corporate business

English

Prod-ApplicationGatewayAffinity

JSESSIONID

Prod-ApplicationGatewayAffinityCORS

Domain 'urban.bamboorose.com' uses the commercial generic top-level domain (.com) and includes subdomain 'urban'. Its registrable label 'bamboorose' stretches across 10 characters containing 5 vowels alongside 5 consonants. Splitting it apart reveals two words: bamboo, rose. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

user_id

pswd

captchaText

supplierkey

method

LoginForm

html/7c/cd/7ccd3283-6211-4e63-9025-6c080d4c3ec6.html.gz

base-uri 'self'; child-src 'self' blob:; connect-src 'self' *.nr-data.net *.azure-api.net *.blob.core.windows.net ka-p.fontawesome.com *.amplitude.com cdn.jsdelivr.net *.verteego.com cdnjs.cloudflare.com; default-src 'self' ; font-src 'self' fonts.gstatic.com ka-p.fontawesome.com data:; form-action 'self' login.microsoftonline.com; frame-ancestors 'self'; frame-src 'self' *.blob.core.windows.net blob:; img-src 'self' *.openstreetmap.org *.blob.core.windows.net data:; manifest-src 'self'; media-src 'self'; object-src 'self' *.blob.core.windows.net blob:; script-src 'self' ajax.googleapis.com cdnjs.cloudflare.com js-agent.newrelic.com kendo.cdn.telerik.com stackpath.bootstrapcdn.com *.nr-data.net kit.fontawesome.com unpkg.com 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net; style-src 'self' fonts.googleapis.com ka-p.fontawesome.com 'unsafe-inline'; upgrade-insecure-requests

365fd0f5a246fd431d3cb2de928b1b66c7376d4c904046aaaa6cf92e39c41b4d

d42490c6288f50ed2c60dad5c0e8c916f4f59ada49752918eb985ff6b361ed7a

f27c4985d6904e2f56b320ed15654e328377044286f96fe4621d35b56f015443

2f46efd1b27f51e3b42366f07200202a0abe9582bea19c0b3bae6fdab2a26666

80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0

a1b6400a21ddee090e93d8882ffa629963132785bfa41b0abbea199d278121e9

d5f10f852b112a514a19f2b778eef5d2d1307878757f0a24539c051831cefaf8

79ff1591234ea9434d7f96516781130625b1880ba4fa8eb965b278337e11f8ae

d8e0c4457384cc5ba6e47b4cc048af87dc77af5bddbee0465bf2a98850c994c7

d4a8e7caf7efa0b87f2448ba6cfedebb9366e49446c8ae27b6ce977f5d0f89d5

afa074edca185bb2482b904773deae9edfdd617b5d91692eab16c32fd914b0c5

3299499a77e2d506b5f22f92b4901c5e4ba35ad16d930ab90ef7c56f06bfa397

f02b6e79a51a3e7fd609ca960cfc9a4fc99e39e629b59471e3a82da74db1ff22

74b2215ee985795c40325a30e296c9e21e64a34e786f7be5efd4bd6de522c7f6

7ec0af5f3ead8da651de898d15eff92f2abff7955e4975b33dd603415a7dee02

9dcb54677b1a9028b1bdf8ef59eebacd8560998f9c89d817949dc67aad7d7ade

The attribute usemap can be used as a security exploit

Universal CSP bypass via add-on in Firefox

XSS via JQLite DOM manipulation functions in AngularJS

XSS may be triggered in AngularJS applications that sanitize user-controlled HTML snippets before passing them to JQLite methods like JQLite.prepend, JQLite.after, JQLite.append, JQLite.replaceWith, JQLite.append, new JQLite and angular.element.

angular vulnerable to regular expression denial of service via the $resource service

angular vulnerable to regular expression denial of service via the angular.copy() utility

Angular (deprecated package) Cross-site Scripting

angular vulnerable to regular expression denial of service via the <input type="url"> element

AngularJS improperly sanitizes SVG elements

AngularJS allows attackers to bypass common image source restrictions

angular vulnerable to super-linear runtime due to backtracking

AngularJS Incomplete Filtering of Special Elements vulnerability

AngularJS Regular expression Denial of Service (ReDoS)

End-of-Life: Long term support for AngularJS has been discontinued as of December 31, 2021

20f500140cbd11c60da15c7e9feb58f4480958ff6535bd929aa58b4e859af592

997c1133e667ef80c2b79fe6942551763d72a80e6df06c68d638afc4f007e1e8

viewport

html/7c/cd/7ccd3283-6211-4e63-9025-6c080d4c3ec6_nodriver.html.gz

Bamboo Rose LLC - Login

GoDaddy.com, LLC

BAMBOOROSE.COM


      
      var pic1= new Image(100,25);

      pic1.src="images/p.gif";

      FRM='LoginForm';

      var oneSessionPerUser='false';

      var popuptitle = 'Active Session Warning';
      //Tracker#:45941 ALLOWING POST DATA PARAMETERS TO BE PASSED THROUGH GET PARAMETERS  CAN OPEN THE APP TO CSRF ATTACK
	  //If GET request comes up with user id and password, treat the request as CSRF and avoid the user to login
	  //The attacker was able to intercept HTTP Post parameters and forward them using GET and was getting same response. Now it is handled by rejecting GET requests with user credentials
      var cybeattacktitle = 'Invalid Request';

	//var popuptitle = 'Active Session Warning'


Requests	IP Address	Location	AS Autonomous System
10	104.17.25.14	United States	AS13335Cloudflare, Inc.
9	23.56.207.51	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
9	162.247.243.39	United States	AS54113Fastly, Inc.
28	3	-	-

Security Scan Report: urban.bamboorose.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History