entertainment media

corporate

English

_awl

ss_cvt

ss_cvr

crumb

_ga_T0K9DR6X86

session

The domain name 'www.nycforfree.co' uses the Colombian country-code top-level domain (.co); it also runs on subdomain 'www'. The registrable portion 'nycforfree' spans 10 characters split between 3 vowels and 7 consonants. Breaking it apart gives three words: nyc, for, free. Median word length is three characters. 'nyc' most often appears in English. Usage also turns up in Danish and Chinese (Pinyin) contexts.

html/c7/d4/c7d4f4de-f2ef-4ff8-9d96-d9cd61b7d6d6_fallback.html.gz

KPop Demon Hunters Sing-Along Experience — NYC for FREE

email

html/c7/d4/c7d4f4de-f2ef-4ff8-9d96-d9cd61b7d6d6.html.gz

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:102:0

application/x-www-form-urlencoded; charset=UTF-8

default-src *.facebook.com *.fbcdn.net *.instagram.com blob:;script-src *.instagram.com static.cdninstagram.com *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-uUUOxHvR' blob: 'self' 'wasm-unsafe-eval' https://*.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src *.instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com;connect-src *.instagram.com wss://edge-chat.instagram.com connect.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* ws://localhost:* blob: *.cdninstagram.com wss://*.instagram.com:* 'self';font-src *.instagram.com static.cdninstagram.com data: *.fbcdn.net *.intern.facebook.com *.facebook.com https://fonts.gstatic.com;img-src *.instagram.com *.facebook.com *.fbcdn.net data: *.cdninstagram.com *.whatsapp.net blob: *.fbsbx.com android-webview-video-poster: *.oculuscdn.com *.giphy.com *.tenor.co *.tenor.com www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk https://www.gstatic.com https://*.google-analytics.com;media-src *.facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com cdn.fbsbx.com lookaside.fbsbx.com data: blob: https://*.giphy.com *.tenor.co *.tenor.com;child-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;frame-src *.instagram.com *.facebook.com *.fbsbx.com fbsbx.com data: www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk;manifest-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;object-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;block-all-mixed-content;upgrade-insecure-requests;

__tcfapiLocator

__uspapiLocator

__gppLocator

googlefcInactive

googlefcLoaded

9014a1c1339e7267db279c6e87c8dbacaf4e0d588a4e8add82b90d88eb7646aa

b5c2db4c9ee6cf0ebcb8a2d0727a5c02a8ebb4b6e9e0be8118f54ea7d09d7d38

2122cc2d6a9e138c3b4035d403cd2760bc3491e3f00da7211abaa80557de0b3b

164a13d62f4a3fadeff42385a3cdf929880230952f329b4d35cd830a11dc2323

71032845ccbdd843bb7ae8771543dd74c43e6351b350344e1d60eaed3d988d10

05e8f7a9a14bfe6d0f8485cef7e13dc01e220a3c99e8bc027ced2144baec167f

54e832663426c696b1f603379026e5e15720e8c812bbbc60d63aa2ad8a479f75

a01f455dc84e52d08d38e87f6caac49db211036e7f1f27034a5a405f1349f7f7

1543d7c079e44ac2231ee88d10740e73fe4e3c2d05cf43b52e3c52d352ff7264

6acc86923dea4ea5860dad2eaab3ba60c600f64572710cb024c996a445bfab4a

b29651931ccaabaa5107e47a1a8360e635cc10d1798bc13e05c31ee0f031462e

353b821bb59cc83e89f5757bbfe971ba3f0d6ac563292c83b94ab54cb27847a6

2c5744ed09c2afaa8d037975afa8ab1927496e4387111b72cbba5c03855d0b6a

81a7f08240715e6069a9239c0a3773df36ea87481bc269f3fb17635bb8d9d3f2

1adc7affadedf98b1bf76af97a52592be3a4c9004b348041f7619c45975f98de

39c881faaca010f4ba5bfcd9fea491259af51106f9108cb871609cf458a138a1

b8c07a41d25b007e8933464508eb16b0bb2185142a0f5ccc931e2d9876f088c7

1753b871a68251162b20a5cc686776966694a6fc5401eaab722942153125244f

7b0fb27181aa8c2244ab51f28e8b544248585a334184445b1da9b04f89a794ac

2fdcfd9cfb4f196b1fcc75db0f320673196bd55de7d981e67cc4dd912e987e7e

fee82b6330663e353eb442e5127d7581989839dd7c7bc634abaac2869693353e

3a04fc008338e4ee4cd3f9ece3795ab80bf9f9112714a30cc045336ad569f3a7

bb987d53c8c12c0fd5d6272c1a7608133d7db1ce00191be11cfde7b77967dc27

2d3c0640faca7e41178c203f8b4f121b7f03b93a41e275fabb3bc6a18c8e63f9

7683abdd256af36ec22f206ec5c644c2b4b6b8d3aa5c6afba7218817f7e27107

73296087b936def9299781ce18afe1a07541c511b32667a40da868143b53c0f5

7946985580a89e58a7cb9919f399e5dfc5a62b3aa8eb76184a9e349b62b574e2

2455a3b61a935bdcebb41f9241766b806bf0ce8b8dd6de8deefe54ae4cafba50

viewport

Sec-CH-UA-Platform-Version, Sec-CH-UA-Model

https://www.nycforfree.co/events/kpop-demon-hunters-sing-along-experience

Your ride’s here, NYC. Hop on the KPop Demon Hunters sing-along bus and let us hear you SING! 🎤✨

http://static1.squarespace.com/static/638d4bce5f72f36d3f2c5f81/t/638d4c10bfd93735dab43edf/1670204432228/Transparent+NYC+for+Free+blue+logo.png?format=1500w

twitter:title

twitter:image

twitter:url

twitter:card

twitter:description

description

AlK2UR5SkAlj8jjdEc9p3F3xuFYlF6LYjAML3EOqw1g26eCwWPjdmecULvBH5MVPoqKYrOfPhYVL71xAXI1IBQoAAAB8eyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiV2ViVmlld1hSZXF1ZXN0ZWRXaXRoRGVwcmVjYXRpb24iLCJleHBpcnkiOjE3NTgwNjcxOTksImlzU3ViZG9tYWluIjp0cnVlfQ==

Amm8/NmvvQfhwCib6I7ZsmUxiSCfOxWxHayJwyU1r3gRIItzr7bNQid6O8ZYaE1GSQTa69WwhPC9flq/oYkRBwsAAACCeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXN5bmRpY2F0aW9uLmNvbTo0NDMiLCJmZWF0dXJlIjoiV2ViVmlld1hSZXF1ZXN0ZWRXaXRoRGVwcmVjYXRpb24iLCJleHBpcnkiOjE3NTgwNjcxOTksImlzU3ViZG9tYWluIjp0cnVlfQ==

A9nrunKdU5m96PSN1XsSGr3qOP0lvPFUB2AiAylCDlN5DTl17uDFkpQuHj1AFtgWLxpLaiBZuhrtb2WOu7ofHwEAAACKeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

A93bovR+QVXNx2/38qDbmeYYf1wdte9EO37K9eMq3r+541qo0byhYU899BhPB7Cv9QqD7wIbR1B6OAc9kEfYCA4AAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXN5bmRpY2F0aW9uLmNvbTo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

A1S5fojrAunSDrFbD8OfGmFHdRFZymSM/1ss3G+NEttCLfHkXvlcF6LGLH8Mo5PakLO1sCASXU1/gQf6XGuTBgwAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXRhZ3NlcnZpY2VzLmNvbTo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

document.documentElement.classList.add('wf-loading')

(function(rollups, name) { if (!rollups[name]) { rollups[name] = {}; } rollups[name].js = ["//assets.squarespace.com/universal/scripts-compressed/extract-css-runtime-8b8fbd7b348b0453-min.en-US.js"]; }

(function(rollups, name) { if (!rollups[name]) { rollups[name] = {}; } rollups[name].js = ["//assets.squarespace.com/universal/scripts-compressed/extract-css-moment-js-vendor-6f2a1f6ec9a41489-min.en-U

(function(rollups, name) { if (!rollups[name]) { rollups[name] = {}; } rollups[name].js = ["//assets.squarespace.com/universal/scripts-compressed/cldr-resource-pack-c5175d8ac6fd7505-min.en-US.js"]; })

(function(rollups, name) { if (!rollups[name]) { rollups[name] = {}; } rollups[name].js = ["//assets.squarespace.com/universal/scripts-compressed/common-vendors-stable-fbd854d40b0804b7-min.en-US.js"];

(function(rollups, name) { if (!rollups[name]) { rollups[name] = {}; } rollups[name].js = ["//assets.squarespace.com/universal/scripts-compressed/common-vendors-1cb00a4c9e37b9d9-min.en-US.js"]; })(SQU

(function(rollups, name) { if (!rollups[name]) { rollups[name] = {}; } rollups[name].js = ["//assets.squarespace.com/universal/scripts-compressed/common-8e91cf05d2aa07b8-min.en-US.js"]; })(SQUARESPACE

(function(rollups, name) { if (!rollups[name]) { rollups[name] = {}; } rollups[name].js = ["//assets.squarespace.com/universal/scripts-compressed/commerce-04cfc188a717406d-min.en-US.js"]; })(SQUARESPA

(function(rollups, name) { if (!rollups[name]) { rollups[name] = {}; } rollups[name].css = ["//assets.squarespace.com/universal/styles-compressed/commerce-2bd20f6587654ec4-min.en-US.css"]; })(SQUARESP

(function(rollups, name) { if (!rollups[name]) { rollups[name] = {}; } rollups[name].js = ["//assets.squarespace.com/universal/scripts-compressed/performance-fb472b2980718630-min.en-US.js"]; })(SQUARE

Static = window.Static || {}; Static.SQUARESPACE_CONTEXT = {"betaFeatureFlags":["supports_versioned_template_assets","new_stacked_index","marketing_landing_page","enable_form_submission_trigger","cont

{"url":"https://www.nycforfree.co","name":"NYC for FREE","image":"//images.squarespace-cdn.com/content/v1/638d4bce5f72f36d3f2c5f81/dc10027f-1968-4f25-98d4-0ede1de3897c/Transparent+NYC+for+Free+blue+lo

{"name":"KPop Demon Hunters Sing-Along Experience \u2014 NYC for FREE","startDate":"2025-08-22T14:00:00-0400","endDate":"2025-08-24T20:00:00-0400","image":["http://static1.squarespace.com/static/638d4

(function(){window.getSquarespaceCookies = function() {    const getCookiesAllowed = function(cookieName){ return ('; '+document.cookie).split('; ' + cookieName + '=').pop().split(';')[0] === 'true'};


if (!window.location.hostname.includes('squarespace')) {
	var mmtScript = document.createElement('script');
	mmtScript.src = '//monu.delivery/site/1/0/f22ede-37fa-40c7-98ab-6bfd5d8fd3c5.js';
	mmtScri

window.dataLayer = window.dataLayer || [];function gtag(){dataLayer.push(arguments);}gtag('js', new Date());gtag('set', 'developer_id.dZjQwMz', true);gtag('config', 'G-T0K9DR6X86');

$MMT.moveInScreen('8f656794-a1c5-45d2-84eb-0d3c6abe28a2','.BOTTOM ');

//Companion Ad/ Orphan Ad State/Country Exclusion
if ($MMT.geos.region == 'NY'){document.body.classList.add('.mmt-wisp')};

// ST

//Header in-screen 
$MMT.insertAds("12a4f204-195a-4819-85ea-313d3f1de89f", [".sections .page-section:nth-of-type(1)", "after"]); 

//Right Pillar ad
const mediaQuery = window.matchMedia('(min-width: 1


  var vglnk = {key: '782724dbffe57d95d94f65ce3543619c'};
  (function(d, t) {var s = d.createElement(t);
    s.type = 'text/javascript';s.async = true;
    s.src = '//cdn.viglink.com/api/vglnk.js';
  

Script

Squarespace Commerce

Squarespace

HSTS

Typekit

Stimulus

Adobe Fonts

Google AdSense

Google

Amazon

⚠️ High Risk - https://www.nycforfree.co/events/kpop-demon-hunters-sing-along-experience

Requests	IP Address	Location	AS Autonomous System
32	198.49.23.145	United States	AS53831SQUARESPACE
29	157.240.0.63	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
16	146.75.120.237	Frankfurt am Main, Hesse, Germany	AS54113FASTLY
15	146.75.120.238	Frankfurt am Main, Hesse, Germany	AS54113FASTLY
11	184.24.77.141	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
9	157.240.253.63	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
7	198.185.159.144	New York, New York, United States	AS53831SQUARESPACE
5	142.250.186.78	United States	AS15169GOOGLE
4	185.3.92.76	London, England, United Kingdom	AS63949Akamai Connected Cloud
3	172.217.18.2	United States	AS15169GOOGLE
130	99	-	-

Security Scan Report: www.nycforfree.co

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History