Function displayVulnerabilityIntel

web/scripts/ragnar_modern.js:5235–5360

(scans)

            </tr>`;
        }).join('');
        const p = d.poison || {};
        let poisonBanner = '';
        if (p.verdict === 'hijacked') {
            poisonBanner = '<div class="mb-2 px-3 py-2 rounded bg-red-950/60 border border-red-800 text-red-300 text-sm">🛑 <strong>DNS poisoning / hijack detected</strong></div>';
        } else if (p.verdict === 'suspicious') {
            poisonBanner = '<div class="mb-2 px-3 py-2 rounded bg-amber-950/50 border border-amber-800 text-amber-300 text-sm">⚠ <strong>Possible DNS tampering</strong> — review the signals below</div>';
        } else if (p.verdict === 'clean') {
            poisonBanner = '<div class="mb-2 px-3 py-2 rounded bg-green-950/40 border border-green-900 text-green-400 text-sm">✓ No DNS poisoning signals</div>';
        }
        const reasonsList = (p.reasons && p.reasons.length)
            ? '<ul class="text-xs text-gray-400 mb-2 list-disc pl-5">' + p.reasons.map(x => '<li>' + escapeHtml(x) + '</li>').join('') + '</ul>'
            : '';
        const dohInfo = (p.doh && p.doh.checked)
            ? ' · DoH cross-check ' + (p.doh.mismatch ? '<span class="text-red-400">mismatch</span>' : '<span class="text-green-400">match</span>')
            : '';
        const banner = d.consistent
            ? '<span class="text-green-400">✓ resolvers agree (shared answer)</span>'
            : '<span class="text-amber-300">⚠ resolvers returned disjoint answers — normal for CDN/anycast, but a hijack/split-DNS smell if unexpected</span>';
        out.innerHTML = poisonBanner + reasonsList + `<p class="text-xs mb-2">${banner} · DNSSEC ${d.dnssec_ok ? '<span class="text-green-400">validated</span>' : '<span class="text-gray-500">not validated</span>'}
            · DoH ${d.doh_reachable ? '✓' : '✗'} · DoT ${d.dot_reachable ? '✓' : '✗'}${dohInfo}</p>
            <table class="min-w-full text-sm text-gray-300 whitespace-nowrap">
            <thead><tr class="text-left text-xs uppercase text-gray-500">
                <th class="px-3 py-1.5">Resolver</th><th class="px-3 py-1.5"></th><th class="px-3 py-1.5">Answers</th>
                <th class="px-3 py-1.5 text-right">Latency</th><th class="px-3 py-1.5 text-center">DNSSEC</th>
            </tr></thead><tbody>${rows}</tbody></table>`;
    } catch (e) {
        out.innerHTML = '<p class="text-sm text-red-400">Failed: ' + escapeHtml(e.message) + '</p>';
    } finally {
        _ndBusy(btn, false);
    }
}

async function runPmtu() {
    const input = document.getElementById('pmtu-target');
    const out = document.getElementById('pmtu-results');
    const target = (input.value || '').trim();
    if (!target) { input.focus(); return; }
    const btn = event && event.target ? event.target : null;
    _ndBusy(btn, true, 'Discovering…');
    out.classList.remove('hidden');
    out.innerHTML = '<p class="text-sm text-gray-400">Tracing path MTU to ' + escapeHtml(target) + '…</p>';
    try {
        const d = await postAPI('/api/net/pmtu', { target: target });
        if (!d.success) {
            out.innerHTML = d.missing_tool ? _ndMissingTool(d, 'runPmtu')
                : '<p class="text-sm text-red-400">Error: ' + escapeHtml(d.error || 'failed') + '</p>';
            return;
        }
        const pmtu = d.pmtu != null ? d.pmtu + ' bytes' : 'unknown';
        const verdict = d.pmtu == null
            ? '<span class="text-amber-300">⚠ could not measure</span>'
            : d.reduced
                ? '<span class="text-amber-300">⚠ below 1500 — MTU black-hole / tunnel overhead likely</span>'
                : '<span class="text-green-400">✓ full 1500-byte path</span>';
        out.innerHTML = `<p class="mb-1">Path MTU: <strong>${escapeHtml(pmtu)}</strong> — ${verdict}</p>
            <p class="text-xs text-gray-400">${escapeHtml(d.note || '')}</p>`;
    } catch (e) {
        out.innerHTML = '<p class="text-sm text-red-400">Failed: ' + escapeHtml(e.message) + '</p>';