corporate

English

_mcid

Domain 'possibilities.templeton.org' uses the non-profit oriented generic top-level domain (.org) and includes subdomain 'possibilities'. Its registrable label 'templeton' stretches across 9 characters holding 3 vowels versus 6 consonants. Splitting it apart reveals 1 word: templeton. No strong language cues emerged from the frequency lists.

html/6d/ef/6def86a6-6eaa-4d9f-b02c-f50f648b4ff0.html.gz

https://us14.campaign-archive.com/domain-proxy?d=possibilities.templeton.org&p=%2F4heynhx60v&u=afebe06609a423c59c59cee74&utm_campaign=f5f1dd087b-EMAIL_CAMPAIGN_2025_templetonideas_20260107&utm_medium=email&utm_source=Receive+News+from+the+John+Templeton+Foundation&utm_term=0_-42837b4b08-97355777

295f4d61de417170d4313c6a2e9bec40/1658680812346084850;o=0

https://mc.us14.list-manage.com/pages/track/open?u=afebe06609a423c59c59cee74&id=030087c2e1f0

de745b84f273b72787b2bfe32ad8c567/17817604713219158132;o=0

2062935853744ae3e5fce0dade628559193ddc63dfadcc279cffe38a705f3a69

024b787878757ca4cfa467debf46780178fc2beae802b49c21929bb940b819d4

9e7eb0c036a4aa626811ae4868c6398a8253d4daaaf679da8f5cbb4b32aecbbe

Versions of dojo prior to 1.4.2 are vulnerable to DOM-based Cross-Site Scripting (XSS). The package does not sanitize URL parameters in the _testCommon.js and runner.html test files, allowing attackers to execute arbitrary JavaScript in the victim's browser.

Versions of dojo prior to 1.2.0 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize HTML code in user-controlled input, allowing attackers to execute arbitrary JavaScript in the victim's browser.

Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/test_Button.html

In Dojo Toolkit before 1.14.0, there is unescaped string injection in dojox/Grid/DataGrid.

4af3cd50ef1d1083bc7da61195a1c140eec2297db01cf44a57232d06efe1e98b

width=device-width, initial-scale=1, maximum-scale=1, viewport-fit=cover

viewport

twitter:title

twitter:type

https://gallery.mailchimp.com/afebe06609a423c59c59cee74/images/b8be390e-daac-4ffd-a18a-0c3d407bfa83.jpg

twitter:image

https://possibilities.templeton.org/4heynhx60v

twitter:url

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

!function(c,h,i,m,p){m=c.createElement(h),p=c.getElementsByTagName(h)[0],m.async=1,m.src=i,p.parentNode.insertBefore(m,p)}(document,"script","https://chimpstatic.com/mcjs-connected/js/users/afebe06609a423c59c59cee74/13d0f37eefca813b8de2b5495.js");

Open-Graph-Protocol

Google Cloud

HSTS

Google Cloud Trace

Envoy

AWS WAF

MailChimp

Subscribe to Templeton Ideas

chimpstatic.com

✅ Low Risk - https://possibilities.templeton.org/4heynhx60v?utm_source=Receive+News+from+the+John+Templeton+Foundation&utm_campaign=f5f1dd087b-EMAIL_CAMPAIGN_2025_templetonideas_20260107&utm_medium=email&utm_term=0_-42837b4b08-97355777

Requests	IP Address	Location	AS Autonomous System
2	205.201.132.26	Stone Mountain, Georgia, United States	AS14782THEROCKETSCIENCEGROUP
2	13.226.244.85	United States	AS16509AMAZON-02
2	95.100.65.178	Frankfurt am Main, Hesse, Germany	AS16625AKAMAI-AS
2	216.58.209.202	United States	AS15169GOOGLE
2	104.102.19.22	Frankfurt am Main, Hesse, Germany	AS16625AKAMAI-AS
2	216.58.209.195	United States	AS15169GOOGLE
2	2.16.30.254	Frankfurt am Main, Hesse, Germany	AS16625AKAMAI-AS
14	7	-	-

Security Scan Report: possibilities.templeton.org

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History