technology software

e-commerce shopping

download file sharing

documentation technical

government public service

English

__utmb

__utmz

__utma

__utmc

__utmt

Within the commercial generic top-level domain (.com), 'paprikaapp.com' is registered while skipping any subdomain. Count 10 characters in 'paprikaapp' with 4 vowels and six consonants. Splitting it apart reveals two words: paprika, app. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

html/a2/fc/a2fc4958-2798-48ca-a992-26d32f7574cc.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:215:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:201:0

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net *.facebook.net *.whatsapp.com *.whatsapp.net;script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-f64KQZd1' blob: 'self' connect.facebook.net 'wasm-unsafe-eval' https://accounts.google.com https://*.google-analytics.com *.google.com;style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline' https://accounts.google.com https://fonts.googleapis.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com *.instagram.com https://accounts.google.com https://*.google-analytics.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com https://fonts.gstatic.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data: *.tenor.co *.tenor.com https://*.giphy.com;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://td.doubleclick.net *.google.com *.doubleclick.net;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;

f30589a9132517cd8

fb:like Facebook Social Plugin

Twitter Follow Button

Twitter settings iframe

8c574e0a06396dfa7064b8b460e0e4a8d5d0748c4aa66eb2e4efdfcb46da4b31

a2fc42c9a710c6014f9dd1a0face8275d41148fd2e770173d8f809c4b342b9f1

2ba02cd55d865d24d23534d6f33db4654634d5ecaea53e2e5c2df6c8e9700e6f

a4b9cb10ce6eab6b1ce014011cc0deecdeea9a71a9a79980f70ca52f091e0d28

13d9e9ce4061c6b648768b09a36d000a7bfba969d4570cf329f938ede6a8f393

355cfb794f77345521af5ffe0ea478858a6ded72c98b743ca0ff09a19a6860c9

1259ea99bd76596239bfd3102c679eb0a5052578dc526b0452f4d42f8bcdd45f

4ee4dba1ddfe03aec77c811a8a891642f7b64c8b8aa676e8dcf0dd42b0151e7d

Versions of jquery prior to 1.9.0 are vulnerable to Cross-Site Scripting. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. This allows attackers to execute arbitrary JavaScript in a victim's browser.


## Recommendation

Upgrade to version 1.9.0 or later.

parseHTML() executes scripts in event handlers

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

7dcfa068630dd44e818035dc9ead307b7ffe58af7d24672d3d85574ffbf45d15

a991b7832d4d7b3322f56d9534626f63995bc1be780dcfbd0c0ad425960fedf0

db614bc51fdd0a965c9347c530674491e4ee158c8aa4eea58e257b5161d89579

33bf702be2ffcbed48262a52982b6236e3cbff887ad70c9b9893cca89fb41373

dc40dde0f288b1d0e4bd991d34999eb5070727d20d24bc8d67f01f1699694ab6

65dff83fc8eb89d36fdffad19ece57bf3d7ce0327a42737d440dc84b5004d643

UR5-sRH_pzeABajbidBLJl9iNfjGQNjws95fHuamNh0

google-site-verification

width=device-width, initial-scale=.921875

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

GoDaddy.com, LLC

PAPRIKAAPP.COM

Operations

Facebook, Inc.

THEFA-3

(function (d, s, id) {
            var js, fjs = d.getElementsByTagName(s)[0];
            if (d.getElementById(id)) return;
            js = d.createElement(s); js.id = id;
            js.src = "//connect.facebook.net/en_US/all.js#xfbml=1&appId=379695468764403";
            fjs.parentNode.insertBefore(js, fjs);
        }(document, 'script', 'facebook-jssdk'));

!function (d, s, id) { var js, fjs = d.getElementsByTagName(s)[0]; if (!d.getElementById(id)) { js = d.createElement(s); js.id = id; js.src = "//platform.twitter.com/widgets.js"; fjs.parentNode.insertBefore(js, fjs); } }(document, "script", "twitter-wjs");

var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
        document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));


      try {
        var pageTracker = _gat._getTracker("UA-12866384-5");
        pageTracker._trackPageview();
      } catch(err) {}
    


        $(document).ready(function () {
            // delegate calls to data-toggle="lightbox"
            $(document).delegate('*[data-toggle="lightbox"]', 'click', function (event) {
                event.preventDefault();
                return $(this).ekkoLightbox({
                    always_show_close: true,
                });
            });
        });
    

Requests	IP Address	Location	AS Autonomous System
20	172.217.208.95	United States	AS15169Google LLC
19	184.24.77.156	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
19	66.228.42.100	Cedar Knolls, New Jersey, United States	AS63949Akamai Connected Cloud
19	142.250.154.95	United States	AS15169Google LLC
77	4	-	-

Security Scan Report: paprikaapp.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History