Just a moment...

technology software

documentation technical

English

cf_chl_rc_ni

The domain 'x402payment.app' uses the application-focused generic top-level domain (.app) and has no subdomain. The second-level label 'x402payment' is 11 characters long with 2 vowels and six consonants, plus 3 digits. Tokenizing the label suggests 3 words: x, 402, payment. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

html/93/bf/93bf90fc-4f75-4145-b446-d44cc41ee0ff_fallback.html.gz

html/93/bf/93bf90fc-4f75-4145-b446-d44cc41ee0ff.html.gz

default-src 'none'; script-src 'nonce-LbTx7CT9ii15KVpF' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms

default-src 'none'; script-src 'nonce-XojmwXwVkSdSjZYx' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms

default-src 'none'; script-src 'nonce-rFISa92vZQA6SMoP' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms

9fc2db5f55a14db20d788cd3f19d10eef4e7fe27c7d26c2b07743d09319bcac1

8ddfd19804a308c2551aa2ac9e6056c88980876dbbfedcba73fbfad662946d2a

39bfdc2a730cf8b94569155f74bcd60e58d77fd2bb6491a1adb6d9e763a7f9cb

robots

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Peter Do

Dynadot LLC.

x402payment.app

⚡ Medium Risk - http://x402payment.app/

Requests	IP Address	Location	AS Autonomous System
11	104.16.152.132	Unknown	Unknown
6	104.18.94.41	Unknown	Unknown
6	54.215.31.113	Unknown	Unknown
6	104.18.95.41	Unknown	Unknown
6	104.16.153.132	Unknown	Unknown
6	2606:4700::6812:5f29	Unknown	Unknown
6	2606:4700::6812:5e29	Unknown	Unknown
47	7	-	-

Security Scan Report: x402payment.app

Summary

AI Security Verdict

Low Risk

Risk Factors

Safety Factors

Details

Bot Protection Detected

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History