technology software

government public service

English

The domain 'dxfleet.dfsdx.com' uses the commercial generic top-level domain (.com), featuring subdomain 'dxfleet'. The core label 'dfsdx' covers 5 characters split between zero vowels and five consonants. Tokenizing the label suggests three words: df, s, dx. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

username

loginForm

html/2f/e4/2fe41b53-67af-4500-b467-e40d779611c8.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

3cff92ecbf327e17b4ae0069b7f20b79ee5c593ad5754d6856b81471e71d05a8

d4118048d9e04664280e06503f313b2957d11c71bd426d8160db376f91492932

d7eb9316827eb662bdef20bc9d6dabe266da65f23e75707938386747618ee828

9d729ceec8a9248f0582a34a608bd676709c8c0d19604ec94515885394f79f4a

14ca1ca7ca69d56aee00ae86b63343b6e18000b0adfdd0ac56dc3ba128ef3d7d

01335436c4532392826d49570b22ae980919a5d518d5ce6b529265b0a815e14b

sha256=:ATNUNsRTI5KCbUlXCyKumAkZpdUY1c5rUpJlsKgV4Us=:

db527ff7b49bceae3c437cd987a32c2ade46ea0890f68ded3920672e895abe1a

b44f27021f4aac0a1306b0a2e59d974acb85f65d3211ccae9b5e01bf7549c823

94045e817d58af225f95d79709227a7ef6b6fa755d653a6b72947bf9477d3f7f

sha256=:lARegX1YryJfldeXCSJ6fva2+nVdZTprcpR7+Ud9P38=:

d681f4ae81219e63ad7931da608c990fc50642aff7ab2592d8712a76f15147cc

a9705dfc47c0763380d851ab1801be6f76019f6b67e40e9b873f8b4a0603f7a9

7baf1692ec58618c2fe2e4cc41c8e68eef3df22f7129b7b9eaa52ab60074443b

sha256=:e68WkuxYYYwv4uTMQcjmju898i9xKbe56qUqtgB0RDs=:

0b4b234df0ef19cb7cdea458078b9b184d3b39d1405b4e14afeda336555cbfa0

sha256=:C0sjTfDvGct83qRYB4ubGE07OdFAW04Ur+2jNlVcv6A=:

bb53ea0d29c8201cacfcddadbb503aecf8080e84938cd5a6d0a3d210f3e90d16

9add5419cfd536a341c595ab7600274a0977df32d319642ffbba717b59c6e825

53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef

8a102873a33f24f7eb22221e6b23c4f718e29f85168ecc769a35bfaed9b12cce

8f91fab66958f1e5e7c61046eb771fd36073d68ab00d8804a9f5f1e9c26385a8

75bbd65863467140b1b45de96c8409d624795b0c1539544eee4a26b7a6050535

4163f0e67bd9927d0b1c4b9745392d4814127575149ce17ef1705d318c0241f3

5c1fe653f8476a09619c4a7a449713967b6427678efef8f16dc9e0e6ae67e2d8

b727d65b62ed250348fa5dc5d21eb10d5fe28fa31f9fc97048a1d63ac9848173

d14ba945622d01b55de52e277fe9a1ee2bc3ca0900f531284f97b2c4e2fadf63

d7b97ea64f2397a1e1a82c57c50a4a456ac3c174f8ca3fdd3bb3202336191962

a58bea923f2cb479e57466025505d618a330ff6e77a5cee7659720630bb7d6b5

388dcdf7308a69b0e8bf6ad917397c94951709c3fb126b06706a0fe83317402a

0f6a645aa59622409329563e259bc952ff3e39120c2cd9ab0090b8d4c8111f5f

8f2a3cbeb488c5732953b529387d24e570645d3393ce4b5067c5f32b05ac34e1

36858be20eaf469f7673adc01e4b0406eb27fc6241e1442999545151acb716e5

XSS via JQLite DOM manipulation functions in AngularJS

XSS may be triggered in AngularJS applications that sanitize user-controlled HTML snippets before passing them to JQLite methods like JQLite.prepend, JQLite.after, JQLite.append, JQLite.replaceWith, JQLite.append, new JQLite and angular.element.

angular vulnerable to regular expression denial of service via the $resource service

angular vulnerable to regular expression denial of service via the angular.copy() utility

Angular (deprecated package) Cross-site Scripting

angular vulnerable to regular expression denial of service via the <input type="url"> element

AngularJS improperly sanitizes SVG elements

AngularJS allows attackers to bypass common image source restrictions

angular vulnerable to super-linear runtime due to backtracking

AngularJS Incomplete Filtering of Special Elements vulnerability

AngularJS Regular expression Denial of Service (ReDoS)

End-of-Life: Long term support for AngularJS has been discontinued as of December 31, 2021

### Impact

Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the `_.unset` and `_.omit` functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes. 

The issue permits deletion of properties but does not allow overwriting their original behavior.  

### Patches

This issue is patched on 4.17.23.

In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.

XSS in data-container property of tooltip

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

XSS is possible in the data-target attribute.

Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes

XSS in data-template, data-content and data-title properties of tooltip/popover

Bootstrap before 4.0.0 is end-of-life and no longer maintained.

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

cda8e6faa96e926f98f2305f64d1db5b3eb8012c6ca572b18e59329c912613c2

602b1445cb9627970b0b04b7443bd14369ac9c1dd365ac17633efd1bce06e972

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

CSC Corporate Domains, Inc.

DOVERFS.COM

DFSDX.COM


        localStorage.setItem("minervaApiUrl", '"https://api.dataservices.doverfs.com:8863/"')
        localStorage.setItem("apimUrl", '"https://api.dfsdx.com"')
        localStorage.setItem("apimKey", '"f5777ffb96f64f4cac1619a2303317d0"')
        localStorage.setItem("userManagementApiUrl", '"https://api.dataservices.doverfs.com:8452/"')
        localStorage.setItem("appAccessApiUrl", '"https://api.dataservices.doverfs.com:8496/"')
        localStorage.setItem("applicationId", '"4388436a-ca65-4ae6-ac63-175458945493"')
        localStorage.setItem("organizationTopValue", '"1000"')
        localStorage.setItem("usergroupTopValue", '"1000"')
        localStorage.setItem('isAuthEnable', '');
        localStorage.setItem("masterDataApiUrl", '"https://api.dataservices.doverfs.com:8735/"')
             localStorage.removeItem("devLocationApiUrl")

        if (localStorage.getItem('isAuthEnable').toLowerCase() === 'false') {
            localStorage.setItem('access_token', '\"\"');
            localStorage.setItem('refresh_token', '\"\"');
            localStorage.setItem('username', '\"\"');
            localStorage.setItem('organization', '\"\"');
            localStorage.setItem('organizationId', '\"00000000-0000-0000-0000-000000000000\"');
            localStorage.setItem('claims',  'null');
            localStorage.setItem('name', '\"\"');
        }

    


        angular.module('appApiDomainNameModule', []).constant('APIDOMAINNAME', 'api.dataservices.doverfs.com')
    

Requests	IP Address	Location	AS Autonomous System
11	23.53.40.64	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
11	1	-	-

Security Scan Report: dxfleet.dfsdx.com

Summary

AI Security Verdict

Low Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History