technology software

English

AWSALB

cardata_cloud_session

XSRF-TOKEN

AWSALBCORS

PHPSESSID

You're looking at domain 'cloud.cardataconsultants.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'cloud'. Count 18 characters in 'cardataconsultants' holding six vowels versus 12 consonants. Tokenizing the label suggests three words: car, data, consultants. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

_token

concur_id

concur_token

username

password

html/18/d2/18d2007b-6a2e-4795-b72e-61c31fa62070.html.gz

frame-ancestors 'self' https://*.cardataconsultants.com; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cardataconsultants.com https://cdn.lr-ingest.com https://unpkg.com https://bat.bing.com https://cdn.weglot.com https://connect.facebook.net https://googleads.g.doubleclick.net https://static.cardataconsultants.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://maps.googleapis.com https://*.pendo.io https://*.measureone.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://*.cardataconsultants.com https://cdn.weglot.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://*.pendo.io https://fonts.gstatic.com; object-src 'self' https://*.cardataconsultants.com; base-uri 'self'; connect-src 'self' https://*.cardataconsultants.com https://*.mi-route.com https://*.googleapis.com https://analytics.google.com https://cdn.weglot.com https://www.google-analytics.com https://stats.g.doubleclick.net https://bat.bing.com https://*.pendo.io https://api-js.mixpanel.com/track/ https://*.measureone.com https://cardata.thoughtspot.cloud; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com https://*.pendo.io; frame-src 'self' blob: https://ignition.sandbox.axle.insure https://ignition.axle.insure https://td.doubleclick.net https://*.cardataconsultants.com https://*.pendo.io https://cardata.embed-omniapp.co https://cardata.thoughtspot.cloud; img-src 'self' data: https://*.cardataconsultants.com https://maps.gstatic.com https://maps.googleapis.com https://bat.bing.com https://www.facebook.com https://www.google.com https://www.google.ca https://www.googletagmanager.com https://*.pendo.io https://*.measureone.com https://ik.imagekit.io/measureone/; manifest-src 'self'; media-src 'self'; worker-src 'self' blob: https://*.cardataconsultants.com/* data: https://*.cardataconsultants.com/*;

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

6da87445526973069b52cdf89e5861c5910fa77ad15809d3b3a9245519b1956e

a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af

4a62eabfdad3ac9d3c836f09fdee50607ae1c9760ee6a1cb7285f63bb1132b8a

f57743075c8ad6a39c865313361763201cd8c3ca03b7128431ac5fbd89fe9bee

898ea6c35e578949168e04c3e49bdcc6c2bee1f45530bcb2a894e3b7f1846514

7b4f4494fa6ea369043e0dcb72a6fd3d3574e7fb614ca12c7f9dbbd9868a5d4d

07a181e0aef96fb64170892226b05d023e92eddfa6be4fd2a2156b49eabeb004

72400430aa4133f974fb0c842547762de2e99ff6e67bb9b16131e57640a65af5

2de49d3315f41c42c6e018ec4a0b60f8d8d08d14e8e6ac018f6d1ab30622e93e

4e1f2a634164ae8ec2d3d5a628a86d14a6b7845640d11131d65abbdd671164ab

8ce7846ac78f32dd948ebbc1c732591ab75fe864f40d77a7eb4d708647dbd892

width=device-width, initial-scale=1.0, maximum-scale=1.0

viewport

google

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Network Solutions, LLC

CARDATACONSULTANTS.COM

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


    import { firebaseSetup } from "/js/firebase-config.js";

    const firebase = firebaseSetup();

    const usernameError = document.getElementById('usernameError');
    const passwordError = document.getElementById('passwordError');
    const username = document.getElementById('username');
    const password = document.getElementById('password');
    const loginError = '';
    const ssoError = '';

    export function showPassword() {
        let password = document.getElementById("password");
        if (password.type === "password") {
            password.type = "text";
            document.getElementById("password-hidden").style.display = 'none';
            document.getElementById("password-shown").style.display = 'block';
        } else {
            password.type = "password";
            document.getElementById("password-hidden").style.display = 'block';
            document.getElementById("password-shown").style.display = 'none';
        }
    }

    export function verify() {

        username.classList.add("required");
        password.classList.add("required");

        username.addEventListener("mousedown", (event) => {
                username.classList.remove("required");
                username.removeAttribute("pattern");
        }, { once: true });

        password.addEventListener("mousedown", (event) => {
                password.classList.remove("required");
        }, { once: true });


        var isEmail = /[a-z0-9._%+-]+@[a-z0-9.-]+\.[a-z]{2,4}$/.test(username.value);
        if (isEmail) {
            usernameError.innerText = 'It looks like you entered an email address. Please enter your Cardata username, or if your company is authorized for SSO sign in, press Continue with SSO.';
            username.setAttribute("pattern", "[a-zA-Z0-9]");

            if (firebase && firebase.logEvent && firebase.analytics) {
                firebase.logEvent(firebase.analytics, 'login_error', {details: "Email entered instead of username"});
            }
            return false;
        }

        if (!username.checkValidity() || !password.checkValidity()) {
            // if no errors have been set use the default errors.

            if (!username.checkValidity()) {
                usernameError.innerText = 'Please enter a username.';
                if (firebase && firebase.logEvent && firebase.analytics) {
                    firebase.logEvent(firebase.analytics, 'login_error', {details: "Username field blank"});
                }
            }
            
            if (!password.checkValidity()) {
                passwordError.innerText = 'Please enter a password.';
                if (firebase && firebase.logEvent && firebase.analytics) {
                    firebase.logEvent(firebase.analytics, 'login_error', {details: "Password field blank"});
                }
            }

            return false;
        }
        return true;
    }

    /**
     * Removes the login error returned by the login API
     */
    export function removeError(event) {
        passwordError.innerText = 'Please enter a password.';

        if (!usernameError.innerText) 
            usernameError.innerText = 'Please enter a username.';

        username.classList.remove("error-active");
        username.classList.remove("ssoError");
        password.classList.remove("error-active");
        passwordError.classList.remove("error-active");
        usernameError.classList.remove("error-active");
        usernameError.classList.remove("ssoError");
    }

    // set login error if there is one.
    if (loginError) {

        if (ssoError) {
            usernameError.innerText = "";
            usernameError.classList.add("");
            username.classList.add("ssoError");
            if (firebase && firebase.logEvent && firebase.analytics) {
                firebase.logEvent(firebase.analytics, 'login_error', {details: "SSO error"});
            }

        } else {
            passwordError.innerText = "";
            username.classList.add("error-active");
            password.classList.add("error-active");
            if (firebase && firebase.logEvent && firebase.analytics) {
                firebase.logEvent(firebase.analytics, 'login_error', {details: "Password error"});
            }
        }
        
        username.addEventListener("mousedown", removeError, {once: true});
        password.addEventListener("mousedown", removeError, {once: true}); 
    }

    const showPasswordButton = document.getElementById('password-hidden'); // select the button element
    const hidePasswordButton = document.getElementById('password-shown'); // select the button element

    showPasswordButton.addEventListener('click', () => {
        showPassword()
    })

    hidePasswordButton.addEventListener('click', () => {
        showPassword()
    })

    document.addEventListener('DOMContentLoaded', function() {
        document.querySelector('form').addEventListener('submit', function(event) {
            if (!verify()) {
                console.log("VERIFY", verify());
                event.preventDefault(); // Prevent the form from submitting if verify() returns false
            }
        });
    });



    var firebaseConfigVals = {
        apiKey:  'AIzaSyDTiPNzR6XO_NyGmeLPB9SvmVaUhNUq6uI',
        authDomain: 'cardata-cloud-analytics-prod.firebaseapp.com',
        projectId: 'cardata-cloud-analytics-prod',
        storageBucket: 'cardata-cloud-analytics-prod.appspot.com',
        messagingSenderId: '208232677682',
        appId: '1:208232677682:web:c3ed33ca55e2119686972b',
        measurementId: 'G-Q32QBPG39D',
    };



    // SSO feature flag
    // Firebase SDK needed methods -- https://firebase.google.com/docs/web/setup#available-libraries
    import { initializeApp } from "https://www.gstatic.com/firebasejs/9.20.0/firebase-app.js";
    import { getAnalytics } from "https://www.gstatic.com/firebasejs/9.20.0/firebase-analytics.js";
    import { getRemoteConfig, getValue, fetchAndActivate } from "https://www.gstatic.com/firebasejs/9.20.0/firebase-remote-config.js";
    const singleSignOnKey = 'enable_single_sign_on';
    const firebaseConfig = {
        apiKey: "AIzaSyBGf6HFZjFfsWj8g9crRPCja9FtrsyPalU",
        authDomain: "cardata-prod.firebaseapp.com",
        projectId: "cardata-prod",
        storageBucket: "cardata-prod.appspot.com",
        messagingSenderId: "653261851727",
        appId: "1:653261851727:web:5fe0d77fc5f9a44c346e3a",
        measurementId: "G-J8KJS8PKSV",
    }

    // Initialize Firebase
    const app = initializeApp(firebaseConfig, "secondary");
    const analytics = getAnalytics(app);
    const remoteConfig = getRemoteConfig(app);
    // remoteConfig caches data every 12 hours by default, this can be overriden by setting the parameter below
    // if too many calls are made in a window of time, the fetches will be throttled.
        // remoteConfig.settings.minimumFetchIntervalMillis = 1;
    await fetchAndActivate(remoteConfig)
        .then(() => {
            const enableSingleSignOn = getValue(remoteConfig, singleSignOnKey);
            if (enableSingleSignOn._value === 'true') {
                $(".text-divider-container").show();
                $(".sso-button-container").show()
            } else if (enableSingleSignOn._value === 'false') {
                $(".text-divider-container").hide();
                $(".sso-button-container").hide();
            }
        }).catch((err) => {
            console.log("Failed activating SSO Feature Flag.")
        });
    


    // logging analytics
    import {firebaseSetup} from "/js/firebase-config.js";

    const firebase = firebaseSetup();
    const path = "/var/www/html/cloud/dev.2026-01-06.18.00/cardata-online/index.php";

    if (firebase && firebase.logEvent && firebase.analytics) {
        firebase.logEvent(firebase.analytics, 'navigated_to_page');
    }



    Weglot.initialize({
        api_key: 'wg_908cbe5f30fa44a7516da46d803814ec7',
        hide_switcher: true,
        auto_switch: true,
        auto_switch_fallback: "en"
    });

    // check that the browsers current language is 'en' or 'fr' default === 'en'
    let lang = default_lang();
    // set browser language
    localStorage.setItem("wglang", lang);


Requests	IP Address	Location	AS Autonomous System
5	104.18.38.142	United States	AS13335CLOUDFLARENET
4	142.250.186.163	United States	AS15169GOOGLE
4	142.250.185.74	United States	AS15169GOOGLE
4	142.250.184.227	United States	AS15169GOOGLE
4	34.36.213.229	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
4	3.135.34.205	Columbus, Ohio, United States	AS16509AMAZON-02
4	18.225.19.159	Columbus, Ohio, United States	AS16509AMAZON-02
29	7	-	-

Security Scan Report: cloud.cardataconsultants.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History