The javascript detected on your application. Click on this value to see Script Details.

The affected application on which the javascript was detected.

The most recent time this script was observed running on the application.

The Risk is determined by the Risk Score obtained from FortiGuard's web filtering service.

• Low: Risk score ≤ 30. Indicates that the script exhibits no suspicious behavior and comes from a source considered safe or commonly used. These scripts typically have a minimal impact on security and require no immediate action.

• Medium: Risk score between 30 and 60 (inclusive of 30, exclusive of 60). Indicates that the script exhibits behaviors that merit closer review. These domains may not be inherently malicious, but they may introduce potential risk and should be examined.

• High: Risk score between 60 and 90 (inclusive of 60, exclusive of 90). The script shows strong indicators of malicious or unsafe behavior and may pose a significant security threat; immediate review and action are recommended.

• Analyzing: Not enough information to conclude the risk level of the domain.

The FortiAI Agent uses the collected telemetry data to provide insights on the script.

Hover over this value to see all assigned malicious labels associated with the javascript.

• Allowed: This script is permitted to run on your application. It continues to execute normally in users' browsers.

• Blocked: This script is prevented from running on your application. It will not execute in users’ browsers.

Indicates whether the script has been reviewed for PCI DSS 4.0 compliance. Click the edit icon under Action to complete the review.

Please note that reviewing all payment-related scripts is required under PCI DSS.

The javascript detected on your application.

When there are multiple varying iterations of the same script, click compare version to view the differences.

The Risk is determined by the Risk Score obtained from FortiGuard's web filtering service.

• Analyzing: When risk_score is None (no risk data available). Not enough information to conclude the risk level of the domain.

• Low: Risk score ≤ 30. Indicates that the script exhibits no suspicious behavior and comes from a source considered safe or commonly used. These domains typically have a minimal impact on security and require no immediate action.

• Medium: Risk score between 30 and 60 (inclusive of 30, exclusive of 60). Indicates that the domain exhibits behaviors that merit closer review. These domains may not be inherently malicious, but they may introduce potential risk and should be examined.

• High: Risk score between 60 and 90 (inclusive of 60, exclusive of 90). The domain shows strong indicators of malicious or unsafe behavior and may pose a significant security threat; immediate review and action are recommended.

The URL of the page on which the script was detected.

• Inline: Javascript snippets placed directly within the HTML document rather than being loaded from a .js file. For example, this could be code inside <script> tags, or code attached to elements through attributes like onclick or onerror，

• Origin: Javascript that is served from the same domain as your application.

• 3rd Party: Javascript that is served from a different domain from your application.

The date and time when this script was detected for the first time.

The most recent time this script was observed running on the application.

A description of the script based on the telemetry data collected by FortiAI.

A description of the malicious effects of the script, as analyzed by FortiAI.

The specific behaviors or attributes that FortiAI determined to be malicious based on its analysis of the script.