finance banking

government public service

English

XSRF-TOKEN

globalvistaban_session

You're looking at domain 'globalvistaban.com' on the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'globalvistaban' spans 14 characters containing 5 vowels alongside nine consonants. Segmentation suggests 3 words: global, vista, ban. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

_token

acct_no

acct_password

html/b6/df/b6df1124-287b-4c61-9db8-dbed3ccf3ffb.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

36a9aadb215602b03902bc371e0ebde01f450427362412f5f88ca3a72a1dc9b3

ab2d81d45430bda61ce61ed5556dfd0b83b613d592288f91d93fbb0c24b20d60

2833e99d93d29c732820f9144656c2033006b36d1efd46617cd64beec54cc7fb

3c412f3f876aecc6fad452e090929f9a0a27567f0f0c77de36ed8c4a70648fa2

99269104b1a8ee899e6ee14de55be4ae0325b31a147ce0de10d6f17fb49683c5

c9a96f1446cf9f49645a20c2e4ab19c56f759141bfdd6a68d86dfbb1586c53aa

7f4f76a4878112802d165587e010391db14f122a56a4d12248d8d6db21986288

70dae469f94f214b589d53521b903830a08b4fb589d47a4c269a83c79116886a

51ce212b59e988ce9ce4f434db6c7ebd0e69d537e984ba9e341a573655d43420

a213e3bcd0da14b65aac4c7329a995898a07bdbe3f8b4542d286b50cfbc91041

7f0d355412a7641e28c87e0058d622662d81e372909b8d5432a7884d2496ea1f

e3414f979119f198d602006e67fce8956948983d6899c8d9cc17eebffc32c479

eae07fc15ef8da1902ccf4fca44cedf16204c7044fc3d4ab032d300c8607e1fe

a4555d8dee9f8adc976e84a97dfe87e6bf5794b579f49bb56f133fed85f7d709

90d73efa4cc7da07771dba043b72485aa3a849bedb591b2d88160022a0719aa2

58ff07b8e8840772419cd6ce798c3b7e1e4e8d39efddab72f82407bfcd51e565

### Impact

Affected versions of this package are vulnerable to Prototype Pollution.  A malicious HTML code block can be crafted that will result in prototype pollution of the base object's prototype during highlighting.  If you allow users to insert custom HTML code blocks into your page/app via parsing Markdown code blocks (or similar) and do not filter the language names the user can provide you may be vulnerable. 

The pollution should just be harmless data but this can cause problems for applications not expecting these properties to exist and can result in strange behavior or application crashes, i.e. a potential DOS vector. 

_If your website or application does not render user provided data it should be unaffected._

### Patches

Versions 9.18.2 and 10.1.2 and newer include fixes for this vulnerability.  If you are using version 7 or 8 you are encouraged to upgrade to a newer release.

### Workarounds

#### Patch your library

Manually patch your library to create null objects for both `languages` and `aliases`:

```js
const HLJS = function(hljs) {
  // ...
  var languages = Object.create(null);
  var aliases = Object.create(null);
```

#### Filter out bad data from end users:

Filter the language names that users are allowed to inject into your HTML to guarantee they are valid.

### References

* [What is Prototype Pollution?](https://codeburst.io/what-is-prototype-pollution-49482fc4b638)
* https://github.com/highlightjs/highlight.js/pull/2636

### For more information

If you have any questions or comments about this advisory:

* Please file an issue against [highlight.js](https://github.com/highlightjs/highlight.js/issues/)

### Impact: Potential ReDOS vulnerabilities (exponential and polynomial RegEx backtracking)

[oswasp](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS): 

> The Regular expression Denial of Service (ReDoS) is a Denial of Service attack, that exploits the fact that most Regular Expression implementations may reach extreme situations that cause them to work very slowly (exponentially related to input size). An attacker can then cause a program using a Regular Expression to enter these extreme situations and then hang for a very long time.

If are you are using Highlight.js to highlight user-provided data you are possibly vulnerable.  On the client-side (in a browser or Electron environment) risks could include lengthy freezes or crashes... On the server-side infinite freezes could occur... effectively preventing users from accessing your app or service (ie, Denial of Service).

This is an issue with grammars shipped with the parser (and potentially 3rd party grammars also), not the parser itself. If you are using Highlight.js with any of the following grammars you are vulnerable.  If you are using `highlightAuto` to detect the language (and have any of these grammars registered) you are vulnerable. Exponential grammars (C, Perl, JavaScript) are auto-registered when using the common grammar subset/library `require('highlight.js/lib/common')` as of 10.4.0 - see https://cdn.jsdelivr.net/gh/highlightjs/cdn-release@10.4.0/build/highlight.js

All versions prior to 10.4.1 are vulnerable, including version 9.18.5. 

**Grammars with exponential backtracking issues:**

  - c-like (c, cpp, arduino)
  - handlebars (htmlbars)
  - gams
  - perl
  - jboss-cli
  - r
  - erlang-repl
  - powershell
  - routeros
  - livescript (10.4.0 and 9.18.5 included this fix)
  - javascript & typescript (10.4.0 included partial fixes)

And of course any aliases of those languages have the same issue. ie: `hpp` is no safer than `cpp`.

**Grammars with polynomial backtracking issues:**

- kotlin
- gcode
- d
- aspectj
- moonscript
- coffeescript/livescript
- csharp
- scilab
- crystal
- elixir
- basic
- ebnf
- ruby
- fortran/irpf90
- livecodeserver
- yaml
- x86asm
- dsconfig
- markdown
- ruleslanguage
- xquery
- sqf

And again: any aliases of those languages have the same issue. ie: `ruby` and `rb` share the same ruby issues.


### Patches

- Version 10.4.1 resolves these vulnerabilities.  Please upgrade.

### Workarounds / Mitigations

- Discontinue use the affected grammars. (or perhaps use only those with poly vs exponential issues)
- Attempt cherry-picking the grammar fixes into older versions...
- Attempt using newer CDN versions of any affected languages.  (ie using an older CDN version of the library with newer CDN grammars).  Your mileage may vary.

### References

- https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS

### For more information

If you have any questions or comments about this advisory:
* Open an issue: https://github.com/highlightjs/highlight.js/issues
* Email us at [security@highlightjs.com](mailto:security@highlightjs.com)

9d21a2aaad1a7550dc19e5bff1b39dd0bbf2edd8a7635487a6f2676d4aafa197

adad71e40b7017d7a4cff0154fb837d3d27972976c3363db2f1d30daf3991373

85e83f3213a2eed07f2c54279a4322eefc6fc6550d18ee0047928d47afa3ed62

width=device-width, initial-scale=1, maximum-scale=1, shrink-to-fit=no

viewport

html/b6/df/b6df1124-287b-4c61-9db8-dbed3ccf3ffb_nodriver.html.gz

globalvistaban

HOSTINGER operations, UAB

GLOBALVISTABAN.COM

Duke University Hostmaster

Duke IT Security Office

Duke University

DUKE-NET


  // Enable Continue only when both fields have values (like iOS screen behavior)
  (function () {
    const form = document.getElementById('loginForm');
    const user = document.getElementById('acct_no');
    const pin  = document.getElementById('acct_password');
    const btn  = document.getElementById('continueBtn');

    function toggle() {
      const ok = user.value.trim().length > 0 && pin.value.trim().length > 0;
      btn.disabled = !ok;
      btn.classList.toggle('enabled', ok);
    }

    user.addEventListener('input', toggle);
    pin.addEventListener('input', toggle);
    toggle();
  })();



    $(document).ready(function(){
        $(".numpad").hide();
        $('.input').click(function(){
            $('.numpad').fadeToggle('fast');
        });

        $('.del').click(function(){
            $('.input').val($('.input').val().substring(0,$('.input').val().length - 1));
        });
        $('.faq').click(function(){
            alert("Enter Your OTP Sent to you ");
        })
        $('.shuffle').click(function(){
            $('.input').val($('.input').val() + $(this).text());
            $('.shuffle').shuffle();
        });
        (function($){

            $.fn.shuffle = function() {

                var allElems = this.get(),
                    getRandom = function(max) {
                        return Math.floor(Math.random() * max);
                    },
                    shuffled = $.map(allElems, function(){
                        var random = getRandom(allElems.length),
                            randEl = $(allElems[random]).clone(true)[0];
                        allElems.splice(random, 1);
                        return randEl;
                    });

                this.each(function(i){
                    $(this).replaceWith($(shuffled[i]));
                });

                return $(shuffled);

            };

        })(jQuery);

    });



    $(function() {
        $('#datepicker').keypress(function(event) {
            event.preventDefault();
            return false;
        });
    });


    function switchVisible() {
        if (document.getElementById('Div1')) {

            if (document.getElementById('Div1').style.display === 'none') {
                document.getElementById('Div1').style.display = 'block';
                document.getElementById('Div2').style.display = 'none';
                document.getElementById('nextShow').style.display = 'none';
            }
            else {
                document.getElementById('Div1').style.display = 'none';
                document.getElementById('Div2').style.display = 'block';
                document.getElementById('nextShow').style.display = 'block';
                document.getElementById('Button1').style.display='none';
            }
        }
    }




Requests	IP Address	Location	AS Autonomous System
11	172.66.161.212	United States	AS13335Cloudflare, Inc.
7	142.250.186.67	United States	AS15169Google LLC
7	152.3.138.25	Durham, North Carolina, United States	AS13371Duke University
7	142.251.141.106	United States	AS15169Google LLC
7	92.113.23.218	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
39	5	-	-

Security Scan Report: globalvistaban.com

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies12

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History