English

mp_c5934d98a88971c01e14163bfa6b1ee2_mixpanel

Domain 'app.goto.com' uses the commercial generic top-level domain (.com), featuring subdomain 'app'. The core label 'goto' covers 4 characters split between 2 vowels and two consonants. It segments into one word: goto. No strong language cues emerged from the frequency lists.

html/36/88/368854f8-59e9-4c56-baee-99c8128a6b90_fallback.html.gz

GoTo

html/36/88/368854f8-59e9-4c56-baee-99c8128a6b90.html.gz

frame-ancestors 'none'; report-uri https://sentry.io/api/1327874/security/?sentry_key=40d4605d1e55455ba08ac0f9cff736f9

frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report

271d6a96a75e6324233738133f57639275d9f34df8e00040eff709ead68dcfa7

082c7652d6b1f4d32ef00fc4739a1b6f18d757b07ab55f661ddf4cc8d67d2598

f9fa9e3f560356f4c1b7979103aa864294717f2085125eff9063faf0618add3d

ecc95589f41959c756e3ee1fef376ee6bb600a0f4ede365a0f011163dd03603f

22785b2f3a1a993ab1cb25a136a8ac39e97df19a8304231620a8454d315d873a

ec40d11b8d1c690a9618d30f1b9c6bb4b0b3d3627e6fd43e6d049212c428b90a

9366549eab254584461f4e59fa24c363c4eadc8ae016177ab9a64cd02ff1bdb5

4fc2ea7d7b23b22d653b81c3ccfee24b6dce30325a2fb97071d1bf6eb19cd8c6

097a020e1496573594a8508a0cd195a6753ae227f805eb7256540dbca50cf83b

ebbe5bfa43f8ec285a35ad72b2da08d55f612494d17960c9f9c51681fce19524

1d457819c42e4c0c6fe2825468900142534b4234c8700b3be69746c271a14ec8

5afafbfee3ccad1336b3d81a58c93e95dbc9d24f341806999db16354ad38d542

38a722a64d0f886f18f5e885d27765fd23fe457e8c39adb14e6325d49e9ccccd

86b6a2d35b7ac804eb78be3d23f8680aba75969678eeef9f82301b7685b4712e

99fdd43a0e39bde3422bfa30cfca6ca783beee82a21d66a165993166017068ab

b03bbd5cd93c436a80c58eb0a6528cd7359ec40065848d36bd7c05f9abfbac18

77faee2635d40b1201198a0c72e1fca9851f5116cd902ae3259deb337d9a51d4

cd339a10200299d090baebce08d6e9eb427e460403aa8425de1721d45e5b34e3

b05ea6b87fcafc67ac08bf35bf4bb15857ff1266666eae74d6fbcba513b94aee

367f788d522e2841612b216963de191512e8119007b4030412cb03d5f5bcc8f2

6042efeca327175e81b5ec3a019edfe9107785684aada0989aa4cf5aed573c0f

e6734f9bc7216eb9f0ec23f0a8a56fae0bb29e03a863ca75e564801f0d6893e9

e61c0b6c225ac02a7692f13dd619672185a7a3e77ccdc7d6b1b4ca39afb88231

923bf9d5961d8f8ed310b32590be4dd70c0762ce8681b1e43ccdafb44059f7e5

177468aaf49efbca01721763d81535428ce9470935117bf19b8b6be6586d33b3

ce4fcfbe927904f085b0fe8cdf3af46d7f92e34e4148ad7368745ce734dc3fca

9bf50f8d1af5275080d55aec53f873d2995b33673c91f320b3a9d1634ff2f71f

a88c5d160b68ebfaf987cb820c384b2f0d7f5ae1adfad9979729b240e9d9feee

73cacde3a83de774b552c7b95627215e9515a75313742fbe5d52e55473c82570

200b2d4c62f3d2cd420d22b0bfe5bd711d2ceeca7b869a46bb865fb04caa853b

d125489f15acaf837ed731178bf41dfa269a4c40665674ee0c882755df3da314

5d51418f0ec1bdd0aa5b56555c7f21d227bfcc5150e856e9b17ceb65ea7b7e15

a58fd89316d05276e631bff5bccaa9a0289c087c9484ebeef851c38a1f97fb4d

99bae0ce48cd5d529d41f95e29ebe576afd2c322a5ed290765b1b9c65ce1d3f1

8cfc42610c04f7e8a7d22b3d1c4560440f6b231262a7d8c3f80f6059b9930d49

46a840139f2369ec459ad936980c71bf23a93661991e28378df8f03260871672

60a3b523efc057219fb6d8893c1018cbbd1e80a492d3f33277c80611b4d19006

8084680d3de85734f375d49dcc0073c2c8ce8f95404b70f3f1385351b7858584

1af1713dee14cf2ce5ceab293a1d2ddfed0f082873bb85a41955ca120ee32b40

03f762d47560bf522ac2b42f32aff24afabd84ea4b57693afad98d1c00e04526

24787e2335e022e43bdf45baa71ef0f4823971201529745790c9bdee17fa229e

bd6fa9cc4fa25da8469c5059cb9bd2e12a0699129bff4b7368f02391dd098f9e

f9a14df9e7aa51560302ea168e3dbd2ce59b817d14c917056240fd306280da60

ce8cb245e8e5d13bdb6444bc706a16976b87d77bd0c08a24094faae3645f756d

d7705c735701477a4aaaea46129ccc79b5df1fdc9302397856521cbee5cff8dc

5dab681601c578be4f7edb054fcc231ffdf8edd6722e02c6755060f758ad178b

2b286c9d2d95400caae3feb9217885c04a36a1723861df70d754ebf0cd3c991c

cf4907490d119d6d2c22ac44ae22a0b0099f05befd8328737d7311d8661caa41

10dc0fb7a9764d57f86886e4046389950391959b1575bda7fa6711176f303306

45fd8b4f52416b4bbf95a58202430470df50d7f841f836f139e909f242cfb65e

e73ef5822078baa26182b05a13ace2a2248b8480995856538d7dcc234b7e59ac

viewport

default-src 'self' data: *.typekit.net *.appcues.com *.mixpanel.com *.userreport.com *.pendo.io *.wistia.com *.wistia.net *.youtube.com *.youtube-nocookie.com *.gstatic.com *.g2m.test.expertcity.com *.intercomcdn.com *.intercom.io weblibrary.cdn.getgo.com *.jive.com *.gotomeeting.com *.goto.com; connect-src 'self' data: blob: *.typekit.net *.appcues.com wss://api.appcues.net *.mixpanel.com *.pendo.io *.qualtrics.com *.litix.io *.wistia.com embedwistia-a.akamaihd.net *.facebook.com connect.facebook.net *.gstatic.com *.google-analytics.com *.googleapis.com *.s3.amazonaws.com *.s3-accelerate.amazonaws.com https://res.cdn.office.net *.expertcity.com wss://*.expertcity.com *.expertcity.com:* wss://*.expertcity.com:* *.intercom.io wss://*.intercom.io wss://*.getgo.com *.getgo.com *.gotoresolve.com *.support.me *.logmeinrescue.com *.dev-logmeinrescue.com *.stage-logmeinrescue.com wss://*.logmeinrescue.com wss://*.dev-logmeinrescue.com wss://*.stage-logmeinrescue.com *.dev-support.me *.stage-support.me *.jive.com wss://*.jive.com *.goto-rtc.com wss://*.goto-rtc.com wss://*.goto.com *.gotomeeting.com *.gototraining.com *.gotowebinar.com *.goto.com gotomeet.me *.citrixsaassbe.net *.ingest.sentry.io *.ingest.us.sentry.io *.getjaco.com *.logmeininc.com *.launchdarkly.com wss://*.pusherapp.com wss://*.pusher.com *.pusher.com http://localhost:* wss://localhost:* http://127.0.0.1:* ws://127.0.0.1:*; frame-src 'self' *.userreport.com miro.com interpret.world *.pendo.io *.qualtrics.com *.wistia.com *.wistia.net *.youtube.com *.youtube-nocookie.com *.googleapis.com *.google.com https://recordingassets-store-ed-useast1-citrixsaasdev.s3.amazonaws.com https://recordingassets-store-rc-useast1-citrixsaasdev.s3.amazonaws.com https://recordingassets-store-stage-useast1-osdops.s3.amazonaws.com https://recordingassets-store-prod-useast1-osdops.s3.amazonaws.com cbox-storage-north-america-live-primary.s3-accelerate.amazonaws.com cbox-storage-europe-live-primary.s3-accelerate.amazonaws.com cbox-storage-south-east-asia-live-primary.s3-accelerate.amazonaws.com cbox-storage-north-america-stage-primary.s3-accelerate.amazonaws.com cbox-storage-europe-stage-primary.s3-accelerate.amazonaws.com cbox-storage-south-east-asia-stage-primary.s3-accelerate.amazonaws.com cbox-storage-north-america-ed-primary.s3-accelerate.amazonaws.com cbox-storage-europe-ed-primary.s3-accelerate.amazonaws.com cbox-storage-south-east-asia-ed-primary.s3-accelerate.amazonaws.com *.g2t.test.expertcity.com *.lmiinc.test.expertcity.com *.conferences.test.expertcity.com *.g2mm.devplatform-dev.expertcity.com https://*.dante-ai.com *.gotomeeting.com gotomeet.me *.gototraining.com *.goto.com *.logmeininc.com; img-src 'self' data: blob: *.typekit.net *.fast.appcues.com *.appcues.com *.userreport.com *.lp.goto.com *.lp.logmeininc.com *.logmein.com *.pendo.io *.qualtrics.com *.wistia.com *.wistia.net embedwistia-a.akamaihd.net *.facebook.com *.ytimg.com *.google-analytics.com *.s3.amazonaws.com *.s3-accelerate.amazonaws.com *.test.expertcity.com *.intercomcdn.com *.getgo.com *.gotoresolve.com *.support.me *.logmeinrescue.com *.dev-logmeinrescue.com *.stage-logmeinrescue.com *.dev-support.me *.stage-support.me *.jive.com cdn.gotomeet.at *.gototraining.com *.gotowebinar.com *.goto.com *.gotomeeting.com *.wikimedia.org *.gravatar.com *.cloudfront.net *.doubleclick.net *.adform.net prd.jwpltx.com; media-src 'self' data: blob: *.lp.goto.com *.lp.logmeininc.com *.wistia.com *.wistia.net embedwistia-a.akamaihd.net *.amazonaws.com *.recordingassets.lmiinc.test.expertcity.com *.g2m.test.expertcity.com *.jive.com *.gotomeeting.com *.goto.com *.recordingassets.logmeininc.com *.lmiinc.test.expertcity.com *.cloudfront.net; script-src 'self' blob: *.appcues.com *.userreport.com miro.com interpret.world *.pendo.io *.qualtrics.com *.wistia.com *.wistia.net *.litix.io *.facebook.com connect.facebook.net *.youtube.com *.google-analytics.com *.google.com *.googleapis.com miplatform-dev.s3.amazonaws.com *.s3.us-west-2.amazonaws.com *.g2m.test.expertcity.com *.g2w.test.expertcity.com *.conferences.test.expertcity.com *.intercom.io *.intercomcdn.com *.gotoresolve.com *.support.me support.me *.logmeinrescue.com *.dev-logmeinrescue.com *.stage-logmeinrescue.com *.dev-support.me *.stage-support.me dev-support.me stage-support.me *.conferences.goto.com *.gotomeeting.com/ *.goto.com 'unsafe-inline' *.getjaco.com 'unsafe-eval' content.jwplatform.com ssl.p.jwpcdn.com *.content.ipd.goto.com; style-src 'self' *.typekit.net *.appcues.com *.pendo.io *.wistia.com *.googleapis.com weblibrary.cdn.getgo.com *.gotoresolve.com *.support.me *.logmeinrescue.com *.dev-logmeinrescue.com *.stage-logmeinrescue.com *.dev-support.me *.stage-support.me *.goto.com 'unsafe-inline' *.ipd.goto.com; worker-src 'self' data: blob:

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Nom-iq Ltd. dba COM LAUDE

GOTO.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZO-CF


                       try {
                         const moduleScript = await import('https://app.goto.com/experiences/analytics/@ucc/cc-analytics-extension.mjs');
                         if ('@ucc/cc-analytics' !== '') {
                           window['@ucc/cc-analytics'] = moduleScript;
                         }
                         window.dispatchEvent(new CustomEvent('shell:module_loaded:fd26b0f9-d02c-494d-bcf4-297ad68a0b01', {detail: {resolveWithGlobal: '@ucc/cc-analytics'}}));
                       } catch(e) {
                         window.dispatchEvent(new CustomEvent('shell:module_failed:fd26b0f9-d02c-494d-bcf4-297ad68a0b01', {detail: {error: e}}));
                       }
                      


                       try {
                         const moduleScript = await import('https://app.goto.com/extensions/cc-surveys/@ucc/cc-surveys.mjs');
                         if ('@ucc/cc-surveys' !== '') {
                           window['@ucc/cc-surveys'] = moduleScript;
                         }
                         window.dispatchEvent(new CustomEvent('shell:module_loaded:a5416934-04f1-485d-94c7-cbd38c179666', {detail: {resolveWithGlobal: '@ucc/cc-surveys'}}));
                       } catch(e) {
                         window.dispatchEvent(new CustomEvent('shell:module_failed:a5416934-04f1-485d-94c7-cbd38c179666', {detail: {error: e}}));
                       }
                      


                       try {
                         const moduleScript = await import('https://app.goto.com/experiences/engagements/wc-loader/0.17.2/extension.mjs');
                         if ('@dce/engagements-web-components-loader-extension' !== '') {
                           window['@dce/engagements-web-components-loader-extension'] = moduleScript;
                         }
                         window.dispatchEvent(new CustomEvent('shell:module_loaded:5528a94e-5ae0-4341-a42e-33309771ad5a', {detail: {resolveWithGlobal: '@dce/engagements-web-components-loader-extension'}}));
                       } catch(e) {
                         window.dispatchEvent(new CustomEvent('shell:module_failed:5528a94e-5ae0-4341-a42e-33309771ad5a', {detail: {error: e}}));
                       }
                      


                       try {
                         const moduleScript = await import('https://app.goto.com/experiences/voice/1.33.0/extension-bug-report.js');
                         if ('@shell-bug-reporter' !== '') {
                           window['@shell-bug-reporter'] = moduleScript;
                         }
                         window.dispatchEvent(new CustomEvent('shell:module_loaded:b42bac64-6cd5-4860-905a-5016a05e54c7', {detail: {resolveWithGlobal: '@shell-bug-reporter'}}));
                       } catch(e) {
                         window.dispatchEvent(new CustomEvent('shell:module_failed:b42bac64-6cd5-4860-905a-5016a05e54c7', {detail: {error: e}}));
                       }
                      

Requests	IP Address	Location	AS Autonomous System
5	65.8.131.35	United States	AS16509AMAZON-02
5	99.84.152.20	United States	AS16509AMAZON-02
4	173.199.11.164	Ashburn, Virginia, United States	AS31898ORACLE-BMC-31898
4	104.17.209.240	United States	AS13335CLOUDFLARENET
3	3.160.150.116	United States	AS16509AMAZON-02
3	2.16.168.121	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	34.107.204.85	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
2	54.198.187.160	Ashburn, Virginia, United States	AS14618AMAZON-AES
1	65.8.131.102	United States	AS16509AMAZON-02
1	65.8.131.107	United States	AS16509AMAZON-02
61	57	-	-

Security Scan Report: app.goto.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History