English

PHPSESSID

Within the commercial generic top-level domain (.com), 'testamentarytrustco.com' is registered with no subdomain. Its registrable label 'testamentarytrustco' stretches across 19 characters containing six vowels alongside 13 consonants. It segments into three words: testamentary, trust, co. Median word length is five characters. No strong language cues emerged from the frequency lists.

firstname

lastname

occupation

country

radio-name

address

suite

city

state

zipcode

acct_email

acct_type

acct_password

confirmPassword

username

acct_pin

phoneNumber

confirm-ssn

profile_pic

frontID

backID

captcha_code

regSubmit

query

gtrans

vote

html/27/44/27441abb-f64b-4fad-9d14-49b846da4645.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

7506c8f4d85e4707ab46f9858f0c6e65e3316b9d2f122dcf485b9dbf39d5a7ac

2d5fa531e30ac3debad673003128f1ca9ad3c964ef17b547377e7ed09bd4504f

fb8767af22838a29bdd8ccb0aa8df8e255001939f7a3a6c07f706acd035b58ff

d2c907c1300738d05a32bc3405e85839f3f0021f36f0fd3ea555ce10ccaff4c0

bef1acd24d825c495f65c5603c443adf00e08086620e5eaf9ded75b6e8b4012d

88b4bc304ab31707863295fa2af427c7eb5612ddb3bb11555a053828fd130d2d

b304b8659cb2b27604e4a76421e5c731dbc471fb62061b7c79eeff1f11ff4d7e

0adc7f8e9c6d27fe0026fb71178d7f9749fa7f273fa479b542d68a2635d8330c

4714cdf46006b44b267673882d2471fd5476b80fd519d5297e533da40e62e8b8

4642fd5f612ea5c0dbe55fc4796ecc3fec94cb15dc373685f7aebce19eab4263

08380317e4c2c847c8aee5d492ffe45790e4368fb188a0d09a412e3f5024e82b

04f8c9a280086424d8602144246d9efaa7d77e2eeb12cd7f2e7db0f952dca425

66476e952853294467137881f0d81ca616b5a5fcc81e421157e41f4fe5fa3cd0

0df707604a0b846b0648f5c71c4426afa3543a44fa9bc5d950ffdb4c68d0919b

10645bf69c0ab1b4946e26fa7ee080bda6b895f24bb0604cc7a6e1c614b90af1

bbacb563e3c943013d6523a76868a6b81aec705ec07554a808076bbd28727082

fc790761edb79b954a5e6853774ed96db936a3729b78d4b72dad5e79ce395c54

7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda

912f3894757c4cc37b2e95828c6e20d134dc2c737fc441dd3f02464e254a143b

a213e3bcd0da14b65aac4c7329a995898a07bdbe3f8b4542d286b50cfbc91041

b95d128c002ad6a88351ebdea862da52648ee7bde6fecfbedf5019b3051728e6

c0575abbb306ca26f2f718133648781f63a61c06d0200f3a063641ab18e963a4

097b09d684d5fe93264e3fac298514377807190997a192b21097e99b42640f1e

### Impact

Affected versions of this package are vulnerable to Prototype Pollution.  A malicious HTML code block can be crafted that will result in prototype pollution of the base object's prototype during highlighting.  If you allow users to insert custom HTML code blocks into your page/app via parsing Markdown code blocks (or similar) and do not filter the language names the user can provide you may be vulnerable. 

The pollution should just be harmless data but this can cause problems for applications not expecting these properties to exist and can result in strange behavior or application crashes, i.e. a potential DOS vector. 

_If your website or application does not render user provided data it should be unaffected._

### Patches

Versions 9.18.2 and 10.1.2 and newer include fixes for this vulnerability.  If you are using version 7 or 8 you are encouraged to upgrade to a newer release.

### Workarounds

#### Patch your library

Manually patch your library to create null objects for both `languages` and `aliases`:

```js
const HLJS = function(hljs) {
  // ...
  var languages = Object.create(null);
  var aliases = Object.create(null);
```

#### Filter out bad data from end users:

Filter the language names that users are allowed to inject into your HTML to guarantee they are valid.

### References

* [What is Prototype Pollution?](https://codeburst.io/what-is-prototype-pollution-49482fc4b638)
* https://github.com/highlightjs/highlight.js/pull/2636

### For more information

If you have any questions or comments about this advisory:

* Please file an issue against [highlight.js](https://github.com/highlightjs/highlight.js/issues/)

### Impact: Potential ReDOS vulnerabilities (exponential and polynomial RegEx backtracking)

[oswasp](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS): 

> The Regular expression Denial of Service (ReDoS) is a Denial of Service attack, that exploits the fact that most Regular Expression implementations may reach extreme situations that cause them to work very slowly (exponentially related to input size). An attacker can then cause a program using a Regular Expression to enter these extreme situations and then hang for a very long time.

If are you are using Highlight.js to highlight user-provided data you are possibly vulnerable.  On the client-side (in a browser or Electron environment) risks could include lengthy freezes or crashes... On the server-side infinite freezes could occur... effectively preventing users from accessing your app or service (ie, Denial of Service).

This is an issue with grammars shipped with the parser (and potentially 3rd party grammars also), not the parser itself. If you are using Highlight.js with any of the following grammars you are vulnerable.  If you are using `highlightAuto` to detect the language (and have any of these grammars registered) you are vulnerable. Exponential grammars (C, Perl, JavaScript) are auto-registered when using the common grammar subset/library `require('highlight.js/lib/common')` as of 10.4.0 - see https://cdn.jsdelivr.net/gh/highlightjs/cdn-release@10.4.0/build/highlight.js

All versions prior to 10.4.1 are vulnerable, including version 9.18.5. 

**Grammars with exponential backtracking issues:**

  - c-like (c, cpp, arduino)
  - handlebars (htmlbars)
  - gams
  - perl
  - jboss-cli
  - r
  - erlang-repl
  - powershell
  - routeros
  - livescript (10.4.0 and 9.18.5 included this fix)
  - javascript & typescript (10.4.0 included partial fixes)

And of course any aliases of those languages have the same issue. ie: `hpp` is no safer than `cpp`.

**Grammars with polynomial backtracking issues:**

- kotlin
- gcode
- d
- aspectj
- moonscript
- coffeescript/livescript
- csharp
- scilab
- crystal
- elixir
- basic
- ebnf
- ruby
- fortran/irpf90
- livecodeserver
- yaml
- x86asm
- dsconfig
- markdown
- ruleslanguage
- xquery
- sqf

And again: any aliases of those languages have the same issue. ie: `ruby` and `rb` share the same ruby issues.


### Patches

- Version 10.4.1 resolves these vulnerabilities.  Please upgrade.

### Workarounds / Mitigations

- Discontinue use the affected grammars. (or perhaps use only those with poly vs exponential issues)
- Attempt cherry-picking the grammar fixes into older versions...
- Attempt using newer CDN versions of any affected languages.  (ie using an older CDN version of the library with newer CDN grammars).  Your mileage may vary.

### References

- https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS

### For more information

If you have any questions or comments about this advisory:
* Open an issue: https://github.com/highlightjs/highlight.js/issues
* Email us at [security@highlightjs.com](mailto:security@highlightjs.com)

2f01d047ddbd2b132a5bfce12b680bcab8b1e4eeb4a86f1b4cee2027c012dca2

adad71e40b7017d7a4cff0154fb837d3d27972976c3363db2f1d30daf3991373

3338edbae92c1e2651ad43d31ead40d3a0f4f671fbc7b90329b6db0d3f6471cf

4190e3979efc6e9939068009a2647e63135d229e53baeeaf228bb5a648873b8d

85e83f3213a2eed07f2c54279a4322eefc6fc6550d18ee0047928d47afa3ed62

8b100698d53728364bac95eb3887d3a61170a2f3fe4bc2d31d4cc8fd97d0e192

robots

width=device-width, initial-scale=1, maximum-scale=0.9, shrink-to-fit=no

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

html/27/44/27441abb-f64b-4fad-9d14-49b846da4645_nodriver.html.gz

Testamentary Trust Bank

NameCheap, Inc.

TESTAMENTARYTRUSTCO.COM


    function googleTranslateElementInit() {
        new google.translate.TranslateElement({
            pageLanguage: 'en'
        }, 'google_translate_element');
    }



    $(document).ready(function(){
        $(".numpad").hide();
        $('.input').click(function(){
            $('.numpad').fadeToggle('fast');
        });

        $('.del').click(function(){
            $('.input').val($('.input').val().substring(0,$('.input').val().length - 1));
        });
        $('.faq').click(function(){
            alert("Enter Your OTP Sent to you ");
        })
        $('.shuffle').click(function(){
            $('.input').val($('.input').val() + $(this).text());
            $('.shuffle').shuffle();
        });
        (function($){

            $.fn.shuffle = function() {

                var allElems = this.get(),
                    getRandom = function(max) {
                        return Math.floor(Math.random() * max);
                    },
                    shuffled = $.map(allElems, function(){
                        var random = getRandom(allElems.length),
                            randEl = $(allElems[random]).clone(true)[0];
                        allElems.splice(random, 1);
                        return randEl;
                    });

                this.each(function(i){
                    $(this).replaceWith($(shuffled[i]));
                });

                return $(shuffled);

            };

        })(jQuery);

    });



    $(function() {
        $('#datepicker').keypress(function(event) {
            event.preventDefault();
            return false;
        });
    });



    $(function() {
        $('#datepicker').keypress(function(event) {
            event.preventDefault();
            return false;
        });
    });


    function switchVisible() {
        if (document.getElementById('Div1')) {

            if (document.getElementById('Div1').style.display === 'none') {
                document.getElementById('Div1').style.display = 'block';
                document.getElementById('Div2').style.display = 'none';
                document.getElementById('nextShow').style.display = 'none';
            }
            else {
                document.getElementById('Div1').style.display = 'none';
                document.getElementById('Div2').style.display = 'block';
                document.getElementById('nextShow').style.display = 'block';
                document.getElementById('Button1').style.display='none';
            }
        }
    }




X-UA-Compatible

PasswordField

JQuery

Litespeed Cache

LiteSpeed

jsDelivr

SweetAlert2

SweetAlert

Smartsupp

www.smartsuppchat.com

☠️ Malicious - https://testamentarytrustco.com/p/account/verify_registration

Requests	IP Address	Location	AS Autonomous System
8	104.16.174.226	United States	AS13335Cloudflare, Inc.
4	63.181.176.167	Germany	AS60068
4	172.217.20.138	United States	AS15169Google LLC
4	212.102.56.178	Germany	AS13335
4	67.223.118.115	United States	AS22612Namecheap, Inc.
4	216.58.206.46	United States	AS15169Google LLC
4	172.217.168.67	United States	AS15169Google LLC
4	142.251.110.94	United States	AS15169Google LLC
4	152.3.138.25	Durham, North Carolina, United States	AS13371Duke University
4	172.217.20.132	Germany	Unknown
48	11	-	-

Security Scan Report: testamentarytrustco.com

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History