cryptocurrency blockchain

technology software

documentation technical

education learning

adult content

English

The domain 'keyvault-cantabra-cf.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'keyvault-cantabra-cf'. The registrable portion 'pages' spans 5 characters containing two vowels alongside three consonants. Breaking it apart gives 1 word: pages. No strong language cues emerged from the frequency lists.

html/1d/e3/1de3e27d-acc7-4c1f-ad0e-33ac8ec5e55d.html.gz

default-src 'self'; script-src 'self' 'unsafe-inline' https://fonts.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com; font-src https://fonts.gstatic.com; connect-src 'self' https://*.workers.dev https://*.a27d43ed40747c0eb7b6cd8125aad889.workers.dev https://tibia.fandom.com https://api.tibiadata.com https://fonts.googleapis.com https://api.ipify.org https://www.tibiaring.com https://api.tibiastalker.pl https://corsproxy.io https://tibiavip.app https://timeapi.io https://worldtimeapi.org; img-src 'self' data: blob: https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

inline; filename="Yellow_Skull.webp"; filename*=UTF-8''Yellow_Skull.webp

default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; style-src 'unsafe-inline'; sandbox; report-uri https://services.fandom.com/csp-logger/csp/thumblr

inline; filename="Havoc_Blade.webp"; filename*=UTF-8''Havoc_Blade.webp

inline; filename="White_Skull.webp"; filename*=UTF-8''White_Skull.webp

inline; filename="Paralyse_Rune.webp"; filename*=UTF-8''Paralyse_Rune.webp

inline; filename="Assassin_Star.webp"; filename*=UTF-8''Assassin_Star.webp

inline; filename="Sudden_Death_Rune.webp"; filename*=UTF-8''Sudden_Death_Rune.webp

inline; filename="Pair_of_Iron_Fists.webp"; filename*=UTF-8''Pair_of_Iron_Fists.webp

inline; filename="Empty_Potion_Flask_%2528Large%2529.webp"; filename*=UTF-8''Empty_Potion_Flask_%2528Large%2529.webp

inline; filename="Green_Skull.webp"; filename*=UTF-8''Green_Skull.webp

inline; filename="Great_Mana_Potion.webp"; filename*=UTF-8''Great_Mana_Potion.webp

inline; filename="Red_Skull.webp"; filename*=UTF-8''Red_Skull.webp

bf045467123c59f12c52ed1f754339052ddff84bc46e843584d6cc25eeba1c9b

6172baf71639d8a2bc3b9e411cdeaba327ecd4564140da6651f4ed39396ceef6

3fabaf5bc10e45f8051226f964d7f46c658428e8a5f2e18bc0f4f6b309f65a1d

e3a37c1942b281e7c2d418b5d3a939c922872d420f5ad366d18f8c0e65fe040c

4264a8bd467528656cf0402906f33c5bdac648c0a695d2b8190b4f50f54acbc3

b34ee70baaf9a10294e497adac737f9d5b04efccabd5ce9afee9049fa3a21e75

e73598660b0d840c9dab37d6c93a831353e5785592dac98aea05d9458ec9616d

4f8cc43c875d813f87c5ee20f3fa6878fd56b0b0de78a8816436c6d0f21a48c1

22c015cb6bb99bfb6e65d738983279df43b75dc6cfa47fab2e78ea891a0d1d73

d7182c0b6bf8184ddebd3479fcd20c62ea0498ac1bf38a4d77f5e5315647b97f

9ddad88728b2d7a0ba58d67909aa9a98ec368504c9dd92a759d213de564cbe80

cec32779544aa9afd67ff907e4ac2eacf03b3a5e98b0a6bff5bcfd5638dc7962

79e730546061db46a507a5f3e58f8edfee34889f9bb37739f7f4693615c144b6

default-src 'self'; script-src 'self' 'unsafe-inline' https://www.gstatic.com https://apis.google.com https://www.google.com https://www.recaptcha.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://*.googleapis.com https://*.firebaseio.com https://*.firebaseapp.com https://www.gstatic.com https://www.google.com https://www.recaptcha.net https://api.tibiadata.com https://*.a27d43ed40747c0eb7b6cd8125aad889.workers.dev https://api.ipify.org https://www.tibiaring.com https://api.allorigins.win https://api.tibiastalker.pl https://corsproxy.io https://api.codetabs.com https://tibiavip.app https://timeapi.io https://worldtimeapi.org; frame-src https://*.firebaseapp.com https://*.googleapis.com https://www.google.com https://www.recaptcha.net; media-src 'self' data: blob:;

viewport

referrer

apple-mobile-web-app-title

Abuse Team

CloudFlare, Inc.

pages.dev

Cloudflare Abuse Contact

MNT-CLOUDFLARE

Cloudflare Technical Contact

CLOUDFLARENET-EU


/* [v38] Force HTTPS in production + inject CSP only on real domains */
if(location.protocol === 'http:' && location.hostname !== 'localhost' && location.hostname !== '127.0.0.1'){
  location.replace('https:' + location.href.substring(location.protocol.length));
}
/* CSP only applies on hosted domains, not file:// */
if(location.protocol !== 'file:'){
  const csp = document.createElement('meta');
  csp.httpEquiv = 'Content-Security-Policy';
  csp.content = "default-src 'self'; script-src 'self' 'unsafe-inline' https://www.gstatic.com https://apis.google.com https://www.google.com https://www.recaptcha.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://*.googleapis.com https://*.firebaseio.com https://*.firebaseapp.com https://www.gstatic.com https://www.google.com https://www.recaptcha.net https://api.tibiadata.com https://*.a27d43ed40747c0eb7b6cd8125aad889.workers.dev https://api.ipify.org https://www.tibiaring.com https://api.allorigins.win https://api.tibiastalker.pl https://corsproxy.io https://api.codetabs.com https://tibiavip.app https://timeapi.io https://worldtimeapi.org; frame-src https://*.firebaseapp.com https://*.googleapis.com https://www.google.com https://www.recaptcha.net; media-src 'self' data: blob:;";
  document.head.prepend(csp);
}
/* [v39-sec] Anti-tampering: disable devtools data extraction shortcuts */
if(location.protocol !== 'file:'){
  /* Block right-click context menu on sensitive elements */
  document.addEventListener('contextmenu', function(e){
    if(e.target.closest('.tok, .cm-token, [data-token-id], .kv-root-reveal')) e.preventDefault();
  });
  /* Warn on devtools paste attacks */
  Object.defineProperty(window, '__KEYVAULT_PROTECTED__', {value:true, writable:false, configurable:false});
  /* [v39-sec] Trap common data exfiltration via console */
  const _origStringify = JSON.stringify;
  JSON.stringify = function(val){
    if(val && val === window.S){ console.warn('[KV-SEC] Blocked: cannot serialize session state'); return '{}'; }
    if(Array.isArray(val) && val.length > 0 && val[0]?.nick && val[0]?.id){ console.warn('[KV-SEC] Blocked: cannot serialize character data'); return '[]'; }
    return _origStringify.apply(this, arguments);
  };
}



/* [v38] Global error handler */
/* [v38-sec] Global error handlers — log minimal info to avoid leaking internal state */
window.onerror = function(msg, src, line, col, err){
  if(typeof console !== 



(function(){
  const LOGO = 'data:image/png;base64,/9j/4AAQSkZJRgABAQAASABIAAD/4QBMRXhpZgAATU0AKgAAAAgAAYdpAAQAAAABAAAAGgAAAAAAA6ABAAMAAAABAAEAAKACAAQAAAABAAAGAKADAAQAAAABAAAEAAAAAAD/7QA4UGhvdG9zaG9


/* [v38] Consolidated v23 adaptive + v24 layout into a single handler */
(function(){
  let rafId = null;
  function applyLayout(){
    const body=document.body;
    if(!body) return;
    const root=document.documentElement;
    const vw=window.innerWidth||root.clientWidth||0;
    const vh=window.innerHeight||root.clientHeight||0;

    /* Mobile detection */
    const isMobile = vw<=900 || ('ontouchstart' in window && vw<=1024);
    body.classList.toggle('kv-mobile', isMobile);

    /* v24: fixed sidebar toggle */
    const forceFixed = vw>860;
    body.classList.toggle('kv-fixed-sidebar', forceFixed);
    body.classList.toggle('kv-short', vh<760);

    /* v23: adaptive classes */
    body.classList.remove('kv-tight','kv-cramped');
    if(vw<=900){ return; }
    const portrait = vh > vw * 1.02;
    let sidebar = 292;
    if(portrait) sidebar = Math.min(248, Math.max(208, Math.round(vw*0.24)));
    const available = vw - sidebar - 34;
    if(available < 1040 || vh < 860) body.classList.add('kv-tight');
    if(available < 920 || vh < 740) body.classList.add('kv-cramped');
    if(body.classList.contains('kv-cramped')) sidebar = portrait ? Math.min(214, Math.max(192, Math.round(vw*0.21))) : 214;
    else if(body.classList.contains('kv-tight')) sidebar = portrait ? Math.min(236, Math.max(204, Math.round(vw*0.23))) : 236;

    /* v24: override for non-portrait */
    if(!portrait && !body.classList.contains('kv-tight') && !body.classList.contains('kv-cramped')){
      if(vw<=980) sidebar=224;
      else if(vw<=1200) sidebar=236;
      else sidebar=252;
    }
    root.style.setProperty('--kv-sidebar-w', sidebar + 'px');
  }
  function scheduleLayout(){
    if(rafId) return;
    rafId = requestAnimationFrame(()=>{ rafId=null; applyLayout(); });
  }
  window.addEventListener('resize', scheduleLayout, {passive:true});
  window.addEventListener('orientationchange', scheduleLayout, {passive:true});
  if(document.readyState==='loading') document.addEventListener('DOMContentLoaded', applyLayout);
  else applyLayout();
  setTimeout(applyLayout, 50);
  setTimeout(applyLayout, 250);
})();



// ─── Plugin Panel JS ───────────────────────────────────────────────────────

let _kvpToken = null;

function kvPluginOpen(){
  // Mostra botao apenas para admins
  const btn = document.getElementById('btnPlugin');
  if(btn) btn.style.display = '';
  kvpLoadConnCode();
  kvpLoadUsers();
}

async function kvpLoadConnCode(){
  const el = document.getElementById('kvpConnCode');
  if(!el) return;
  try {
    const apiUrl = window.KV_VAULT_URL || location.origin;
    const host = apiUrl.replace(/^https?:\/\//, '').replace(/\/$/, '');
    el.textContent = host;
  } catch(e) { el.textContent = 'Erro ao carregar'; }
}

function kvpCopyConnCode(){
  const t = document.getElementById('kvpConnCode')?.textContent;
  if(!t) return;
  navigator.clipboard.writeText(t).then(()=>{
    const el = document.getElementById('kvpConnCode');
    const orig = el.textContent;
    el.textContent = 'Copiado!';
    setTimeout(()=>{ el.textContent = orig; }, 1500);
  });
}

async function kvpGenToken(){
  const btn = document.querySelector('#kvpTokenSection .kvp-btn-primary');
  if(btn){ btn.disabled = true; btn.textContent = 'Gerando...'; }

  try {
    const apiUrl = window.KV_API_URL || window.KV_VAULT_URL || location.origin;
    const adminKey = S?.user?.pluginAdminKey || prompt('Chave admin do plugin (PLUGIN_API_KEY):');
    if(!adminKey){ if(btn){ btn.disabled=false; btn.innerHTML='<span>&#x2795;</span> Gerar Token'; } return; }

    const res = await fetch(apiUrl + '/plugin/token', {
      method: 'POST',
      headers: { 'X-Plugin-Admin': adminKey, 'Content-Type': 'application/json' }
    });
    const data = await res.json();
    if(data.token){
      _kvpToken = data.token;
      kvpShowToken(data.token, data.expiresAt);
    } else {
      alert('Erro: ' + (data.error || 'Resposta invalida'));
    }
  } catch(e) {
    alert('Erro de rede: ' + e.message);
  }
  if(btn){ btn.disabled=false; btn.innerHTML='<span>&#x2795;</span> Gerar Token'; }
}

function kvpShowToken(token, expiresAt){
  const sec = document.getElementById('kvpTokenSection');
  if(!sec) return;
  const exp = expiresAt ? new Date(expiresAt).toLocaleTimeString('pt-BR',{hour:'2-digit',minute:'2-digit'}) : '—';
  sec.innerHTML = `
    <div style="width:100%;text-align:left">
      <div class="kvp-card-title" style="margin-bottom:8px">Token gerado — use uma vez</div>
      <div style="background:var(--bg);border:1px solid rgba(58,111,216,.3);border-radius:6px;padding:12px 14px;font-family:'Roboto Mono',monospace;font-size:13px;color:#7ab4e0;letter-spacing:1px;word-break:break-all;cursor:pointer;margin-bottom:10px"
           onclick="navigator.clipboard.writeText('${token}');this.style.color='#27ae60';setTimeout(()=>this.style.color='',1200)" title="Clique para copiar">
        ${token}
      </div>
      <div style="font-size:10px;color:var(--t-text3);margin-bottom:14px">
        Expira as ${exp} &bull; Uso unico &bull; Clique no token para copiar
      </div>
      <button class="kvp-btn kvp-btn-ghost" style="width:100%;justify-content:center" onclick="kvpResetTokenSection()">
        Gerar novo token
      </button>
    </div>`;
}

function kvpResetTokenSection(){
  const sec = document.getElementById('kvpTokenSection');
  if(!sec) return;
  sec.innerHTML = `
    <div class="kvp-token-key-icon">&#x1F511;</div>
    <div class="kvp-token-empty-title">Nenhum token ativo</div>
    <div class="kvp-token-empty-sub">Gere um token para conectar um usuario ao plugin.</div>
    <button class="kvp-btn kvp-btn-primary" onclick="kvpGenToken()">
      <span>&#x2795;</span> Gerar Token
    </button>`;
}

async function kvpLoadUsers(){
  const el = document.getElementById('kvpUsersList');
  if(!el) return;
  el.innerHTML = '<div style="font-size:11px;color:var(--t-text3);text-align:center;padding:20px">Carregando...</div>';

  try {
    const apiUrl = window.KV_API_URL || window.KV_VAULT_URL || location.origin;
    const adminKey = S?.user?.pluginAdminKey || '';
    if(!adminKey){ el.innerHTML = '<div style="font-size:11px;color:var(--t-text3);text-align:center;padding:16px">Configure PLUGIN_API_KEY para ver os usuarios.</div>'; return; }

    const res = await fetch(apiUrl + '/plugin/users', {
      headers: { 'X-Plugin-Admin': adminKey }
    });
    const data = await res.json();
    if(!data.users || data.users.length === 0){
      el.innerHTML = '<div style="font-size:11px;color:var(--t-text3);text-align:center;padding:16px">Nenhum usuario conectado ainda.</div>';
      return;
    }

    let html = `<table class="kvp-users-table">
      <thead><tr><th>Nick TS3</th><th>Chars</th><th>Visto</th><th></th></tr></thead><tbody>`;
    for(const u of data.users){
      const ago = u.onlineMinutesAgo < 2 ? 'agora' : u.onlineMinutesAgo + 'min atras';
      const chars = (u.chars||[]).join(', ') || '—';
      html += `<tr>
        <td style="font-weight:600;color:var(--t-text)">${kvpEsc(u.tsNick)}</td>
        <td style="color:var(--t-text3);font-size:10px">${kvpEsc(chars)}</td>
        <td style="color:var(--t-text3)">${ago}</td>
        <td><button class="kvp-assign-btn" onclick="kvpOpenAssignModal('${kvpEsc(u.tsUid)}','${kvpEsc(u.tsNick)}')">+ Char</button></td>
      </tr>`;
    }
    html += '</tbody></table>';
    el.innerHTML = html;
  } catch(e) {
    el.innerHTML = '<div style="font-size:11px;color:#d46a6a;text-align:center;padding:16px">Erro: ' + kvpEsc(e.message) + '</div>';
  }
}

function kvpEsc(s){ const d=document.createElement('div'); d.textContent=String(s||''); return d.innerHTML; }

function kvpOpenAssignModal(tsUid, tsNick){
  document.getElementById('kvpAssignTsUid').value = tsUid;
  document.getElementById('kvpAssignNick').value  = '';
  document.getElementById('kvpAssignWorld').value = window.TIBIA_WORLD || '';
  document.getElementById('kvpAssignVoc').value   = '';
  document.getElementById('kvpAssignEmail').value = '';
  document.getElementById('kvpAssignPw').value    = '';
  document.getElementById('kvpAssignTotp').value  = '';
  document.querySelector('#kvpAssignModal .kvp-modal-title').textContent = '\uD83D\uDD17 Atribuir Char a ' + tsNick;
  document.getElementById('kvpAssignModal').classList.add('open');
}

function kvpCloseAssignModal(){
  document.getElementById('kvpAssignModal').classList.remove('open');
}

async function kvpSubmitAssign(){
  const tsUid = document.getElementById('kvpAssignTsUid').value;
  const nick  = document.getElementById('kvpAssignNick').value.trim();
  if(!nick){ alert('Informe o nick do char.'); return; }

  const apiUrl = window.KV_API_URL || window.KV_VAULT_URL || location.origin;
  const adminKey = S?.user?.pluginAdminKey || prompt('Chave admin do plugin (PLUGIN_API_KEY):');
  if(!adminKey) return;

  const body = {
    tsUid,
    char: {
      nick,
      world:       document.getElementById('kvpAssignWorld').value.trim(),
      voc:         document.getElementById('kvpAssignVoc').value.trim(),
      email:       document.getElementById('kvpAssignEmail').value.trim(),
      pw:          document.getElementById('kvpAssignPw').value.trim(),
      totpSecret:  document.getElementById('kvpAssignTotp').value.trim(),
      passedBy:    S?.user?.name || 'admin',
    }
  };

  try {
    const res  = await fetch(apiUrl + '/plugin/assign', {
      method: 'POST',
      headers: { 'Content-Type':'application/json', 'X-Plugin-Admin': adminKey },
      body: JSON.stringify(body)
    });
    const data = await res.json();
    if(data.ok){
      kvpCloseAssignModal();
      kvpLoadUsers();
    } else {
      alert('Erro: ' + (data.error || 'Falhou'));
    }
  } catch(e) { alert('Erro: ' + e.message); }
}

// Botao aparece para admins apos login
document.addEventListener('kv-auth-ready', ()=>{
  const btn = document.getElementById('btnPlugin');
  if(btn && (isAdmin?.() || isRoot?.())) btn.style.display = '';
});



(function(){
  const esc=s=>(s||'').replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;');
  const norm=s=>String(s||'').normalize('NFD').replace(/[\u0300-\u036f]/g,'


/* [v38] Move Acessos to main content area — same grid style as Visão Geral */
document.addEventListener('DOMContentLoaded', function(){
  const slot = document.getElementById('kvAccessSlot');
  const accGroup = document.getElementById('accessGroup');
  if(!slot || !accGroup) return;

  /* Replace the whole section with a simple grid like Visão Geral */
  const chips = accGroup.querySelectorAll('.chip[data-f]');
  let html = '';
  chips.forEach(c => {
    const f = c.getAttribute('data-f');
    const img = c.querySelector('img');
    const span = c.querySelector('span');
    const label = span ? span.textContent.trim() : f.replace('a','');
    const imgHtml = img ? `<img src="${img.src}" style="width:20px;height:20px;object-fit:contain;image-rendering:pixelated">` : '';
    html += `<div class="kv-stat-card kv-acc-filter" style="cursor:pointer;padding:10px 6px" data-f="${f}">
      <div style="font-size:16px">${imgHtml}</div>
      <div class="kv-stat-lbl" style="font-size:9px;margin-top:4px">${label}</div>
    </div>`;
  });

  slot.innerHTML = `<div id="kvAccessGrid" style="display:grid;grid-template-columns:repeat(auto-fit,minmax(80px,1fr));gap:8px">${html}</div>`;

  /* Sync click with original filter system */
  slot.querySelectorAll('.kv-acc-filter').forEach(card => {
    card.addEventListener('click', function(e){
      e.stopPropagation();
      const f = this.getAttribute('data-f');
      /* Toggle filter in S.filters */
      if(window.S && S.filters){
        if(S.filters.has(f)) S.filters.delete(f);
        else S.filters.add(f);
      }
      /* Toggle visual */
      const isOn = window.S && S.filters && S.filters.has(f);
      this.classList.toggle('on', isOn);
      if(isOn){
        this.style.borderColor = 'rgba(244,218,145,.3)';
        this.style.background = 'linear-gradient(180deg,rgba(113,86,36,.4),rgba(43,34,17,.5))';
      } else {
        this.style.borderColor = '';
        this.style.background = '';
      }
      /* Also sync original chip visual */
      const orig = accGroup.querySelector('.chip[data-f="'+f+'"]');
      if(orig) orig.classList.toggle('on', isOn);
      /* Re-render */
      if(window.renderAll) renderAll();
    });
  });

  /* Hide original from sidebar */
  accGroup.style.display = 'none';
});



/* [v38] Sidebar toggle */
window.kvToggleSidebar = function(){
  const isMini = document.body.classList.toggle('kv-sidebar-mini');
  const btn = document.getElementById('kvSidebarToggle');
  if(btn) btn.textContent = isMini ? '▶' : '◀';
  localStorage.setItem('kv-sidebar-mini', isMini ? '1' : '');
};
/* Restore state */
if(localStorage.getItem('kv-sidebar-mini') === '1'){
  document.body.classList.add('kv-sidebar-mini');
  const btn = document.getElementById('kvSidebarToggle');
  if(btn) btn.textContent = '▶';
}


Requests	IP Address	Location	AS Autonomous System
9	142.251.20.94	United States	AS15169Google LLC
7	192.178.170.95	United States	AS15169Google LLC
7	51.75.52.74	France	AS16276OVH SAS
7	188.114.96.3	United States	AS13335Cloudflare, Inc.
7	162.159.142.170	United States	AS13335Cloudflare, Inc.
37	5	-	-

Security Scan Report: keyvault-cantabra-cf.pages.dev

Summary

AI Security Verdict

Moderate Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History