Domain 'captive.apple.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'captive'. The core label 'apple' covers 5 characters holding two vowels versus 3 consonants. Breaking it apart gives 1 word: apple. No strong language cues emerged from the frequency lists.

html/02/f8/02f8cd1b-cd7b-473b-8439-337d81e47848.html.gz

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

Success

✅ Low Risk - https://captive.apple.com/

Requests	IP Address	Location	AS Autonomous System
0	17.253.57.208	Unknown	Unknown
0	17.253.57.202	Unknown	Unknown
0	2a01:b740:a10:f100::206	Unknown	Unknown
0	2a01:b740:a10:f100::202	Unknown	Unknown
2	4	-	-

Security Scan Report: captive.apple.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History