OptanonConsent

Within the .sh country-code top-level domain, 'auth.api.platform.sh' is registered with subdomain 'auth.api'. The core label 'platform' covers 8 characters split between two vowels and 6 consonants. Splitting it apart reveals 1 word: platform. No strong language cues emerged from the frequency lists.

html/ca/b2/cab28b53-9623-4149-b455-8b85a24cf45a_fallback.html.gz

Platform.sh

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

0214c2153bf5416172db410ef5aca88104454fcb77e06345c44e132b161118f3

f1a61277e3f902f50ab42015d8b07218db9b7601bb0967e54a52bfdcb4fa7e81

de99930005b58d9ea985d029da063facc281e5dcc6449fd71100be9a73e4ce0c

50a02460c0df5bdb3a5c48b2cef2a9b04f97bd5aaf7490a8e42694e0eb1ba9c8

2c185846f81731042177efa38034e2dc82bfc739f6f22ec2452888c69d5c4c86

98ba225f76c13813d852e21c0a1a528cf6beff495a1f16e5b83171f98b0a8d32

59fd3e06001972cb7073fd054b781d73d645ed90cdd5dba348ea0fec2ad18335

d6938424b0431fadf1cbe0dab4db4fcd4681cfc606497ce558cc7cf259365156

72165e03541358045ad8f2cd6241e4d9123a32cfed08b3d729d5c74177bed7ca

40bae9499aa964c20cc3cd07f5fc100b20f254736f77b3b733909a5a2bcf9a7a

d266cebe579de643751bf3548d09af1b3bb2120cbb0aa64b59c8a84871cd8768

e2de85007c28d01d2a973cbd4efd90bda8f52771727ea5db199bd425f0720a37

base-uri 'self'; object-src 'none'; connect-src 'self' https://*.platformsh.site https://*.platform.sh https://*.platform.sh https://*.platform.sh https://*.platform.sh https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://api.github.com https://gitlab.com l2x5n4czt1ph https://l2x5n4czt1ph.statuspage.io https://*.plugins.pltfrm.sh https://platform.sh https://*.platform.sh https://*.blackfire.io https://*.plat.farm https://api.stripe.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net/ https://*.sentry.io https://cdn.cookielaw.org https://*.onetrust.com/request/v1/consentreceipts https://www.google.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://*.platform.sh https://*.platformsh.site https://*.plugins.pltfrm.sh https://js.stripe.com https://hooks.stripe.com https://js.driftt.com https://www.google.com/ https://www.googletagmanager.com https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com; img-src 'self' https://*.platform.sh https://platform.sh/ https://*.blackfire.io https://avatars.githubusercontent.com https://secure.gravatar.com/ https://www.gravatar.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://www.google.com/ads/ https://cdn.cookielaw.org https://*.googleusercontent.com https://v2assets.zopim.io https://px.ads.linkedin.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://cdn.statuspage.io https://js.driftt.com https://t.contentsquare.net https://cdn.cookielaw.org https://*.zopim.com https://*.googleadservices.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.redditstatic.com https://static.ads-twitter.com https://googleads.g.doubleclick.net https://bat.bing.com  wss://*.zopim.com data: munchkin.marketo.net static.reo.dev; style-src 'self' https://*.blackfire.io https://*.platformsh.site https://fonts.googleapis.com 'unsafe-inline' blob:; worker-src 'self' blob:; 

width=device-width, initial-scale=1.0, user-scalable=yes

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


      (function(w,d,s,l,i){w[l]=w[l]||[];
        w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js', });
        var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';
        j.async=true;j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl+'&gtm_auth=&gtm_preview=&gtm_cookies_win=x';
        f.parentNode.insertBefore(j,f);
      })(window,document,'script','dataLayer','GTM-MR3BJL');

Google

✅ Low Risk - https://auth.api.platform.sh/

Requests	IP Address	Location	AS Autonomous System
55	34.107.247.10	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
14	104.18.87.42	United States	AS13335CLOUDFLARENET
4	34.120.195.249	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
3	13.226.244.70	United States	AS16509AMAZON-02
3	104.18.86.42	United States	AS13335CLOUDFLARENET
3	172.64.155.119	United States	AS13335CLOUDFLARENET
3	142.250.186.131	United States	AS15169GOOGLE
3	2600:1901:0:5e8a::	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
3	2a06:98c1:3104::6812:2089	United States	AS13335CLOUDFLARENET
3	2a06:98c1:310d::ac40:9b77	United States	AS13335CLOUDFLARENET
82	21	-	-

Security Scan Report: auth.api.platform.sh

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History