cryptocurrency blockchain

healthcare medical

technology software

finance banking

documentation technical

Within the commercial generic top-level domain (.com), 'xcx-world.fandom.com' is registered; it also runs on subdomain 'xcx-world'. Its registrable label 'fandom' stretches across 6 characters split between 2 vowels and four consonants. Segmentation suggests one word: fandom. The median word length lands at six characters. 'fando' most often appears in Galician. You will also see it in Polish contexts. Taken together, it feels Galician with single-word simplicity.

html/55/b6/55b66d97-a04b-42b4-aedb-5a62def4b8a3.html.gz

script-src 'unsafe-eval' blob: 'self' https: 'self' data: 'unsafe-inline' 'unsafe-eval' blob: 'unsafe-inline' internal-soap.wikia.com internal-soap.fandom.com internal-soap.wikia.org internal-soap.gamepedia.com www.fandom.com www.wikia.com www.wikia.org www.gamepedia.com; default-src 'self' data: blob: https://images.wikia.com https://static.wikia.nocookie.net https: 'self' data: blob: internal-soap.wikia.com internal-soap.fandom.com internal-soap.wikia.org internal-soap.gamepedia.com www.fandom.com www.wikia.com www.wikia.org www.gamepedia.com; style-src 'self' data: blob: https://images.wikia.com https://static.wikia.nocookie.net https: 'self' data: blob: internal-soap.wikia.com internal-soap.fandom.com internal-soap.wikia.org internal-soap.gamepedia.com www.fandom.com www.wikia.com www.wikia.org www.gamepedia.com 'unsafe-inline'; img-src * data: blob:; object-src 'none'; report-uri https://services.fandom.com/csp-logger/csp/ucp; worker-src 'self' blob:

inline; filename="Site-logo.webp"; filename*=UTF-8''Site-logo.webp

default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; style-src 'unsafe-inline'; sandbox; report-uri https://services.fandom.com/csp-logger/csp/thumblr

inline; filename="Charli_XCX.webp"; filename*=UTF-8''Charli_XCX.webp

inline; filename="Authentic_untitled.woff2.woff2"; filename*=UTF-8''Authentic_untitled.woff2.woff2

inline; filename="2009.webp"; filename*=UTF-8''2009.webp

inline; filename="2012.webp"; filename*=UTF-8''2012.webp

inline; filename="2014_.webp"; filename*=UTF-8''2014_.webp

script-src 'report-sample' 'nonce-W6OuUqSyLmsWL8l7fz8I-w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport

base-uri 'none'; object-src 'none'; script-src 'nonce-307aae09dbe0400d94875a914a0f0be0' 'strict-dynamic' 'unsafe-inline' https:

inline; filename="VroomVroomTwitterBanner.webp"; filename*=UTF-8''VroomVroomTwitterBanner.webp

inline; filename="Vanity_Fair.webp"; filename*=UTF-8''Vanity_Fair.webp

inline; filename="Vanity_Fair_October_2025_17.webp"; filename*=UTF-8''Vanity_Fair_October_2025_17.webp

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Requests	IP Address	Location	AS Autonomous System
33	172.66.148.159	United States	AS13335CLOUDFLARENET
5	74.120.188.204	Frankfurt am Main, Hesse, Germany	AS22300FANDOM
5	99.84.152.35	United States	AS16509AMAZON-02
5	23.216.77.153	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
5	172.64.146.152	United States	AS13335CLOUDFLARENET
5	34.120.195.249	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
5	2.16.168.199	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
5	172.67.149.20	United States	AS13335CLOUDFLARENET
5	18.173.205.111	United States	AS16509AMAZON-02
5	104.20.35.150	United States	AS13335CLOUDFLARENET
258	46	-	-

Security Scan Report: xcx-world.fandom.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies2

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History