Detect Blankshield
Blankshield is a security tool that prevents reverse tabnabbing phishing attacks by blocking exploitation of links that open in new browser tabs using _blank targets.
Detection looks at script sources, javascript globals across 2 fingerprint rules among the site's public responses.
01
Websites using Blankshield
Loading website list…
02
Signal classes
PluginView evaluates public page signals in these classes when identifying Blankshield. Individual fingerprint rule bodies are proprietary and are not published.
- Script sources
- JavaScript globals
03
Example public indicators for Blankshield
Illustrative indicators derived from public catalog metadata for Blankshield. A live scan may match additional proprietary rules beyond these examples.
- js/blankshield/blankshield.min.js
- blankshield.open
04
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known Blankshield signature (2 rules) at the time of the scan.
- Does not establish
- A sitewide install of Blankshield, an active vendor contract, exclusive use, or that Blankshield is still in place today.
05
How to check a site for Blankshield
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest Blankshield signals.
- 2. PluginView reads only public responses (script sources, javascript globals) and scores them against the Blankshield signature set (2 rules).
- 3. Review the confidence score and text explanation for Blankshield on the results page.
06
FAQ: detecting Blankshield
- Can PluginView detect Blankshield without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for Blankshield — typically script sources, javascript globals. It does not bypass authentication or paywalls.
- What category is Blankshield?
- Blankshield is classified under Security in the PluginView directory.
- How many fingerprint rules cover Blankshield?
- This reference currently tracks 2 fingerprint rules across script sources, javascript globals. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses Blankshield?
- Illustrative public indicators for Blankshield include js/blankshield/blankshield.min.js; blankshield.open. A live scan may match additional proprietary rules beyond these examples.
