healthcare medical

technology software

English

_ga_JCYFGZLEW5

_gid

cc_csrftokenator

You're looking at domain 'pendo.clearcareonline.com' on the commercial generic top-level domain (.com) and includes subdomain 'pendo'. The core label 'clearcareonline' covers 15 characters holding 7 vowels versus 8 consonants. Splitting it apart reveals 3 words: clear, care, online. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

csrfmiddlewaretoken

username

password

return_to

RelayState

html/6c/8b/6c8b76eb-fea2-4e01-b922-b586cd46abe7.html.gz

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:225:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:211:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgdc:147:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:138:0

f23d4b309b72743aa8afe1f8c98a25b3ee31246fa572c66d9d8cb1982cae4fbc

423b3dd79e2129f73afad03e6d9c4f3106b1e9516dc37433d20c5fccbaafe65f

09add7eb5596e05440a163225763ed290dc2c02eae9bda24edf44d707817a5b7

f1a61277e3f902f50ab42015d8b07218db9b7601bb0967e54a52bfdcb4fa7e81

1cf7c81a112957de8bb342eefdf152964826074d5693da67401b6d4240eeedc2

c36be0e84bebc4fabbe51fb1238c4df651b4dcd1101789a447b27ced3471dd60

Versions of jquery prior to 1.9.0 are vulnerable to Cross-Site Scripting. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. This allows attackers to execute arbitrary JavaScript in a victim's browser.


## Recommendation

Upgrade to version 1.9.0 or later.

parseHTML() executes scripts in event handlers

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

39a4ded946c1f1d72e781f2fb4bfb032277b7ebc3931f1fbf5c779415f927491

8caebff7a93ea72737d310466ff152375eefe1ca510d915fbc9915d28aa0a597

8772c20283d2626712788ecea4b13a6a6f8a8d910216830060241ae8551a17b7

37a8b93d601ba3a4f44ac2a5a8e6212699883582f9eb57a3345b9b5c49cdaee0

viewport

html/6c/8b/6c8b76eb-fea2-4e01-b922-b586cd46abe7_nodriver.html.gz

Home Care Software – Best in Industry

GoDaddy.com, LLC

CLEARCAREONLINE.COM

Site Operations

New Relic

NR-NET-CHI

window.NREUM||(NREUM={});NREUM.info={"beacon":"bam.nr-data.net","queueTime":0,"licenseKey":"ff17148fcf","agent":"","transactionName":"NAEHYEMCCkZVVEwIXg1LI0FfABBcW1kXAl4RAUtCWAYTRg5QVA5TAgg6WF4EDVs=","applicationID":"1084499058","errorBeacon":"bam.nr-data.net","applicationTime":31}


        $(document).ready(function() {
            var emailInputField = $('#id_username');
            var pwInputField = $('#id_password');
            emailInputField.addClass('txt email').focus();
            pwInputField.addClass('txt pass');
            var customErrorDiv = $("#id_div_custom_error_msg");
            var customErrorTextField = $(".errorMsg > .oneLine");
            var ssoListDiv = $("#id_div_sso_list");
            var loginWithCredentialBtn = $('#id_login_with_credential_btn');
            var loginWithCredentialText = $('#id_login_with_credential_text');
            var loginBtn = $("#id_btn_signin");
            var continueBtn = $("#id_continue_btn");

            // Change the POST csrfmiddlewaretoken value to what's in the cookie if it's different
            // This is to catch situations where the user left this page open and logged in on another tab
            // And the token in the html is stale.
            $('form.formLogin').submit(function(e){
                var token_input = $('input[name=csrfmiddlewaretoken]');
                var post_token = token_input.val();
                var cookie_token = $.cookie('cc_csrftokenator');
                if (cookie_token && cookie_token != post_token) {
                    token_input.val(cookie_token);
                };
            });
            //
            function toggleView() {
                $('#id_div_password').toggle();
                $('#id_btn_signin').toggle();
                $('#id_continue_btn').hide();
                loginWithCredentialBtn.hide();
                loginWithCredentialText.hide();
                ssoListDiv.hide();
                changeInputType();
            }
            function lockView() {
                $('#id_continue_btn').attr('disabled', true);
                $('#id_username').prop('readonly', true);
            }
            function showSsoList(objs, show_login_button) {
                ssoListDiv.show();
                var sso_link_count = 0;
                $.each(objs, function (index, obj) {
                    if (obj.is_sso_enable) {
                        var link = $("<a>");
                        link.attr("href", obj.sso_url);
                        link.attr("title", obj.idp_name);
                        link.text(obj.idp_name);
                        link.attr("target", "_blank")
                        // link.addClass("link");
                        link.appendTo(ssoListDiv);
                        console.log($(link))
                        sso_link_count++;
                    }
                })
                if (show_login_button) {
                    showNonSsoButton();
                } else {
                    continueBtn.hide();
                }
            }
            function showNonSsoButton() {
                loginWithCredentialBtn.show();
                loginWithCredentialText.show()
                continueBtn.hide();
                changeInputType();
            }
            console.log('')
            if ('') {
                toggleView();
            }
            loginWithCredentialBtn.on('click', function (event) {
                event.preventDefault();
                toggleView();
            });
            $('#id_continue_btn').on('click', function (event) {
                event.preventDefault();
                // console.log('check');
                var email = emailInputField.val();
                // console.log(email)
                if (email){
                    var login_form = $('#id_form');
                    console.log('url', $(login_form).data('url'));
                    console.log('data', emailInputField.serialize())
                    $.ajax({
                        url : $(login_form).data('url'),
                        type : 'POST',
                        data : $(login_form).serialize(),
                        beforeSend: function() { $('#ajax-loading').show(); customErrorDiv.hide(); },
                        complete: function() { $('#ajax-loading').hide(); },
                        success : function(data) {
                            console.log(data);
                            objs = data.obj
                            if (objs.length == 0) {
                                console.log('show password and login button');
                                toggleView();
                            } else {
                                console.log('show list + login with credential button')
                                lockView();
                                showSsoList(objs, data.show_login_button);
                             }
                        }
                    });
                }
                else{
                    console.log('email required')
                    customErrorDiv.show();
                    customErrorTextField.text("This field is required");
                }
            });
            
            function changeInputType(){
                if (continueBtn.is(':visible')){
                    continueBtn.prop('type', 'submit');
                    loginWithCredentialBtn.removeProp('type');
                    loginBtn.removeProp('type');
                } else if (loginWithCredentialBtn.is(':visible')){
                    continueBtn.removeProp('type');
                    loginWithCredentialBtn.prop('type', 'submit');
                    loginBtn.removeProp('type');
                } else if (loginBtn.is(':visible')){
                    continueBtn.removeProp('type');
                    loginWithCredentialBtn.removeProp('type');
                    loginBtn.prop('type', 'submit');
                }
            }
            changeInputType();
        });
    

Requests	IP Address	Location	AS Autonomous System
7	162.247.243.39	United States	AS54113FASTLY
7	104.17.25.14	United States	AS54113
7	34.160.11.46	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
7	13.33.187.66	New York, New York, United States	AS16509AMAZON-02
7	142.251.141.142	United States	AS15169GOOGLE
35	5	-	-

Security Scan Report: pendo.clearcareonline.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies12

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History