cryptocurrency blockchain

technology software

documentation technical

education learning

adult content

English

Within the developer-focused generic top-level domain (.dev), 'keyvault-xybra-cf.pages.dev' is registered; it also runs on subdomain 'keyvault-xybra-cf'. The second-level label 'pages' is 5 characters long containing 2 vowels alongside 3 consonants. Splitting it apart reveals 1 word: pages. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

html/9f/dc/9fdce8b3-8b0e-42e2-a84d-aac58373b1ba.html.gz

default-src 'self'; script-src 'self' 'unsafe-inline' https://fonts.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com; font-src https://fonts.gstatic.com; connect-src 'self' https://*.workers.dev https://*.a27d43ed40747c0eb7b6cd8125aad889.workers.dev https://tibia.fandom.com https://api.tibiadata.com https://fonts.googleapis.com https://api.ipify.org https://www.tibiaring.com https://api.tibiastalker.pl https://corsproxy.io https://tibiavip.app https://timeapi.io https://worldtimeapi.org; img-src 'self' data: blob: https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

inline; filename="Great_Mana_Potion.webp"; filename*=UTF-8''Great_Mana_Potion.webp

default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; style-src 'unsafe-inline'; sandbox; report-uri https://services.fandom.com/csp-logger/csp/thumblr

inline; filename="Red_Skull.webp"; filename*=UTF-8''Red_Skull.webp

inline; filename="White_Skull.webp"; filename*=UTF-8''White_Skull.webp

inline; filename="Pair_of_Iron_Fists.webp"; filename*=UTF-8''Pair_of_Iron_Fists.webp

inline; filename="Empty_Potion_Flask_%2528Large%2529.webp"; filename*=UTF-8''Empty_Potion_Flask_%2528Large%2529.webp

inline; filename="Havoc_Blade.webp"; filename*=UTF-8''Havoc_Blade.webp

inline; filename="Green_Skull.webp"; filename*=UTF-8''Green_Skull.webp

inline; filename="Paralyse_Rune.webp"; filename*=UTF-8''Paralyse_Rune.webp

inline; filename="Sudden_Death_Rune.webp"; filename*=UTF-8''Sudden_Death_Rune.webp

inline; filename="Assassin_Star.webp"; filename*=UTF-8''Assassin_Star.webp

bf045467123c59f12c52ed1f754339052ddff84bc46e843584d6cc25eeba1c9b

6172baf71639d8a2bc3b9e411cdeaba327ecd4564140da6651f4ed39396ceef6

02250c4da7adcc335e575ad938c0cc026cedae954f86bfa47d065fe958be6edb

e3a37c1942b281e7c2d418b5d3a939c922872d420f5ad366d18f8c0e65fe040c

4264a8bd467528656cf0402906f33c5bdac648c0a695d2b8190b4f50f54acbc3

b34ee70baaf9a10294e497adac737f9d5b04efccabd5ce9afee9049fa3a21e75

e73598660b0d840c9dab37d6c93a831353e5785592dac98aea05d9458ec9616d

4f8cc43c875d813f87c5ee20f3fa6878fd56b0b0de78a8816436c6d0f21a48c1

d7182c0b6bf8184ddebd3479fcd20c62ea0498ac1bf38a4d77f5e5315647b97f

9ddad88728b2d7a0ba58d67909aa9a98ec368504c9dd92a759d213de564cbe80

cec32779544aa9afd67ff907e4ac2eacf03b3a5e98b0a6bff5bcfd5638dc7962

5c6dc3627eb9d8cb02518351294a4795aeaa1d7a70e869c60324d5473ca09d83

default-src 'self'; script-src 'self' 'unsafe-inline' https://www.gstatic.com https://apis.google.com https://www.google.com https://www.recaptcha.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://*.googleapis.com https://*.firebaseio.com https://*.firebaseapp.com https://www.gstatic.com https://www.google.com https://www.recaptcha.net https://api.tibiadata.com https://*.a27d43ed40747c0eb7b6cd8125aad889.workers.dev https://api.ipify.org https://www.tibiaring.com https://api.allorigins.win https://api.tibiastalker.pl https://corsproxy.io https://api.codetabs.com https://tibiavip.app https://timeapi.io https://worldtimeapi.org; frame-src https://*.firebaseapp.com https://*.googleapis.com https://www.google.com https://www.recaptcha.net; media-src 'self' data: blob:;

viewport

referrer

apple-mobile-web-app-title

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Abuse Team

CloudFlare, Inc.

pages.dev

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


/* [v38] Force HTTPS in production + inject CSP only on real domains */
if(location.protocol === 'http:' && location.hostname !== 'localhost' && location.hostname !== '127.0.0.1'){
  location.replace('https:' + location.href.substring(location.protocol.length));
}
/* CSP only applies on hosted domains, not file:// */
if(location.protocol !== 'file:'){
  const csp = document.createElement('meta');
  csp.httpEquiv = 'Content-Security-Policy';
  csp.content = "default-src 'self'; script-src 'self' 'unsafe-inline' https://www.gstatic.com https://apis.google.com https://www.google.com https://www.recaptcha.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://*.googleapis.com https://*.firebaseio.com https://*.firebaseapp.com https://www.gstatic.com https://www.google.com https://www.recaptcha.net https://api.tibiadata.com https://*.a27d43ed40747c0eb7b6cd8125aad889.workers.dev https://api.ipify.org https://www.tibiaring.com https://api.allorigins.win https://api.tibiastalker.pl https://corsproxy.io https://api.codetabs.com https://tibiavip.app https://timeapi.io https://worldtimeapi.org; frame-src https://*.firebaseapp.com https://*.googleapis.com https://www.google.com https://www.recaptcha.net; media-src 'self' data: blob:;";
  document.head.prepend(csp);
}
/* [v39-sec] Anti-tampering: disable devtools data extraction shortcuts */
if(location.protocol !== 'file:'){
  /* Block right-click context menu on sensitive elements */
  document.addEventListener('contextmenu', function(e){
    if(e.target.closest('.tok, .cm-token, [data-token-id], .kv-root-reveal')) e.preventDefault();
  });
  /* Warn on devtools paste attacks */
  Object.defineProperty(window, '__KEYVAULT_PROTECTED__', {value:true, writable:false, configurable:false});
  /* [v39-sec] Trap common data exfiltration via console */
  const _origStringify = JSON.stringify;
  JSON.stringify = function(val){
    if(val && val === window.S){ console.warn('[KV-SEC] Blocked: cannot serialize session state'); return '{}'; }
    if(Array.isArray(val) && val.length > 0 && val[0]?.nick && val[0]?.id){ console.warn('[KV-SEC] Blocked: cannot serialize character data'); return '[]'; }
    return _origStringify.apply(this, arguments);
  };
}



/* [v38] Global error handler */
/* [v38-sec] Global error handlers — log minimal info to avoid leaking internal state */
window.onerror = function(msg, src, line, col, err){
  if(typeof console !== 



(function(){
  const LOGO = 'data:image/png;base64,/9j/4AAQSkZJRgABAQAASABIAAD/4QBMRXhpZgAATU0AKgAAAAgAAYdpAAQAAAABAAAAGgAAAAAAA6ABAAMAAAABAAEAAKACAAQAAAABAAAGAKADAAQAAAABAAAEAAAAAAD/7QA4UGhvdG9zaG9


/* [v38] Consolidated v23 adaptive + v24 layout into a single handler */
(function(){
  let rafId = null;
  function applyLayout(){
    const body=document.body;
    if(!body) return;
    const root=document.documentElement;
    const vw=window.innerWidth||root.clientWidth||0;
    const vh=window.innerHeight||root.clientHeight||0;

    /* Mobile detection */
    const isMobile = vw<=900 || ('ontouchstart' in window && vw<=1024);
    body.classList.toggle('kv-mobile', isMobile);

    /* v24: fixed sidebar toggle */
    const forceFixed = vw>860;
    body.classList.toggle('kv-fixed-sidebar', forceFixed);
    body.classList.toggle('kv-short', vh<760);

    /* v23: adaptive classes */
    body.classList.remove('kv-tight','kv-cramped');
    if(vw<=900){ return; }
    const portrait = vh > vw * 1.02;
    let sidebar = 292;
    if(portrait) sidebar = Math.min(248, Math.max(208, Math.round(vw*0.24)));
    const available = vw - sidebar - 34;
    if(available < 1040 || vh < 860) body.classList.add('kv-tight');
    if(available < 920 || vh < 740) body.classList.add('kv-cramped');
    if(body.classList.contains('kv-cramped')) sidebar = portrait ? Math.min(214, Math.max(192, Math.round(vw*0.21))) : 214;
    else if(body.classList.contains('kv-tight')) sidebar = portrait ? Math.min(236, Math.max(204, Math.round(vw*0.23))) : 236;

    /* v24: override for non-portrait */
    if(!portrait && !body.classList.contains('kv-tight') && !body.classList.contains('kv-cramped')){
      if(vw<=980) sidebar=224;
      else if(vw<=1200) sidebar=236;
      else sidebar=252;
    }
    root.style.setProperty('--kv-sidebar-w', sidebar + 'px');
  }
  function scheduleLayout(){
    if(rafId) return;
    rafId = requestAnimationFrame(()=>{ rafId=null; applyLayout(); });
  }
  window.addEventListener('resize', scheduleLayout, {passive:true});
  window.addEventListener('orientationchange', scheduleLayout, {passive:true});
  if(document.readyState==='loading') document.addEventListener('DOMContentLoaded', applyLayout);
  else applyLayout();
  setTimeout(applyLayout, 50);
  setTimeout(applyLayout, 250);
})();



(function(){
  const esc=s=>(s||'').replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;');
  const norm=s=>String(s||'').normalize('NFD').replace(/[\u0300-\u036f]/g,'


/* [v38] Move Acessos to main content area — same grid style as Visão Geral */
document.addEventListener('DOMContentLoaded', function(){
  const slot = document.getElementById('kvAccessSlot');
  const accGroup = document.getElementById('accessGroup');
  if(!slot || !accGroup) return;

  /* Replace the whole section with a simple grid like Visão Geral */
  const chips = accGroup.querySelectorAll('.chip[data-f]');
  let html = '';
  chips.forEach(c => {
    const f = c.getAttribute('data-f');
    const img = c.querySelector('img');
    const span = c.querySelector('span');
    const label = span ? span.textContent.trim() : f.replace('a','');
    const imgHtml = img ? `<img src="${img.src}" style="width:20px;height:20px;object-fit:contain;image-rendering:pixelated">` : '';
    html += `<div class="kv-stat-card kv-acc-filter" style="cursor:pointer;padding:10px 6px" data-f="${f}">
      <div style="font-size:16px">${imgHtml}</div>
      <div class="kv-stat-lbl" style="font-size:9px;margin-top:4px">${label}</div>
    </div>`;
  });

  slot.innerHTML = `<div id="kvAccessGrid" style="display:grid;grid-template-columns:repeat(auto-fit,minmax(80px,1fr));gap:8px">${html}</div>`;

  /* Sync click with original filter system */
  slot.querySelectorAll('.kv-acc-filter').forEach(card => {
    card.addEventListener('click', function(e){
      e.stopPropagation();
      const f = this.getAttribute('data-f');
      /* Toggle filter in S.filters */
      if(window.S && S.filters){
        if(S.filters.has(f)) S.filters.delete(f);
        else S.filters.add(f);
      }
      /* Toggle visual */
      const isOn = window.S && S.filters && S.filters.has(f);
      this.classList.toggle('on', isOn);
      if(isOn){
        this.style.borderColor = 'rgba(244,218,145,.3)';
        this.style.background = 'linear-gradient(180deg,rgba(113,86,36,.4),rgba(43,34,17,.5))';
      } else {
        this.style.borderColor = '';
        this.style.background = '';
      }
      /* Also sync original chip visual */
      const orig = accGroup.querySelector('.chip[data-f="'+f+'"]');
      if(orig) orig.classList.toggle('on', isOn);
      /* Re-render */
      if(window.renderAll) renderAll();
    });
  });

  /* Hide original from sidebar */
  accGroup.style.display = 'none';
});



/* [v38] Sidebar toggle */
window.kvToggleSidebar = function(){
  const isMini = document.body.classList.toggle('kv-sidebar-mini');
  const btn = document.getElementById('kvSidebarToggle');
  if(btn) btn.textContent = isMini ? '▶' : '◀';
  localStorage.setItem('kv-sidebar-mini', isMini ? '1' : '');
};
/* Restore state */
if(localStorage.getItem('kv-sidebar-mini') === '1'){
  document.body.classList.add('kv-sidebar-mini');
  const btn = document.getElementById('kvSidebarToggle');
  if(btn) btn.textContent = '▶';
}


HTTP/3

HSTS

Cloudflare Bot Management

Cloudflare

KV — XYBRA

✅ Low Risk - https://keyvault-xybra-cf.pages.dev/$%7Besc(img)%7D

Requests	IP Address	Location	AS Autonomous System
9	172.66.44.242	United States	AS13335Cloudflare, Inc.
4	172.66.47.14	United States	AS13335Cloudflare, Inc.
4	192.178.183.94	United States	AS15169Google LLC
4	162.159.142.170	United States	AS13335Cloudflare, Inc.
4	51.75.52.74	France	AS16276OVH SAS
4	172.66.2.166	United States	AS13335Cloudflare, Inc.
4	142.251.14.95	United States	AS15169Google LLC
33	7	-	-

Security Scan Report: keyvault-xybra-cf.pages.dev

Summary

AI Security Verdict

Moderate Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History