news/blog

forum

English

AWSALBCORS

AWSALB

Within the commercial generic top-level domain (.com), 'cdn.incollect.com' is registered, featuring subdomain 'cdn'. The second-level label 'incollect' is 9 characters long containing 3 vowels alongside six consonants. Word splitting yields two words: in, collect. Expect 4.5 characters per word on average. No strong language cues emerged from the frequency lists.

name

pass

remember_me

form_build_id

form_id

current_url_for_redirect

html/70/ed/70ed3c9d-457e-4ca3-8465-e36e454efe24.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

13620cc565679ee11351aeec916d43cc30b583c93906a1cadf9f16bae217f83e

670b4787f52d321132219ecfdb7b94fed3bfb591d780f1b5ae4d756ff9bcb3d6

c019baf132d0ef44c1aa3f4302b07a8b2f517a7e328c10ff82cfedffd10b18b3

222b5e0b89eebb3777ce3650e3b4ac1a5633ff19d05ef37d2a761c5b41214ec9

9fd6bd85c876f4bbaec4e2333dd47c8b1ae3981bee052480c005aeb140b85b9f

1df85af51093366f26a8c0cb5eb888b0a18c6a0873b3865aa893cb8f67ac8bbb

50ea31c0452a869e41485170ab3ca8d90a7824b99860f4c707c97ed728598a3f

8255add226d8d12e13d66224182027da345f3217397d952858b2ccb1081964e7

dc8770f40c1162beeb8b3a5881030c0c950e1947084d003008ac152482a6e288

47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4

b964b69cae484e10c8ff70e3057734f8b70cdff4158a84a7735c810a6550880b

The attribute usemap can be used as a security exploit

Universal CSP bypass via add-on in Firefox

XSS via JQLite DOM manipulation functions in AngularJS

XSS may be triggered in AngularJS applications that sanitize user-controlled HTML snippets before passing them to JQLite methods like JQLite.prepend, JQLite.after, JQLite.append, JQLite.replaceWith, JQLite.append, new JQLite and angular.element.

angular vulnerable to regular expression denial of service via the $resource service

angular vulnerable to regular expression denial of service via the angular.copy() utility

Angular (deprecated package) Cross-site Scripting

angular vulnerable to regular expression denial of service via the <input type="url"> element

AngularJS improperly sanitizes SVG elements

AngularJS allows attackers to bypass common image source restrictions

AngularJS Incomplete Filtering of Special Elements vulnerability

AngularJS Regular expression Denial of Service (ReDoS)

End-of-Life: Long term support for AngularJS has been discontinued as of December 31, 2021

Versions of jquery prior to 1.9.0 are vulnerable to Cross-Site Scripting. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. This allows attackers to execute arbitrary JavaScript in a victim's browser.


## Recommendation

Upgrade to version 1.9.0 or later.

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

XSS in the `altField` option of the Datepicker widget

XSS in the `of` option of the `.position()` util

XSS Vulnerability on text options of jQuery UI datepicker

XSS when refreshing a checkboxradio with an HTML-like initial text label 

5d58806972e5621f7a91fb28c37978877762fa1b6c58dc31418c88d24f13da4a

ff6858e05819b07dbe9bf2c273220ae7d8e73818f93259c5ffec1d66ffeb9f00

206fd44986270d21b070db2c389ce9c9c003cb811190b858e1f49c328bb84fbb

9100edbafa12a032ad8c3f6007c06a41c1da1ec10cb503a947f891bfdcea2afa

017fc02b051e6aeb2dd736021ae6b99b2f5c1214da02fcef2cb62289b9c3d1b2

97d85d0b0274a51bc71b5ef984e50a53ff7990a9aae241120fdeb9c158a14f6d

Generator

Connect with dealers and galleries on Incollect to explore curated design, antiques, fine art, vintage & mid-century modern furniture, décor, and jewelry.

description

ROBOTS

Incollect | Vintage & Mid-Century Modern Furniture, Fine Art, Jewelry & Home Décor

viewport

robots

html/70/ed/70ed3c9d-457e-4ca3-8465-e36e454efe24_nodriver.html.gz

Incollect | Vintage &amp; Mid-Century Modern Furniture, Fine Art, Jewelry &amp; Home Décor

Amazon Registrar, Inc.

INCOLLECT.COM

Abuse

Google LLC

GOOGLE

window.dataLayer = window.dataLayer || [];
    dataLayer.push({'username':'Anonymous User','event':'Click','USER_ID': '0'});

(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
      new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
      j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
      'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
    })(window,document,'script','dataLayer','GTM-KCZH59T');

Incollect

jQuery.extend(Drupal.settings, {"basePath":"\/","pathPrefix":"","setHasJsCookie":0,"ajaxPageState":{"theme":"cms_publisher_light","theme_token":"R0-T7YfC692Wzihx6go2cTo24KUAxcCf4p6yNwzr61A","js":{"sites\/all\/modules\/custom\/cms_settings\/View\/js\/plugins.management.js":1,"sites\/all\/libraries\/jcrop\/js\/jquery.Jcrop.min.js":1,"sites\/all\/modules\/custom\/cms_settings\/CMS.js":1,"sites\/all\/modules\/custom\/cms_settings\/inc_drupal_legacy.js":1,"sites\/all\/modules\/custom\/cms_navigation_menu\/Service\/cmsNavigationMenu.js":1,"sites\/all\/modules\/custom\/publisher_menus\/View\/js\/publisher_menus.js":1,"sites\/all\/modules\/custom\/cms_admin_panel\/View\/js\/cms_admin_panel.js":1,"sites\/all\/modules\/custom\/cms_settings\/View\/js\/app.js":1,"sites\/all\/themes\/cms_publisher_light\/js\/selectmenu\/jquery.ui.selectmenu.js":1,"sites\/all\/modules\/custom\/cms_settings\/View\/js\/services\/GenericServiceDataLoading.js":1,"sites\/all\/modules\/custom\/cms_navigation_menu\/View\/js\/drawerjs.js":1,"sites\/all\/modules\/custom\/cms_settings\/inc_cookie_consent.js":1,"sites\/all\/modules\/custom\/cms_settings\/View\/plugins\/fat-nav\/jquery.fatNav.js":1,"sites\/all\/themes\/cms_publisher_light\/js\/bxSlider\/jquery.bxSlider.min.js":1,"sites\/all\/modules\/custom\/listing\/View\/js\/jquery.form.js":1,"sites\/all\/libraries\/jquery-tokeninput\/src\/jquery.tokeninput.js":1,"sites\/all\/modules\/custom\/publisher_user\/View\/js\/cmsUserProfile.js":1,"sites\/all\/modules\/custom\/publisher_uicomponents\/View\/js\/jquery.validate.min.js":1,"sites\/all\/modules\/custom\/cms_settings\/View\/plugins\/device\/device.js":1,"sites\/all\/modules\/custom\/cms_settings\/View\/js\/imagesloaded.pkgd.min.js":1,"sites\/all\/libraries\/incollect_bundleOUTPUT\/incollect_bundle\/output\/homepage_bundle_v3_82_17.js":1,"sites\/all\/modules\/custom\/cms_homepage\/View\/CmsHomepage.js":1,"misc\/jquery-extend-3.4.0.js":1,"misc\/jquery-html-prefilter-3.5.0-backport.js":1,"misc\/jquery.once.js":1,"misc\/drupal.js":1,"misc\/ui\/jquery.ui.core.min.js":1,"misc\/ui\/jquery.ui.widget.min.js":1,"misc\/ui\/jquery.ui.button.min.js":1,"misc\/ui\/jquery.ui.mouse.min.js":1,"misc\/ui\/jquery.ui.draggable.min.js":1,"misc\/ui\/jquery.ui.position.min.js":1,"misc\/ui\/jquery.ui.position-1.13.0-backport.js":1,"misc\/ui\/jquery.ui.resizable.min.js":1,"misc\/ui\/jquery.ui.dialog.min.js":1,"misc\/ui\/jquery.ui.dialog-1.13.0-backport.js":1,"misc\/ui\/jquery.ui.autocomplete.min.js":1,"misc\/ui\/jquery.ui.datepicker.min.js":1,"misc\/ui\/jquery.ui.datepicker-1.13.0-backport.js":1,"modules\/locale\/locale.datepicker.js":1,"misc\/ui\/jquery.ui.tabs.min.js":1,"misc\/ajax.js":1,"misc\/progress.js":1},"css":{"modules\/system\/system.messages.css":1,"sites\/all\/modules\/date\/date_popup\/themes\/datepicker.1.7.css":1,"sites\/all\/themes\/cms_publisher_light\/css\/vendor\/jquery-ui-css\/jquery.ui.selectmenu.css":1,"sites\/all\/libraries\/jquery-tokeninput\/styles\/token-input-facebook.css":1,"sites\/all\/libraries\/jquery-tokeninput\/styles\/token-input.css":1,"sites\/all\/libraries\/jcrop\/css\/jquery.Jcrop.min.css":1,"sites\/all\/themes\/zen\/system.menus.css":1,"sites\/all\/themes\/cms_publisher_light\/css\/main.css":1}},"professionals":{"base_url":"https:\/\/www.incollect.com"},"cms_settings":{"base":"https:\/\/www.incollect.com"},"admin_var":{"base_url":"https:\/\/www.incollect.com"},"jquery":{"ui":{"datepicker":{"isRTL":false,"firstDay":0}}}});


  /* <![CDATA[ */
  var google_conversion_id = 962292710;
  var google_custom_params = window.google_tag_params;
  var google_remarketing_only = true;
  /* ]]> */


Requests	IP Address	Location	AS Autonomous System
36	13.35.58.45	United States	AS16509Amazon.com, Inc.
35	151.101.1.229	United States	AS54113
35	54.83.167.53	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
35	142.251.140.170	United States	AS16509
141	4	-	-

Security Scan Report: cdn.incollect.com

Summary

AI Security Verdict

Low Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies16

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History