New Tab

English

CpsUserId

s3csu

s3sid-online-daab

s3su

Domain 'online.sbis.ru' uses the Russian country-code top-level domain (.ru) and includes subdomain 'online'. Its registrable label 'sbis' stretches across 4 characters holding one vowel versus three consonants. Breaking it apart gives 2 words: sb, is. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

f3ee0131d076a05c10e0fd2c7e69ec313ed82bc43f9c0905a8504ae3553d07ab

490467770444f234c3f069949ed3cad92b8cce58c15a5f64ffb9f78f582a091f

https://sso.saby.ru/auth-online/online.sbis.ru/?ret=online.sbis.ru/

CSP header missing - vulnerable to XSS attacks

SABY.RU

SBIS.RU

ORG-DCL37-RIPE

ORG-CA988-RIPE

Ivan Shadrichev

Nikolay Vinogradov

Data Center LLC

ORG-NCC1-RIPE

RU-DATACENTER-20190501

RU-DATACENTER

globalThis.preRegistryErrors = new Set();globalThis.onErrorRequireRegistry = function registerError(event) { const globalEnv = globalThis; globalEnv.preRegistryErrors?.add(event); };window.addEventListener('error', globalThis.onErrorRequireRegistry, true);

(()=>{const e=document.head,t=['fallback','static','service'];let r=document.readyState=='complete',o=!1,n=()=>Array.from(e.querySelectorAll('link[rel="stylesheet"][data-theme-selector][data-theme-layer]')),a=()=>{let r=n();if(!r.length)return!1;let o=new Map;r.forEach((e,t)=>o.set(e,t));let a=[...r].sort((e,r)=>(t.indexOf(e.getAttribute('data-theme-layer'))+1||t.length+1)-(t.indexOf(r.getAttribute('data-theme-layer'))+1||t.length+1)||o.get(e)-o.get(r));for(let t=0;t<r.length;t++)if(r[t]!==a[t]){let r=document.createDocumentFragment();o=!0;try{a.forEach(e=>r.appendChild(e)),e.insertBefore(r,e.firstChild)}finally{o=!1}return!0}return!1},l=new MutationObserver(e=>{if(r||o)return;for(let t of e)for(let e of t.addedNodes)if(e.nodeType==1&&e.tagName=='LINK'&&e.rel=='stylesheet'&&e.hasAttribute('data-theme-selector')&&e.hasAttribute('data-theme-layer'))return void a()});l.observe(e,{childList:!0}),a(),addEventListener('load',()=>{r=!0,l.disconnect()})})();
var cfg = window.wsConfig = window.wsConfig || {};cfg.wsRoot = cfg.wsRoot || '/static/resources/WS.Core/';cfg.resourceRoot = cfg.resourceRoot || '/static/resources/';cfg.metaRoot = cfg.metaRoot || '/auth-online/resources/';cfg.cdnRoot = cfg.cdnRoot || '/cdn/';cfg.defaultServiceUrl = cfg.defaultServiceUrl || '/auth-online/service/';cfg.appRoot = cfg.appRoot || '/auth-online/';cfg.RUMJsHeapMonitoringEnabled = false;cfg.RUMJsHeapMonitoringPollingInterval = 600;cfg.RUMJsHeapMonitoringThreshold = 1073741824;cfg.RUMEnabled = false;cfg.pageName = 'PSWaSabyRouting.regexAZaz09__3';cfg.reactMode = 'default';cfg.useNavigationOnPS = true;cfg.userConfigSupport = true;cfg.trackErrors = true;cfg.staticDomains = cfg.staticDomains || {"domains":["cdn2.saby.ru"]};cfg.shardDomain = '';cfg.compatible = false;cfg.product = cfg.product || 'auth-online';cfg.xDomainSystemname = 'sso';cfg.logLevel = 0;cfg.UseNewSystemOfTypeCustomization = true;window.buildnumber = '26.5106-152';window['X-UNIQ-ID'] = '62e65a72\u002d3493\u002d447f\u002d2cb0\u002d8c2ba6f75d14';window['X-REQUESTUUID'] = 'b8a38fb3\u002df68d\u002dfa1f\u002d8eca\u002d512cc9185ed0';window['X-CURRENTMETHOD'] = 'PSWaSabyRouting.regexAZaz09__3';window.history.scrollRestoration = 'manual';
globalThis.loadedScriptsFromBlock = [];globalThis.resourcesBlock = new Map();globalThis.callbacksForResourcesBlock = new Map();globalThis.ols = function onloadScript(script) { const globalEnv = globalThis; globalEnv.loadedScriptsFromBlock?.push(script); };globalThis.preDefineModules = new Set();globalThis.preRequiredFeatures = new Set();globalThis.preRequiredModules = new Set();globalThis.loadedRequire = new Set();globalThis.define = function preDefine(...argsDefine) { const globalEnv = globalThis; globalEnv.preDefineModules?.add(argsDefine); };globalThis.define.amd = true;globalThis.defineFeature = function preDefineFeature(...argsRequire) { const globalEnv = globalThis; globalEnv.preRequiredFeatures?.add(argsRequire); };globalThis.require = window.requirejs = function preRequire(...argsRequire) { const globalEnv = globalThis; globalEnv.preRequiredModules?.add(argsRequire); };globalThis.requirejs.isNewRequire = true;globalThis.requireLoadingTimeout = setTimeout(() => { onErrorRequire(document.getElementById('WebRequire'));}, 5000);globalThis.onLoadRequirePart = function onLoadRequirePart(name) { const globalEnv = globalThis; const REQUIRE_PARTS = ['contents', 'require']; globalEnv.loadedRequire.add(name); for (const part of REQUIRE_PARTS) { if (!globalEnv.loadedRequire.has(part)) { return; } } clearTimeout(globalEnv.requireLoadingTimeout); globalEnv.initRequire?.(); };globalThis.onErrorRequire = function onErrorRequire(element, showAlert = false) { const globalEnv = globalThis; if (globalEnv.requirejs.ready) { return; } clearTimeout(globalEnv.requireLoadingTimeout); if (showAlert) { const confirmed = confirm(`Возникла ошибка загрузки базового ресурса.\n\n Попробуйте перезагрузить страницу вручную или нажмите «ОК» для автоматической перезагрузки.`); if (confirmed) { window.location.reload(); } return; } const node = document.createElement('script'); const xModule = element.src.split('x_module=')[1]; for (let i = 0; i < element.attributes.length; i++) { const attr = element.attributes[i]; node.setAttribute(attr.name, attr.value); } node.src = `${globalEnv.wsConfig.metaRoot || '/'}RequireJsLoader/third-party/WebRequire.min.js?x_module=${xModule}`; node.onerror = () => onErrorRequire(node, true); element.remove(); document.head.appendChild(node); return true; };
window.readyToStartScript = false;
"use strict";var wsErrorMonitor=function(){function e(){var e=this,r="object"==typeof window&&window&&window.parent===window&&"object"==typeof document&&document&&document.location&&void 0!==document.location.origin&&/^https?\:\/\/[^\/]+$/.test(document.location.origin),t=["ie.saby.ru","ie-sap.saby.ru","ie-1c.saby.ru"].indexOf(document.location.host)>-1,s=r&&!!window.MSInputMethodContext&&!!document.documentMode,o={YaBrowser:{name:"Яндекс Браузер",reg:/\bYaBrowser\/(\d+)/i,version:{reg:/YaBrowser\/([0-9]{1,}[\.0-9]{0,})/i,available:20.9,availableForIESaby:17.4}},Firefox:{name:"Firefox",reg:/Firefox/i,version:{reg:/Firefox\/([0-9]{1,}[\.0-9]{0,})/i,available:79,availableForIESaby:51}},OperaChrome:{name:"Opera",reg:/(OPR)/i,version:{reg:/OPR\/([0-9]{1,}[\.0-9]{0,})/i,available:71,availableForIESaby:44}},Chrome:{name:"Chrome",reg:/Chrome(?!.*Edg\w{0,3}|.*SputnikBrowser)/i,version:{reg:/Chrome\/([0-9]{1,}[\.0-9]{0,})/i,available:75,availableForIESaby:52}},Opera:{name:"Opera",reg:/(Opera)/i,version:{reg:/(Opera|Version)\/([0-9]{1,}[\.0-9]{0,})/i,available:71,availableForIESaby:44}},Edge:{name:"Microsoft Edge",reg:/Edg\w{0,3}/i,version:{reg:/Edg\w{0,3}\/([0-9]+[\.0-9]*)/i,available:85,availableForIESaby:17}},IE:{name:"Internet Explorer",reg:/MSIE|rv\:/i,version:{reg:/(MSIE |rv:[ ]?)([0-9]{1,}[\.0-9]{0,})/i,available:13,availableForIESaby:11}},Safari:{name:"Safari",reg:/^((?!chrome|android|mobile).)*safari/i,version:{reg:/(Version)\/([0-9]{1,}[\.0-9]{0,})/i,available:14,availableForIESaby:12}},SafariMobile:{name:"Safari Mobile",reg:/.*Mobile.*Safari/i,version:{reg:/Version\/+([\w.]+).*Mobile.*Safari/i,available:14,availableForIESaby:12}},AppleWebkit:{name:"AppleWebkit Mobile",reg:/.*applewebkit.*mobile/i,version:{reg:/\bOS\s(\d+)/i,available:14,availableForIESaby:12}},AppleWebkitSbis:{name:"AppleWebkit Sbis",reg:/SbisBusinessMobile/i,version:{reg:/SbisBusinessMobile\/(\d+\.\d+)/i,available:0,availableForIESaby:0}},Sputnik:{name:"Спутник",reg:/SputnikBrowser/i,version:{reg:/SputnikBrowser\/(\d+\.\d+\.\d+)/i,available:100,availableForIESaby:100}}},n=!1;try{window.navigator&&window.navigator.userAgent&&(n=function e(r){var t=r.replace("_",".").toLowerCase(),s=null;for(var n in o)if(o.hasOwnProperty(n)&&o[n].reg.test(t)){s=n;break}var i=o[s].version,a=i.reg,l=i.available;i.availableForIESaby;var u=parseFloat((a.exec(t)||[null]).pop())||l;return function e(){try{var r=Function("return [...[]]");return""==r()}catch(t){return!1}}()&&u>=l}(window.navigator.userAgent))}catch(i){}if(!r){e.reason="nowindow";return}if(s&&!t){e.reason="ie11";return}if(!n&&!t){e.reason="unavailable browser";return}var a=window.wsConfig;if(!a||!a.trackErrors){e.reason="notrack";return}var l=e.getCookie("s3debug");if(l&&"false"!==l&&""!==l){e.reason="debug";return}e.BR="\n",e.isIE11=s,e.MIN_INTERVAL=3e3,e.MAX_INTERVAL=18e3,e.MAX_ERRORS=50,e.isStopped=!1,e.isOnline=!0,e.ls=null,e.WC="",e._p="Uncaught (in Promise) ",e.skipPattern=/((Uncaught\s$in\sPromise$\s((Error:\sAudio\soutput\sdevice\schange\sis\snot\ssupported)|((Promise|Deferred)CanceledError:[\s\S]*)|(Transport\serror:[\s\S]*)|(SecurityError:\sNo\spermission\sto\suse\srequested\sdevice[\s\S]*)|(Error:\sCancel(\|[\s\S]*))|(Извините,\sмы\sна\sтехническом\sобслуживании)|(TypeError:\sNetworkError\swhen\sattempting\sto\sfetch\sresource[\s\S]*)|(NotFoundError:\sRequested\sdevice\snot\sfound)))|(Script\serror\.(\|[\s\S]*))|(undefined(\|[\s\S]*))|((Uncaught\s)?($in\sPromise$\s)?((InternalError:\stoo\smuch\srecursion[\s\S]*\|[\s\S]*\.prototype\.addEventListener)|(Error:\sLoad\stimeout\sfor\smodules[\s\S]*)|(Error:\sScript\serror[\s\S]*requirejs\.org[\s\S]*))))|((Uncaught\s)?ReferenceError:\s(topMsg|define|require|VK)\sis\snot\sdefined)|(Uncaught\sError:\sMismatched\sanonymous\sdefine\smodule:[\s\S]*)|(Couldn't\sload.+cssNew\/bugfix\.min\.css[\s\S]*)|(InvalidStateError:\sthe\sexecution\scontext\sdoes\snot\sexist[\s\S]*)|(TypeError:\sundefined\sis\snot\san\sobject\s$evaluating\s'__ybro\.readability\.runDetection'$)|(((Ошибка\sавторизации)|(clicnt\.js)|(Operation(\sis)?\sinsecure)|(ResizeObserver\sloop)|((moz|chrome)-extension:\/\/))[\s\S]*)|(((Недопустимый\sзнак)|(illegal\scharacter\sU\+)|(Can't\sfind variable:\sinstantSearchSDKJSBridgeClearHighlight)|(NS_ERROR_XPC_JAVASCRIPT_ERROR_WITH_DETAILS:\s\[JavaScript\sError:\s"app\sis\snot\sdefined")|(Possible\sside-effect\sin\sdebug-evaluate)|(appusagelogger\serror)|(Произошел\sразрыв\sсоединения))[\s\S]*)/im,e.skipInURLPattern=/^chrome-extension:\/\/.*$/,e.loadErrPattern=/^Uncaught\sSyntaxError:\sUnexpected\stoken\s'<'$/im,e.parseErrPattern=/^Uncaught\sSyntaxError:\sInvalid\sor\sunexpected\stoken$/im,e.ieSkipPattern=/^(Команда\sне\sподдерживается\sобъектом)|(Использование\sнескольких\sопределений\sсвойства\sв\sрежиме\sstrict\sзапрещено)|(Не\sудалось\sполучить\sсвойство\s("isFirstItem"|"trim")\sссылки.+)|(Объект\sне\sподдерживает\sсвойство\sили\sметод\s"closest")$/im,e.xhrURL=e.getServiceHost()+"/consumertracking/service/user_error/",e.CLIENT_ID="client_err_"+(e.getCookie("CpsUserId")||"all"),e.UNIQ_ID=window["X-UNIQ-ID"]&&window["X-UNIQ-ID"].toString()||"",e.X_REQUESTUUID=window["X-REQUESTUUID"]&&window["X-REQUESTUUID"].toString()||"",e.BUILD_NUM=window.buildnumber||"-",e.sendAttempts=0,e.errors=[],e.promiseSupported=window.Promise&&"function"==typeof window.Promise;try{e.ls=localStorage||window.localStorage,e.errors=JSON.parse(e.ls[e.CLIENT_ID]||"[]"),e.errors instanceof Array||(e.errors=[])}catch(u){}e.errors.length&&e.ls&&(e.ls[e.CLIENT_ID]=null),e.stop=e.stop.bind(e),e.removeListeners=e.removeListeners.bind(e),e.onError=e.onError.bind(e),e.onUnload=e.onUnload.bind(e),e.onOnline=e.onOnline.bind(e),e.onOffline=e.onOffline.bind(e),window.addEventListener("error",e.onError,!1),window.addEventListener("unhandledrejection",e.onError,!1),window.addEventListener("beforeunload",e.onUnload,!1),window.addEventListener("online",e.onOnline),window.addEventListener("offline",e.onOffline)}return e.prototype.getCurrentMethod=function(){return window["X-CURRENTMETHOD"]&&window["X-CURRENTMETHOD"].toString()||wsConfig.pageName||""},e.prototype.hasParseFileError=function(e){return this.parseErrPattern.test(e)},e.prototype.hasLoadModuleErrors=function(e){var r=0;return this.loadErrPattern.test(e)&&(r=1),1===r&&"object"==typeof window.wsConfig&&"object"==typeof window.wsConfig.loadingStatus&&Object.keys(window.wsConfig.loadingStatus).some(function(e){return"ERROR"===window.wsConfig.loadingStatus[e]})&&(r=2),r},e.prototype.getWC=function(){try{this.WC=JSON.stringify(window.wsConfig)}catch(e){this.WC=""}return this.WC},e.prototype.getServiceHost=function(){return document.location.origin},e.prototype.removeListeners=function(){window.removeEventListener("error",this.onError),window.removeEventListener("unhandledrejection",this.onError),window.removeEventListener("beforeunload",this.onUnload),window.removeEventListener("online",this.onOnline),window.removeEventListener("offline",this.onOffline)},e.prototype.getCookie=function(e){try{var r=document.cookie.match(RegExp("(?:^|; )"+e+"=([^;]*)"));return r&&r.length?decodeURIComponent(r[1]):void 0}catch(t){}},e.prototype.getRndInterval=function(){return this.MIN_INTERVAL+Math.round(Math.random()*(this.MAX_INTERVAL-this.MIN_INTERVAL))},e.prototype.sendIsBreakingPageMessage=function(){this.sendErrors(),this.stop("toomanyerrors")},e.prototype.appendError=function(e){try{var r=this.errors,t=this.MAX_ERRORS,s=r.length&&r[r.length-1];s&&void 0!==s.Message&&s.Message===e.Message?(s.Count++,s.LastDate=e.Date):r.length<t?r.push(e):r.length===t&&this.sendIsBreakingPageMessage(),r.length<=t&&this.saveErrors()}catch(o){}},e.prototype.saveErrors=function(){if(this.ls)try{this.ls[this.CLIENT_ID]=JSON.stringify(this.errors)}catch(e){}},e.prototype.clearErrors=function(){this.errors=[],this.saveErrors()},e.prototype.formatError=function(e){var r=window.autotestinfo&&window.autotestinfo.jenkins_link&&window.autotestinfo.login?this.BR+"autotestinfo: (link:<"+window.autotestinfo.jenkins_link+">, login: <"+window.autotestinfo.login+">)":"",t=new Date().toISOString(),s=e.promise&&e.reason,o=s?this._p+e.reason+"|"+e.reason.stack:e.message+"|"+(e.error&&e.error.stack),n=((s?e.reason.stack:e.error&&e.error.stack)||"").toString().indexOf("<anonymous>")>-1,i=s?["message: "+this._p+e.reason,"url: "+document.location.href,"stack: "+e.reason.stack]:["message: "+e.message,"url: "+document.location.href,"file: "+e.filename,"line: "+e.lineno,"col: "+e.colno,"stack: "+(e.error&&e.error.stack)];i.push("browser: "+navigator.userAgent,"build: "+this.BUILD_NUM,"wsConfig: "+this.getWC());var a=this,l=a.hasLoadModuleErrors(e.message),u={Autotest:r,Date:t,Message:i.join(a.BR),UUID:a.UNIQ_ID,REQUESTUUID:a.X_REQUESTUUID,Count:1,LastDate:t,WarnLvl:a.skipPattern.test(o)||n||e.filename&&a.skipInURLPattern.test(e.filename)||e.message&&2===l||a.isEI11&&a.ieSkipPattern.test(e.message)?0:e.type&&"ReactError"===e.type?61:100};if(1===l&&window.contents&&window.contents.modules)try{u.Message+=a.BR+"contents.modules: "+JSON.stringify(Object.keys(window.contents.modules))}catch(p){}var d=e.message&&e.filename&&a.hasParseFileError(e.message);return a.promiseSupported?new Promise(function(r,t){if(d)try{var s=setTimeout(function(){u.Message+=a.BR+"invalid token file ("+e.filename+") first 1024 symbols: не удалось загрузить файл за 5 секунд, отменено",u.WarnLvl=0,r(u)},5e3),o=new XMLHttpRequest;o.onreadystatechange=function(){4==o.readyState&&(clearTimeout(s),s=null,200==o.status?u.Message+=a.BR+"invalid token file ("+e.filename+") first 1024 symbols: "+o.responseText.substring(0,1024):u.Message+=a.BR+"invalid token file ("+e.filename+") first 1024 symbols: не удалось загрузить файл, xhr status = "+o.status,r(u))},o.open("GET",e.filename),o.send()}catch(n){r(u)}else r(u)}):u},e.prototype.onError=function(e){if(!this.isStopped){var r=this,t=r.formatError(e);r.promiseSupported&&t instanceof Promise?t.then(function(e){r.appendError(e),r.sendTimeout||r.start()}):(r.appendError(t),r.sendTimeout||r.start())}},e.prototype.sendErrors=function(){if(this.errors.length&&!this.isStopped&&this.isOnline)try{this.xhrSendErrorsArray()}catch(e){}},e.prototype.prepareArrayToSend=function(e,r){var t=this;return e.map(function(e){return{Date:e.Date,Message:e.Message+(e.Count>1?t.BR+"[повторов: "+e.Count+"; c "+e.Date+" по "+e.LastDate+"]":"")+e.Autotest+t.BR+"initial method: "+r,UUID:e.UUID,REQUESTUUID:e.REQUESTUUID,WarnLvl:e.WarnLvl}})},e.prototype.stop=function(e){var r=this;r.reason=e,r.isStopped=!0,r.errors=[],clearTimeout(r.sendTimeout),r.sendTimeout=void 0,r.removeListeners()},e.prototype.sendByXHR=function(e){var r=this;try{var t=new XMLHttpRequest;t.onreadystatechange=function(){if(4===t.readyState){var e=t.status;if(e>=200&&e<300){r.sendAttempts=0,r.clearErrors();return}if((502===e||503===e||504===e)&&r.sendAttempts<5){r.sendAttempts+=1;return}r.stop("xhrerror")}},t.open("POST",r.xhrURL,!0),t.withCredentials=!0,t.send(e)}catch(s){}},e.prototype.getDataToPost=function(){var e=this.getCurrentMethod();return JSON.stringify({Site:document.location.href,MethodName:e,Errors:this.prepareArrayToSend(this.errors,e)})},e.prototype.onUnload=function(){!this.isStopped&&this.errors.length&&("function"==typeof navigator.sendBeacon?navigator.sendBeacon(this.xhrURL,this.getDataToPost()):this.sendByXHR(this.getDataToPost()))},e.prototype.xhrSendErrorsArray=function(){var e=this.getDataToPost();this.sendByXHR(e)},e.prototype.start=function(){var e=this;e.sendTimeout=setTimeout(function(){e.isStopped||(e.sendErrors(),e.start())},e.getRndInterval())},e.prototype.onOnline=function(){this.isOnline=!0},e.prototype.onOffline=function(){this.isOnline=!1},new e}();
!function(){if(window&&"object"==typeof window){var n=window&&window.cfg&&window.cfg.staticDomains&&window.cfg.staticDomains.domains&&window.cfg.staticDomains.domains[0],t=(n||document.location.host).split(".").slice(-2).join("."),i=n||"cdn."+t;try{var e=new XMLHttpRequest;e.onreadystatechange=function(){if(4===e.readyState&&200!==e.status){var n=new XMLHttpRequest;n.withCredentials=!0;var t=new XMLHttpRequest;t.withCredentials=!0,n.open("GET",document.location.origin+"/consumertracking/service/cdne/",!0),n.send(),t.open("POST",document.location.origin+"/consumertracking/service/errcdn/",!0);var o="object"==typeof JSON&&"function"==typeof JSON.stringify?JSON.stringify({code:void 0!==e.status?e.status:0,domain:i}):'{"code":0}';t.send(o)}},e.open("HEAD","https://"+i+"/!ping/",!0),e.send()}catch(o){}}}();

❔ Not Assessed - https://online.sbis.ru

Requests	IP Address	Location	AS Autonomous System
2	45.12.124.70	Russia	AS208981Data Center LLC
2	91.213.144.193	Russia	AS208981Data Center LLC
2	45.12.124.27	Russia	AS208981Data Center LLC
6	3	-	-

Security Scan Report: online.sbis.ru

Summary

AI Security Verdict

Not Assessed

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History