English

PHPSESSID

You're looking at domain 'testamentarytrustco.com' on the commercial generic top-level domain (.com). Its registrable label 'testamentarytrustco' stretches across 19 characters containing 6 vowels alongside 13 consonants. Word splitting yields three words: testamentary, trust, co. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

acct_no

acct_password

captcha_code

login

query

gtrans

vote

html/71/6a/716a095b-ef55-45a1-b416-a70ffeb43e98.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

0adc7f8e9c6d27fe0026fb71178d7f9749fa7f273fa479b542d68a2635d8330c

8788b4128e8c55a9203c0d77f9e48ad000077652f0d50a5e9d4d4c7a7e0755e2

66476e952853294467137881f0d81ca616b5a5fcc81e421157e41f4fe5fa3cd0

bef1acd24d825c495f65c5603c443adf00e08086620e5eaf9ded75b6e8b4012d

04f8c9a280086424d8602144246d9efaa7d77e2eeb12cd7f2e7db0f952dca425

08380317e4c2c847c8aee5d492ffe45790e4368fb188a0d09a412e3f5024e82b

bbacb563e3c943013d6523a76868a6b81aec705ec07554a808076bbd28727082

912f3894757c4cc37b2e95828c6e20d134dc2c737fc441dd3f02464e254a143b

2d5fa531e30ac3debad673003128f1ca9ad3c964ef17b547377e7ed09bd4504f

a213e3bcd0da14b65aac4c7329a995898a07bdbe3f8b4542d286b50cfbc91041

4714cdf46006b44b267673882d2471fd5476b80fd519d5297e533da40e62e8b8

fb8767af22838a29bdd8ccb0aa8df8e255001939f7a3a6c07f706acd035b58ff

b304b8659cb2b27604e4a76421e5c731dbc471fb62061b7c79eeff1f11ff4d7e

ab9773a71898a57e70cb5c256356e7bfe66d4c7507c3109bf7c3a31c08b03429

88b4bc304ab31707863295fa2af427c7eb5612ddb3bb11555a053828fd130d2d

7506c8f4d85e4707ab46f9858f0c6e65e3316b9d2f122dcf485b9dbf39d5a7ac

10645bf69c0ab1b4946e26fa7ee080bda6b895f24bb0604cc7a6e1c614b90af1

fc790761edb79b954a5e6853774ed96db936a3729b78d4b72dad5e79ce395c54

4642fd5f612ea5c0dbe55fc4796ecc3fec94cb15dc373685f7aebce19eab4263

7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda

8c2a803bd6c569f479f69271b40ccc41cd4a1d57515926d03de070bae824cc83

5da1f629fe6a11fc5b5732da5ce1ad82bc419a33c0bc0e02d15c180b994aeb15

937ebe361587f593181ac7bf5f550629647521b2428494f78e51f733d43bf46f

### Impact

Affected versions of this package are vulnerable to Prototype Pollution.  A malicious HTML code block can be crafted that will result in prototype pollution of the base object's prototype during highlighting.  If you allow users to insert custom HTML code blocks into your page/app via parsing Markdown code blocks (or similar) and do not filter the language names the user can provide you may be vulnerable. 

The pollution should just be harmless data but this can cause problems for applications not expecting these properties to exist and can result in strange behavior or application crashes, i.e. a potential DOS vector. 

_If your website or application does not render user provided data it should be unaffected._

### Patches

Versions 9.18.2 and 10.1.2 and newer include fixes for this vulnerability.  If you are using version 7 or 8 you are encouraged to upgrade to a newer release.

### Workarounds

#### Patch your library

Manually patch your library to create null objects for both `languages` and `aliases`:

```js
const HLJS = function(hljs) {
  // ...
  var languages = Object.create(null);
  var aliases = Object.create(null);
```

#### Filter out bad data from end users:

Filter the language names that users are allowed to inject into your HTML to guarantee they are valid.

### References

* [What is Prototype Pollution?](https://codeburst.io/what-is-prototype-pollution-49482fc4b638)
* https://github.com/highlightjs/highlight.js/pull/2636

### For more information

If you have any questions or comments about this advisory:

* Please file an issue against [highlight.js](https://github.com/highlightjs/highlight.js/issues/)

### Impact: Potential ReDOS vulnerabilities (exponential and polynomial RegEx backtracking)

[oswasp](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS): 

> The Regular expression Denial of Service (ReDoS) is a Denial of Service attack, that exploits the fact that most Regular Expression implementations may reach extreme situations that cause them to work very slowly (exponentially related to input size). An attacker can then cause a program using a Regular Expression to enter these extreme situations and then hang for a very long time.

If are you are using Highlight.js to highlight user-provided data you are possibly vulnerable.  On the client-side (in a browser or Electron environment) risks could include lengthy freezes or crashes... On the server-side infinite freezes could occur... effectively preventing users from accessing your app or service (ie, Denial of Service).

This is an issue with grammars shipped with the parser (and potentially 3rd party grammars also), not the parser itself. If you are using Highlight.js with any of the following grammars you are vulnerable.  If you are using `highlightAuto` to detect the language (and have any of these grammars registered) you are vulnerable. Exponential grammars (C, Perl, JavaScript) are auto-registered when using the common grammar subset/library `require('highlight.js/lib/common')` as of 10.4.0 - see https://cdn.jsdelivr.net/gh/highlightjs/cdn-release@10.4.0/build/highlight.js

All versions prior to 10.4.1 are vulnerable, including version 9.18.5. 

**Grammars with exponential backtracking issues:**

  - c-like (c, cpp, arduino)
  - handlebars (htmlbars)
  - gams
  - perl
  - jboss-cli
  - r
  - erlang-repl
  - powershell
  - routeros
  - livescript (10.4.0 and 9.18.5 included this fix)
  - javascript & typescript (10.4.0 included partial fixes)

And of course any aliases of those languages have the same issue. ie: `hpp` is no safer than `cpp`.

**Grammars with polynomial backtracking issues:**

- kotlin
- gcode
- d
- aspectj
- moonscript
- coffeescript/livescript
- csharp
- scilab
- crystal
- elixir
- basic
- ebnf
- ruby
- fortran/irpf90
- livecodeserver
- yaml
- x86asm
- dsconfig
- markdown
- ruleslanguage
- xquery
- sqf

And again: any aliases of those languages have the same issue. ie: `ruby` and `rb` share the same ruby issues.


### Patches

- Version 10.4.1 resolves these vulnerabilities.  Please upgrade.

### Workarounds / Mitigations

- Discontinue use the affected grammars. (or perhaps use only those with poly vs exponential issues)
- Attempt cherry-picking the grammar fixes into older versions...
- Attempt using newer CDN versions of any affected languages.  (ie using an older CDN version of the library with newer CDN grammars).  Your mileage may vary.

### References

- https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS

### For more information

If you have any questions or comments about this advisory:
* Open an issue: https://github.com/highlightjs/highlight.js/issues
* Email us at [security@highlightjs.com](mailto:security@highlightjs.com)

2f01d047ddbd2b132a5bfce12b680bcab8b1e4eeb4a86f1b4cee2027c012dca2

adad71e40b7017d7a4cff0154fb837d3d27972976c3363db2f1d30daf3991373

3338edbae92c1e2651ad43d31ead40d3a0f4f671fbc7b90329b6db0d3f6471cf

4190e3979efc6e9939068009a2647e63135d229e53baeeaf228bb5a648873b8d

f7d261f055c8828f3d00cf055c7c3628882f1786e7fd49efd38d27bf57803be6

robots

width=device-width, initial-scale=1, maximum-scale=0.9, shrink-to-fit=no

viewport

html/71/6a/716a095b-ef55-45a1-b416-a70ffeb43e98_nodriver.html.gz

Testamentary Trust Bank

NameCheap, Inc.

TESTAMENTARYTRUSTCO.COM

Abuse

Google LLC

GOOGLE


    function googleTranslateElementInit() {
        new google.translate.TranslateElement({
            pageLanguage: 'en'
        }, 'google_translate_element');
    }



    $(document).ready(function(){
        $(".numpad").hide();
        $('.input').click(function(){
            $('.numpad').fadeToggle('fast');
        });

        $('.del').click(function(){
            $('.input').val($('.input').val().substring(0,$('.input').val().length - 1));
        });
        $('.faq').click(function(){
            alert("Enter Your OTP Sent to you ");
        })
        $('.shuffle').click(function(){
            $('.input').val($('.input').val() + $(this).text());
            $('.shuffle').shuffle();
        });
        (function($){

            $.fn.shuffle = function() {

                var allElems = this.get(),
                    getRandom = function(max) {
                        return Math.floor(Math.random() * max);
                    },
                    shuffled = $.map(allElems, function(){
                        var random = getRandom(allElems.length),
                            randEl = $(allElems[random]).clone(true)[0];
                        allElems.splice(random, 1);
                        return randEl;
                    });

                this.each(function(i){
                    $(this).replaceWith($(shuffled[i]));
                });

                return $(shuffled);

            };

        })(jQuery);

    });



    $(function() {
        $('#datepicker').keypress(function(event) {
            event.preventDefault();
            return false;
        });
    });


Requests	IP Address	Location	AS Autonomous System
7	142.251.152.119	United States	AS15169
4	142.250.201.74	United States	AS60068
4	152.3.138.25	Durham, North Carolina, United States	AS13371Duke University
4	195.181.170.18	United States	AS13335
4	142.251.141.78	United States	AS13371
4	172.217.16.202	United States	AS16509
4	67.223.118.115	United States	AS22612Namecheap, Inc.
4	151.101.193.229	United States	Unknown
4	172.217.16.163	United States	Unknown
4	142.251.208.3	United States	Unknown
47	11	-	-

Security Scan Report: testamentarytrustco.com

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History