news media journalism

English

OptanonConsent

s_sq

eupubconsent-v2

__pil

_pctx

s_vi

ch_sid

s_cc

OptanonAlertBoxClosed

s_pv

s_fid

LANG_CHANGED

LANG

__pid

_pcid

s_p6

Domain 'pages.bostonglobe.com' uses the commercial generic top-level domain (.com) and includes subdomain 'pages'. The registrable portion 'bostonglobe' spans 11 characters containing 4 vowels alongside seven consonants. Tokenizing the label suggests 2 words: boston, globe. Median word length comes out to 5.5 characters. No strong language cues emerged from the frequency lists.

html/fe/87/fe877188-a133-47ea-9934-c450a22683b3.html.gz

piano-id-3ktZ0

User authentication interface

offer-0-DniUW

Payment and account management

da2264f18082e946239805dbe7f2d0f1709f1a6e85e6aa6557049fb53ebee663

e6f6d66459cdaf4ccd8b6a49546f78a77215acef509b0c771738e5c93ddfc2e9

15a5a919d4b2c63b74bac3c0752f7faa08675d5ecaab478032a0232013a2ba6a

0a3a853e4da6234c1518a1ead9bfe98f6d17de9e33201838f742c2ca27d3d8a5

1ab718b147b3d41ebcea440f78cd0f253d1b0182eb176b9162fbe92c074b5eb2

c549a513eec03a43767662914a935ab099759c9b187ea23f016f1259462428de

a1fca1cd23046508ff002e08280009b0faf69de48be01a36a991ffd8216f81b2

5812ece79bb9e15ad9d75fae937019c762777e30f8b6ee1d43c591d5d86dda1a

b7f68b3ea86b7c061d0bcde09b872562ef2d18324330cfe5a0a4021c5e3b4abd

99430e69ef3fa3eea4fd49b6957e9326f38bb6b5f57766f9796b387f409a4dad

9674e5e9025a08cdf66e8c3d35cdacb62587e19286f33ce7752a05550f9dce71

04b4a3f7b6b35fbdbf90d26c1a90b02f35a8863ebb189d234db583f5fdb99443

f7c439ef85646d5f8f9315c229280bea356af66ad56d2eee09d03ebedd2c2d2f

fe097e31e68a80da82fab0c2e6f313c2fa0e21a87da1f911a5f1d4ff55ed5d03

269c614f28c2a9470a6f1c3642a1734986a949f9272a0ce52e1c9d7eb888028f

668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404

48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d

9685145fc6691742536e349a2953828a84fd729012f34f00cb09b8a26f713b6f

42e8aa892f98807c2b3f49f7c83002b605e357c9463e8a3fbaeffa805fae5bcc

7135861f8a8768636a90c4fb777082380c84194319273624e88004ab2b9d98d2

04142857a43c3bf04f03b182ac95d7a519e9c85ec50f44247edd23f951232d98

d2b400c65cddf356b9056899cc2e34c1df2964e5437eed73e184634679cbbe77

b460d56dd27b62df333537db25d28e7e5ace33535bf4c7d7d767bdbc687a8dd9

c1e9510079704b81b083e51700f25a88ddd444272ae498f3b5cd06deb164bfd1

b433ad68366acd0575b8a9f0524c6b3218fa0caff79d7988de59ec11f9f4173f

eb85b1493d5bfea3abaac93a954d68d2a7e52833250c4649c8718b2671018eb2

9252008ae2c88071408d11a3fa2ade79d194239405f2753f5471b984fdc9947f

8a4692e0ce9d06bab525501aa85639bb10b8395c0ac46c76a5dc1c589e826486

ef7d95d1662b02dd3ff995495dc037a9d4742568a9c1fcc76b60745e914b1b2b

029c6fd53cfc27e6c610da7ab7255c09c478b55c6de64c52ad68c23cd25268b6

0111c2264214307492e55fa6f282362a14123dc5e2852d65a1749cac1659789c

0068f50cd7685dd1191a494ae657377f21797fc573ac5f9b1e7c9bafe8fa4d8d

eb06946054b05d7ebe88169caf2b11f711c605edcfca6cf4ceca0aaa0c36c967

a696a1298270af6e5c547cd0fd5df4b455ec486d9f832ad9d1b07e9f632ccb88

53d28285c66d5c7ed5e13c2acb65c3918f04ef33cf93995f822881feb16faeb7

714194c2ca26a9f5f5e6d15faeaba538b20e7d585d2dd3b7310f243ea07849f9

1c643289a94761a6540a29434436ea2afdc894cc63a3a65a6ab23cf17f2b74f5

181a2a258c2dd09252e5fff60c305e78749be192d7109632658509edb7462a13

d474f2b4fccb56f07045df49f00e2ca5552543b226df7d7e541b46c758ed0064

3aeb1d44b735a6f2eafef078ce681745d3f64c2391157aa0af78ae6b11ffb0af

48e7de9f1ffb2851b84611e3d1c7e5a61525a3b68a01ec2ac551603eae0e1b48

parseHTML() executes scripts in event handlers

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

The attribute usemap can be used as a security exploit

Universal CSP bypass via add-on in Firefox

XSS via JQLite DOM manipulation functions in AngularJS

XSS may be triggered in AngularJS applications that sanitize user-controlled HTML snippets before passing them to JQLite methods like JQLite.prepend, JQLite.after, JQLite.append, JQLite.replaceWith, JQLite.append, new JQLite and angular.element.

angular vulnerable to regular expression denial of service via the $resource service

angular vulnerable to regular expression denial of service via the angular.copy() utility

Angular (deprecated package) Cross-site Scripting

angular vulnerable to regular expression denial of service via the <input type="url"> element

AngularJS improperly sanitizes SVG elements

AngularJS allows attackers to bypass common image source restrictions

AngularJS Incomplete Filtering of Special Elements vulnerability

AngularJS Regular expression Denial of Service (ReDoS)

End-of-Life: Long term support for AngularJS has been discontinued as of December 31, 2021

7d2ac93f420e2a92b9be10c1728515625698ed1c0e4765816cad6567816a7671

b869ffff12d2cbe481ca51027ffb967caa4a8a76422129121c51aab9807f447f

d88bbab1f81ec25c3aac4813f0289b14fbae5a3200d97a67ef1da11172844791

width=device-width,initial-scale=1,shrink-to-fit=no

viewport

theme-color

html/fe/87/fe877188-a133-47ea-9934-c450a22683b3_nodriver.html.gz

BostonGlobe.com Log In

Name106, Inc.

BOSTONGLOBE.COM

Adobe TechOps Information Security

Abuse

Network Operations Center

Adobe SaaS Network Engineering

Adobe DNS Team

Adobe Inc.

AS-CLOUD-ENGINEERING

tp = window.tp || [];
			tp.push(['setUsePianoIdUserProvider', true]);

			const environment = 'prod';

			// Production Piano TinyPass Endpoint
			if (environment === 'prod') {
				tp.push(['setEndpoint', 'https://auth-vx.bostonglobe.com/api/v3']);
				tp.push(['setComposerHost', 'https://auth-c2.bostonglobe.com']);
				tp.push(['setPianoIdUrl', 'https://auth.bostonglobe.com']);
				tp.push(['setStaticDomain', 'https://auth-cdn.bostonglobe.com']);
				tp.push(['setAid', 'q9okYIrmpu']);
			} else {
				// Sandbox and Localhost Piano TinyPass Endpoint
				tp.push(['setEndpoint', 'https://vx.arc-staging.bostonglobe.com/api/v3']);
				tp.push(['setComposerHost', 'https://c2.arc-staging.bostonglobe.com']);
				tp.push(['setPianoIdUrl', 'https://auth.arc-staging.bostonglobe.com']);
				tp.push(['setStaticDomain', 'https://cdn.arc-staging.bostonglobe.com']);
				tp.push(['setAid', 'b34r4Inbsu']);
			}

			tp.push(["init", function() {

				var isHandlingNavigation = false;
				var target_url = null;
				// set initial testing offer
				var offerId = 'OF3M4BG97FEB';
				var termId = 'TMTXABBTRSJP';
				var fetchURLBase = 'https://sandbox.piano.io/id/api/v1/identity/userinfo?lang=en_US';
				if (environment === 'prod') {
					offerId = 'OFIXJ5XSV549';
					termId = 'TMA1NSOBF1Z7';
					fetchURLBase = 'https://api.piano.io/id/api/v1/identity/userinfo?lang=en_US';
				}

				// Callbacks and Piano configuration
				tp.push(["setRequestUserAuthForLinkedTerm", false]);

				// Set linked term selection callback
				tp.push(['setLinkedTermSelected', (sessionId) => {
					tp.cookie.set("piano_session_id", sessionId, {
						"domain": `.${window.location.hostname.split(".").slice(-2).join(".")}`,
						"path": "/"
					});
					// this make sure redirect happen after set Link term finish without reclick
					window.location.href = target_url.href;
				}]);

				// Check if User is not logged in or doesn't have accesses
				if (!tp.pianoId.isUserValid() || !tp.cookie.get("__tac")) {
					console.log("User is valid for session_id creation");
					// Create hidden div
					let noneDiv = document.createElement("div");
					noneDiv.setAttribute("id", "hidden-offer");
					noneDiv.setAttribute("style", "display: none; position: absolute");
					document.body.appendChild(noneDiv);
					tp.offer.show({offerId: offerId, displayMode: 'inline', containerSelector: '#hidden-offer'});
					// Generate session ID when navigating to subscribe.bostonglobe.com
					document.addEventListener("click", (event) => {
						// Only care about left-clicks without modifier keys
						if (
							event.defaultPrevented || event.button !== 0 || event.metaKey ||
							event.ctrlKey || event.shiftKey || event.altKey
						) {
							return;
						}

						const link = event.target.closest("a");
						if (!link || !link.href) return;
						target_url = new URL(link.href, window.location.href);
						if (
							target_url.host === "subscribe.bostonglobe.com" &&
							!isHandlingNavigation
						) {
							event.preventDefault();
							isHandlingNavigation = true;
							tp.offer.startLinkedTermCheckout({
								offerId,
								termId,
							});
						}
					});
				}
				// Handle user returning from subscribe.bostonglobe.com
				if (tp.pianoId.isUserValid() &&
					tp.cookie.get("piano_session_id")) {
					let customFields = [{
						field_name: 'session_id',
						value: tp.cookie.get("piano_session_id")
					}];
					console.log("Storing session_id in custom fields"); // Just for debug purposes
					// This endpoint will update the user, change it to a production one after testing
					fetch(fetchURLBase +
						'&aid=' + tp.aid +
						'&access_token=' + tp.pianoId.getToken(), {
							method: 'PUT',
							headers: {
								'Content-Type': 'application/json; charset=UTF-8'
							},
							body: JSON.stringify({
								uid: tp.pianoId.getUser().uid,
								form_name: 'session_id_form',
								custom_field_values: customFields
							})
						}
					).then(response => {
						if (response.status === 200)
							tp.cookie.remove("piano_session_id", {
								"domain": `.${window.location.hostname.split(".").slice(-2).join(".")}`,
								"path": "/"
							});
						return console.log(response.json()); // Just for debug purposes
					});
				}
			}])

Requests	IP Address	Location	AS Autonomous System
17	104.18.26.17	United States	AS13335Cloudflare, Inc.
16	63.140.62.139	United States	AS16509
16	104.18.144.126	United States	AS13335Cloudflare, Inc.
16	104.18.86.42	United States	AS13335Cloudflare, Inc.
65	4	-	-

Security Scan Report: pages.bostonglobe.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History