English

Domain 'http.nyc' uses the .nyc top-level domain. Count 4 characters in 'http' split between zero vowels and four consonants. Splitting it apart reveals one word: http. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

html/9c/35/9c35fbf2-ca78-4812-83a7-ba931efa074c.html.gz

94a8b44734c1bd27ec0f49f24a3f16299c487dc4a4eae0e66cc2a75140868139

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

NameCheap, Inc.

http.nyc

Verizon

Frontier Communications

WorldCom/UUNET Technologies, Inc.

Verizon Internet Services

Verizon Business

VIS-BLOCK


async function api(path, opts) {
  return fetch("/api" + path, { credentials: "same-origin", headers: { "Content-Type": "application/json" }, ...opts });
}

const SUBPROJECTS = [
  { key: "seating", label: "Seating Chart", icon: "🪑", href: "/seating-chart/seating-plan.html", roles: ["editor", "vendor", "guest"], built: true },
  { key: "ceremony", label: "Ceremony", icon: "💍", href: "/ceremony/ceremony.html", roles: ["editor", "vendor", "guest"], built: true },
  { key: "playlist", label: "Playlist", icon: "🎵", href: "#", roles: ["editor", "vendor"], built: false },
  { key: "transportation", label: "Transportation", icon: "🚗", href: "#", roles: ["editor", "vendor", "guest"], built: false },
];

function esc(s){return (s||"").replace(/[&<>"']/g,c=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"}[c]));}

function renderLoggedOut() {
  document.getElementById("app").innerHTML = `
    <h1>Hanna &amp; Martial</h1>
    <div class="sub" id="subTitle">${esc(window.__venueName || "")}</div>

    <div class="card">
      <h2>Editor / Vendor</h2>
      <select id="role"><option value="editor">Editor</option><option value="vendor">Vendor</option></select>
      <div id="vendorTypeWrap" style="display:none">
        <input id="vendorType" placeholder="Vendor type (e.g. photographer)">
      </div>
      <input id="password" type="password" placeholder="Password">
      <div class="err" id="loginErr"></div>
      <button id="loginBtn">Log in</button>
    </div>

    <div class="card">
      <h2>Guest</h2>
      <input id="guestToken" placeholder="Your household code">
      <div class="err" id="guestErr"></div>
      <button id="guestBtn">Log in</button>
    </div>
  `;
  const roleSel = document.getElementById("role");
  const vendorWrap = document.getElementById("vendorTypeWrap");
  roleSel.addEventListener("change", () => { vendorWrap.style.display = roleSel.value === "vendor" ? "block" : "none"; });

  document.getElementById("loginBtn").addEventListener("click", async () => {
    const role = roleSel.value;
    const password = document.getElementById("password").value;
    const vendorType = document.getElementById("vendorType").value;
    const errEl = document.getElementById("loginErr");
    errEl.textContent = "";
    const res = await api(`/login/${role}`, { method: "POST", body: JSON.stringify(role === "vendor" ? { password, vendorType } : { password }) });
    if (res.ok) { init(); return; }
    errEl.textContent = "Wrong password.";
  });

  document.getElementById("guestBtn").addEventListener("click", async () => {
    const token = document.getElementById("guestToken").value;
    const errEl = document.getElementById("guestErr");
    errEl.textContent = "";
    const res = await api("/login/guest", { method: "POST", body: JSON.stringify({ token }) });
    if (res.ok) { init(); return; }
    errEl.textContent = "That code wasn't recognized.";
  });
}

function renderLoggedIn(session) {
  // Editors can preview the vendor-scoped nav without logging out and back
  // in with the vendor password — this only changes which links render
  // here, it doesn't touch the actual session/permissions (editor already
  // has superset access to every page vendor can reach).
  const previewRole = session.role === "editor" && window.__previewAsVendor ? "vendor" : session.role;

  const links = SUBPROJECTS.filter(p => p.roles.includes(previewRole)).map(p => {
    const cls = p.built ? "" : "disabled";
    const note = p.built ? "" : "<small>Coming soon</small>";
    return `<a class="${cls}" href="${esc(p.href)}"><span class="icon">${p.icon}</span><span><span class="label">${esc(p.label)}</span>${note}</span></a>`;
  }).join("");

  const roleLabel = session.role === "vendor" && session.vendorType ? `Vendor · ${esc(session.vendorType)}` :
                     session.role === "guest" && session.household ? `Guest · ${esc(session.household)}` :
                     session.role[0].toUpperCase() + session.role.slice(1);

  const previewToggle = session.role === "editor"
    ? `<button class="secondary" id="previewToggle" style="margin-right:8px">${window.__previewAsVendor ? "Viewing as vendor" : "Preview as vendor"}</button>`
    : "";

  document.getElementById("app").innerHTML = `
    <div class="topbar">
      <div>
        <h1 style="text-align:left;margin-bottom:0;font-size:24px">Hanna &amp; Martial</h1>
        <div class="who">${roleLabel}${previewRole !== session.role ? " (previewing vendor)" : ""}</div>
      </div>
      <div>${previewToggle}<button class="secondary" id="logoutBtn">Log out</button></div>
    </div>
    <nav>${links}</nav>
  `;
  document.getElementById("logoutBtn").addEventListener("click", async () => {
    await api("/logout", { method: "POST" });
    init();
  });
  const toggleBtn = document.getElementById("previewToggle");
  if (toggleBtn) toggleBtn.addEventListener("click", () => {
    window.__previewAsVendor = !window.__previewAsVendor;
    renderLoggedIn(session);
  });
}

async function init() {
  if (window.__venueName === undefined) {
    const config = await (await fetch("/api/config")).json();
    window.__venueName = config.venueName;
    if (config.weddingSiteUrl) {
      document.getElementById("siteBannerLink").href = config.weddingSiteUrl;
      document.getElementById("siteBanner").style.display = "block";
    }
  }
  const res = await api("/whoami");
  const body = await res.json();
  if (body.session) renderLoggedIn(body.session);
  else renderLoggedOut();
}
init();


Requests	IP Address	Location	AS Autonomous System
3	74.108.26.154	Brooklyn, New York, United States	AS701Verizon Business
3	1	-	-

Security Scan Report: http.nyc

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History