news/blog

forum

English

AWSALBCORS

AWSALB

The domain name 'incollect.com' uses the commercial generic top-level domain (.com) without a subdomain. The core label 'incollect' covers 9 characters with 3 vowels and 6 consonants. Splitting it apart reveals two words: in, collect. Median word length is 4.5 characters. No strong language cues emerged from the frequency lists.

name

pass

remember_me

form_build_id

form_id

current_url_for_redirect

email

trade

html/a6/aa/a6aa7550-125d-40ef-a55d-9557730e3207.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

50ea31c0452a869e41485170ab3ca8d90a7824b99860f4c707c97ed728598a3f

1df85af51093366f26a8c0cb5eb888b0a18c6a0873b3865aa893cb8f67ac8bbb

9fd6bd85c876f4bbaec4e2333dd47c8b1ae3981bee052480c005aeb140b85b9f

47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4

222b5e0b89eebb3777ce3650e3b4ac1a5633ff19d05ef37d2a761c5b41214ec9

13620cc565679ee11351aeec916d43cc30b583c93906a1cadf9f16bae217f83e

c019baf132d0ef44c1aa3f4302b07a8b2f517a7e328c10ff82cfedffd10b18b3

dc8770f40c1162beeb8b3a5881030c0c950e1947084d003008ac152482a6e288

b964b69cae484e10c8ff70e3057734f8b70cdff4158a84a7735c810a6550880b

670b4787f52d321132219ecfdb7b94fed3bfb591d780f1b5ae4d756ff9bcb3d6

8255add226d8d12e13d66224182027da345f3217397d952858b2ccb1081964e7

Versions of jquery prior to 1.9.0 are vulnerable to Cross-Site Scripting. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. This allows attackers to execute arbitrary JavaScript in a victim's browser.


## Recommendation

Upgrade to version 1.9.0 or later.

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

The attribute usemap can be used as a security exploit

Universal CSP bypass via add-on in Firefox

XSS via JQLite DOM manipulation functions in AngularJS

XSS may be triggered in AngularJS applications that sanitize user-controlled HTML snippets before passing them to JQLite methods like JQLite.prepend, JQLite.after, JQLite.append, JQLite.replaceWith, JQLite.append, new JQLite and angular.element.

angular vulnerable to regular expression denial of service via the $resource service

angular vulnerable to regular expression denial of service via the angular.copy() utility

Angular (deprecated package) Cross-site Scripting

angular vulnerable to regular expression denial of service via the <input type="url"> element

AngularJS improperly sanitizes SVG elements

AngularJS allows attackers to bypass common image source restrictions

AngularJS Incomplete Filtering of Special Elements vulnerability

AngularJS Regular expression Denial of Service (ReDoS)

End-of-Life: Long term support for AngularJS has been discontinued as of December 31, 2021

XSS in the `altField` option of the Datepicker widget

XSS in the `of` option of the `.position()` util

XSS Vulnerability on text options of jQuery UI datepicker

XSS when refreshing a checkboxradio with an HTML-like initial text label 

5d58806972e5621f7a91fb28c37978877762fa1b6c58dc31418c88d24f13da4a

ff6858e05819b07dbe9bf2c273220ae7d8e73818f93259c5ffec1d66ffeb9f00

206fd44986270d21b070db2c389ce9c9c003cb811190b858e1f49c328bb84fbb

9100edbafa12a032ad8c3f6007c06a41c1da1ec10cb503a947f891bfdcea2afa

2fc68497fe38e21466ca54275e18627da643d69be8d997a1949688a51e7a8bf8

97d85d0b0274a51bc71b5ef984e50a53ff7990a9aae241120fdeb9c158a14f6d

Generator

Connect with dealers and galleries on Incollect to explore curated design, antiques, fine art, vintage & mid-century modern furniture, décor, and jewelry.

description

ROBOTS

Incollect | Vintage & Mid-Century Modern Furniture, Fine Art, Jewelry & Home Décor

viewport

robots

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Amazon Registrar, Inc.

INCOLLECT.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Technologies Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AT-88-Z

window.dataLayer = window.dataLayer || [];
    dataLayer.push({'username':'Anonymous User','event':'Click','USER_ID': '0'});

(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
      new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
      j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
      'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
    })(window,document,'script','dataLayer','GTM-KCZH59T');

Incollect

jQuery.extend(Drupal.settings, {"basePath":"\/","pathPrefix":"","setHasJsCookie":0,"ajaxPageState":{"theme":"cms_publisher_light","theme_token":"rxS9lIlbacgck2DMeEPpx_VSz3OaSq6OVMYEpSum1AQ","js":{"sites\/all\/modules\/custom\/cms_settings\/View\/js\/plugins.management.js":1,"sites\/all\/libraries\/jcrop\/js\/jquery.Jcrop.min.js":1,"sites\/all\/modules\/custom\/cms_settings\/CMS.js":1,"sites\/all\/modules\/custom\/cms_settings\/inc_drupal_legacy.js":1,"sites\/all\/modules\/custom\/cms_navigation_menu\/Service\/cmsNavigationMenu.js":1,"sites\/all\/modules\/custom\/publisher_menus\/View\/js\/publisher_menus.js":1,"sites\/all\/modules\/custom\/cms_admin_panel\/View\/js\/cms_admin_panel.js":1,"sites\/all\/modules\/custom\/cms_settings\/View\/js\/app.js":1,"sites\/all\/themes\/cms_publisher_light\/js\/selectmenu\/jquery.ui.selectmenu.js":1,"sites\/all\/modules\/custom\/cms_settings\/View\/js\/services\/GenericServiceDataLoading.js":1,"sites\/all\/modules\/custom\/cms_navigation_menu\/View\/js\/drawerjs.js":1,"sites\/all\/modules\/custom\/cms_settings\/inc_cookie_consent.js":1,"sites\/all\/modules\/custom\/cms_settings\/View\/plugins\/fat-nav\/jquery.fatNav.js":1,"sites\/all\/themes\/cms_publisher_light\/js\/bxSlider\/jquery.bxSlider.min.js":1,"sites\/all\/modules\/custom\/listing\/View\/js\/jquery.form.js":1,"sites\/all\/libraries\/jquery-tokeninput\/src\/jquery.tokeninput.js":1,"sites\/all\/modules\/custom\/publisher_user\/View\/js\/cmsUserProfile.js":1,"sites\/all\/modules\/custom\/publisher_uicomponents\/View\/js\/jquery.validate.min.js":1,"sites\/all\/modules\/custom\/cms_settings\/View\/plugins\/device\/device.js":1,"sites\/all\/modules\/custom\/cms_settings\/View\/js\/imagesloaded.pkgd.min.js":1,"sites\/all\/libraries\/incollect_bundleOUTPUT\/incollect_bundle\/output\/homepage_bundle_v3_82_17.js":1,"sites\/all\/modules\/custom\/cms_homepage\/View\/CmsHomepage.js":1,"misc\/jquery-extend-3.4.0.js":1,"misc\/jquery-html-prefilter-3.5.0-backport.js":1,"misc\/jquery.once.js":1,"misc\/drupal.js":1,"misc\/ui\/jquery.ui.core.min.js":1,"misc\/ui\/jquery.ui.widget.min.js":1,"misc\/ui\/jquery.ui.button.min.js":1,"misc\/ui\/jquery.ui.mouse.min.js":1,"misc\/ui\/jquery.ui.draggable.min.js":1,"misc\/ui\/jquery.ui.position.min.js":1,"misc\/ui\/jquery.ui.position-1.13.0-backport.js":1,"misc\/ui\/jquery.ui.resizable.min.js":1,"misc\/ui\/jquery.ui.dialog.min.js":1,"misc\/ui\/jquery.ui.dialog-1.13.0-backport.js":1,"misc\/ui\/jquery.ui.autocomplete.min.js":1,"misc\/ui\/jquery.ui.datepicker.min.js":1,"misc\/ui\/jquery.ui.datepicker-1.13.0-backport.js":1,"modules\/locale\/locale.datepicker.js":1,"misc\/ui\/jquery.ui.tabs.min.js":1,"misc\/ajax.js":1,"misc\/progress.js":1},"css":{"modules\/system\/system.messages.css":1,"sites\/all\/modules\/date\/date_popup\/themes\/datepicker.1.7.css":1,"sites\/all\/themes\/cms_publisher_light\/css\/vendor\/jquery-ui-css\/jquery.ui.selectmenu.css":1,"sites\/all\/libraries\/jquery-tokeninput\/styles\/token-input-facebook.css":1,"sites\/all\/libraries\/jquery-tokeninput\/styles\/token-input.css":1,"sites\/all\/libraries\/jcrop\/css\/jquery.Jcrop.min.css":1,"sites\/all\/themes\/zen\/system.menus.css":1,"sites\/all\/themes\/cms_publisher_light\/css\/main.css":1}},"professionals":{"base_url":"https:\/\/www.incollect.com"},"cms_settings":{"base":"https:\/\/www.incollect.com"},"admin_var":{"base_url":"https:\/\/www.incollect.com"},"jquery":{"ui":{"datepicker":{"isRTL":false,"firstDay":0}}}});


  /* <![CDATA[ */
  var google_conversion_id = 962292710;
  var google_custom_params = window.google_tag_params;
  var google_remarketing_only = true;
  /* ]]> */


Requests	IP Address	Location	AS Autonomous System
26	216.58.206.74	United States	AS15169Google LLC
20	54.167.19.244	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
20	104.16.175.226	United States	AS16509Amazon.com, Inc.
20	3.229.136.4	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
20	216.58.206.35	United States	Unknown
20	54.192.35.123	United States	Unknown
20	142.250.186.42	United States	Unknown
146	7	-	-

Security Scan Report: incollect.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies14

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History