technology software

cryptocurrency blockchain

healthcare medical

finance banking

government public service

English

The domain name 'multco.privilegemanagercloud.com' uses the commercial generic top-level domain (.com) and includes subdomain 'multco'. Its registrable label 'privilegemanagercloud' stretches across 21 characters split between 9 vowels and 12 consonants. Tokenizing the label suggests three words: privilege, manager, cloud. The median word length lands at 7 characters. No strong language cues emerged from the frequency lists.

html/77/15/7715db83-904f-43c1-8832-a19c43917f9b_nodriver.html.gz

default-src 'none'; frame-src 'self'; frame-ancestors 'self'; connect-src 'self' https://*.browser-intake-datadoghq.com data:; worker-src blob:; font-src 'self' data:; img-src 'self' data:; media-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'

appId=cid-v1:1e02eebf-a3b4-4f96-a087-397c5cf3820b

12e0c6881c122df74a4549b69dc50cf63019a9ae2ad03ce3c3517de14335fdd4

width=device-width, initial-scale=1, maximum-scale=1

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

Privilege Manager

GoDaddy.com, LLC

PRIVILEGEMANAGERCLOUD.COM

Microsoft Abuse Contact

IPHostmaster IPHostmaster

Microsoft Corporation

Somesh Chaturmohta

Prachi Singh

Microsoft Routing, Peering, and DNS

Dawn Bedard

MSFT


    /** Types
     * @typedef {{friendlyName:string, $query:JQuery, touched: boolean, validators:Array<ValidatorFn>}} FormControl
     * @typedef {(control:FormControl) => Array<string>} ValidatorFn
     */

    $(function () {
      // When C# `Model.ShowLocalLogon` is false, the controls will not exist, so bail
      if (!false){
        return;
      };

      /**
       * 
       * @param {number} timeMs
       * @param {() => void} fn
       * @returns {() => void}
       */
      const debounceFn = (timeMs, fn)=>{
        let timerId = undefined;
        
        const onTick = () => {
          timerId = undefined;
          fn();
        };

        return () => {
          // Stop existing timer
          if(timerId !== undefined) {
            clearTimeout(timerId);
          }
          timerId = setTimeout(onTick,timeMs);
        };
      }

      /**
        * If the control does not have a value, it is invalid
        *
        * @type ValidatorFn
        */
      const requiredValidator = (control) => !control.$query.val() ? [`${control.friendlyName} is required`] : [];

      const $submitBtn = $('#login-btn');
      const $form = $('form');

      /** @type {Array<FormControl>} */
      const formControls = [
        { friendlyName: 'Username', $query: $('#userName'), touched: false, validators: [requiredValidator] },
        
        // I argued with myself for a while over whether or not to add a password length validator
        // In the editor, we require a min length, so we could add it here
        // However, would such information make it easier to attack the login process?
        // In the end I decided against it.
        { friendlyName: 'Password', $query: $('#password'), touched: false, validators: [requiredValidator] },
      ];

      const validateControls = () => {
        /** @type {Array<string>} */
        const validationErrors = [];

        for(const control of formControls) {
          // Capture the starting number off errors
          const preLen = validationErrors.length;

          // Run each validator
          for(const validator of control.validators){
            validationErrors.push(...validator(control));
          }

          // If the error array has grown, there were errors
          // If the control has been touched, mark invalid
          if(preLen < validationErrors.length && control.touched){
            control.$query.addClass('invalid');
          } else {
            control.$query.removeClass('invalid');
          }
        }

        const hasErrors = validationErrors.length > 0;

        // Set disabled state on the submit button
        $submitBtn.prop('disabled', hasErrors);

        // Build tooltip
        const tooltip = hasErrors
          ? validationErrors.join('\n')
          : 'Login';

        // Set tooltip
        $submitBtn.prop('title', tooltip);
      };

      // Run validation now
      validateControls();

      // Validate on input event
      $form.on('input', undefined, debounceFn(200, validateControls));
      
      // Mark touched when focused
      formControls.forEach((control)=>control.$query.on('focus', () => control.touched = true));
    });
  

Requests	IP Address	Location	AS Autonomous System
16	40.88.250.211	Washington, Virginia, United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
17	1	-	-

Security Scan Report: multco.privilegemanagercloud.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History