e-commerce

other

The domain name 'poppy.fandom.com' uses the commercial generic top-level domain (.com), featuring subdomain 'poppy'. The core label 'fandom' covers 6 characters with two vowels and four consonants. Segmentation suggests one word: fandom. Most frequently, 'fando' shows up in Galician. Secondary signals appear in Polish.

html/6a/5e/6a5e7d57-113d-4960-86b3-c69c129027fb.html.gz

script-src 'unsafe-eval' blob: 'self' https: 'self' data: 'unsafe-inline' 'unsafe-eval' blob: 'unsafe-inline' internal-soap.wikia.com internal-soap.fandom.com internal-soap.wikia.org internal-soap.gamepedia.com www.fandom.com www.wikia.com www.wikia.org www.gamepedia.com; default-src 'self' data: blob: https://images.wikia.com https://static.wikia.nocookie.net https: 'self' data: blob: internal-soap.wikia.com internal-soap.fandom.com internal-soap.wikia.org internal-soap.gamepedia.com www.fandom.com www.wikia.com www.wikia.org www.gamepedia.com; style-src 'self' data: blob: https://images.wikia.com https://static.wikia.nocookie.net https: 'self' data: blob: internal-soap.wikia.com internal-soap.fandom.com internal-soap.wikia.org internal-soap.gamepedia.com www.fandom.com www.wikia.com www.wikia.org www.gamepedia.com 'unsafe-inline'; img-src * data: blob:; object-src 'none'; report-uri https://services.fandom.com/csp-logger/csp/ucp; worker-src 'self' blob:

inline; filename="Site-logo.webp"; filename*=UTF-8''Site-logo.webp

default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; style-src 'unsafe-inline'; sandbox; report-uri https://services.fandom.com/csp-logger/csp/thumblr

inline; filename="Grimes2020.webp"; filename*=UTF-8''Grimes2020.webp

inline; filename="Site-background-dark.webp"; filename*=UTF-8''Site-background-dark.webp

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

Requests	IP Address	Location	AS Autonomous System
21	74.120.189.205	Reston, Virginia, United States	AS22300FANDOM
4	18.66.147.22	United States	AS16509AMAZON-02
4	199.232.212.194	United States	AS54113FASTLY
4	104.20.23.13	United States	AS13335CLOUDFLARENET
4	142.250.184.194	United States	AS15169GOOGLE
4	104.18.86.42	United States	AS13335CLOUDFLARENET
4	199.232.208.194	United States	AS54113FASTLY
4	99.80.150.175	Dublin, Leinster, Ireland	AS16509AMAZON-02
4	216.58.206.67	United States	AS15169GOOGLE
4	142.250.186.42	United States	AS15169GOOGLE
101	21	-	-

Security Scan Report: poppy.fandom.com

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History