finance banking

government public service

social media

English

ai_session

OpenIdConnect.nonce.%2BHY%2B0hdKduDPaq2OHBCDSiP037LVIE2fTvfVQBG8fQg%3D

SessionKeyCookie

_cfuvid

ai_user

The domain 'act.earthjustice.org' uses the non-profit oriented generic top-level domain (.org) with subdomain 'act'. Its registrable label 'earthjustice' stretches across 12 characters with 5 vowels and seven consonants. Breaking it apart gives two words: earth, justice. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

html/c7/20/c72050a7-bbef-4ed5-ad62-bcd0658cfd67.html.gz

default-src * 'unsafe-eval' 'unsafe-inline' data: blob:

appId=cid-v1:ccd92c0b-19c7-485c-b607-cbfe2344efa3

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

0534acd8820c048b473e5f88135ccb5456710a3cc93c15a9a5bf56045e7cc235

bde9be4cbe799089a419225f87c2a9986043f6c7cb55853aaadab7200713f136

25d64b1ec0b422a5df19046e3a6ef88021138da8c3b97bcad56fb687e212e906

8861d75dd05fe9a988066676d0c764c545e9e08fe906b3fce73ec2c254da729c

352e6565e6a633f52f17b79550585c527d1fb8275603bb8a900de0a42d913d34

The attribute usemap can be used as a security exploit

Universal CSP bypass via add-on in Firefox

XSS via JQLite DOM manipulation functions in AngularJS

XSS may be triggered in AngularJS applications that sanitize user-controlled HTML snippets before passing them to JQLite methods like JQLite.prepend, JQLite.after, JQLite.append, JQLite.replaceWith, JQLite.append, new JQLite and angular.element.

angular vulnerable to regular expression denial of service via the $resource service

angular vulnerable to regular expression denial of service via the angular.copy() utility

Angular (deprecated package) Cross-site Scripting

angular vulnerable to regular expression denial of service via the <input type="url"> element

AngularJS improperly sanitizes SVG elements

AngularJS allows attackers to bypass common image source restrictions

angular vulnerable to super-linear runtime due to backtracking

AngularJS Incomplete Filtering of Special Elements vulnerability

AngularJS Regular expression Denial of Service (ReDoS)

End-of-Life: Long term support for AngularJS has been discontinued as of December 31, 2021

0475a3777e2faa996696175661d4c78e3af0683b67115626d285d074d1faf283

4b2f0c7d5a48b3b35869cd92857737fee15ab6aad90a2363dc168af88720ce1a

8405b758644cb94946dc90dba6df5159b99ca09c38d29432cde912d24822cbae

e83f4872b30bf525450c03371e6098404c81666204bc9872077e1a47d6396ea9

dedfae832465df8552f4a68de96005ba867918733c33fdd10fbea787785b4034

width=device-width, initial-scale=1, user-scalable=0, minimal-ui

viewport

google

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

html/c7/20/c72050a7-bbef-4ed5-ad62-bcd0658cfd67_nodriver.html.gz

Online Actions

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


        // This code is provided by Microsoft
        // ReSharper disable VariableUsedInInnerScopeBeforeDeclared
        // ReSharper disable StatementIsNotTerminated
        // ReSharper disable VariableUsedOutOfScope
    function cookieSettingsAcceptCookiesAi() {
             var sdkInstance = "appInsightsSDK"; window[sdkInstance] = "appInsights";
             var aiName = window[sdkInstance], aisdk = window[aiName]
                 || function (n) {
                     var o = { config: n, initialize: !0 }, t = document, e = window, i = "script";
                     setTimeout(function () { var e = t.createElement(i); e.src = n.url || "https://az416426.vo.msecnd.net/scripts/b/ai.2.min.js", t.getElementsByTagName(i)[0].parentNode.appendChild(e) });
                     try { o.cookie = t.cookie }
                     catch (e) { }
                     function a(n) { o[n] = function () { var e = arguments; o.queue.push(function () { o[n].apply(o, e) }) } } o.queue = [], o.version = 2;
                     for (var s = ["Event", "PageView", "Exception", "Trace", "DependencyData", "Metric", "PageViewPerformance"]; s.length;)a("track" + s.pop());
                     var r = "Track", c = r + "Page"; a("start" + c), a("stop" + c);
                     var u = r + "Event";
                     if (a("start" + u), a("stop" + u), a("addTelemetryInitializer"), a("setAuthenticatedUserContext"), a("clearAuthenticatedUserContext"), a("flush"), o.SeverityLevel = { Verbose: 0, Information: 1, Warning: 2, Error: 3, Critical: 4 }, !(!0 === n.disableExceptionTracking || n.extensionConfig && n.extensionConfig.ApplicationInsightsAnalytics && !0 === n.extensionConfig.ApplicationInsightsAnalytics.disableExceptionTracking)) {
                         a("_" + (s = "onerror"));
                         var p = e[s];
                         e[s] = function (e, n, t, i, a) {
                             var r = p && p(e, n, t, i, a);
                             return !0 !== r && o["_" + s]({ message: e, url: n, lineNumber: t, columnNumber: i, error: a }), r
                         }, n.autoExceptionInstrumented = !0
                     } return o
                 }(
                     {
                         instrumentationKey: "def53ae9-b7c9-41b7-abab-9c939b304095",
                         enableAjaxErrorStatusText: true,
                         enableRequestHeaderTracking: true,
                         enableResponseHeaderTracking: true
                     }
                 );
             window[aiName] = aisdk;
             // ReSharper restore StatementIsNotTerminated
             // ReSharper restore VariableUsedInInnerScopeBeforeDeclared
             aisdk.queue.push(function () {
                 aisdk.addTelemetryInitializer(function (envelope) {
                     var telemetryItem = envelope.data;
                     var telemetryBaseData = envelope.baseData;

                     // remove auth from req headers
                     if (telemetryBaseData.properties && telemetryBaseData.properties.requestHeaders) {
                         var requestHeaders = telemetryBaseData.properties.requestHeaders;
                         Object.keys(requestHeaders).forEach(function (key) {
                             if (key.toLowerCase() === "authorization") {
                                 delete requestHeaders[key];
                             }
                         });
                     }

                     // Set custom properties
                     telemetryItem["Application"] = 'Forms-prod';
                     // For custom events, make sure we have the URL of the current page
                     if (envelope.baseType == "EventData" || envelope.baseType == "RemoteDependencyData") {
                         telemetryItem["Location"] = telemetryItem["Location"] || window.location.href;
                     }

                     return true;
                 });
             });
             aisdk.trackPageView({});
    }

        
            cookieSettingsAcceptCookiesAi();
        


    


        window.ngp = window.ngp || {};
        window.ngpvan = window.ngpvan || {};
        CKEDITOR_BASEPATH = '/Scripts/ckeditor/';
    

((function(){ try { angular.module('ngAnimate'); return true; } catch(err) { return false;}})())||document.write('<script src="/js/ngAnimate"><\/script>');

Requests	IP Address	Location	AS Autonomous System
3	142.251.37.3	United States	AS15169Google LLC
2	104.18.22.199	United States	AS13335Cloudflare, Inc.
2	142.251.141.106	United States	AS15169Google LLC
2	216.58.206.72	United States	AS15169Google LLC
2	104.17.25.14	Netherlands	Unknown
2	13.107.213.45	Netherlands	Unknown
2	20.50.88.235	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
15	7	-	-

Security Scan Report: act.earthjustice.org

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History