Vulnerable DOM-XSS website

Re: Google Cloud _> -http://35.204.130.170
Added on 2020-08-23 15:44:39 GMT
NetherlandsNetherlands, Groningen

iotcloudHTTP/1.1 200 OK
Server: Apache/2.1.43
Date: Sun, 23 Aug 2020 15:44:29 GMT
Content-Type: text/html; charset=utf8
Content-Length: 2142991

<head>
    <title> oMail-admin </title>
    
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

Number of sources found: 3
Number of sinks found: 159

Non-secure hacked site…Results from scanning URL: hxtp://170.130.204.35.bc.googleusercontent.com
Number of sources found: 5
Number of sinks found: 160

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)

P.S. analyzing resulting code harbours the n-word, a big no-no. So one should be aware of this.
We here like to use neutral terms like deny list for bl#cklist etc.

pol