af9fef5e40bbfae0bca80b4

a9d27f5c43bb845c93ace21ffc9617fd7b1a05f527d6da2d927ae57e6374b596

8faccd61f0af2d5720cf7cbfef14b418025a83e1d4800ad48e331db657803fcd

9531192f38a7459dc4fea3d8a77e9e0771ef56fb3b1377b32986fb9493640deb

d2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe

c023f27dd65fed2aa165ed950670e1fbe67987dffc37a94ef84fc66cf37a9950

63a529cbb3b275f6874d0a5fa89f97b7bb59aa142eb868594a97d3bfd95985d8

0e2575a7f265db50fe90282bf1af226c623f8c0d8a592a296ad12d7ba63addb0

f1a61277e3f902f50ab42015d8b07218db9b7601bb0967e54a52bfdcb4fa7e81

efb0cb72e8fac6fcfd75749046a554c3418184fc04dca02c2ae8fe69cf2da909

ff18d035b6407cac049c0a00a1d38e0b284a5f3d2b2c55e32ebcdee61a97bbf6

3e11bd9fa4ca88f48dbdd5b24be11591e171d52513577e129da209dd40d02b05

b1609673998bf6a8717aa1c839600706992f5c41faf8662128df833177884fa8

8edd4611f4292b4cd7b6b2a2e03978ea625bcb282971bb3414918de928206ebc

958a03c833d9116f7ab9a5ee503f7b0360b9291b268bfb77128a8f0e19238613

149657fed12a505080f79b01fb9a0e747bfc4f1c1f0deff8daee31d332df7598

799f51c883a34dd8e64a512d89a0da45e5475a2d6a69fea3bcf963aec238b65a

749aa03859c0b6d1722224fc421549b698a26ddddbdce8bc6b705c44503612dd

489eb2769765657c9325f65117f5c7b87ffc4eab547622608c12c8f6fd60df1b

f46108976666130f89c43a82ee045f7a3afb264494060ef6b3d9eb6589e49d16

4ccd4dd728f111edac4ff931136e29ca95b79dd65a84bb208931364811bb2000

030da9f520dda3887b8560112489ad9e463bb3c693f2ed442e07df9493aaecda

b26e1444c745d51ef7bd06fe70185c6b407215dacece7b08fe34bd8d614e411f

81a15944013ba1a50487f55de8d1593a8e25dc7bf4e0ce25c64079939d4b6877

28816769ece0ee343025ff388216c645e175c92cce4db6bd812a321b1ad345c6

b7c5d1d3e03d31b9b450c0aac2972f3aef995be2a69ec5ecfa6200c4a321ef40

73337562154145a67190f434d58ab9f936e1406f540f87057dea81d75fb6dd59

e2f851d72851acdf22b7698e6acde2e369d13d2adda5ccb351a6bb89abc3e3c1

653714ef44396d8540bac69918382dc657efe82cea2da1f5311299041bb1de73

7efda929b5e017af82c208c9ac32d8d42ec9cdfc86f135fba0485a232b0d0d57

cdeb836f7f77cd2174fa0bb4aa3825963aa64faf657a24f988b82f1c4d28ce69

9f0cc0aa960d2d78c9818e39fc590bad6aa2fc000d8cbba4d51f0afce4370bf0

325b8c053d645e19a467f68f9111146e6b678202c1eb59a2db72054589a27342

b2a3e5947e2957d9a3239911fe761d4b48add4962f4a9b14adcbe2978501abcb

1f7f6c1a09ba020afc3c420d7ac4b48c6a0afcb28b5669063edce8b488d1f07f

8899ba47daaf6487926e3958ed00808b7956b55b51ad4c14e502604c85878925

862bae5c822d87db86d0b893f474177ca1d9a51309354f12cc0ab85cd9bd9cf7

9be81b3430db4776fcf8a81625f86f1eed86bfa2ab9ce5ffc9774d3beadd034e

030f66ad69d69a39f8d5cf82a35ef919af3322cb8dcda09b2bd1122e4c56d42f

c491642a49edee121f5e0a35b7923598bc0ddbe0ccd026128b18b0fb1eea5073

51b29d6573d9fcb3e20b9021407d58c7dca539b0eb9d0e582106bf4908feac4b

84424d8a5a9a5234b402bb001d7633cedaf0c55b67f36a2769fda6f69ce9922b

a2596c057aa1c83663dca9349e0dbbe971ddc545920f0dd6a703749044fce28c

16db4e585f0153109ebd33970ed3fb2729a0ec42677c7c8658ffa760e29795f1

3ccd9f3e7b642b1f424c6d5ee44d1845e3e3a17696cd82bf2c0c7fc6e12fd4ec

Universal CSP bypass via add-on in Firefox

XSS via JQLite DOM manipulation functions in AngularJS

XSS may be triggered in AngularJS applications that sanitize user-controlled HTML snippets before passing them to JQLite methods like JQLite.prepend, JQLite.after, JQLite.append, JQLite.replaceWith, JQLite.append, new JQLite and angular.element.

angular vulnerable to regular expression denial of service via the $resource service

angular vulnerable to regular expression denial of service via the angular.copy() utility

Angular (deprecated package) Cross-site Scripting

angular vulnerable to regular expression denial of service via the <input type="url"> element

AngularJS improperly sanitizes SVG elements

AngularJS allows attackers to bypass common image source restrictions

angular vulnerable to super-linear runtime due to backtracking

AngularJS Incomplete Filtering of Special Elements vulnerability

AngularJS Regular expression Denial of Service (ReDoS)

End-of-Life: Long term support for AngularJS has been discontinued as of December 31, 2021

parseHTML() executes scripts in event handlers

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

ca592b949a8afa2343e47c29351d4914ce421de36ab881c6284f864582cb166d

28ec2a49199cb961621936387d65e1ecf53b92e9412c09f6253159d9a3bc02cf

301d9b0bfd5ee1076a29c049df673d7fcd8b21f66ad31679b988ac46ce140266

26257c980168a4f2c9614e308195fe8b25c1b3f30c437632cc8609fd15fbc1ea

width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no

viewport

MarkMonitor Inc.

GSTATIC.COM

GOOGLEAPIS.COM

Cloudflare, Inc.

CLOUDFLARE.COM

GoDaddy.com, LLC

AESOPONLINE.COM

FRONTLINEEDUCATION.COM

Google Inc.

Google LLC

GOOGLE


        // Only turn on google analytics if flag enabled - this way not in lower environments
        var googleAnalyticsEnabled = 'true' === 'true';
        if (googleAnalyticsEnabled)
        {
            window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)};ga.l=+new Date;
            ga('create', 'UA-55920727-6', 'auto');
            ga('send', 'pageview');
        }
    


    "use strict"; !function() { var t = window.driftt = window.drift = window.driftt || []; if
    (!t.init) { if (t.invoked) return void (window.console && console.error && console.error("Drift snippet included twice.")); t.invoked = !0, t.methods = [ "identify", "config", "track", "reset", "debug", "show", "ping", "page", "hide", "off", "on" ], t.factory
    = function(e) { return function()
    { var n = Array.prototype.slice.call(arguments); return n.unshift(e), t.push(n), t; }
    ; }, t.methods.forEach(function(e)
    { t[e] = t.factory(e); }
    ), t.load = function(t)
    { var e = 3e5, n = Math.ceil(new Date() / e) * e, o = document.createElement("script"); o.type = "text/javascript", o.async = !0, o.crossorigin = "anonymous", o.src = "https://js.driftt.com/include/" + n + "/" + t + ".js"; var i = document.getElementsByTagName("script")[0]; i.parentNode.insertBefore(o, i); };
    } }(); drift.SNIPPET_VERSION = '0.3.1'; drift.load('wmep65kbfdrk');
    


            (function () {
                var model = JSON.parse(unescape("%7B%22InnerModel%22%3A%7B%22LoginUrl%22%3A%22%2Flogin%3Fsignin%3De53bde00380032c0801c500cb6c4d3d8%26clientId%3DABSMGMT%22%2C%22AntiForgery%22%3A%7B%22Name%22%3A%22idsrv.xsrf%22%2C%22Value%22%3A%22AAEAADHTfS2tdshuDdNYLVfcK6qLq-aH3VVHcwmNo4jBOZowkzk2-IYLnIGZVO3jwMQsrBtrrD74_PPVCD5DFZBKLUw75YPMC2-3LzFwqAtOePWoFj09vqJiz7bOeZWsIvh09vBfIWWuTKKh3z8ZYbMv3y8e1dnFz0HQB9UqTovCXyX4hEPzT0KlqMWgm5Msccmafxd7ymXoEsSyiVs0zWkoK9ZHkuO7pJmSCEYx3k_ZO807pMdL9G05y16-S_H0Qjh0GFeQtI4CO9IoBISjT1hwnAZhbnOg1zQhfSKXG9WWv8tF7VXSH14sGec8vni66M8XfVNWqJd0PuuklhiEymzqFXPW9zUTn3zPdoqlhYVi-cYU5dCTbFjmIcYjlUBuXqpUXgABAABBJjVGKjRzsmR3VhpwU97m2qqD8DHNFjxFEebx5Lp9Xl4z3addNoIUo6COorAWVFR-uhRP7ITVRu6z6UGmTlS_7MeHSbD2WjgMXc6GjnnfOKUFvByQ2JfBv1XNgMVRWDAVPGqhoYnWgi6kyAntWpwAiszZ7GNqzd6rAUoASstEpA6uyikXxAQi0JtT9AqPiSyKvORvKayCSatNWSumKvGDSk0i_5l4UqLSIkhQwqdsJeBRsP4PlmrlOkM5wQKFnpvuMgzIdemNo3EoZgUyjAA6Ta0l36Jn04FjFJG5mXPTayOI0DfWGkq5vn84jYpKAHE4caDO50jyUhyWlR8uju7MQAAAAJDStb3TPgAw3g2l2ZcMguLpgjhTtqczQCHPdSv7fZxNTDopon-3t31PoInJgmdIhyRYzXEi_oRjpraPN2Grxe8%22%7D%2C%22AllowRememberMe%22%3Afalse%2C%22RememberMe%22%3Afalse%2C%22Username%22%3Anull%2C%22ExternalProviders%22%3A%5B%7B%22Type%22%3A%22lubbock%22%2C%22Text%22%3A%22SAML2%20Federation%22%2C%22Href%22%3A%22https%3A%2F%2Flogin.frontlineeducation.com%2Fexternal%3Fprovider%3Dlubbock%26signin%3De53bde00380032c0801c500cb6c4d3d8%22%7D%5D%2C%22AdditionalLinks%22%3Anull%2C%22ClientName%22%3A%22Absence%20Management%22%2C%22ClientUrl%22%3A%22https%3A%2F%2Fwww.aesoponline.com%22%2C%22ClientLogoUrl%22%3Anull%2C%22ErrorMessage%22%3Anull%2C%22RequestId%22%3A%2240019fa2-0001-f900-b63f-84710c7967bb%22%2C%22SiteUrl%22%3A%22https%3A%2F%2Flogin.frontlineeducation.com%2F%22%2C%22SiteName%22%3A%22Frontline%20Identity%20Provider%22%2C%22CurrentUser%22%3Anull%2C%22LogoutUrl%22%3A%22https%3A%2F%2Flogin.frontlineeducation.com%2Flogout%22%2C%22Custom%22%3Anull%7D%2C%22ForgotPasswordLink%22%3Anull%2C%22ShowRegisterPage%22%3Afalse%2C%22ReturnUrl%22%3A%22https%3A%2F%2Flogin.frontlineeducation.com%2Fconnect%2Fauthorize%3Fclient_id%3DABSMGMT%26redirect_uri%3Dhttps%253A%252F%252Fabsenceadminweb.frontlineeducation.com%252Fauth_callback%253Ftest%253D2%26response_type%3Did_token%2520token%26scope%3Dopenid%2520impersonation%2520flapi.public%2520fl.session%2520flapi.introspection%26state%3D5c0ed56cadc547a5b6d0ecb4c75eb16a%26nonce%3Da5c80e96e24643ebb0774370bf42491a%26acr_values%3D%2520productId%253AABSMGMT%22%2C%22ClientId%22%3A%22ABSMGMT%22%2C%22Invite%22%3Afalse%2C%22InviteEmail%22%3Anull%2C%22InviteLastName%22%3Anull%2C%22InviteToken%22%3Anull%2C%22GreetingName%22%3Anull%2C%22Organization%22%3Anull%2C%22ProductId%22%3A%22AbsMgmt%22%2C%22ProductName%22%3A%22Absence%20Management%22%2C%22ProductLegacyName%22%3A%22Aesop%22%2C%22UnauthorizedUsername%22%3Anull%2C%22AcrValues%22%3A%22productId%3AABSMGMT%22%2C%22IsMultiInvite%22%3Afalse%2C%22ShowRegisterLinkOnLoginPage%22%3Afalse%2C%22ShowSsoLink%22%3Atrue%2C%22ExternalIdp%22%3A%22%22%2C%22ExternalIdpName%22%3A%22%22%2C%22LoginAdEnabled%22%3Atrue%2C%22LoginAdImage%22%3A%22https%3A%2F%2Fs3.amazonaws.com%2Fprod-use1-plat-idm%2FloginAd-639214834101909906.png%22%2C%22LoginAdLink%22%3A%22https%3A%2F%2Fwww.frontlineeducation.com%2Fstaff-onboarding-readiness-gap%2F%22%2C%22FailedLoginCount%22%3A0%2C%22UseEmailAsUserName%22%3Afalse%2C%22EnableAutoCompleteForPasswordField%22%3Afalse%2C%22ShowPassportButtonLink%22%3Afalse%2C%22PassportLoginUrl%22%3A%22https%3A%2F%2Flogin.k12.frontlineeducation.com%22%2C%22IsAudioEyeFeatureEnabled%22%3Afalse%7D"));
                angular.module('idm-common').value('viewModel', model);
                
                var config = window.siteConfig;
                config.identityGatewayBaseUri = model.InnerModel.SiteUrl;
                config.showRegisterPage = model.ShowRegisterPage;
                config.isLoginError = model.InnerModel.ErrorMessage !== null;
                config.productId = model.ProductId;
                config.cacheStamp = '1785131171958';
                
                angular.module('idm-common').constant('idmConfig', config);
                angular.module('idm-common').constant('driftInstance', window.drift);
            })();
        

Requests	IP Address	Location	AS Autonomous System
9	142.251.14.95Google · CDN	United States	AS15169Google LLC
9	216.83.185.40	United States	AS7381BroadbandONE, LLC
9	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	65.79.190.188	United States	AS7381BroadbandONE, LLC
36	4	-	-

Security Scan Report: aesoponline.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History