_mkto_trk

SESSION

cf_clearance

The domain name 'ssoauth-api.ehs.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'ssoauth-api'. The registrable portion 'ehs' spans 3 characters split between one vowel and two consonants. Tokenizing the label suggests two words: eh, s. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

$cancel

${_csrf.parameterName}

companyDomain

html/b0/06/b0063b52-10c6-4cfa-9d03-3bf817bbf26c.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782

e16a2ac5f22e9b44bd07ee2a78c598dd0b5cf8c8f45d75853d2095022de31354

918d07ca886037e00548d75660b4091c14c2b1021e53bdbb1ad296494f752072

160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

ce01c41255d7e61cc44e865184559085737a98cf6911ef67f915692152b88852

ac4a90557e4bde8195e4a55dcbb4005310293746e30b72a3f7379c7584c8fc6a

c3a7b608ebfa8d1dfe658bc119e6236a6aaf878a779e7c560aa11dd30881a56a

d5fd173d00d9733900834e0e1083de86b532e048b15c0420ba5c2db0623644b8

982fa97eccae21e893548687e91b35de93861805706a57fa1eab73455f9ed72f

f7545b96ed2740220c349ae9deb614faf1f0f211d4cf710788e0790f74cc9715

bbdb0a56c8eb30d3b915526ca2bf873b4f73b05bb06be0ba790c9006abeb44fc

bb44291dddaecfc40f88da4192e3d4b9b5a6894ed6427a3aab4db63549fffdfa

a85866392118d4e9d6474f16c8d3654b039859e2085d6c01785129fd21422eb4

0f228a43269203810759e5cd623805de320366e21a21b114982dcd4bb76a1ef3

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

e2aab570a0b134d2e30158d8800834bc2ea2c18a0efefe2919434b83f0a151f5

d8ceebfaaa7543e0fe53e079279c0f38a624741df65df594201eccf8d064a158

1dff0d8bf83ce7b371657eb457845588b2847046e62811c4599e71a23ab223ab

viewport

Network Solutions, LLC

EHS.COM

Abuse

Google LLC

GOOGLE


    // PolyFill for IE11
    if (!String.prototype.includes) {
        String.prototype.includes = function(search, start) {
            'use strict';

            if (search instanceof RegExp) {
                throw TypeError('first argument must not be a RegExp');
            }
            if (start === undefined) { start = 0; }
            return this.indexOf(search, start) !== -1;
        };
    }

    if (!String.prototype.startsWith) {
        Object.defineProperty(String.prototype, 'startsWith', {
            value: function(search, rawPos) {
                var pos = rawPos > 0 ? rawPos|0 : 0;
                return this.substring(pos, pos + search.length) === search;
            }
        });
    }

    function toggleShow(id, enable) {
        const element = document.getElementById(id);
        const classNames = element.className;
        element.className = enable ? classNames.replace(' hide', ' show') : classNames.replace(' show', ' hide');
    }

    function toggleError(id, error) {
        const element = document.getElementById(id);
        const classNames = element.className;
        const errorClass = " error";
        element.className = error ? classNames + errorClass :
            classNames.includes(errorClass) ? classNames.substring(0, classNames.length - errorClass.length) : classNames;
    }

    function postOk() {

        submitForm()

    }

    function submitForm() {
        const returnUrl = "";

        let cname = "";
        if (document.forms[0]['companyDomain'].value) {
            cname = document.forms[0]['companyDomain'].value;
        }

        const destination = document.forms[0].action;
        const parser = getParsableHref(destination);

        document.forms[0].action = parser.href + "?login_hint=" +
            (!cname) ? '' : cname + "&ReturnUrl=" + returnUrl;
        document.forms[0]['$ok'].value = 'clicked';


        document.forms[0].submit();
    }

    function getCNameFromPath(href) {
        const redirect_uri = getParameterByName("redirect_uri");
        const hint_uri = getParameterByName('login_hint');

        if (redirect_uri) {
            const parsableHost = getParsableHref(redirect_uri);
            const host = parsableHost.host;
            let cname = host.substring(0, host.indexOf('.'));
            return (!cname) ? '' : cname;
        }

        if (hint_uri) {
            return hint_uri;
        }

        const parsableHost = getParsableHref(href);
        const host = parsableHost.host;
        let cname = host.substring(0, host.indexOf('.'));
        return (!cname) ? '' : cname;
    }

    function getParsableHref(href) {
        let parsable = document.createElement('a');
        parsable.href = href;
        return parsable;
    }

    // https://stackoverflow.com/questions/901115/how-can-i-get-query-string-values-in-javascript
    // Thanks to the solution here, we don't have to rely on apis that *may* not work on IE11
    function getParameterByName(name, url) {
        if (!url) {
            url = window.location.href;
        }
        name = name.replace(/[\[\]]/g, '\\$&');
        var regex = new RegExp('[?&]' + name + '(=([^&#]*)|&|#|$)'),
            results = regex.exec(url);
        if (!results) return null;
        if (!results[2]) return '';
        return decodeURIComponent(results[2].replace(/\+/g, ' '));
    }

    function postCancel() {
        document.forms[0]['$cancel'].value = 'clicked';
        document.forms[0].submit();
    }

    function postOnReturn(e) {

        var keycode;
        if (window.event) keycode = window.event.keyCode;
        else if (e) keycode = e.which;
        else return true;

        if (keycode == 13) {
            postOk();
            return false;
        } else {
            return true;
        }
    }

    function setFocus() {
        var platform = navigator.platform;
        if (platform != null && platform.indexOf("iPhone") == -1) {
            document.getElementById('companyDomain').focus();
        }
    }

    function setMobile(mobile) {
        /*var className = ' mobile',
            hasClass = (bodyTag.className.indexOf(className) !== -1);

        if (mobile && !hasClass) {
            bodyTag.className += className;

        } else if (!mobile && hasClass) {
            bodyTag.className = bodyTag.className.replace(className, '');
        }

        checkbox.checked = mobile || remember;

        if (mobile) {
            bodyTag.className += ' embedded';
        }*/
    }

    function getScreenWidth() {
        return (window.outerHeight) ? window.outerWidth : document.body.clientWidth;
    }

    var bodyTag = document.getElementsByTagName('body')[0],
        width = getScreenWidth(),
        remember = true;

    var checkbox = document.getElementById('rememberUsername');

    if (/Android|webOS|iPhone|iPod|BlackBerry|IEMobile|Opera Mini/i.test(navigator.userAgent)) {
        setMobile(true);
    } else {
        setMobile((width <= 480));
        window.onresize = function () {
            width = getScreenWidth();
            setMobile((width <= 480));
        }
    }

    // Reference for getting and setting cookies
    // https://stackoverflow.com/a/24103596
    function setCookie(name, value, days) {
        var expires = "";
        if (days) {
            var date = new Date();
            date.setTime(date.getTime() + (days * 24 * 60 * 60 * 1000));
            expires = "; expires=" + date.toUTCString();
        }
        document.cookie = name + "=" + (value || "") + expires + "; path=/";
    }

    function getCookie(name) {
        var nameEQ = name + "=";
        var ca = document.cookie.split(';');
        for (var i = 0; i < ca.length; i++) {
            var c = ca[i];
            while (c.charAt(0) == ' ') c = c.substring(1, c.length);
            if (c.indexOf(nameEQ) == 0) return c.substring(nameEQ.length, c.length);
        }
        return null;
    }

    function eraseCookie(name) {
        document.cookie = name + '=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT;';
    }




    window.onload = function (event) {
        const username = getCookie('rememberUsername');
        if (username) {
            document.forms[0]['remember_username'].checked = true;
            document.forms[0]['username'].value = username;
        }
    };


Requests	IP Address	Location	AS Autonomous System
11	104.16.224.241Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	142.250.154.95Google · CDN	United States	AS15169Google LLC
11	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
33	3	-	-

Security Scan Report: ssoauth-api.ehs.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History