technology software

English

cookiesession1

You're looking at domain 'mapn-ro.mails-login.workers.dev' on the developer-focused generic top-level domain (.dev); it also runs on subdomain 'mapn-ro.mails-login'. Count 7 characters in 'workers' holding 2 vowels versus 5 consonants. Segmentation suggests one word: workers. Median word length is seven characters. No strong language cues emerged from the frequency lists.

username

oldPwd

newPwd1

newPwd2

isUtf8

exppwForm

html/82/4b/824b999d-5737-4b6b-ae39-de2d3139a643.html.gz

default-src 'self' https: data: 'unsafe-inline' blob: 'unsafe-inline' 'unsafe-eval'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data: blob:; frame-ancestors 'self';

f5d9fcd955d27f68f50011041a9424529bdb07262b855da4010b14c0c432dc03

49889670b74fce61f567475c5489e2739441fc7ec79dbcc785be93747d7e1d80

c27c14405d1074365cf1bb7220ef4b12f4f44c3159b0fb8155072b5c2915b2ba

eae243f6d99b73d28bdca031497ea4eafd958f96c258cf8a0800b8408bd28519

Robots

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Abuse Team

CloudFlare, Inc.

workers.dev

Cloudflare Abuse Contact

MNT-CLOUDFLARE

Cloudflare Technical Contact

CLOUDFLARENET-EU

//  fexppw.js
//
//  This file contains the script used by ExpiredPassword.aspx
//

window.onload = initExpPw;

/// <summary>
/// Onload handler for the expired password page
/// </summary>
function initExpPw()
{
    // The form isn't displayed after the password is changed
    //
    if (gbid("username") != null)
    {
        // Check for username cookie
        //
        var re = /(^|; )logondata=acc=([0|1])&lgn=([^;]+)(;|$)/;
        var rg = re.exec(document.cookie);

        // UPN authentication isn't supported, don't fill in the username
        // if it's an email address
        //
        if (rg && rg[3].indexOf('@') == -1)
        {
            // Fill in username, set focus to password
            //
            gbid("username").value = rg[3];
            gbid("oldPwd").focus();
        }
        else
        {
            // The variable g_fFcs is set to false when the password gains focus,
            // so that we don't accidentally set focus to the username field while
            // the user is typing their password
            //
            if (g_fFcs)
            {
                try
                {
                    gbid("username").focus();
                }
                catch (e)
                {}
            }
        }
    }

    chkAuth();
}

/// <summary>
/// Clear credentials
/// </summary>
function chkAuth()
{
    if (a_fCAC)
    {
        try
        {
            document.execCommand("ClearAuthenticationCache","false");
        }
        catch (e) {}
    }

    LogoffMime();
}

/// <summary>
/// Log off S-MIME control if it is present
/// </summary>
function LogoffMime()
{
    try
    {
        if ((typeof(mimeLogoffE2k3) != "undefined" && null != mimeLogoffE2k3) && IsMimeCtlInst("MimeBhvr.MimeCtlVer"))
            mimeLogoffE2k3.Logoff();

        if ((typeof(mimeLogoffE2k7SP1) != "undefined" && null != mimeLogoffE2k7SP1) && IsMimeCtlInst("OwaSMime.MimeCtlVer"))
            mimeLogoffE2k7SP1.Logoff();

        if ((typeof(mimeLogoffE2k9) != "undefined" && null != mimeLogoffE2k9) && IsMimeCtlInst("OwaSMime2.MimeCtlVer"))
            mimeLogoffE2k9.Logoff();
    }
    catch (e)
    {
    }
}

/// <summary>
/// OnClick handler for the ok button after changing password
/// </summary>
function clkReLgn()
{
    window.location.href = a_sUrl;
}

/// <summary>
/// GetElementByID from Document
/// </summary>
/// <param name="s">Id of the Element</param>
function gbid(s)
{
    return document.getElementById(s);
}


var mainDivClassName = 'mouse';
    var showPlaceholderText = false;

    if (mainDivClassName == "tnarrow") {
        showPlaceholderText = true;

        // Output meta tag for viewport scaling
        document.write('<meta name="viewport" content="width = 320, initial-scale = 1.0, user-scalable = no" />');
    }
    else  if (mainDivClassName == "twide") {
        showPlaceholderText = true;
    }

    function setPlaceholderText() {
        window.document.getElementById("username").placeholder = "domain\\user name";
        window.document.getElementById("oldPwd").placeholder = "current password";
        window.document.getElementById("newPwd1").placeholder = "new password";
        window.document.getElementById("newPwd2").placeholder = "confirm new password";
    }



        var mainDiv = window.document.getElementById("mainDiv");
        mainDiv.className = mainDivClassName;
    


                        if (showPlaceholderText) {
                            setPlaceholderText();
                        }
                    

X-UA-Compatible

PasswordField

HTTP/3

Cloudflare Bot Management

Cloudflare

Outlook

✅ Low Risk - https://mapn-ro.mails-login.workers.dev/owa/auth/expiredpassword.aspx?token=9090218f-578a-4455-8388-8c7f40e5d654

Requests	IP Address	Location	AS Autonomous System
2	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	1	-	-

Security Scan Report: mapn-ro.mails-login.workers.dev

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History