education learning

entertainment media

e-commerce shopping

e-commerce

English

OptanonConsent

_shopify_analytics

cart_currency

_shopify_essential

localization

prevSubdomain

The domain 'us.yotoplay.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'us'. Count 8 characters in 'yotoplay' with 3 vowels and five consonants. Splitting it apart reveals three words: yo, to, play. Median word length comes out to 2 characters. 'yo' most strongly signals Czech. You may catch it in Slovak and Polish as well.

html/c3/61/c361cda5-bc3b-4949-b89a-d173ed1c83e9_fallback.html.gz

KPop Demon Hunters

html/c3/61/c361cda5-bc3b-4949-b89a-d173ed1c83e9.html.gz

default-src 'self' assets.gorgias.chat; base-uri 'none'; child-src 'self' blob: app.netlify.com netlify-cdp-loader.netlify.app; connect-src 'self' lb.affilae.com *.lottiefiles.com *.myshopify.com *.onetrust.com graphql.datocms.com test.aws.fooropa.com stockist.co *.stockist.workers.dev *.cloudfunctions.net bat.bing.com *.ip-api.com *.mapbox.com www.facebook.com *.doubleclick.net analytics.tiktok.com api.yotoplay.com geo.yotoplay.com *.sentry.io *.amplitude.com *.maze.co cdn.amplitude.com au.yotoplay.com uk.yotoplay.com eu.yotoplay.com us.yotoplay.com ca.yotoplay.com *.yotoplay.com yotoplay.extole.io products-test.aws.fooropa.com adservice.google.com www.googletagmanager.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.google.com www.google.co.uk *.googleapis.com analytics.google.com www.google-analytics.com ws: *.gorgias.chat *.gorgias.io api.gorgias.work storage.googleapis.com gorgias-convert.com wss://us-east1-898b.gorgias.chat sdk.fra-02.braze.eu api.pennies.org.uk yoto-media-api-prod-smart-cable-photos.s3.eu-west-2.amazonaws.com ingesteer.services-prod.nsvcs.net heapanalytics.com c.us.heap-api.com *.contentsquare.net widget.trustpilot.com *.fastly.mux.com *.cfcdn.mux.com stream.mux.com *.abtasty.com aspireiq.go2cloud.org browser-intake-datadoghq.com rum.browser-intake-datadoghq.eu rum.browser-intake-datadoghq.com www.wepowerconnections.com the.sciencebehindecommerce.com; media-src 'self' cdn.yoto.io cdn.shopify.com listen.radioking.com www.datocms-assets.com s3.radio.co *.gorgias.chat blob: data: origin.xtlo.net stream.mux.com *.fastly.mux.com *.cfcdn.mux.com; font-src 'self' data: fonts.gstatic.com *.gorgias.chat *.gorgias.io *.maze.co cdn.shopify.com origin.xtlo.net heapanalytics.com *.auryc.com common-fonts.abtasty.com; form-action 'self' www.facebook.com yoto-media-api-prod-smart-cable-photos.s3.eu-west-2.amazonaws.com; frame-ancestors *.netlify.app 'self'; frame-src 'self' player.vimeo.com widget.trustpilot.com support.yotoplay.com *.netlify.app lb.affilae.com https://www.googletagmanager.com td.doubleclick.net www.awin1.com contact.gorgias.help yoto-support.gorgias.help www.google.com app.netlify.com netlify-cdp-loader.netlify.app *.maze.co www.facebook.com js.stripe.com www.youtube.com qa-assistant.abtasty.com; img-src blob: data: 'unsafe-inline' static.affilae.com lb.affilae.com www.datocms-assets.com dummyimage.com source.unsplash.com images.unsplash.com cdn.shopify.com *.onetrust.com *.blob.core.windows.net ssl.gstatic.com bat.bing.com stockist.co *.mapbox.com *.clarity.ms www.facebook.com connect.facebook.net *.doubleclick.net *.quantcount.com *.quantserve.com picsum.photos *.picsum.photos *.maze.co *.tvsquared.com *.demdex.net 'self' origin.xtlo.net card-content.yotoplay.com lantern.roeye.com www.awin1.com translate.google.com lh3.google.com www.googletagmanager.com www.google-analytics.com analytics.google.com www.google.com www.google.co.uk www.google.com.au www.google.ie *.gstatic.com *googleapis.com lh3.googleusercontent.com maps.googleapis.com www.googleadservices.com *.gorgias.chat config.gorgias.io us-east1-898b.gorgias.chat storage.googleapis.com api.gorgias.work contact.gorgias.help appboy-images.com braze-images.com cdn.braze.eu s3-eu-west-1.amazonaws.com/penniesfoundation/charities/000000-150.png s3-eu-west-1.amazonaws.com/penniesfoundation/charities/20000073-150.png heapanalytics.com *.contentsquare.net editor-assets.abtasty.com www.abtasty.com teddytor.abtasty.com *.lightboxcdn.com c5.adalyser.com; manifest-src 'self'; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' static.affilae.com bat.bing.com *.onetrust.com *.mountain.com www.facebook.com connect.facebook.net widget.trustpilot.com www.google-analytics.com *.googleapis.com cdn.jsdelivr.net stockist.co *.stockist.co *.cloudflare.com www.googleoptimize.com analytics.tiktok.com the.sciencebehindecommerce.com app.backinstock.org *.quantcount.com *.quantserve.com polyfill.io snippet.maze.co snap.licdn.com *.amplitude.com js.go2sdk.com flackr.github.io uk.yotoplay.com us.yotoplay.com eu.yotoplay.com ca.yotoplay.com au.yotoplay.com *.yotoplay.com *.xtlo.net yotoplay.extole.io origin.xtlo.net googleads.g.doubleclick.net www.awin1.com www.dwin1.com lantern.roeyecdn.com www.googletagmanager.com tagmanager.google.com app.netlify.com netlify-cdp-loader.netlify.app netlify-rum.netlify.app *.maze.co rum.browser-intake-datadoghq.eu rum.browser-intake-datadoghq.com www.datadoghq-browser-agent.com browser.sentry-cdn.com *.tvsquared.com js.sentry-cdn.com js.appboycdn.com contact.gorgias.help/api/contact-forms/loader.js www.google.com config.gorgias.chat assets.gorgias.chat config.gorgias.io us-east1-898b.gorgias.chat storage.googleapis.com api.gorgias.work www.gstatic.com contact.gorgias.help *.dyn-rev.app bundle.dyn-rev.app js.stripe.com/v3 js.stripe.com/v3/fingerprinted/* https://js.stripe.com/v3/fingerprinted/js/embedded-checkout-outer-e5064220e674a4bc7ec61e3c563354eb.js https://js.stripe.com/v3/fingerprinted/js/trusted-types-checker-efd8cf45ce422659c098993bfc62531b.js heapanalytics.com cdn.heapanalytics.com cdn.us.heap-api.com t.contentsquare.net cdn.logwork.com try.abtasty.com teddytor.abtasty.com qa-assistant.abtasty.com *.lightboxcdn.com backinstock.useamp.com c5.adalyser.com www.redditstatic.com; style-src * 'self' data: 'unsafe-inline' www.datocms-assets.com tagmanager.google.com fonts.googleapis.com blob: try.abtasty.com origin.xtlo.net heapanalytics.com; worker-src 'self' blob:; report-uri https://o219359.ingest.sentry.io/api/4505918023008256/security/?sentry_key=2ac3cae6afd61d8a2d6e49621c07025f; report-to csp-endpoint;

sandbox allow-scripts allow-forms allow-modals allow-popups allow-downloads allow-top-navigation-by-user-activation

sandbox allow-scripts; report-to csp-reports

default-src 'none'; style-src 'unsafe-inline'; form-action 'none'; sandbox

block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;

Customer reviews powered by Trustpilot

KIDZ BOP All-Time Greatest Hits
KIDZ BOP Kids

Disney Princess Storybook Collection
Disney

Row Your Boat and other Pre-School Songs
Yoto

viewport

twitter:title

Yoto Says: Music From the Hit Netflix Film KPop Demon Hunters, Featuring Chart-Topping Songs “Golden” and “Your Idol.” KPop Demon Hunters is the official s...

description

twitter:description

https://us.yotoplay.com/products/kpop-demon-hunters

twitter:site

twitter:card

https://cdn.shopify.com/s/files/1/0310/7487/7577/files/QqcDkoL6F3WxjEFjV9j55mqel_YBaWBQekaSUqNcXvo_1200x630.png?v=1760521721

twitter:image

theme-color

RHxqrbRRX84GlzVw_0sJAB_eARpGcLYPWdb395noNpg

google-site-verification

facebook-domain-verification

twitter:image:alt

next-head-count

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Gandi SAS

YOTOPLAY.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZO-CF

{"@context":"http://schema.org/","@type":"Product","name":"KPop Demon Hunters","url":"https://us.yotoplay.com/products/kpop-demon-hunters","sku":"CRMSXX05175","gtin13":"5056805307061","productID":"CRM

{"props":{"pageProps":{"product":{"id":"8262404210825","age":[],"ageRange":[5,14],"author":"Various","availableForSale":true,"boxContents":null,"cardCount":1,"clubCreditCost":"2","clubCreditGrant":nul

try{location.hash &&location.hash.startsWith('#yoto-cookie-blocker-test') &&(document.cookie=encodeURIComponent(location.hash.slice(1).replace(/=|;/g,''))+'='+new Date().toJSON())}catch(e){}

location.hash==='#gridguide'&&document.body.classList.add('gridguide')

(function (m,a,z,e){
              var s,t;
              try {
                t = m.sessionStorage.getItem('maze-us');
              } catch (err) {}
              if (!t) {
                t = new 

Requests	IP Address	Location	AS Autonomous System
13	13.226.244.125	United States	AS16509AMAZON-02
2	13.226.244.99	United States	AS16509AMAZON-02
2	172.64.155.119	United States	AS13335CLOUDFLARENET
2	104.20.20.147	United States	AS13335CLOUDFLARENET
2	35.157.26.135	Frankfurt am Main, Hesse, Germany	AS16509AMAZON-02
2	13.226.244.36	United States	AS16509AMAZON-02
2	3.208.247.14	Ashburn, Virginia, United States	AS14618AMAZON-AES
2	23.227.39.200	Ottawa, Ontario, Canada	AS13335CLOUDFLARENET
2	13.32.27.109	New York, New York, United States	AS16509AMAZON-02
2	3.174.46.100	United States	AS16509AMAZON-02
101	45	-	-

Security Scan Report: us.yotoplay.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History