adult content

government public service

corporate business

English

n2_session_id

The domain 'studios.nypost.com' uses the commercial generic top-level domain (.com) with subdomain 'studios'. The core label 'nypost' covers 6 characters holding one vowel versus five consonants. Tokenizing the label suggests two words: ny, post. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

html/cc/cf/cccfce44-80b0-40f0-a7b6-1ee0685b0b00.html.gz

default-src https://*.storied.co; base-uri 'self'; connect-src 'self' blob: https: wss://*.storied.co; font-src 'self' blob: data: https:; frame-src 'self' blob: data: https:; img-src 'self' blob: data: https:; manifest-src 'self'; media-src 'self' https:; object-src 'self' https:; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'report-sample' 'self' 'unsafe-inline' https:; upgrade-insecure-requests; worker-src https://*.storied.co;

default-src 'self' https://*.storied.co; connect-src 'self' https://*.storied.co https://cheeuzmud5.execute-api.us-east-1.amazonaws.com https://s3-us-west-1.amazonaws.com https://*.nypost.com; font-src 'self' blob: data: https:; frame-ancestors 'self'; frame-src https://*.youtube.com https://*.facebook.com https://*.spotify.com https://*.megaphone.fm https://*.storied.co; img-src 'self' blob: data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.storied.co https://cdnjs.cloudflare.com https://*.youtube.com https://*.amcharts.com https://*.s3.amazonaws.com; style-src 'self' 'unsafe-inline' https://*.storied.co; report-uri https://storied.report-uri.com/r/d/csp/reportOnly

87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

cc1cb5976581021daf3c5f2b9e314c517ba3b1f90a8f26b4272e63eb22a3d3e4

d7d31fb2a5e196aa8cf4809d3af24f9d33776c1bd32eeaad5b5280ba39cb09f2

7d4ecf6e2cf29af57d3fa56be29b45935866c2e72cb430bf0525bb3815bb545e

76dc4db20331f38f4c342232f6c772f4e2660a0ddf8572b1778ed6d92274c0b8

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

XSS via JQLite DOM manipulation functions in AngularJS

XSS may be triggered in AngularJS applications that sanitize user-controlled HTML snippets before passing them to JQLite methods like JQLite.prepend, JQLite.after, JQLite.append, JQLite.replaceWith, JQLite.append, new JQLite and angular.element.

angular vulnerable to regular expression denial of service via the $resource service

angular vulnerable to regular expression denial of service via the angular.copy() utility

Angular (deprecated package) Cross-site Scripting

angular vulnerable to regular expression denial of service via the <input type="url"> element

AngularJS improperly sanitizes SVG elements

AngularJS allows attackers to bypass common image source restrictions

angular vulnerable to super-linear runtime due to backtracking

AngularJS Incomplete Filtering of Special Elements vulnerability

AngularJS Regular expression Denial of Service (ReDoS)

End-of-Life: Long term support for AngularJS has been discontinued as of December 31, 2021

39078434b429fc37c43998024112fa3beb07290727a4920462e26c9c7e28ddbb

6f98314b6af29a1935276a265c8a3b5811b933db1948391d7b9559dfabae8c76

e255da78bd8237767c128331dd3513af0dc0efcf3a48c201660a3bc580b9abaf

35fb5b9937d0ab6fe1ae5c1f22ec7b5afda08b8151e342bfbe96e09883b50dfc

ef9d0de20aef21c0d3255ff12c790c9c0c082c1f23f84f51f88229caaffd8de4

d193d34ef6e44f37e630e93efd4f7cb575102d9b9ad95bccbaf7035c526a75b7

a14dd433a3b6318c6e9724d8b5d3929f33a21d4bd9e10d95f72ed4f6a32d7cdd

7b93bb529718a23ea4c6162dde83a34cf54b838bf977c9adf8ca98eeeb7f6b35

e76ea269ce2af87c9b35f5bcfc8d5af2e7c6e9a7bf974ae4070ed6e42cc52e08

24477a385e2e5d488b1ccbcf968fde659b3c86cea7c863ea51f833ad3c679f32

generator

application-name

Just over three years ago, a new player in private aviation joined the market and quickly took off. With their members-only business model and exclusive rights to the top short-haul aircraft, Wheels Up has revolutionized the private aviation industry, making it easier and more economical to fly private than ever before.

description

keywords

news_keywords

publish-date

Not All Road Trips Need Roads - Wheels Up

apple-mobile-web-app-title

Just over three years ago, a new player in private aviation joined the market and quickly took off. With their members-only business model and exclusive rights to the top short-haul aircraft, they've revolutionized the private aviation industry.

https://static.storied.co/gQlwL7PA4X5XM6b8/projects/XA78jPkNgR54rBnJ/assets/images/prv_8028e6850d05de359e72b798ae565546.jpg

twitter:card

twitter:creator

twitter:site

apple-mobile-web-app-capable

apple-mobile-web-app-status-bar-style

format-detection

mobile-web-app-capable

user-scalable=no, initial-scale=1.0, maximum-scale=1.0, width=device-width

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

MarkMonitor Inc.

NYPOST.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZON-CF

document.write('<base href="/wheels-up/">');


    window.n2 = window.n2 || {};
    window.n2.analytics = window.n2.analytics || {};
    window.n2.analytics.startTime = new Date().getTime();
  


    let img3 = document.createElement('img');
    data = data || {};
    data.load_time = getTimeDiff();
    img3.src = 'https://s3.amazonaws.com/storied-analytics/ads.png';
    img3.addEventListener('error', function () {
      let img8 = document.createElement('img');
      console.warn('Ad Blocking Enabled');
      data.event_type = 'n2_ad_tracking';
      data.client_timestamp = new Date().getTime();
      data.device_category = window.n2.device_category || 'unknown';
      data.load_time = getTimeDiff();
      img8.src = getLambdaAnalyticsUrl() + Date.now() + '&data=' + encodeURIComponent(JSON.stringify(data));
    });
  


    try {
      
__reach_config = {
  pid: '52d6ecd6e795480f9200003f',
  title: 'Not All Road Trips Need Roads',
  url: 'http://studios.nypost.com/wheels-up/',
  date: '2017-05-08 11:17:00',
  authors: ['Post Studios'],
  channels: ['dispatch', 'storied', 'wheelsup'],
  tags: ['wheelsup','travel','vacation','private aviation'],
    ignore_errors: false
};
(function(){
  var s = document.createElement('script');
  s.async = true;
  s.type = 'text/javascript';
  s.src = document.location.protocol + '//d8rk54i4mohrb.cloudfront.net/js/reach.js';
  (document.getElementsByTagName('head')[0] || document.getElementsByTagName('body')[0]).appendChild(s);
})();
    } catch (e) {
      console.error('Exception inside custom.js: ', e);
    }
  


    window.n2.buildinfo = {
      'revision': '3b3056c6f92412e15afd9e0d94e0897c33bddfbb',
      'branch_name': 'master',
      'build_number': '3748',
      'compiled_at': new Date(parseInt('1540288016425')),
      'version': '1.26.38'
    };
  

Requests	IP Address	Location	AS Autonomous System
18	18.245.86.85	United States	AS16509Amazon.com, Inc.
13	54.241.247.171	San Jose, California, United States	AS16509Amazon.com, Inc.
13	13.226.244.4	United States	AS16509Amazon.com, Inc.
13	104.17.24.14	United States	AS13335Cloudflare, Inc.
13	3.90.194.102	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
13	16.15.228.184	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
13	65.8.131.43	United States	AS16509Amazon.com, Inc.
13	3.174.46.74	United States	AS16509Amazon.com, Inc.
13	16.15.253.43	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
122	9	-	-

Security Scan Report: studios.nypost.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History