English

__utmb

__utmt

__utmz

__utmc

__cf_bm

__utma

_cfuvid

The domain name 'w1.vanillicon.com' uses the commercial generic top-level domain (.com) with subdomain 'w1'. The second-level label 'vanillicon' is 10 characters long holding four vowels versus 6 consonants. Segmentation suggests 2 words: vanilli, con. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

seed

html/64/59/6459710b-3d57-4ac5-968f-9bfd6ed8d2c1.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:215:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:201:0

28efcdec96ace5482a0cb723b0187abe6a2c68a283315d75cbcd611a0f5e7aca

1259ea99bd76596239bfd3102c679eb0a5052578dc526b0452f4d42f8bcdd45f

764b9e9f3ad386aaa5cdeae9368353994de61c0bede087c8f7e3579cb443de3b

d87043ac816dbfadae73fcc32f84eadb9a665cf97ae938bea9702a27d3e9a54a

Versions of jquery prior to 1.9.0 are vulnerable to Cross-Site Scripting. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. This allows attackers to execute arbitrary JavaScript in a victim's browser.


## Recommendation

Upgrade to version 1.9.0 or later.

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

XSS in the `altField` option of the Datepicker widget

XSS in the `of` option of the `.position()` util

XSS Vulnerability on text options of jQuery UI datepicker

XSS when refreshing a checkboxradio with an HTML-like initial text label 

dc2f8b09a6363b0a46dc21d643505dfd3884ebcf63d08a3e80fc82eaec32ecb7

width=device-width,minimum-scale=1.0,maximum-scale=1.0

viewport

A fun take on identicons. Vanillicons are avatars that are unique to your name or email address. They are free to take and use around the web. Create yours now!

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

html/64/59/6459710b-3d57-4ac5-968f-9bfd6ed8d2c1_nodriver.html.gz

Vanillicon - A Fun Take on Identicons

Name.com, Inc.

VANILLICON.COM


           var _gaq = _gaq || [];
           _gaq.push(['_setAccount', 'UA-24120003-1']);
           _gaq.push(['_setDomainName', 'vanillicon.com']);
           _gaq.push(['_trackPageview']);

           (function() {
             var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
             ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
             var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
           })();

         

Requests	IP Address	Location	AS Autonomous System
6	142.250.201.168	United States	AS15169
5	142.250.186.42	United States	AS13335
5	162.159.128.79	United States	AS13335Cloudflare, Inc.
16	3	-	-

Security Scan Report: w1.vanillicon.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History