English

experimentsId

_cfuvid

cf_clearance

The domain name 'securedocumentss.retool.com' uses the commercial generic top-level domain (.com), featuring subdomain 'securedocumentss'. The second-level label 'retool' is 6 characters long containing 3 vowels alongside 3 consonants. Breaking it apart gives 1 word: retool. Median word length comes out to six characters. No strong language cues emerged from the frequency lists.

3ad17fa73a0ec6447c5033731cf4c664df6f4298de084884f5230070cf43086d

5f43b3b2da64675d99fa9aa97668551ed9347347a7b043a97fa3912337ea3023

8279d975d84da19cc42ccd07c10106dc627fd86e6edd6543a48a954507705e0a

ea4f59d7b7a2b28f4c6aca7404a84ff389d203335301335aa3c4e7f4a9c5782f

38902733bb129990075444a6ba018eb8d07e1f212ceff3b0e74ff456e5730bb3

952a3fa7b31efaa49f2f453062403b36e7d3425bf579bf541f1cdde831753286

0269617f32fd9add433f081cc8d4cbe564c4556372be70401ded4f6c712bca80

5db194194c132417d9ccfb688ef5471a11dc8790aa6478c1fca7ba40d56681a4

519d6dfd4f1a5dc03deb32a8b00912467d23e22a31ba8f67c6f6252005cbdd3b

91fc5312010eeb2b3dad1a2114cdb31e33883f917b25174c79987791a2f64a9b

1fc0a30a1c843db4a198ddc734f13ac99c405a7637bc5a5ffadf1ac564dc43b1

c24f17bca5af4906b4a37664b84e02e2699961defb554c3bef14168b2724bcad

9a02e919c0cbc3a2cb77354388956820cd6225a7823102b70eb2e72e9e1c5bb6

2cbd091fab55e360fbb2d0063a61c114c7e8d1cdd01c8e840f4ce9128e70412d

ccb5e8f4a6e410f3a44daa7eed040bbfe5f2b4aea54a752ff709bd53b874e9ea

0e2c30d1788711c74fc2d97edb272f75d312e888264a242914f159cf665f34e4

1b99f5b398ca9d4e11f10f10e9c5756af2619c438f56b8f31910c6ab80ad9fff

096b487cd999cf40cf8b41e5181c01274f6aad3632a7e31168379b2461f0a41c

604aef4e032918503465800feca43ea0a3611867eb741b9f5be67aa7789e9f91

3e3757a6824d70806395df6054610e6bf913b60a42950b4925779bae188941ec

cc3990f962411e0038c6797dd9e3a69666f74918992c638d3ef256e7052eda0a

d3b9e1cccf154fcdc9ca909cc050f06bf05a40f66a07365c41b95f2ba1d79ebe

ad817846df92141a6ba4047ceea39588d8f1a82f923ec21269b6297a5c12d8dd

bf74279bb9fa66c9d4ed73a1dd2c6c72487c9b9104e87fe60a6dd7cafdab9241

a77d1f30e43a3c9b9ead44b76646e198b3a890cfd0635e9a2d533c40c938ca6f

46f5776aad94a318931ee25d26e045acc54ff87100f778043969673d5cd35eae

2ad4422748400ae5e35f7c8830c090e73f2bff56b8feddc20772146ac742c892

55407216e8151bfe310b2333215b2dcb045fcefccc317fc6a6bc308b9708c0d7

7d9b5f971880963e02747499aa8aa81d306ab583c3d1db543fd227e2413354a4

539fe438203ddde78b4946accd7b6dc65d9ec426d0d4d3720396e1c4994254b2

eeb1846e00a826ac44b430bcdc632e3c88ecda394350e92c54b5c29d790f1b29

049efa9f74b6778e30bc8603a5d3563821151c3a4320b1facb6a62b0f3d44546

aa293fa4312214844671276c0e6239f1470aead1130297fc32566620ef70383b

a477172be77a1f37bd4cf0e61f30e3a461974b25040427e24bc0bb8e35d3c5ad

8cfd075c7e07153d0103bb863545c034a1a5a89c44b09290b6a30b25d4e881ab

de32841c91a6eec138b8cf1d412c8ba6ad5ae76d20385f8c82e1f647ac831918

5ed7ddc791ec8c7ebc2f49cf007077c60127eb95565c8c5eefbcb3c631f1282b

4530aae0a6d1084d1130dc0df409a7f475c7f2dee4bf7741b4b79e1aa1517f05

1706e2b17b67dbbf81f33fae84f834b7f547e629e7b4d99ec28630141e4d5a7c

acec4e0852f43ed23f81e2f2d37715bb727b6570e0c6fe40963def03b206bc6f

dcad886afc37627cf0b54aa7c5d1269639e55bd5f1bcd1bf8be7486cf064f5d2

cdacd64d1d17162d63221382039cf25948c5df5b804b5984311a1e81b0d3ea95

914d12c10ccb95ce2f8934a632614a3714e117b589bd4f98cb65bf94f5f508f3

9a1e14ac06344b7ec8a0dc43ee88cf322361aa4bde57f15a27a800eef38d4540

referrer

theme-color

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Cloudflare, Inc.

RETOOL.COM

Abuse

Admin

Cloudflare-NOC

CLOUDFLARENET


      
      window.RETOOL_FRONTEND_FAKE_BACKEND_MODE = false;
      

      // #PageVisibility
      // Here we detect if user has suspended the browser page / tab since loading
      // See https://developer.mozilla.org/en-US/docs/Web/API/Page_Visibility_API
      window.RETOOL_PAGE_SUSPEND_DETECTED = document.visibilityState === 'hidden'
      function _detectVisibilityChange() {
        if (document.visibilityState === 'hidden') {
          window.RETOOL_PAGE_SUSPEND_DETECTED = true
          // Remove listener because we only detect it once
          document.removeEventListener('visibilitychange', _detectVisibilityChange)
        }
      }
      // Only listen for change if page is not already hidden
      if (document.visibilityState === 'visible') {
        document.addEventListener('visibilitychange', _detectVisibilityChange)
      }
    


      // https://stackoverflow.com/a/24103596
      function _getCookie(name) {
        var nameEq = (name += '=')
        var ca = document.cookie.split(';')
        for (var i = 0; i < ca.length; i++) {
          var c = ca[i]
          while (c.charAt(0) === ' ') c = c.substring(1, c.length)
          if (c.indexOf(nameEq) === 0) return c.substring(nameEq.length, c.length)
        }
      }

      // Prefer the __Host- prefixed xsrf cookie, fall back to the legacy name.
      // Mirrors the cascade in frontend/src/networking/cookieNames.ts — strict
      // `!== undefined` so a present-but-empty __Host- cookie is trusted rather
      // than falling through to the subdomain-injectable legacy name.
      function _getXsrfTokenCookie() {
        var v = _getCookie('__Host-xsrfToken')
        return v !== undefined ? v : _getCookie('xsrfToken')
      }

      // Here we do an eager fetch of user data as a performance optimization. By doing the
      // fetch here, in an inline script, we can fire it asap while the initial webpack
      // bundle loads and evals. This is strictly for performance optimization and non-essential,
      // if this fails to run or has errors then the normal application flow will handle the
      // fetch for user data.

      if (
        !RETOOL_FRONTEND_FAKE_BACKEND_MODE &&
        _getXsrfTokenCookie() && // presence of xsrf token means user is already authed
        window.fetch !== undefined && // make sure fetch api is available
        !new URL(location.origin).host.startsWith('login.') // avoid special login domain
      ) {
        window.RETOOL_USER_FETCH = fetch('/api/user', {
          credentials: 'same-origin',
          headers: {
            Accept: 'application/json',
            'Content-Type': 'application/json',
            'Relax-Login-Subdomain-Restrictions': false,
            'X-Xsrf-Token': _getXsrfTokenCookie(),
            'X-Retool-Client-Version': '4.10.0-3dc684f (Build 350315)',
          },
        }).then((r) => {
          if (r.ok) {
            return r.json()
          }
          return
        })
      }
    


      function parseAsBool(envValue, defaultValue) {
        if (envValue === 'true') {
          return true
        } else if (envValue === 'false') {
          return false
        } else {
          return defaultValue
        }
      }

      // Webpack uses slightly unconventional EJS templating which is why we need to duplicate this
      // snippet. ViteJS does it the "right way" and will be the what we keep once migration to
      // Vite is done, so lets just keep this duplicated for now.
      
      SANDBOX_DOMAIN = "https://retool-edge.com"
      ALLOW_SAME_ORIGIN_OPTION = parseAsBool("true", false)
      MAIN_DOMAIN = "retool.com"
      SAML_ENABLED = parseAsBool("false", false)
      CLIENT_ID = "716367306867-d861tjqj92gjb0uphcjt8gu2nvtf6e9t.apps.googleusercontent.com"
      RESTRICTED_DOMAIN = ""
      DISABLE_USER_PASS_LOGIN = parseAsBool("false", false)
      INCLUDE_COOKIES_IN_API_CALLS = ""
      VERSION_CONTROL_LOCKED = parseAsBool("false", false)
      IS_ADMIN = parseAsBool("false", false)
      WEBPACK_SHARED_BUILD_VERSION = "350315_3dc684f"
      STATSD_HOST = "__STATSD_HOST__"
      RETOOL_APP_VARIANT = 'vite'
      const retoolVersionForServiceWorker = '4.10.0-3dc684f (Build 350315)'
      console.log('Running ViteJS Retool app variant')
      // To get replaced during vite prod build with hash filename
      VITE_RUNTIME_HTML = 'runtime.M2M3OWU5.html'
      

      // Eager fetch of global experiments. Since global experiments can affect rendering they
      // should be loaded before initial render. Because of that it is best to start fetching
      // as early as possible to avoid blocking the initial render.
      window.RETOOL_EXPERIMENTS_ID_COOKIE_NAME = 'experimentsId'
      const credentials = INCLUDE_COOKIES_IN_API_CALLS || 'same-origin'
      if (_getCookie(window.RETOOL_EXPERIMENTS_ID_COOKIE_NAME) !== undefined) {
        // Only make the request if the experiments id idempotency cookie in order to get
        // deterministic values on each call
        window.RETOOL_GLOBAL_EXPERIMENTS_FETCH = fetch('/api/experiments', {
          credentials,
          headers: {
            Accept: 'application/json',
            'Content-Type': 'application/json',
            'X-Retool-Client-Version': '4.10.0-3dc684f (Build 350315)',
          },
        })
      }

      window.htmlLoadedAt = performance.now()
    

var entrypointChunk = 'https://retool-edge.com/assets_vjs/src-index-DxHvbBeS.js'


      function errorHandler() {
        var url = this._url
        var retryCount
        var storedRetryCount = localStorage.getItem('entrypoint-chunk-retry-count')
        if (storedRetryCount !== null) {
          retryCount = parseInt(storedRetryCount)
        } else {
          retryCount = 0
        }
        if (retryCount < 5) {
          localStorage.setItem('entrypoint-chunk-retry-count', retryCount + 1)
          window.location.reload()
        }
      }
      function createScriptElement(url) {
        var scriptTag = document.createElement('script')
        scriptTag.onerror = errorHandler
        scriptTag.type = 'module'
        scriptTag.crossorigin = 'crossorigin'
        scriptTag._url = url
        scriptTag.src = url
        scriptTag.setAttribute('data-marker', 'entrypoint-chunk')
        return scriptTag
      }
      if (entrypointChunk !== undefined) {
        document.body.appendChild(createScriptElement(entrypointChunk))
      }
    

Cloudflare Bot Management

HSTS

Cloudflare

Verify Your Identities | Retool

regular

✅ Low Risk - https://securedocumentss.retool.com/embedded/public/fd81bc4c-e1f0-42c2-9ad1-4dd391ed0f36

Requests	IP Address	Location	AS Autonomous System
19	104.18.31.107	United States	AS13335Cloudflare, Inc.
19	104.18.10.39	United States	AS13335Cloudflare, Inc.
38	2	-	-

Security Scan Report: securedocumentss.retool.com

Summary

AI Security Verdict

Safe Website

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History