English

Domain 'start.aftersell.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'start'. Count 9 characters in 'aftersell' with 3 vowels and 6 consonants. Word splitting yields two words: after, sell. Median word length is 4.5 characters. No strong language cues emerged from the frequency lists.

html/62/5d/625d5708-0ff7-4150-9c1f-c616103a85f5_fallback.html.gz

frame-ancestors https://admin.shopify.com 'self' https://zeus.aftersell.com https://aftersell.retool.com https://retool-edge.com;

shopify-api-key

viewport

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


            /**
             * ## Summary
             * This script is used to prevent app crashes caused by some browser extensions. It is a workaround for App Bridge.
             * See Linear issue BEAM-2590 for more details.
             *
             * ## Details
             * The App Bridge code has a check to ensure that it was loaded as the first <script> tag in the document. If the App Bridge
             * <script> tag is not the first <script> tag in the document then the App Bridge code will throw an error and fail to
             * initialize. The check to ensure that App Bridge is the first <script> tag in the document appears to be an attempt to
             * protect developers from accidentally executing code which needs App Bridge before App Bridge has been initialized.
             *
             * There are some browser extensions which inject <script> tags into the document. If one of these extensions injects
             * a <script> tag at the top of the DOM before the App Bridge code has executed then App Bridge will fail to initialize.
             * If App Bridge fails to initialize then our app won't work (which is bad).
             *
             * ## Warnings
             * This script is heavy-handed. It removes all <script> tags before the App Bridge <script> tag. I don't _think_ this
             * will cause any issues, but you never know.
             *
             * ## Notes
             * - This script is a workaround for App Bridge. If the App Bridge code is changed to avoid the problem that this script fixes
             *   then this script should be removed.
             * - This script must be before the App Bridge <script> tag.
             * - The App Bridge code allows scripts without a "src" attribute to be before the App Bridge <script> tag, hence why this
             *   workaround script can exist.
             * - After the App Bridge code has executed, other <script> tags can be added to the DOM before the App Bridge
             *   <script> tag without causing any issues. This is common behaviour for pixel snippets (e.g., Reddit) and is fine.
             */
            const documentScripts = Array.from(document.scripts);
            const scriptsBeforeMe = documentScripts.slice(0, documentScripts.indexOf(document.currentScript));
            for (const scriptBeforeMe of scriptsBeforeMe) {
                // Note that removing a script from the DOM does not cancel execution of that script.
                // We still want all scripts to execute as normal. We don't want them to be in the document.scripts
                // list though since this is what App Bridge uses to determine if it is the first script in the document.
                scriptBeforeMe.remove();
                // We want to warn devs when we remove a <script> tag since this is uncommon behaviour and may lead to confusion.
                // Hopefully this warning can save someone a few hours of debugging in the future.
                console.warn(
                    'Removed <script> tag found before App Bridge <script> tag. This is a workaround to prevent app crashes caused by some browser extensions. This should not affect extension functionality.',
                    scriptBeforeMe
                );
            }
        


            window.indexHtmlPrefetchedUserPromise = fetch('/api/v1/user').then((res) => res.json());
        


            const global = globalThis;
        

Sentry

✅ Low Risk - https://start.aftersell.app/

Requests	IP Address	Location	AS Autonomous System
6	34.96.122.8	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
1	34.120.195.249	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
1	23.227.39.200	Ottawa, Ontario, Canada	AS13335CLOUDFLARENET
1	2600:1901:0:5e8a::	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
1	2620:127:f00e:ff01::	Canada	AS13335CLOUDFLARENET
8	5	-	-

Security Scan Report: start.aftersell.app

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History