English

The domain 'off3001--318542fefdfe11f090e642dde27851f2.web.val.run' uses the .run top-level domain, featuring subdomain 'off3001--318542fefdfe11f090e642dde27851f2.web'. The registrable portion 'val' spans 3 characters containing 1 vowel alongside 2 consonants. Splitting it apart reveals 1 word: val. No strong language cues emerged from the frequency lists.

contactForm

html/3e/61/3e613d35-658b-4857-a05a-3af99a786b1b.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

e6aef0264eabb21697101f70a67d40409d1a078b66bf4f2b58d86de649eaa9f1

56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4

05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

parseHTML() executes scripts in event handlers

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

476f1dfc8bed6f9d819605851e0afd1d44b0cc46be912bb05fbbb89b37653bb5

viewport

robots

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Abuse

Google LLC

GOOGLE

JQuery

Bootstrap

Render

Cloudflare Bot Management

Cloudflare

Google Hosted Libraries

Mail

✅ Low Risk - https://off3001--318542fefdfe11f090e642dde27851f2.web.val.run/#dTAwM2NqZUBzZWt1cmUubmV0

Requests	IP Address	Location	AS Autonomous System
2	142.251.208.170	United States	AS15169Google LLC
1	104.18.10.207	United States	AS13335Cloudflare, Inc.
1	104.26.12.118	United States	AS13335Cloudflare, Inc.
1	104.18.50.34	United States	AS13335Cloudflare, Inc.
1	172.67.75.9	United States	AS13335Cloudflare, Inc.
1	178.63.16.224	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
7	6	-	-

Security Scan Report: off3001--318542fefdfe11f090e642dde27851f2.web.val.run

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History