finance banking

technology software

English

Within the developer-focused generic top-level domain (.dev), 'centsworth.pages.dev' is registered with subdomain 'centsworth'. The registrable portion 'pages' spans 5 characters with 2 vowels and 3 consonants. It segments into 1 word: pages. No strong language cues emerged from the frequency lists.

html/3e/1c/3e1c48fb-2329-497f-b651-71b68250943b.html.gz

sha256=:eofGQXlwFeF4+hUPnJlxoDCL7OIl7m7dXdTXt1gubic=:

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

206b6e8bb00fc7bba2c7ee80ca41db3e9e05ba7be0aa35abeba9cfd5357f5d0e

5b5799e6f8c680663207ac5b42ee14eed2a406fa7af48f50c154f0c0b1566946

c9506197caf809a075b6dee1da0d36fb19da7158ffe8a88e7b0c96c5d8623c99

7a87c641797015e178fa150f9c9971a0308bece225ee6edd5dd4d7b7582e6e27

a8e29918d098b2b06e1012bdaeffb4aec0445c5d5654709023e0bd1f442a80e8

PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF

d45d0ddcfcc05a95aa9b98e621a0764db7ada64e1769a3889656628c99e37247

8aad0fe268312dea45064a075a30493d27bba03273799296e0bd7b2fdc7c0587

9c2bac80d5a77e98251334f1e9cce93e4ebf77810502dad3de60f0b893d005e5

width=device-width,initial-scale=1.0,maximum-scale=1.0,user-scalable=no,viewport-fit=cover

viewport

default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.gstatic.com https://apis.google.com https://accounts.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data: blob: https://*.googleusercontent.com; connect-src 'self' https://firestore.googleapis.com https://www.googleapis.com https://securetoken.googleapis.com https://identitytoolkit.googleapis.com https://api.gumroad.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com wss://*.firebaseio.com https://script.google.com https://script.googleusercontent.com https://us-central1-centsworth-27fdc.cloudfunctions.net https://api.revenuecat.com; worker-src 'self' blob:; frame-src 'self' https://accounts.google.com https://*.firebaseapp.com https://centsworth.pages.dev https://checkout.stripe.com;

theme-color

apple-mobile-web-app-capable

apple-mobile-web-app-status-bar-style

apple-mobile-web-app-title

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Abuse Team

CloudFlare, Inc.

pages.dev

Cloudflare Abuse Contact

MNT-CLOUDFLARE

Cloudflare Technical Contact

CLOUDFLARENET-EU


import{initializeApp}from'https://www.gstatic.com/firebasejs/11.4.0/firebase-app.js';
import{initializeAuth,indexedDBLocalPersistence,getAuth,signInWithPopup,signInWithRedirect,getRedirectResult,signInWithCredential,GoogleAuthProvider,createUserWithEmailAndPassword,signInWithEmailAndPassword,sendPasswordResetEmail,signOut,onAuthStateChanged}from'https://www.gstatic.com/firebasejs/11.4.0/firebase-auth.js';
import{getFirestore,doc,getDoc,setDoc,onSnapshot,collection,query,where,orderBy,getDocs,updateDoc,deleteDoc}from'https://www.gstatic.com/firebasejs/11.4.0/firebase-firestore.js';
window._firebase={initializeApp,initializeAuth,indexedDBLocalPersistence,getAuth,signInWithPopup,signInWithRedirect,getRedirectResult,signInWithCredential,GoogleAuthProvider,createUserWithEmailAndPassword,signInWithEmailAndPassword,sendPasswordResetEmail,signOut,onAuthStateChanged,getFirestore,doc,getDoc,setDoc,onSnapshot,collection,query,where,orderBy,getDocs,updateDoc,deleteDoc};
/* _firebaseReady promise is created in a body-level script (runs before this deferred module) */
try{
  const app=initializeApp({apiKey:"AIzaSyAo1d-mz_wcilvrLLMGd6hLijtJJ0KEjT8",authDomain:"centsworth.pages.dev",projectId:"centsworth-27fdc",storageBucket:"centsworth-27fdc.firebasestorage.app",messagingSenderId:"22755592484",appId:"1:22755592484:web:8442bfd4bfc531f3f10bb1",measurementId:"G-L4EE916NG6"});
  window._fbApp=app;
  /* Native: use custom persistence backed by SharedPreferences (never wiped).
     Web: use getAuth() default persistence (IndexedDB, works fine in real browsers). */
  const _isNative=typeof window.Capacitor!=='undefined'&&window.Capacitor.isNativePlatform&&window.Capacitor.isNativePlatform();
  window._isNative=_isNative;
  window._fbAuth=_isNative?initializeAuth(app,{persistence:indexedDBLocalPersistence}):getAuth(app);
  window._fbDb=getFirestore(app);
  window._firebaseResolve(true);
}catch(e){console.warn('Firebase init failed:',e);window._fbInitError=String(e.message||e);window._firebaseResolve(false);}



/* Create Firebase ready promise BEFORE module script runs (modules are deferred).
   This ensures _initAuth() can properly await Firebase initialization. */
window._firebaseReady=new Promise(function(r){window._firebaseResolve=r;});


HTTP/3

Cloudflare Bot Management

Cloudflare

CentsWorth

✅ Low Risk - https://centsworth.pages.dev/$%7Besc(photo)%7D

Requests	IP Address	Location	AS Autonomous System
4	188.114.96.3	United States	AS13335Cloudflare, Inc.
2	104.17.25.14	United States	AS13335Cloudflare, Inc.
2	104.16.175.226	United States	AS13335Cloudflare, Inc.
2	192.178.183.94	United States	AS15169Google LLC
2	104.17.24.14	United States	AS13335Cloudflare, Inc.
2	142.251.20.94	United States	AS15169Google LLC
2	142.250.154.95	United States	AS15169Google LLC
2	104.18.0.22	United States	AS13335Cloudflare, Inc.
2	104.16.174.226	United States	AS13335Cloudflare, Inc.
20	9	-	-

Security Scan Report: centsworth.pages.dev

Summary

AI Security Verdict

Moderate Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History