entertainment media

technology software

English

__cf_bm

JXADDINFO

The domain name 'osrs-world-60.l3deff.jagex.com' uses the commercial generic top-level domain (.com), featuring subdomain 'osrs-world-60.l3deff'. The second-level label 'jagex' is 5 characters long holding 2 vowels versus 3 consonants. Word splitting yields one word: jagex. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

text

search

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

script-src 'self' blob: https://framer.com https://framerusercontent.com https://*.framer.com https://*.framer.app https://app.framerstatic.com https://ga.jspm.io https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.redditstatic.com https://connect.facebook.net https://analytics.tiktok.com https://analytics.twitter.com http://static.ads-twitter.com https://static.ads-twitter.com https://cdn.taboola.com https://trc.taboola.com https://secure.adnxs.com https://static.cloudflareinsights.com https://secure.quantserve.com http://edge.quantserve.com https://rules.quantcount.com https://*.onetrust.com https://*.runescape.com https://*.posthog.com https://*.amazon-adsystem.com https://*.singular.net 'unsafe-inline'; style-src 'self' https://app.framerstatic.com https://fonts.googleapis.com https://*.onetrust.com https://*.runescape.com https://*.posthog.com 'unsafe-inline'; connect-src 'self' https://framerusercontent.com https://events.framer.com https://app.framerstatic.com https://ga.jspm.io https://consent.cookiebot.com https://google.com https://consentcdn.cookiebot.com https://*.google-analytics.com https://*.googletagmanager.com https://*.analytics.google.com https://pagead2.googlesyndication.com https://www.google.com https://www.google.ge https://www.google.co.uk https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://ad.doubleclick.net https://conversions-config.reddit.com https://www.redditstatic.com https://analytics.tiktok.com https://t.co https://cds.taboola.com https://trc-events.taboola.com https://pips.taboola.com/ https://psb.taboola.com/ https://pixel-config.reddit.com https://pixel.quantcount.com https://o515861.ingest.sentry.io https://*.runescape.com https://*.onetrust.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.singular.net https://*.posthog.com https://api.framer.com https://pixel.quantserve.com; img-src 'self' data: https://framerusercontent.com https://images.ctfassets.net https://*.google-analytics.com https://*.googletagmanager.com https://*.analytics.google.com https://www.google.com https://www.google.ge https://www.google.co.uk https://*.fls.doubleclick.net https://googleads.g.doubleclick.net https://ade.googlesyndication.com https://i.ytimg.com https://img.youtube.com https://www.google.be https://alb.reddit.com https://secure.adnxs.com https://www.facebook.com https://t.co https://analytics.twitter.com https://pixel.quantserve.com https://*.runescape.com https://imgsct.cookiebot.com https://*.onetrust.com https://*.posthog.com; font-src 'self' data: https://framerusercontent.com https://fonts.gstatic.com https://*.runescape.com https://*.posthog.com; frame-src 'self' https://framer.com https://*.framer.com https://www.youtube-nocookie.com https://www.google.com https://consentcdn.cookiebot.com https://www.youtube.com https://*.fls.doubleclick.net https://td.doubleclick.net https://www.facebook.com https://www.googletagmanager.com https://store.steampowered.com https://www.runescape.com; object-src 'none'; child-src 'none'; media-src 'self' https://videos.ctfassets.net https://*.runescape.com https://cdn.jagex.com https://www.youtube.com https://framerusercontent.com https://*.posthog.com; worker-src 'self' blob: data:; base-uri 'self'; form-action 'self' https://www.facebook.com https://i.runescape.com; frame-ancestors 'self' https://*.runescape.com https://*.posthog.com

160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

888e76f59439403f1e78336427210bafe74b75b1b056f56376c36d2ab097b10e

1679b3607a5ad7dfddc61fb59c4ae17478ae19e33e4b59bd5b36bc0f61ccdb5d

89b151499cb3587c8fd64a76bad1dd77b04eb4d69903e09c049db7c9dbe27705

d9b32fc883a3ab04299e023a160653388c024bfd368f48c98bf19ca3681716fd

b85b5881cdfffe5b3ea149453ab9f69d278b1d4de6eea106912e78362e11a9a0

Play RuneScape, the world's most popular free MMORPG. Start your adventure, complete quests and win enormous treasures in a 3D world of magic and monsters.

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';media-src blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

CSC Corporate Domains, Inc.

RUNESCAPE.COM

MarkMonitor Inc.

GOOGLEAPIS.COM

JAGEX.COM

Google Inc.

Google LLC

GOOGLE


                                    tb_url = "https://www.jagex.com/g=oldscape/advert/advert.ws?placement=300";
                                

Requests	IP Address	Location	AS Autonomous System
4	81.31.203.139	United Kingdom	AS44521Jagex Limited
3	91.235.140.148	United Kingdom	AS44521Jagex Limited
3	142.251.127.95Google · CDN	United States	AS15169Google LLC
3	172.64.147.164Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.14.95Google · CDN	United States	AS15169Google LLC
3	104.18.40.92Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
19	6	-	-

Security Scan Report: osrs-world-60.l3deff.jagex.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History