suspicious phishing

English

_hp2_ses_props.870388005

XSRF-TOKEN

_cs_s

_cs_c

_hp2_id.870388005

cf_clearance

_cs_id

__cf_bm

The domain 'bethard.freshchat.com' uses the commercial generic top-level domain (.com) with subdomain 'bethard'. Its registrable label 'freshchat' stretches across 9 characters with 2 vowels and seven consonants. Breaking it apart gives 2 words: fresh, chat. Median word length comes out to 4.5 characters. No strong language cues emerged from the frequency lists.

username

password

html/bf/b5/bfb5a85c-c8ec-41ae-85d7-b0ed0c654e07.html.gz

script-src https: 'unsafe-eval' 'unsafe-inline'; worker-src blob: https: 'unsafe-eval' 'unsafe-inline'

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs

script-src 'report-sample' 'nonce-4oGqS53YdGIwUZvYOnPBYA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

script-src 'report-sample' 'nonce-u806U-NOjY1xT0bPo1zBqw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

a-mkhv1lpgftgk

reCAPTCHA

c-mkhv1lpgftgk

recaptcha challenge expires in two minutes

0b1bf0ba071662ebd49cde2146940aaf3e1ddd6eed66889a88e6c3cf14880cfd

14a7df9ba4179430d9788afc01d714eb6857057f3d32f2dc853bfb179d5bf21d

f27bfd982e387016ed29962764c53b49519a5343bb30950075d653935c71724a

74d6518e18a9ab4a80f1e981cbde4834b1fbcac26cad622c8822ab13095987b2

43e54e65480c8d83a521a4297560ef732f60afe57dcecaeeb209a5493d455fc1

9baa0ccb6f06bfa9cb1c33268685c8ff45e969230bc29c74105963c5e2e2239e

8790bcadcd77b41977e66df1096a1498f850e9e921ec0fd48a71e69bbb30b579

95077a0ed809e4e397e218bb457db8702a90e5548db7aecb7b0b8cdf3a558e47

187629e46673e143780825c4250fa6da07f45a06cd9d72717149232c0614ce78

9deff620c7df078718d4bb87415ae57a7185d4ebfd2455858144d56782cc05dc

17aa7d389cd9a50bab35b15c750bdfac9ce19d251780213aafeb6bce1d8fa203

ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e

3NNj0GXVktLOmVKwWUDendk4Vq2qgMVDBDX+Sni48ATJl9JBj+zF+9W2HGB3pvt6qowOihTbQgTeBm9SKbdTwYAAABfeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=

A6iYDRdcg1LVww9DNZEU+JUx2g1IJxSxk4P6F+LimR0ElFa38FydBqtz/AmsKdGr11ZooRgDPCInHJfGzwtR+A4AAACXeyJvcmlnaW4iOiJodHRwczovL3d3dy5yZWNhcHRjaGEubmV0OjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

width=device-width,initial-scale=1,shrink-to-fit=no

viewport

theme-color

robots

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

GoDaddy.com, LLC

FRESHWORKS.COM

Abuse Account

Fastly RIR Administrator

Fastly Network Operations

Fastly, Inc.

SKYCA-3

parcelRequire=function(e,t,n){var i,r="function"==typeof parcelRequire&&parcelRequire,s="function"==typeof require&&require;function o(n,i){if(!t[n]){if(!e[n]){var a="function"==typeof parcelRequire&&parcelRequire;if(!i&&a)return a(n,!0);if(r)return r(n,!0);if(s&&"string"==typeof n)return s(n);var c=new Error("Cannot find module '"+n+"'");throw c.code="MODULE_NOT_FOUND",c}l.resolve=function(t){return e[n][1][t]||t},l.cache={};var u=t[n]=new o.Module(n);e[n][0].call(u.exports,l,u,u.exports,this)}return t[n].exports;function l(e){return o(l.resolve(e))}}o.isParcelRequire=!0,o.Module=function(e){this.id=e,this.bundle=o,this.exports={}},o.modules=e,o.cache=t,o.parent=r,o.register=function(t,n){e[t]=[function(e,t){t.exports=n},{}]};for(var a=0;a<n.length;a++)try{o(n[a])}catch(e){i||(i=e)}if(n.length){var c=o(n[n.length-1]);"object"==typeof exports&&"undefined"!=typeof module?module.exports=c:"function"==typeof define&&define.amd&&define((function(){return c}))}if(parcelRequire=o,i)throw i;return o}({b2lR:[function(e,t,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.default=void 0;var i=function(e){var t=e.inlineScript,n=e.src,i=e.onload,r=e.defer,s=document.createElement("script");if(t){var o=document.createTextNode(t);s.appendChild(o)}else s.onload=i,s.src=n,s.defer=r;document.getElementsByTagName("head")[0].appendChild(s)};n.default=i},{}],ZV6f:[function(e,t,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.default=function(){for(var e={},t=function(t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},n=0;n<arguments.length;n++)t(arguments[n]);return e}},{}],dNWB:[function(e,t,n){"use strict";var i=s(e("./utils/inject-scripts")),r=s(e("./utils/shallow-merge.js"));function s(e){return e&&e.__esModule?e:{default:e}}function o(e,t){for(var n=0;n<t.length;n++){var i=t[n];i.enumerable=i.enumerable||!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(e,i.key,i)}}function a(e,t,n){return t&&o(e.prototype,t),n&&o(e,n),e}function c(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}!function(e){var t=window.performance,n=function(e,n){return!t||"Start"===e&&null!==this.fromMetric||t[n](this.id+"-"+e),this},s=function e(i){var s=this;c(this,e),this.id=(new Date).getTime()+"-"+t.now()+"-"+Math.random(),this.duration=i.duration||0===i.duration?i.duration:null,this.fromMetric=i.fromMetric||null,this.logName=i.logName||null,this.meta=(0,r.default)(i.meta)||{},this.scheduleType=i.scheduleType||"immediately",this.startTime=i.startTime||null,this.useEarliestStartMark=i.useEarliestStartMark||!0,this.startMarkName=this.fromMetric&&"timeOrigin"!==this.fromMetric?"".concat(this.fromMetric+"-Start"):"".concat(this.id+"-Start"),this.endMarkName=this.id+"-End",this.isActive=!0,["Start","End"].forEach((function(e){s["mark"+e]=n.bind(s,e,"mark"),s["clear"+e]=n.bind(s,e,"clearMarks")})),this.clearMeasurements=function(){["Start","End"].forEach((function(e){return s["clear"+e].call(s)}))},this.assignMeta=function(e){return s.meta=(0,r.default)(s.meta,e),s.meta},this.calculateDuration=this.getPayload=this.remove=function(){return s},this.send=function(){return s.isActive=!1,s}},o=function(){function n(){c(this,n),this.config={},this.userContext={},this.isActiveBrowserTab="visible"===document.visibilityState,this._events={},this._eventsToTrackOnce={}}return a(n,[{key:"initialize",value:function(e,t){this.config=e,this.setContext(t)}},{key:"getEventById",value:function(e){return this._events[e]||null}},{key:"removeEventById",value:function(){}},{key:"sendEvents",value:function(e){for(var t in this._events)Object.prototype.hasOwnProperty.call(this._events,t)&&(this._events[t].scheduleType===e||"immediately"===this._events[t].scheduleType)&&this._events[t].isActive&&this._events[t].send()}},{key:"setContext",value:function(e){this.userContext=(0,r.default)(this.userContext,e)}},{key:"setCurrentRoute",value:function(e,t){this.currentRouteName=e,this.currentRouteURL=t}},{key:"trackEvent",value:function(e){var t=new s(e);return this._events[t.id]=t,t}},{key:"trackEventOnce",value:function(e,t){if(!this._eventsToTrackOnce[e]){if(void 0===t)return null;var n=!1!==t.shouldPersist;t.logName=t.logName||e,this._eventsToTrackOnce[e]=this.trackEvent(t),this._eventsToTrackOnce[e].trackOnceLogName=e,this._eventsToTrackOnce[e].shouldPersist=n,n||(this._eventsToTrackOnce[e].send=function(){var t=this._eventsToTrackOnce[e];return t.isActive=!1,delete this._eventsToTrackOnce[e],t}.bind(this,e))}return this._eventsToTrackOnce[e]}},{key:"injectAnalyticsCollector",value:function(e){var t=e.cdnDomain?e.cdnDomain:"https://fe-perf-assets.freshworks.com";return e.src=t+"/v2/analytics-2.0.0-beta.18.js",(0,i.default)(e),!0}},{key:"isAnalyticsLite",get:function(){return!0}},{key:"isAnalyticsEnabled",get:function(){return!(!t||!e)}}]),n}();if(!window.FW_RUM){var u=new o;e.shouldAutoLoadAnalytics=!("shouldAutoLoadAnalytics"in e)||e.shouldAutoLoadAnalytics,u.config=e,window.FW_RUM=u,window.ANALYTICS_INTERFACE_HISTORY_LENGTH=history.length;var l={preloadData:{},preloadAssets:{},cssAssets:{},vendorScript:{},frontendScript:{},primaryScript:{},secondaryScript:{},htmlParsing:{fromMetric:"timeOrigin"}};Object.keys(l).map((function(e){return u.trackEventOnce(e,l[e])})),e.shouldAutoLoadAnalytics&&document.addEventListener("DOMContentLoaded",(function(){window.FW_RUM.injectAnalyticsCollector({defer:!0})}),{once:!0}),window.addEventListener("visibilitychange",(function(){"visible"===document.visibilityState&&0===t.getEntriesByName("PerformanceTracking:FirstTabFocusEnd").length&&t.mark("PerformanceTracking:FirstTabFocusEnd")}))}}({scheduler:{metricsAdapters:[{name:"trigmetry",options:{endpoint:"https://rum.haystack.es/freshid/analytics",authToken:"121db32190fbe328d284ee40d2521506",schedulable:!0}}]}})},{"./utils/inject-scripts":"b2lR","./utils/shallow-merge.js":"ZV6f"}]},{},["dNWB"])


      try{
        window.heap=window.heap||[],heap.load=function(e,t){window.heap.appid=e,window.heap.config=t=t||{};var r=t.forceSSL||"https:"===document.location.protocol,a=document.createElement("script");a.type="text/javascript",a.async=!0,a.src=(r?"https:":"http:")+"//cdn.heapanalytics.com/js/heap-"+e+".js";var n=document.getElementsByTagName("script")[0];n.parentNode.insertBefore(a,n);for(var o=function(e){return function(){heap.push([e].concat(Array.prototype.slice.call(arguments,0)))}},p=["addEventProperties","addUserProperties","clearEventProperties","identify","resetIdentity","removeEventProperty","setEventProperties","track","unsetEventProperty"],c=0;c<p.length;c++)heap[p[c]]=o(p[c])};
        var pathsToRedact = ['invite', 'reset-password', 'unlock', 'set-password'];
        var REDACT_STR = '********';
        var regExp = new RegExp('\/+(' + pathsToRedact.join('|') + ')+\/');
        var PROPS_TO_REDACT = {
          pageview_properties: ['path', 'previous_page'],
          session_properties: ['path', 'referrer'],
          event_properties: ['href']
        };
        function getStringFromMatches(str, matches) {
          return str.substring(0, matches.index) + matches[0] + REDACT_STR
        }
        function redactedValueIfRequired(payload, prop) {
          var str = payload[prop]
          var matches = str.match(regExp);
          if (matches && matches.length) {
            payload[prop] = getStringFromMatches(str, matches);
          }
        }
        heap.load(870388005, {
          rewrite: function (payload) {
            for (var prop in PROPS_TO_REDACT) {
              var attributes = PROPS_TO_REDACT[prop];
              for (var i = 0; i < attributes.length; i++) {
                if (payload[prop] && payload[prop][attributes[i]]) {
                  redactedValueIfRequired(payload[prop], [attributes[i]]);
                }
              }
            }
            return payload;
          }
        });
      }catch(e){}
      onHeapLoad();
    

Requests	IP Address	Location	AS Autonomous System
13	142.250.186.67	Unknown	Unknown
10	18.245.46.120	Unknown	Unknown
9	162.159.140.147	Unknown	Unknown
9	216.58.206.35	Unknown	Unknown
8	151.101.194.217	Unknown	Unknown
6	65.9.175.60	Unknown	Unknown
5	142.250.186.131	Unknown	Unknown
3	172.66.0.145	Unknown	Unknown
2	3.171.214.63	Unknown	Unknown
2	44.196.222.69	Unknown	Unknown
73	66	-	-

Security Scan Report: bethard.freshchat.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History