documentation technical

English

Domain 'www.nascarreference.com' uses the commercial generic top-level domain (.com), featuring subdomain 'www'. Count 15 characters in 'nascarreference' holding 6 vowels versus nine consonants. Tokenizing the label suggests two words: nascar, reference. Average segment length settles at 7.5 characters. No strong language cues emerged from the frequency lists.

html/3f/d1/3fd1f6e7-a177-4add-9d79-6b863ae80666.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

4a2b27cda2a3221fc25c91cd6391b445f63de7db523fddeed0dcc4b70c3e3a37

fb3921586fd39a0e0f8a12783cf8def3734bf97ac789410b418db2680c5d806b

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

7126e2cae09e2ca8f306db92b76f88cb4d7b79a256f1057c31b47c04c405d0f3

3eac9606081dd9d90897bcf7f6ec6875dffff87e3d6048dedd7fd4472fa9c721

viewport

description

robots

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Tucows Domains Inc.

NASCARREFERENCE.COM

Abuse

Google LLC

GOOGLE


  $(document).ready(function() {
 	  $(window).scroll(function() {
      if ($(this).scrollTop() > 100) {
  	    $('.scrollup').fadeIn();
	     }
	    else {
		    $('.scrollup').fadeOut();
	     }
	   });

    $('.scrollup').click(function() {
	    $("html, body").animate({ scrollTop: 0 }, 600);
		    return false;
     }
    );
   }
  );


JQuery

LiteSpeed

Hostinger

HTTP/3

HSTS

Google Hosted Libraries

Carson Hocevar Career Statistics | NascarReference.com

✅ Low Risk - https://www.nascarreference.com/driver/drvhistall.php?DriverID=2582&Series=2

Requests	IP Address	Location	AS Autonomous System
10	216.58.210.170	United States	AS15169Google LLC
9	109.106.250.133	United States	AS47583Hostinger International Limited
19	2	-	-

Security Scan Report: www.nascarreference.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History