kasada ips.js (realtor.com tenant)
[ok]- last ran
- 2026-06-29 19:21 utc
- (5d ago)
- last updated
- 2026-06-29 19:21 utc
- (5d ago)
- size
- 532.9kb
- sha256
- 4da32033471f
- apis touched
- 21
- 21 raw
- bot tells
- 0
- sinks
- 0
- 0 leaked
- hazards
- 1
- structural
- 0
- anti-debug
- 0
- L3/L4 hazards
- consistency
- 0
- cross-checks
- providers
- 0
categories probed (4)
click a row to drill into every api the script probes in that category.
[+] introspection
9 apis · 0 tells · 15 hits[+] Object.setPrototypeOfmedium×2
details + source hits (2)
[+] *.__proto__medium×1
details + source hits (1)
[+] Object.definePropertymedium×1
details + source hits (1)
[+] Object.getPrototypeOfmedium×1
details + source hits (1)
[+] Proxymedium×1
details + source hits (1)
[+] *.constructorlow×3
details + source hits (3)
[+] Object.createlow×3
details + source hits (3)
[+] *.toStringlow×2
details + source hits (2)
[+] *.hasOwnPropertylow×1
details + source hits (1)
[+] math
1 apis · 0 tells · 4 hits[+] Math.powmedium×4
details + source hits (4)
[+] timing
1 apis · 0 tells · 1 hits[+] Dateinfo×1
details + source hits (1)
[+] storage
1 apis · 0 tells · 1 hits[+] *.keyslow×1
details + source hits (1)
dynamic-execution hazards (1)
anywhere the script puts code beyond static reach. eval, function, document.write, dynamic import. these are the holes script2builtins-runtime would fill.
- FunctionL1:532709
`new Function` constructor compiles a string into a function. common eval-equivalent in fingerprinting blobs.
new Function(r+i(w.slice(0,-1),Y)+"}")