English

CSRFtoken

webvpnlogin

webvpnLang

The domain 'mistrasvpn-us-nj.mistrasgroup.com' uses the commercial generic top-level domain (.com) and includes subdomain 'mistrasvpn-us-nj'. The second-level label 'mistrasgroup' is 12 characters long split between four vowels and eight consonants. Word splitting yields three words: mist, ras, group. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

tgroup

tgcookieset

csrf_token

group_list

Login

html/e8/34/e834a53b-42af-4bc7-9523-35faa45db795_nodriver.html.gz

default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self'; base-uri 'self'; block-all-mixed-content

56a34d69c74856589cda233ce475e6d50a291f5190cc7313bcba5b020cd32a73

5c246bf80ac1ecd6ae0190830370f451277c510e62088efb7fbc2c55b49aef43

958217a23fddeeca787d0bfd4e70ddb326d9acb93758f3efb4e6b49bf2b2af4c

cbe178de1253ccbe2c0bfc7e9716334a95cfb41745b22a5f030d95f50e1810e1

f307a948723f6605bbea2130b9974f33a1ec015d381a7ff1e027b11fe26b7e06

13687ee2dccb2645316d2ec26b74dfc66f1b9476070788a5e3084c8ae571c715

HandheldFriendly

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

GoDaddy.com, LLC

MISTRASGROUP.COM

Comcast Cable Communications, Inc.

Comcast Cable Communications, LLC

Comcast

CCCH3-4


if(self != top) top.location.href="/+CSCOE+/logon.html";



var blinkCounter=0;
var dap;

if (typeof navigator === 'object' && 'serviceWorker' in navigator && typeof navigator.serviceWorker === 'object' && 'register' in navigator.serviceWorker) {
    navigator.serviceWorker.getRegistration('/').then(function(registration) {
        if (registration) {
            registration.unregister().then(function() {
                location.reload();
            });
        }
    });
}
 
function scrollToLogonForm() {
    document.location.hash = "form_title_text";
}

function dap_message(){

      if(!dap) return;
      
      if(dap.style.visibility == "visible"){
         dap.style.visibility = "hidden"
      }else{
         dap.style.visibility = "visible"
      }
      blinkCounter++;
      if(dap.style.visibility == "visible" && blinkCounter > 5)
	      clearInterval(dap_interval)
} 

function blinkDapMessage(){
        dap=document.getElementById("dap");
        if(dap){
           dap_interval = setInterval('dap_message()',1000)
        }
}

function showDapMessage(){
        obj=document.getElementById("dap_message");
        if(obj){
           obj.style.visibility = "visible"
           obj.style.top = (document.body.clientHeight - obj.clientHeight)/2+"px"
           obj.style.left = (document.body.clientWidth - obj.clientWidth)/2+"px"
        }

        obj1=document.getElementById("dap_message_shield");
        if(obj1){
           obj1.style.visibility = "visible"
           obj1.style.top = (document.body.clientHeight - obj.clientHeight)/2+"px"
           obj1.style.left = (document.body.clientWidth - obj.clientWidth)/2+"px"
           obj1.style.height = obj.clientHeight+"px"
           obj1.style.width = obj.clientWidth+"px"
        }
} 

function hideDapMessage(){
        obj=document.getElementById("dap_message");
        if(obj){
           obj.style.visibility = "hidden"
        }

        obj1=document.getElementById("dap_message_shield");
        if(obj1){
           obj1.style.visibility = "hidden"
        }
} 









function base64_encode(data) {
  var b64 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
  var o1, o2, o3, h1, h2, h3, h4, bits, i = 0,
    ac = 0,
    enc = '', 
    tmp_arr = []; 
  if (!data) {
    return data;
  }
  do {
    // pack three octets into four hexets
    o1 = data.charCodeAt(i++);
    o2 = data.charCodeAt(i++);
    o3 = data.charCodeAt(i++);
    bits = o1 << 16 | o2 << 8 | o3; 
    h1 = bits >> 18 & 0x3f;
    h2 = bits >> 12 & 0x3f;
    h3 = bits >> 6 & 0x3f;
    h4 = bits & 0x3f;
    // use hexets to index into b64, and append result to encoded string
    tmp_arr[ac++] = b64.charAt(h1) + b64.charAt(h2) + b64.charAt(h3) + b64.charAt(h4);
  } while (i < data.length);
  enc = tmp_arr.join('');
  var r = data.length % 3;
  return (r ? enc.slice(0, r - 3) : enc) + '==='.slice(r || 3); 
}
function updateLogonForm(group,reload){

    if(reload[group]){
    	var obj=document.getElementById("login");
    	if(obj) {
           obj.disabled=true
        }
        document.cookie = "tg=1" + base64_encode(group) + "; path=/; secure";
    	document.location = "/+CSCOE+/logon.html";
        return
    }
}
function PrefillError() {
      var obj = document.getElementById("logon_message_text");
      if (obj) {
         obj.innerHTML="Your certificate is invalid for the selected group";
         obj.style.fontWeight="bold";
         obj.style.color="red";
      }
      obj = document.getElementById("Login");
      if (obj) {
         obj.disabled=true;
      }
}



function formSubmit() {
    disableButton();

    var primary_username = document.getElementById("username"),
        secondary_username = document.getElementById("secondary_username");

    if ((primary_username && !validate_username(primary_username)) ||
        (secondary_username && !validate_username(secondary_username))) {
            document.location = "/+CSCOE+/logon.html?a0=15&a1=&a2=&a3=1#form_title_text";
            return false;
    }


     return true;

}


 document.cookie = "CSRFtoken=" + "5101703c56ad4be324dc40dd713f9b17ee293503" + "; path=/; secure"; 

HSTS

✅ Low Risk - https://mistrasvpn-us-nj.mistrasgroup.com

Requests	IP Address	Location	AS Autonomous System
10	50.206.225.194	Mount Laurel, New Jersey, United States	AS7922Comcast Cable Communications, LLC
10	1	-	-

Security Scan Report: mistrasvpn-us-nj.mistrasgroup.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History