English

_abck

ak_bmsc

_gcl_au

_gid

_ga_4S48PBY299

PHPSESSID

_is_in

bm_sv

bm_sz

bm_mi

Domain 'accounts.moneycontrol.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'accounts'. Count 12 characters in 'moneycontrol' containing four vowels alongside eight consonants. Segmentation suggests 2 words: money, control. The median word length lands at 6 characters. No strong language cues emerged from the frequency lists.

email

mobile

cnfpwd

medium

register_form_api

secure

site_ref

flagwp

login_form_api

forgot_pass_api

html/0f/b0/0fb0ba76-241e-4486-b656-488bea58ae8b.html.gz

frame-ancestors http://*.moneycontrol.com

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:225:0

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:207:0

script-src 'nonce-tVLsVdVpyCxxhOKXRoZg5Q' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/apiserving; base-uri 'none'
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apiserving

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:139:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgnc:90:0

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend

apiproxy30d9cdd3916978b06f0d3ba7d1fb5c40ec613e5e0.4136556567

d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6

c05c64c2596a8722bc38e48b8978e127ce41b3c9e101a74a1492908341780afa

f554d2f09272c6f71447ebfe4532d3b1dd1959bce669f9a5ccc99e64ef511729

5f1ab65fe2ad6b381a1ae036716475bf78c9b2e309528cf22170c1ddeefddcbf

65c08893c3275dab61ae75a29e4fd7cfb2d5af1a3c6139fc7f1c329a57dfd227

7b21bbb8ef971401ae80a3877b20405f18623e70111a65f0503458ea623255ce

a9224a6320cd637177e7185f5141110d3282a425a5ac1ee2fe7c792567017e34

f1a61277e3f902f50ab42015d8b07218db9b7601bb0967e54a52bfdcb4fa7e81

921a3c2c768725275d2697f7acc0f89289ffdf4d682bc70efac51f796b67d0fd

85c43e0e7f15274926cb87283e7ccdf64a929638d68ac0054165d4b394c27175

4c70f5f99967daf70735d1076daeeddd811fe01ba4e08c7e4bfce735baced0a6

9e38f4726751e871a5223d01a8370361e570d98b234d28a7e35e14e6140092ca

8831188cada12372a03bf46cdd685ba0c245df8a727f662bf426219269ee8f0f

95a1281b6dabde46d71fff166529192ccec88fc8256f75cc111df3cbb9482408

41d7f2f555a81e83b22768a96c0c465893c928c7ecf8543ea1cfc542fff43570

667e6b0dc37c74cc2210af9c856adc707d56fed2fdbb78effd9bc7ec2c2749cc

92cf618685d879b11ff0afa94d165d1584445e486a7281afde2011f234d3ed1a

77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6

38ee7fa4d8ca1871fbac8e2bd0499793eee8129f5dfbbc527b1bddc85bc18f8e

7fdb280b4406cef075157d1cb396ca7fd6ad7fc25895fd62a106595f7e40f89b

Versions of jquery prior to 1.9.0 are vulnerable to Cross-Site Scripting. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. This allows attackers to execute arbitrary JavaScript in a victim's browser.


## Recommendation

Upgrade to version 1.9.0 or later.

parseHTML() executes scripts in event handlers

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

f335b19573c6b09839656d576bd86092bb85a3dc73427b2dbe91aac9c7b283ae

2d36b9f395b357edc9c3a45256df6dab1573e504b9fd0365d768b7e1811de302

13ec502766545ee6e901bec2ff9416356d01e1194118a72ef4e9085fe2759486

208e42407d4ac2c82f1781207cae512ea2a3524482503dc8e0f7cab454337947

9803925c15a0ecf2f7f88a94c44af444c40fcdcc52b9bdc7d2f5762cfeb91168

3ceeb75577029294f913ab38709f0257152e0fb1afc17849d331b623fc9edbee

d8b4d6b77617bb361f919a790c3b4c90288d3d2413da52712eaf7bf73df1b632

b629c6a98dfa7c7484764db94b3aa2c3862e5ece5a9e6a39920de0afa09ca4f7

333cc79307b32e9c19a63a5ceae5cd5314f93edb7408d5d71c7b216d480dd56d

9860bef883d89ef7e5e12720e0d47a128be5099f68c8cd87e552e0620ed88055

AlK2UR5SkAlj8jjdEc9p3F3xuFYlF6LYjAML3EOqw1g26eCwWPjdmecULvBH5MVPoqKYrOfPhYVL71xAXI1IBQoAAAB8eyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiV2ViVmlld1hSZXF1ZXN0ZWRXaXRoRGVwcmVjYXRpb24iLCJleHBpcnkiOjE3NTgwNjcxOTksImlzU3ViZG9tYWluIjp0cnVlfQ==

Amm8/NmvvQfhwCib6I7ZsmUxiSCfOxWxHayJwyU1r3gRIItzr7bNQid6O8ZYaE1GSQTa69WwhPC9flq/oYkRBwsAAACCeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXN5bmRpY2F0aW9uLmNvbTo0NDMiLCJmZWF0dXJlIjoiV2ViVmlld1hSZXF1ZXN0ZWRXaXRoRGVwcmVjYXRpb24iLCJleHBpcnkiOjE3NTgwNjcxOTksImlzU3ViZG9tYWluIjp0cnVlfQ==

A9nrunKdU5m96PSN1XsSGr3qOP0lvPFUB2AiAylCDlN5DTl17uDFkpQuHj1AFtgWLxpLaiBZuhrtb2WOu7ofHwEAAACKeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

A93bovR+QVXNx2/38qDbmeYYf1wdte9EO37K9eMq3r+541qo0byhYU899BhPB7Cv9QqD7wIbR1B6OAc9kEfYCA4AAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXN5bmRpY2F0aW9uLmNvbTo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

A1S5fojrAunSDrFbD8OfGmFHdRFZymSM/1ss3G+NEttCLfHkXvlcF6LGLH8Mo5PakLO1sCASXU1/gQf6XGuTBgwAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXRhZ3NlcnZpY2VzLmNvbTo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

html/0f/b0/0fb0ba76-241e-4486-b656-488bea58ae8b_nodriver.html.gz

accounts.moneycontrol.com

PDR Ltd. d/b/a PublicDomainRegistry.com

MONEYCONTROL.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZON-CF


    var redirect = '';
    var cpurl = '';
    var reqfrom = '';
    var returnurl = '';
    var ref = '';
    var site_ref='';
    var LOGIN_API_URL = 'https://accounts.moneycontrol.com/login/index/';
    var RESET_PASSWORD_EMAIL_API_URL = 'https://accounts.moneycontrol.com/user/resetpasscap/';
    var RESEND_INSTRUCTION_EMAIL_API_URL = 'https://accounts.moneycontrol.com/user/resendInstructions/';
    var RESEND_PASSLINK_API_URL = 'https://accounts.moneycontrol.com/user/sendresetpasslink/';
    var REGISTER_API_URL = 'https://accounts.moneycontrol.com/register/index/';
    var formname = '';
    var empty_email = 'Empty email id or Invalid email id';
    var verify_email = 'Invalid Email ID or User ID';
    var portfolio_home_page = 'https://www.moneycontrol.com/bestportfolio/wealth-management-tool/investments#port_top';
    var alerts_home_page = 'https://www.moneycontrol.com/alerts/manage-alerts.php';
    var empty_fname = 'First name cannot be empty';
    var empty_lname = 'Last name cannot be empty';
    var password_should_contain = 'Password should contain';
    var verfy_pass_len = ' 8 or more characters';
    var verfy_pass_error2 = ', atleast 1 number';
    var verfy_pass_error3 = ', atleast 1 upper case letter';
    var verfy_pass_error4 = ', atleast 1 symbol';
    var verfy_pass_error6 = ', atleast 1 lower case letter';
    var verfy_pass_error5 = 'Password should not contain # characters';
    var empty_confirm_pass = 'Confirm password cannot be empty';
    var verfy_pass_confirmpass = 'Password and confirm password does not match';
    var empty_pass = 'Password cannot be empty';
    var google_url_api = 'https://accounts.moneycontrol.com/sociallogin/google_plus_login&loginsec=mc&soclog=glogin&format=json';
    var resend_verify_email_api = 'https://accounts.moneycontrol.com/user/verifyemail/';
    var update_emailid_api = 'https://accounts.moneycontrol.com/user/updateemail/';
    var server_name = 'https://accounts.moneycontrol.com';
    var facebook_emailid_empty = 'Please enter your email id to complete your registeration, Or your registration will be discarded.';
    var google_register_url_api = 'https://accounts.moneycontrol.com/sociallogin/registergoogleuser';
    var facebook_register_url_api = 'https://accounts.moneycontrol.com/sociallogin/registerfacebookuser';
    var gplus_flag = 'gplus';
    var fb_flag = 'fb';
    var ref_url = 'https://www.moneycontrol.com/mcplus/portfolio/loginportfolio.php';
    var moneycontrol_redirect_url = 'https://www.moneycontrol.com';
    var facebook_app_id = '606338322858150';
    var google_client_id = '663245597422-06ehifvorjeounde738cicc5dl0jt59s.apps.googleusercontent.com';
    var facebook_default_graph_version = 'v8.0';
    var google_cookiepolicy = 'single_host_origin';
    var google_login_callback = 'loginCallback';
    var google_approvalprompt = 'auto';
    var google_accesstype = 'offline';
    var google_scopes = 'https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile';
    var click_link_in_mail = 'click the link in the verification email and verify your account. ';
    var user_cancelled_login = 'User cancelled login or did not fully authorize.';
    var captcha_url = 'https://accounts.moneycontrol.com/api/captcha';
	var empty_captcha = 'Captcha required';
	var max_attempt = '10';
	var max_attempt_without_captcha = '5';
    //console.log("redirect: " + redirect);
    //console.log("page: " + portfolio_home_page);
    //console.log("facebook_app_id: " + facebook_app_id);
    //console.log("google_client_id: " + google_client_id);


(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-WCG4TX9');


  var _comscore = _comscore || [];
  _comscore.push({ c1: "2", c2: "6683813" });
  (function() {
    var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
    s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
    el.parentNode.insertBefore(s, el);
  })();



            var captcha_url = "https://accounts.moneycontrol.com/api/captcha";
        


    var stoptimer;
    function resendOtp(){
        $(".use_otp_btn").click();
        /*$(".resendOtp").attr("disabled", "disabled");
        setTimeout(function() {
            $(".resendOtp").removeAttr("disabled");
        }, 30000);*/
    }

    function resendOtpReg(){
        $("#sendOtp").click(); 
        /*$(".resendOtpReg").attr("disabled", "disabled");
        setTimeout(function() {
            $(".resendOtpReg").removeAttr("disabled");
        }, 30000);*/
    }

    $(document).ready(function () {
        showpopup(formname); //show sign up popup if click on register

        $(".use_otp_btn").click(function(){
            $('.error_txt').css('display','none');
            $(".error_txt").text("");
			$("#flagwp").val(0);

            var userid = $.trim($("#login_form #email").val());
            var formname = 'login';
            if(userid != ""){
                $(".forgottxt").css("display", "none");
                $("#login_form #otp").val('');
                $("#login_form #pwd").val('');
                $("#error_login_pass").css("display", "none");
                $("#error_login_pass").text("");
                $("#success_login_otp").css("display", "none");
                $(".success_login_otp_msg").text("");
                active_submit("login_form");
                $.ajax({
                    type: "POST",
                    url: "/user/sendotp",
                    dataType: 'json',
                    data: {userid:userid, formname: formname},
                    success: function (response) {
						if(response['status'] == 'success'){
                            $(".usepwd").css("display", "none");
                            $(".useotp").css("display", "block");
                            $("#success_login_otp").css("display", "block");
                            $(".success_login_otp_msg").text(response['message']);
                            //$("#success_login_otp").append(" <a href='javascript:void(0)' class='resendOtp' onclick='resendOtp();'>Resend</a>");
                            clearTimeout(stoptimer);
                            timer(30, "login");
                        }else if(response['status'] == 'error'){
							$(".usepwd").css("display", "none");
                            $(".useotp").css("display", "block");
                            $("#error_login_pass").css("display", "block");
                            $("#error_login_pass").text(response['message']);
                        }else{
                            $("#error_login_pass").css("display", "block");
                            $("#error_login_pass").text("something went wrong!");
                        }
						
						if($("#div_captcha").html()){
							listencall(580);
						}
                    },
                });
            }else{
                $("#error_login_email").text("Please Enter Email or Mobile Number or User ID");
                $("#error_login_email").css("display", "block");
            }
        });

        $(".use_pwd_btn").click(function(){
            $('.error_txt').css('display','none');
            $(".error_txt").text("");
            
            $(".forgottxt").css("display", "block");
            $("#success_login_otp").css("display", "none");
            $(".success_login_otp_msg").text("");
            $("#error_login_pass").css("display", "none");
            $("#error_login_pass").text("");
            $(".useotp").css("display", "none");
            $(".usepwd").css("display", "block");
            $("#login_form #otp").val('');
            $("#login_form #pwd").val('');
            active_submit("login_form");
			if($("#div_captcha").html()){
				listencall(580);
			}
        });

        $(".use_pwd_btn_reg").click(function(){
            $('.error_txt').css('display','none');
            $(".error_txt").text("");

            $("#success_reg_otp").css("display", "none");
            $(".success_reg_otp_msg").text("");
            $("#error_reg_pass").css("display", "none");
            $("#error_reg_pass").text("");
            $(".useotpreg").css("display", "none");
            $(".usepwdreg").css("display", "block");
            $(".password_char").css("display", "block");
            $("#register_form #otp").val('');
            $("#register_form #pwd").val('');
            $("#register_form #mobile").val('');
            active_submit("register_form");
			listencall(580);
        });

        $(".use_otp_btn_reg").click(function(){
            $('.error_txt').css('display','none');
            $(".error_txt").text("");
            $("#success_reg_otp").css("display", "none");
            $(".success_reg_otp_msg").text("");
            $("#error_reg_pass").css("display", "none");
            $("#error_reg_pass").text("");
            $(".useotpreg").css("display", "block");
            $(".usepwdreg").css("display", "none");
			$("#sendOtp").css("display", "block");
            $(".password_char").css("display", "none");
            $("#register_form #otp").val('');
            $("#register_form #pwd").val('');
            $("#register_form #mobile").val('');
            active_submit("register_form");
			listencall(580);
        });


        $("#sendOtp").click(function(){
            if(validateConsumerMobile('mobile','error_reg_mobile') && validateConsumerEmail('email','error_reg_email')){
                $("#success_reg_otp").css("display", "none");
                $(".success_reg_otp_msg").text("");
                $("#error_reg_pass").css("display", "none");
                $("#error_reg_pass").text("");
                $("#success_reg_otp").css("display", "block");
                $(".success_reg_otp_msg").text("Wait...");
                var userid = $("#register_form #mobile").val();
                var useremail = $("#register_form #email").val();
                var formname = "register";
                $("#sendOtp").css("display", "none");
                $.ajax({
                    type: "POST",
                    url: "/user/sendotp",
                    dataType: 'json',
                    data: {userid:userid, useremail:useremail, formname:formname},
                    success: function (response) {
                        if(response['status'] == 'success'){
                            $("#success_reg_otp").css("display", "block");
                            $(".success_reg_otp_msg").text(response['message']);
                            //$("#success_reg_otp").append(" <a href='javascript:void(0)' class='resendOtpReg'>Resend</a>");
                            clearTimeout(stoptimer);
                            timer(30, "register");
                        }else if(response['status'] == 'error'){
                            $("#success_reg_otp").css("display", "none");
                            $(".success_reg_otp_msg").text("");
                            $("#error_reg_pass").css("display", "block");
                            $("#error_reg_pass").text(response['message']);
                            $("#sendOtp").css("display", "block");
                        }else{
                            $("#success_reg_otp").css("display", "none");
                            $(".success_reg_otp_msg").text("");
                            $("#error_reg_pass").css("display", "block");
                            $("#error_reg_pass").text("something went wrong!");
                            $("#sendOtp").css("display", "block");
                        }
                    },
                });
            }
        });
    });



/*
function reload_captcha(){
    var random = Math.random();
    $('#captcha_img').attr('src',captcha_url+'?refresh='+random);
}
*/

function reload_captcha(form){
    var random = Math.random();
	if(form){
		$('#' + form + ' #captcha_img').attr('src',captcha_url+'?refresh='+random);
	}else{
		$('#captcha_img').attr('src',captcha_url+'?refresh='+random);
	}
}

function validateConsumerEmail(email_field,error_div){
    //prep
    var email = document.getElementById(email_field), error;
    //validate
    if (!email.value || !/^([\w-\.]+@([\w-]+\.)+[a-zA-Z]{2,4})?$/.test(email.value))
        error = 'Please enter a valid e-mail';
    //feedback
    if (error) {
//        email.focus();
        document.getElementById(error_div).style.display='block';
        document.getElementById(error_div).innerHTML=error;
//        console.log(error);
        return false;
    } else {
        //OK - do something here
//        console.log('ok');
        document.getElementById(error_div).innerHTML='';
        document.getElementById(error_div).style.display='none';
        return true;
    }

}

function validateConsumerMobile(mobile_field,error_div){
    //prep
    var mobile = document.getElementById(mobile_field), error;
    //validate

    if (!mobile.value || !/[0-9]{10}/g.test(mobile.value))
        error = 'Please enter a valid Mobile (Eg. xxxxxxxxxx)';
    //feedback
    if (error) {
//        mobile.focus();
        document.getElementById(error_div).style.display='block';
        document.getElementById(error_div).innerHTML=error;
//        console.log(error);
        return false;
    } else {
        //OK - do something here
//        console.log('ok');
        document.getElementById(error_div).innerHTML='';
        document.getElementById(error_div).style.display='none';
        return true;
    }

}

function checkweakpass(pwd){
	var patternpw_numeric = new RegExp(/(?=.*\d)/);
	var patternpw_caps = new RegExp(/(?=.*[A-Z])/);
	var patternpw_lower = new RegExp(/(?=.*[a-z])/);
	var patternpw_symbol = new RegExp(/(?=.*[^a-zA-Z\d\s])/);

	if (pwd.length < 8 || !patternpw_numeric.test(pwd) || !patternpw_caps.test(pwd) || !patternpw_lower.test(pwd) || !patternpw_symbol.test(pwd) ) {
		$('#flagwp').val(1);
	}else{
		$('#flagwp').val(0);
	}
}



var google_conversion_id=1013309350,google_custom_params=window.google_tag_params,google_remarketing_only=!0;

Requests	IP Address	Location	AS Autonomous System
47	2.23.246.87	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
47	1	-	-

Security Scan Report: accounts.moneycontrol.com

Summary

AI Security Verdict

Low Risk

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History