English

_dd_s

_BEAMER_FILTER_BY_URL_qJcqgwdj30708

_BEAMER_FIRST_VISIT_qJcqgwdj30708

loginRedirectUri

_BEAMER_USER_ID_qJcqgwdj30708

Domain 'merchandising-content-service-cdn.prod.merch.vpsvc.com' uses the commercial generic top-level domain (.com) with subdomain 'merchandising-content-service-cdn.prod.merch'. Its registrable label 'vpsvc' stretches across 5 characters split between 0 vowels and 5 consonants. Word splitting yields 3 words: v, psv, c. Median word length is 1 character. No strong language cues emerged from the frequency lists.

code

html/0f/fb/0ffbdf08-2d5a-4918-a401-7703c3a43778_nodriver.html.gz

default-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'report-sample' 'self' https://*.firebaseio.com https://app.getbeamer.com https://cdn.segment.com https://js.userpilot.io https://segment.customer.getcortexapp.com https://static.zdassets.com https://www.google-analytics.com/analytics.js https://www.googletagmanager.com https://*.marketo.net https://cdn.bizible.com; style-src * data: blob: 'unsafe-inline';; object-src 'none'; base-uri 'self'; connect-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-src * data: blob: https://www.googletagmanager.com; img-src * data: blob: 'unsafe-inline'; manifest-src 'self'; media-src 'self'; script-src-elem * data: blob: 'unsafe-inline'; worker-src * data: blob: 'unsafe-inline'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub4ca512efd91f8caa1913b43ac53ce665&dd-evp-origin=content-security-policy&ddsource=csp-report;

default-src 'self' https://*.zdassets.com https://*.zendesk.com https://*.zopim.com wss://*.zendesk.com wss://*.zopim.com; script-src 'self' https://*.firebaseio.com https://*.getbeamer.com https://*.segment.com https://*.getcortexapp.com https://*.userpilot.io https://*.zdassets.com https://*.zendesk.com https://*.zopim.com https://*.google-analytics.com https://*.googletagmanager.com https://*.marketo.net https://*.bizible.com https://*.meticulous.ai https://*.sentry-cdn.com; style-src 'self' https://*.googleapis.com https://*.gstatic.com https://*.getbeamer.com https://*.segment.com https://*.userpilot.io https://*.zdassets.com https://*.zendesk.com 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://*.googleapis.com https://*.gstatic.com https://*.getbeamer.com https://*.segment.com https://*.userpilot.io https://*.zdassets.com https://*.zendesk.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://*.firebaseio.com https://*.sentry.io https://*.sentry-cdn.com https://*.datadoghq.com https://browser-intake-datadoghq.com https://*.getcortexapp.com https://*.getbeamer.com https://*.launchdarkly.com https://*.cortex.io https://*.meticulous.ai https://*.userpilot.io wss://*.userpilot.io https://*.google-analytics.com https://*.googletagmanager.com https://*.segment.com https://*.segment.io https://*.zdassets.com https://*.zendesk.com https://*.zopim.com wss://*.zendesk.com wss://*.zopim.com https://*.amazonaws.com https://*.us-west-2.amazonaws.com https://*.incident.io https://*.google.com https://*.kapa.ai data: blob:; font-src 'self' data: blob: https://*.gstatic.com https://*.googleapis.com; frame-src 'self' data: blob: https://*.googletagmanager.com https://*.google.com https://*.getbeamer.com https://*.meticulous.ai https://*.zendesk.com https://*.datadoghq.com https://*.datadoghq.eu https://*.newrelic.com http://localhost:9000; img-src 'self' data: blob: https://*.google-analytics.com https://*.googletagmanager.com https://*.gstatic.com https://*.zdassets.com https://*.getbeamer.com https://*.segment.com https://*.getcortexapp.com https://*.userpilot.io https://*.zendesk.com https://*.zopim.io https://*.githubusercontent.com https://github.com https://*.github.com https://gitlab.com https://*.gitlab.com https://*.cdnassets.com https://*.google.com https://*.shields.io https://*.slack.com https://*.slack-edge.com; manifest-src 'self'; media-src 'self' data: blob:; script-src-elem 'self' https://*.firebaseio.com https://*.getbeamer.com https://*.segment.com https://*.getcortexapp.com https://*.userpilot.io https://*.zdassets.com https://*.zendesk.com https://*.zopim.com https://*.google-analytics.com https://*.googletagmanager.com https://*.gstatic.com https://*.google.com https://*.marketo.net https://*.bizible.com https://*.meticulous.ai https://*.sentry-cdn.com; worker-src 'self' data: blob:; block-all-mixed-content; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub4ca512efd91f8caa1913b43ac53ce665&dd-evp-origin=content-security-policy&ddsource=csp-report;

No content

28b617e93490bfdd3e80b53f6f4ed0e2f5fd284c4fd98f7cfd73b446f3d1d5a3

921201c1a565ead7f44317dff5911cb68496dc5439fb59e96f7f9333d2fd3ad5

f684c730a036cec7671c8db71b97fc4296aa0e75961450bbca625e67797cd83a

5ebe4f9db510a5e86b4de070ca48fb8b35c0e24e36d73821ff09d0a5fc78eae5

213e7d512ed1c6b7d91f3b86666e8a9b176b142fcfc2be2a63070bd79c7aceb0

2549f6baaf97001f7896dfd2daadcf7acc110e895a816e021928beb8e40fac68

9a22300dd02726fea250efba256cb6c3a70c734e68712d59f874f77300132275

viewport

themeColor

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

Requests	IP Address	Location	AS Autonomous System
13	216.198.53.3	United States	AS209242Cloudflare London, LLC
11	151.101.65.195	United States	AS54113FASTLY
4	34.110.173.51	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
2	172.67.68.36	United States	AS13335CLOUDFLARENET
2	98.85.144.30	Ashburn, Virginia, United States	AS14618AMAZON-AES
2	44.231.35.67	Boardman, Oregon, United States	AS16509AMAZON-02
2	3.174.47.131	United States	AS16509AMAZON-02
2	146.75.121.55	Frankfurt am Main, Hesse, Germany	AS54113FASTLY
2	18.66.102.36	United States	AS16509AMAZON-02
2	3.233.158.114	Ashburn, Virginia, United States	AS14618AMAZON-AES
35	12	-	-

Security Scan Report: merchandising-content-service-cdn.prod.merch.vpsvc.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History