technology software

English

JSESSIONID

Domain 'mobile.zscalertwo.net' uses the network infrastructure generic top-level domain (.net) and includes subdomain 'mobile'. Its registrable label 'zscalertwo' stretches across 10 characters containing three vowels alongside 7 consonants. Breaking it apart gives 4 words: z, scale, r, two. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

html/27/05/27055e97-d95b-492c-bebc-4a747f415765_fallback.html.gz

Zscaler Cloud Portal

html/27/05/27055e97-d95b-492c-bebc-4a747f415765.html.gz

default-src 'none';style-src https://mobileadmin.zscalertwo.net:443/ 'unsafe-inline';font-src https://mobileadmin.zscalertwo.net:443/;connect-src https://mobileadmin.zscalertwo.net:443/  https://webapi-staging-api.webdev.zscaler.com/ https://webapi.zscaler.com/ https://api-js.mixpanel.com/;frame-ancestors https://mobileadmin.zscalertwo.net:443/;script-src https://mobileadmin.zscalertwo.net:443/  https://www.zscaler.com/ https://www.zscaler.fr/ https://cdn.mxpnl.com/ http://cdn.mxpnl.com/;img-src https://mobileadmin.zscalertwo.net:443/ data: https://help.zscaler.com https://help.zscaler.us https://help.zscalergov.net;frame-src https://mobileadmin.zscalertwo.net:443/ https://help.zscaler.com https://help.zscaler.us https://help.zscalergov.net;

default-src 'none'; img-src 'self' data: https://www.zscaler.com https://www.zscaler.fr https://a.tile.openstreetmap.org                 https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org                 https://webapi.zscaler.com https://cdn.zscaler.com https://server.arcgisonline.com                 https://fast.wistia.com https://cms.zscaler.com; script-src 'self' 'unsafe-eval' https://*.userpilot.io https://webapi.zscaler.com/                 https://www.zscaler.com/api/admin-ui-messages/ https://webapi.zscaler.com/                 https://fast.wistia.com; style-src 'unsafe-inline' https:; font-src 'self'; connect-src 'self' https://*.userpilot.io wss://analytex-us.userpilot.io; frame-src 'self' https://help.zscaler.com/ https://help.zscalergov.net https://help.zscaler.us; manifest-src 'self'

default-src 'self' *.zscaler.com; script-src 'self' blob: *.zscaler.com https://*.zscaler.com *.newrelic.com bam.nr-data.net *.cloudflare.com *.cloudfront.net 'nonce-hRvCnifR0qTVjStbKH7Iow=='; object-src 'self' *.zscaler.com; style-src 'self' 'unsafe-inline' *.zscaler.com cdn.jsdelivr.net *.cloudfront.net; img-src 'self' https: data: blob:; media-src 'self' blob: *.zscaler.com; form-action 'self' zscaler.okta.com *.zscaler.com; frame-src 'self' *.zscaler.com https://*.zscaler.com; frame-ancestors 'self'; child-src 'self' blob: *.zscaler.com; font-src 'self' data: *.cloudfront.net; connect-src 'self' blob: *.zscaler.com https://*.zscaler.com *.bynder.cloud *.cloudfront.net bam.nr-data.net https://cdn.jsdelivr.net; base-uri 'self'; report-to default

default-src 'self' *.zscaler.com; script-src 'self' blob: *.zscaler.com https://*.zscaler.com *.newrelic.com bam.nr-data.net *.cloudflare.com *.cloudfront.net 'nonce-sBhoopiQwD3xlyN6T4XiJA=='; object-src 'self' *.zscaler.com; style-src 'self' 'unsafe-inline' *.zscaler.com cdn.jsdelivr.net *.cloudfront.net; img-src 'self' https: data: blob:; media-src 'self' blob: *.zscaler.com; form-action 'self' zscaler.okta.com *.zscaler.com; frame-src 'self' *.zscaler.com https://*.zscaler.com; frame-ancestors 'self'; child-src 'self' blob: *.zscaler.com; font-src 'self' data: *.cloudfront.net; connect-src 'self' blob: *.zscaler.com https://*.zscaler.com *.bynder.cloud *.cloudfront.net bam.nr-data.net https://cdn.jsdelivr.net; base-uri 'self'; report-to default

inline; filename="IMG 2_ThreatLabz-1x.jpg"

default-src 'self' *.zscaler.com; script-src 'self' blob: *.zscaler.com https://*.zscaler.com *.newrelic.com bam.nr-data.net *.cloudflare.com *.cloudfront.net 'nonce-qYu1sXlThPB7L4sQW/EfLg=='; object-src 'self' *.zscaler.com; style-src 'self' 'unsafe-inline' *.zscaler.com cdn.jsdelivr.net *.cloudfront.net; img-src 'self' https: data: blob:; media-src 'self' blob: *.zscaler.com; form-action 'self' zscaler.okta.com *.zscaler.com; frame-src 'self' *.zscaler.com https://*.zscaler.com; frame-ancestors 'self'; child-src 'self' blob: *.zscaler.com; font-src 'self' data: *.cloudfront.net; connect-src 'self' blob: *.zscaler.com https://*.zscaler.com *.bynder.cloud *.cloudfront.net bam.nr-data.net https://cdn.jsdelivr.net; base-uri 'self'; report-to default

default-src 'self' *.zscaler.com; script-src 'self' blob: *.zscaler.com https://*.zscaler.com *.newrelic.com bam.nr-data.net *.cloudflare.com *.cloudfront.net 'nonce-ht6hRFtBnCKi0OUCVVp2mQ=='; object-src 'self' *.zscaler.com; style-src 'self' 'unsafe-inline' *.zscaler.com cdn.jsdelivr.net *.cloudfront.net; img-src 'self' https: data: blob:; media-src 'self' blob: *.zscaler.com; form-action 'self' zscaler.okta.com *.zscaler.com; frame-src 'self' *.zscaler.com https://*.zscaler.com; frame-ancestors 'self'; child-src 'self' blob: *.zscaler.com; font-src 'self' data: *.cloudfront.net; connect-src 'self' blob: *.zscaler.com https://*.zscaler.com *.bynder.cloud *.cloudfront.net bam.nr-data.net https://cdn.jsdelivr.net; base-uri 'self'; report-to default

inline; filename="IMG 4_Innovations-1x.jpg"

default-src 'self' *.zscaler.com; script-src 'self' blob: *.zscaler.com https://*.zscaler.com *.newrelic.com bam.nr-data.net *.cloudflare.com *.cloudfront.net 'nonce-IgBUdfT+zvlFh0WhHG72Bg=='; object-src 'self' *.zscaler.com; style-src 'self' 'unsafe-inline' *.zscaler.com cdn.jsdelivr.net *.cloudfront.net; img-src 'self' https: data: blob:; media-src 'self' blob: *.zscaler.com; form-action 'self' zscaler.okta.com *.zscaler.com; frame-src 'self' *.zscaler.com https://*.zscaler.com; frame-ancestors 'self'; child-src 'self' blob: *.zscaler.com; font-src 'self' data: *.cloudfront.net; connect-src 'self' blob: *.zscaler.com https://*.zscaler.com *.bynder.cloud *.cloudfront.net bam.nr-data.net https://cdn.jsdelivr.net; base-uri 'self'; report-to default

msapplication-TileColor

theme-color

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

Requests	IP Address	Location	AS Autonomous System
19	104.129.202.233	San Jose, California, United States	AS22616ZSCALER-SJC1
13	18.245.86.81	United States	AS16509AMAZON-02
11	165.225.246.71	San Jose, California, United States	AS22616ZSCALER-SJC1
5	104.18.30.6	United States	AS13335CLOUDFLARENET
2	104.18.31.6	United States	AS13335CLOUDFLARENET
2	104.129.202.231	San Jose, California, United States	AS22616ZSCALER-SJC1
2	18.245.86.119	United States	AS16509AMAZON-02
2	18.245.86.96	United States	AS16509AMAZON-02
2	18.245.86.100	United States	AS16509AMAZON-02
2	35.186.235.23	United States	AS396982GOOGLE-CLOUD-PLATFORM
41	16	-	-

Security Scan Report: mobile.zscalertwo.net

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History