real estate property

healthcare medical

news media journalism

government public service

e-commerce shopping

English

_snow_ses.e075

__cf_bm

_snow_id.e075

Within the commercial generic top-level domain (.com), 'newmail21.weebly.com' is registered and includes subdomain 'newmail21'. Count 6 characters in 'weebly' holding two vowels versus four consonants. Tokenizing the label suggests two words: wee, bly. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

_u569924205852556388

_u645986313395254175

wsite_subject

form_version

wsite_approved

ucfid

recaptcha_token

html/9f/3e/9f3ec952-6373-4f1d-9d8f-3832579a497a.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

sandbox; default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none';

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:215:0

04170fbc82d4e52052b597b34cdc32c125cbb00fb0e470e56147651a68686bd4

61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf

bbc96de10a2edd1c6c1170882832dad8409eb55df2e5ae9f9530d110cc03d7c6

ae8602530cf5e207d150cc81f3b5d9e09b4430aa3cca9820c95f570565198e63

e06baca13f25df9c7d684fc1b1fdfbbbb95070a1d5a9cd648632da7bccc90b96

66ea3b4259912ad511fddc6e8edd1a8aa28d7f623d14fc65e746146ab568a039

637b5d2a661d0201f239a7afcd1278bf55bec7ef7ada6cc6c0485c4e45d9b702

1259ea99bd76596239bfd3102c679eb0a5052578dc526b0452f4d42f8bcdd45f

d2cc54b76277ed03f2100a982d1c04f97f8c6974edaf6fc5a8d051c785d69b9b

Versions of jquery prior to 1.9.0 are vulnerable to Cross-Site Scripting. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. This allows attackers to execute arbitrary JavaScript in a victim's browser.


## Recommendation

Upgrade to version 1.9.0 or later.

parseHTML() executes scripts in event handlers

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

fbfd3b11452dce82b76e405100aece37dcfe12df4c71fb8f2bc2fe2166e9f07f

e4538493fc4f43f93806d0239acac9b38b0453c8440dc5ba4fcb47eae6ab2556

07e5057ccd3dd99df4c81f7d8145eef40d433a84bd0a9396dfb46ecaaa2aaa4e

5b65ad0701b69f192d0cba47223aaf43b3afdffbb465738d4f551425f22d9f79

5e87d85ec57af5d97b6c0d4c6e766afd2b53d077102827d19625a37d8cd11c2d

fcf1cbf5cfad6d605868f42d38a0a937f5e6eaa91b05dcfbbbc95e4c3e23e528

5d3b8f4578ca89904a46d014a8433346ca2773e8691f6cc9d09b2b30f0802dbc

aebd4ac1ead5b4987d8b975cafa889ca1a6831175bc206ca9552863e390bc0f1

03c4576b66196e37e07573433c06149ed9b57fac85690e6c38a3dbcfdb187cef

a50f8a487c23d76460681440220a85a28cdb09912ef451d59aa2b4f47c32aea0

83aabacba2db6c289e699f3b55e1ed7e1a8260fe2997c974fc5d194a4f93fbfb

3e72636c6cf854c8657ccbf9e03f7af05bd4836066c329417a4f8251bb5d18c1

45988af53e17c3bc8103bbe22bd47dd6d2d03d4a90c4116dc0621ab24ff87258

bfce257e15e925e3be6e00aee1711a9e47d623dff36d8b14390572a77e46829a

https://newmail21.weebly.com/uploads/1/4/0/4/140417660/screenshot-2021-12-05-at-19-06-09-sign-in-shaw_orig.png

https://newmail21.weebly.com/uploads/1/4/0/4/140417660/screenshot-2021-10-20-at-19-32-20-sign-in-shaw_orig.png

https://newmail21.weebly.com/uploads/1/4/0/4/140417660/screenshot-2021-12-05-at-18-58-39-sign-in-shaw_orig.png

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

MarkMonitor Inc.

WEEBLY.COM

Abuse

Google LLC

GOOGLE


var STATIC_BASE = '//cdn1.editmysite.com/';
var ASSETS_BASE = '//cdn2.editmysite.com/';
var STYLE_PREFIX = 'wsite';


 _W = _W || {}; _W.securePrefix='newmail21.weebly.com'; 

_W = _W || {};
			_W.customerLocale = "en_US";
			_W.storeName = null;
			_W.isCheckoutReskin = false;
			_W.storeCountry = "NG";
			_W.storeCurrency = "USD";
			_W.storeEuPrivacyPolicyUrl = "";
			com_currentSite = "188459968275443387";
			com_userID = "140417660";

 _W.recaptchaUrl = "https://www.google.com/recaptcha/api.js"; 


	if (document.readystate === 'complete') {
		Weebly.footer.setupContainer('cdn11.editmysite.com', '1785956451');
	} else {
		document.addEventListener('DOMContentLoaded', function() {
			Weebly.footer.setupContainer('cdn11.editmysite.com', '1785956451');
		});
	}



	// NOTE: keep the getElementsByTagName(o)**[1]** if you replace this code. Otherwise cookie banner scripts won't be first on the page
	;(function(p,l,o,w,i,n,g){if(!p[i]){p.GlobalSnowplowNamespace=p.GlobalSnowplowNamespace||[];
			p.GlobalSnowplowNamespace.push(i);p[i]=function(){(p[i].q=p[i].q||[]).push(arguments)
			};p[i].q=p[i].q||[];n=l.createElement(o);g=l.getElementsByTagName(o)[1];n.async=1;
			n.src=w;g.parentNode.insertBefore(n,g)}}(window,document,'script','//cdn2.editmysite.com/js/wsnbn/snowday262.js','snowday'));

	var r = [99, 104, 101, 99, 107, 111, 117, 116, 46, 40, 119, 101, 101, 98, 108, 121, 124, 101, 100, 105, 116, 109, 121, 115, 105, 116, 101, 41, 46, 99, 111, 109];
	var snPlObR = function(arr) {
		var s = '';
		for (var i = 0 ; i < arr.length ; i++){
			s = s + String.fromCharCode(arr[i]);
		}
		return s;
	};
	var s = snPlObR(r);

	var regEx = new RegExp(s);

	_W.Analytics = _W.Analytics || {'trackers': {}};
	_W.Analytics.trackers.wSP = 'snowday';
	_W.Analytics.user_id = '140417660';
	_W.Analytics.site_id = '188459968275443387';


	(function(app_id, ec_hostname, discover_root_domain) {
		var track = window[_W.Analytics.trackers.wSP];
		if (!track) return;
		track('newTracker', app_id, ec_hostname, {
			appId: app_id,
			post: true,
			platform: 'web',
			discoverRootDomain: discover_root_domain,
			cookieName: '_snow_',
			contexts: {
				webPage: true,
				performanceTiming: true,
				gaCookies: true
			},
			crossDomainLinker: function (linkElement) {
				return regEx.test(linkElement.href);
			},
			respectDoNotTrack: true
		});
		track('trackPageView', _W.Analytics.user_id+':'+_W.Analytics.site_id, _W.Analytics.spContexts);
		track('crossDomainLinker', function (linkElement) {
			return regEx.test(linkElement.href);
		});
	})(
		'_wn',
		'ec.editmysite.com',
		false
	);



	window._W.isEUUser = true;
	window._W.showCookieToAll = "";


Requests	IP Address	Location	AS Autonomous System
10	74.115.51.8	United States	AS27647Weebly, Inc.
7	142.250.154.95Google · CDN	United States	AS15169Google LLC
7	192.178.183.95Google · CDN	United States	AS15169Google LLC
7	146.75.121.46Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
31	4	-	-

Security Scan Report: newmail21.weebly.com

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History