The domain 'preview.webflow.com' uses the commercial generic top-level domain (.com), featuring subdomain 'preview'. The second-level label 'webflow' is 7 characters long holding 2 vowels versus five consonants. Segmentation suggests 2 words: web, flow. Expect 3.5 characters per word on average. 'web' most often appears in Chinese (Pinyin). Usage also turns up in English and Vietnamese contexts. Net impression: Chinese (Pinyin) phrase.

html/63/d8/63d8b1e6-d3b1-4fc1-a05a-4700127d4634.html.gz

frame-ancestors 'self' https://preview.webflow.com; report-uri https://webflow.report-uri.com/r/t/csp/reportOnly

frame-ancestors 'self' https://*.webflow.com https://webflow.com

frame-ancestors 'self' https://*.webflow.com https://webflow.com; report-uri https://webflow.report-uri.com/r/t/csp/reportOnly

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZO-CF

X-UA-Compatible

Script

HSTS

Webflow

Webflow - dsehseths

⚠️ High Risk - https://preview.webflow.com/preview/dsehseths?utm_medium=preview_link&utm_source=designer&utm_content=dsehseths&preview=667b798d598943a60e17cacfa7615ae6&workflow=preview

Requests	IP Address	Location	AS Autonomous System
3	18.66.147.65	United States	AS16509AMAZON-02
2	13.226.247.18	United States	AS16509AMAZON-02
2	3.210.48.126	Ashburn, Virginia, United States	AS14618AMAZON-AES
2	54.167.161.29	Ashburn, Virginia, United States	AS14618AMAZON-AES
2	104.18.30.133	United States	AS13335CLOUDFLARENET
2	18.66.147.127	United States	AS16509AMAZON-02
2	104.18.11.212	United States	AS13335CLOUDFLARENET
2	104.18.3.70	United States	AS13335CLOUDFLARENET
2	172.64.153.109	United States	AS13335CLOUDFLARENET
2	13.226.247.220	United States	AS16509AMAZON-02
35	17	-	-

Security Scan Report: preview.webflow.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History