finance banking

technology software

English

ORIGINAL_LOGIN_URL

Within the commercial generic top-level domain (.com), 'webdocs.epicor.com' is registered; it also runs on subdomain 'webdocs'. The registrable portion 'epicor' spans 6 characters split between three vowels and 3 consonants. Word splitting yields 2 words: epic, or. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

LOGINID

PASSWORD

login

35aa11fca98e759f341634662332fe8b8e40fe5b969f7c28c5659d0f181bb04c

78ec5d4d8b3e5d96e5407711a53ffaa89670298c8ae84b626258dfd121b851fa

6aec92e8880c45d89abed5465d3ab926e2d9c645a0bbdce351ad5d71e11b625a

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';media-src blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

CSC Corporate Domains, Inc.

EPICOR.COM

Epicor

Andrew Awaldt

James Calhoun Clark

Epicor Software Corporation

EPICOR



/*------------------- Global JS vars --------------------*/
crmjs_host_id="23";
crmjs_timezone="-5";
crmjs_customer_type="";
crmjs_user_name="";
crmjs_login_cmpname="";
crmjs_login_companyid="";
crmjs_login_cmptype="";
crmjs_cmpname="";
crmjs_companyid="";
crmjs_loggedin="false";
crmjs_cabinet="";
crmjs_cabinet_name="";
crmjs_cabinets="";
crmjs_cabinet_names="";
crmjs_user_type="";
crmjs_url_root="https://webdocs.epicor.com/site";
crmjs_user_timeout="";
crmjs_webroot_dir="site";
crmjs_csrf_token="";

/*------------------- version --------------------*/
/*------------------- Company bread crumb --------------------*/
crmjs_cmptrail_count=0;
var cto = new Array();
/*------------------- Page specific vars --------------------*/
var errorcode = ""
if (typeof(pso) == 'undefined') var pso = new Array();
/*------------------ End page specific ------------------*/




/* This was all take from scripts.js */
var _pso_object = window;
var needSetCookie = false;
 
function readCookie(name) 
{
    name += '=';
    for (var ca = document.cookie.split(/;\s*/), i = ca.length - 1; i >= 0; i--)
        if (!ca[i].indexOf(name))
            return ca[i].replace(name, '');
}

function setLoginURLAsCookie()
{
  document.cookie = "ORIGINAL_LOGIN_URL="+window.location.href+"; path=/"+crmjs_webroot_dir;
  document.login.ORIGINAL_LOGIN_URL.value = window.location.href;
}

function pso_unescape(s)
{
  var r="";
  var l = s.length;
  var a = new Array();
  a['22'] = '"';
  a['27'] = '\'';
  a['5C'] = '\\';
  a['2F'] = '/';

  for (var i=0;i < l;i++)
  {
    if (s.charAt(i) == '%')
    {
      if (((i+1) < l) && (s.charAt(i+1) == '%'))
      {
        r += '%';
        i++;
      }
      else if ((i+2) < l)
      {
        for (var j in a)
        {
          var str = s.charAt(i+1) + s.charAt(i+2);

          if (j == str)
          {
            r += a[j];
            i += 2;
            break;
          }
        }
      }
    }
    else
      r += s.charAt(i);
  }

  return(r);
}

function pso_get_ex(x, _unescape, a)
{
  var po = a || _pso_object;

  if (typeof(po.pso) == "undefined")
    return "";

  if (po.pso[x])
  {
    var strVal="";
    if (_unescape)
      strVal = pso_unescape(po.pso[x]);
    else
      strVal = po.pso[x];
    return(strVal);
  }
  else
    return "";
}

function pso_get(x)
{
  return(pso_get_ex(x, true));
}

function trim(s)
{
  r = "";

  if( typeof s == 'undefined' )
    return r;

  for (var i = 0;i < s.length;i++)
  {
    if (s.charAt(i) != " ")
      r = r + s.charAt(i);
  }

  return r;
}

var login_page_text =
{
  'en': {
    userId: 'USER ID',
    password: 'PASSWORD',
    login: 'Login',
    clear: 'Clear',
    clickHere: 'Click here',
    needToCreateNewAccount: 'Need to create a new account?',
    clickHereForMoreInformation: 'Click here for more information',
    forgotUserNameOrPassword: 'Forgot your user name or password?',
    sessionHasExpired: 'Your session has expired',
    cannotFindCompanyWithUrl: 'Cannot find a company with that URL',
    accountSuccessfullyCreated: 'Your account has been successfully created',
    accountAlreadyExists: 'An account already exists. Cannot create a new one',
    passwordHintSent: 'Password hint sent to your e-mail account',
    userIdHintSent: 'User id hint sent to your e-mail account',
    newPasswordSent: 'New password sent to your e-mail account',
    userNameOrPasswordInvalid: 'User name or password is invalid',
    accountDisabled: 'Your account has been disabled',
    userNameOrPasswordInvalid: 'User name or password is invalid',
    accountLocked: 'Your account has been disabled due to too many login attempts',
    companyDisabled: 'Access has been disabled for this company',
    siteDisabled: 'This site is temporarily unavailable, <br />please try again later.',
    cannotLoginBackup: 'You cannot login to a backup site directly.',
    noCabinetsAvailable: 'No cabinets available for access',
    restrictedIP: 'Cannot access this company from your IP address',
    rehosted: 'This login is in a company currently been rehosted.  Please login in later time.'
  },
  'fr': {
    userId: 'Identifiant',
    password: 'Mot de passe',
    login: 'Entrer',
    clear: 'Annuler',
    clickHere: 'Cliquez ici',
    needToCreateNewAccount: 'Besoin de créer un nouveau compte?',
    clickHereForMoreInformation: 'Cliquez ici pour plus d\'informations',
    forgotUserNameOrPassword: 'Indentifiant ou mot de passe oublié?',
    sessionHasExpired: 'Votre session a expiré',
    cannotFindCompanyWithUrl: 'Impossible de trouver une entreprise avec cette URL',
    accountSuccessfullyCreated: 'Votre compte à été créé avec succès',
    accountAlreadyExists: 'Un compte existe déjà. Impossible de créer un nouveau',
    passwordHintSent: 'Indice de mot de passe envoyé à votre compte de messagerie',
    userIdHintSent: 'Indice d\'identification d\'utilisateur envoyé à votre compte de messagerie',
    newPasswordSent: 'Nouveau mot de passe envoyé à votre compte e-mail',
    userNameOrPasswordInvalid: 'Nom d\'utilisateur ou mot de passe invalide',
    accountDisabled: 'Votre compte a été désactivé',
    userNameOrPasswordInvalid: 'Nom d\'utilisateur ou mot de passe invalide',
    accountLocked: 'Votre compte a été désactivé en raison d\'un trop grand nombre de tentatives de connexion.',
    companyDisabled: 'L\'accès a été désactivé pour cette société',
    siteDisabled: 'This site is temporarily unavailable, <br />please try again later.',
    cannotLoginBackup: 'You cannot login to a backup site directly.',
    noCabinetsAvailable: 'No cabinets available for access',
    restrictedIP: 'Cannot access this company from your IP address',
    rehosted: 'This login is in a company currently been rehosted.  Please login in later time.'
  },
  'es': {
    userId: 'Identifiant de connexion',
    password: 'Mot de passe',
    login: 'Entrar',
    clear: 'Claro',
    clickHere: 'Haga click aqui',
    needToCreateNewAccount: '¿Necesitas crear una nueva cuenta?',
    clickHereForMoreInformation: 'Haga clic aquí para más información',
    forgotUserNameOrPassword: '¿Olvidó su nombre de usuario o contraseña?',
    sessionHasExpired: 'Tu sesión ha expirado',
    cannotFindCompanyWithUrl: 'No se puede encontrar una empresa con esa URL',
    accountSuccessfullyCreated: 'Tu cuenta ha sido creada exitosamente',
    accountAlreadyExists: 'Ya existe una cuenta. No se puede crear uno nuevo.',
    passwordHintSent: 'Clave de contraseña enviada a su cuenta de correo electrónico',
    userIdHintSent: 'Indicación de identificación de usuario enviada a su cuenta de correo electrónico',
    newPasswordSent: 'Nueva contraseña enviada a su cuenta de correo electrónico',
    userNameOrPasswordInvalid: 'El nombre de usuario o la contraseña no son válidos',
    accountDisabled: 'Tu cuenta ha sido desactivada.',
    userNameOrPasswordInvalid: 'El nombre de usuario o la contraseña no son válidos',
    accountLocked: 'Su cuenta ha sido deshabilitada debido a demasiados',
    companyDisabled: 'El acceso ha sido desactivado para esta empresa.',
    siteDisabled: 'Este sitio no está disponible, <br /> vuelva a intentarlo más tarde.',
    cannotLoginBackup: 'No puede iniciar sesión en un sitio de copia de seguridad directamente.',
    noCabinetsAvailable: 'No hay armarios disponibles para el acceso.',
    restrictedIP: 'No se puede acceder a esta empresa desde su dirección IP',
    rehosted: 'Este inicio de sesión es en una empresa actualmente rehosted. Por favor, inicie sesión más tarde.'
  }
}

function login_page_get_current_language()
{
  var language = readCookie('dojoLang');
  if (!language)
    language = window.navigator.userLanguage || window.navigator.language;

  language = language.toLowerCase();
  if (login_page_text[language])
    return language;

  var majorLanguage = language.split('-')[0];
  if (login_page_text[majorLanguage])
    return majorLanguage;
  else
    return 'en';
  
}

function login_page_get_text(textId)
{
  var language = login_page_get_current_language();
  var translations = login_page_text[language];
  var text = translations[textId] || textId;
  return text;
}

function login_page_change_language(language)
{
  document.cookie = "dojoLang="+language+"; path=/"+crmjs_webroot_dir+"; expires=Fri, 31 Dec 9999 23:59:59 GMT;";
  login_page_refresh();
}

function login_page_get_translated_err_msg()
{
  var te = trim(errorcode);
  if (te == "")
    te = trim(pso_get("ERRORCODE"));

  if (typeof(crmjs_session_expired) != "undefined")
    return login_page_get_text('sessionHasExpired');
  else if (pso_get("INVALID_URL") != "")
    return login_page_get_text('cannotFindCompanyWithUrl');
  else if (pso_get("account_login") == "COMPANY_CREATED")
    return login_page_get_text('accountSuccessfullyCreated');
  else if (pso_get("account_login") == "ALREADY_CREATED")
    return login_page_get_text('accountAlreadyExists');
  else if (pso_get("account_login") == "SESSION_EXPIRED")
    return login_page_get_text('sessionHasExpired');
  else if (te == "")
  {
    if (pso_get("INFO") == "EMAIL_PASSWORDHINT")
      return login_page_get_text('passwordHintSent');
    else if (pso_get("INFO") == "EMAIL_USERID")
      return login_page_get_text('userIdHintSent');
    else if (pso_get("INFO") == "EMAIL_TEMPPASSWORD")
      return login_page_get_text('newPasswordSent');
    else if (pso_get("INFO") == "SESSION_EXPIRED")
      return login_page_get_text('sessionHasExpired');
    else
    {
      needSetCookie = true;
      return "";
    }
  }
  else if (te == "MTERROR_COMPANY_INVALID")
    return login_page_get_text('userNameOrPasswordInvalid');
  else if (te == "MTERROR_USER_DISABLED")
    return login_page_get_text('accountDisabled');
  else if (te == "MTERROR_INVALID_PASSWORD")
    return login_page_get_text('userNameOrPasswordInvalid');
  else if (te == "MTERROR_USER_LOCKED_OUT")
    return login_page_get_text('accountLocked');
  else if (te == "MTERROR_COMPANY_DISABLED")
    return login_page_get_text('companyDisabled');
  else if (te == "MTERROR_DB_FAIL_CONNECT")
    return login_page_get_text('siteDisabled');
  else if (te == "MTERROR_NO_LOGIN_BACKUP_SITE")
    return login_page_get_text('cannotLoginBackup');
  else if (te == "MTERROR_FOLDER_NO_AVAIL_CABS")
    return login_page_get_text('noCabinetsAvailable');
  else if (te == "MTERROR_RESTRICTED_IP")
    return login_page_get_text('restrictedIP');
  else if (te == "MTERROR_COMPANY_REHOSTING")
    return login_page_get_text('rehosted');
  else
  {
    var msg = errorcode;
    return msg;
  }
}

function doLogin()
{
  document.login.submit();
}

function addClass(domNode, className)
{
  if (!domNode.classList.contains(className))
    domNode.classList.add(className);
}

function removeClass(domNode, className)
{
  if (domNode.classList.contains(className))
    domNode.classList.remove(className);
}

function login_page_refresh()
{
  var hasArtwork = (typeof(crmjs_art_cmplogo) != "undefined") && (crmjs_art_cmplogo != "");
  if (hasArtwork)
    document.getElementById('idArtworkImg').src = crmjs_art_cmplogo;
  
  document.getElementById('idHILogoDiv').style.display = hasArtwork ? "none" : "block";
  document.getElementById('idArtworkDiv').style.display = hasArtwork ? "block" : "none";
//  document.getElementById('idNeedToCreateANewAccountText').innerHTML = login_page_get_text('needToCreateNewAccount');
  document.getElementById('idNeedToCreateANewAccountText2').innerHTML = login_page_get_text('needToCreateNewAccount');
  document.getElementById('idForgotNamePassword').innerHTML = login_page_get_text('forgotUserNameOrPassword');
//  document.getElementById('idCreateNewAccountDiv').style.display = (pso_get("URL_FOLDER_ACCOUNT_SELFREG") == "") ? "none" : "block";
  document.getElementById('idCreateNewAccountDiv2').style.display = (pso_get("URL_FOLDER_ACCOUNT_SELFREG2") == "") ? "none" : "block";
//  document.getElementById('idCreateNewAccountDivLink').href = pso_get("URL_FOLDER_ACCOUNT_SELFREG");
//  document.getElementById('idCreateNewAccountDivLink').innerHTML = login_page_get_text('clickHere');
  document.getElementById('idCreateNewAccountDivLink2').href = pso_get("URL_FOLDER_ACCOUNT_SELFREG2");
  document.getElementById('idCreateNewAccountDivLink2').innerHTML = login_page_get_text('clickHere');
  document.getElementById('idForgotNamePasswordLink').innerHTML = login_page_get_text('clickHere');
  document.getElementById('idUser').innerHTML = login_page_get_text('userId')+':';
  document.getElementById('idPassword').innerHTML = login_page_get_text('password')+':';
  document.getElementById('idLoginBtn').innerHTML = login_page_get_text('login');
  document.getElementById('idClearBtn').innerHTML = login_page_get_text('clear');
  var err_msg = login_page_get_translated_err_msg();
  document.getElementById('idErrorCode').innerHTML = err_msg;
  document.getElementById('announcement_url').innerHTML = login_page_get_text('clickHereForMoreInformation');
  
  var currentLanguage = login_page_get_current_language();
  var fn = (currentLanguage == 'en') ? addClass : removeClass;
  fn(document.getElementById('idLanguage-en'), 'selected');
  fn = (currentLanguage == 'es') ? addClass : removeClass;
  fn(document.getElementById('idLanguage-es'), 'selected');
  fn = (currentLanguage == 'fr') ? addClass : removeClass;
  fn(document.getElementById('idLanguage-fr'), 'selected');

  if (needSetCookie)
    setLoginURLAsCookie();
  
  if (document.login.LOGIN_TYPE)
    document.login.LOGIN_TYPE.value = pso_get("LOGIN_TYPE");
  document.login.LOGINID.focus();
  
  var announcement = pso_get("LOGIN_ANNOUNCEMENT");
  var announcement_url = pso_get("LOGIN_ANNOUNCEMENT_URL");
  document.getElementById("announcement_wrapper").style.display = (announcement == "") ? "none" : "block";
  var obj = document.getElementById("announcement_text");
  if (announcement != "")
    obj.innerHTML = announcement;
  
  if (announcement_url != "")
  {
    document.getElementById("announcement_url_wrapper").style.display = "block";
    obj = document.getElementById("announcement_url");
    obj.href = announcement_url;  
  }
}

function create_hidden_elements()
{
  for (var p in pso)
  {
    var input = document.createElement("input");
    input.setAttribute("type", "hidden");
    input.setAttribute("name", p);
    input.setAttribute("value", pso[p]);
    document.getElementById("loginForm").appendChild(input);
  }
}

/* If session timed out, or otherwise, don't have login screen within a frame */
if (self != top)
{
   top.location = window.location;
   window.stop();
}


Requests	IP Address	Location	AS Autonomous System
4	159.66.238.40	United States	AS30175EPICOR
4	1	-	-

Security Scan Report: webdocs.epicor.com

Summary

AI Security Verdict

Low Risk

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History