e-commerce

corporate

malicious

English

The domain name 'www.callofduty.com' uses the commercial generic top-level domain (.com) with subdomain 'www'. Its registrable label 'callofduty' stretches across 10 characters holding three vowels versus seven consonants. It segments into 3 words: call, of, duty. Expect 4 characters per word on average. 'call' most often appears in Chinese (Pinyin). It also appears in English and Dutch contexts.

html/ec/9c/ec9c2b92-ec9a-41c1-8703-29062524f943.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

attachment; filename="CallOfDuty_Chimera_Icon_Shorthand_White-Orange.svg"

attachment; filename="Chimera_primary_logo_white_orange.svg"

attachment; filename="xbox_logo_lockup.svg"

attachment; filename="battle.net_logo_lockup.svg"

attachment; filename="steam_logo_lockup.svg"

attachment; filename="playstation_logo_lockup.svg"

attachment; filename="xbox_logo_icon.svg"

attachment; filename="battle.net_logo_icon.svg"

attachment; filename="steam_logo_icon.svg"

attachment; filename="playstation_logo_icon.svg"

attachment; filename="S01_Roadmap_Extended_16x9_728pm_1920x1080_(1).jpg"

attachment; filename="BO7-RFL-PC-LAUNCH-TOUT.jpg"

attachment; filename="BO7-CODM-REZNOV-PREORDER-TOUT.jpg"

attachment; filename="BO7-OPEN-BETA-PATCH-NOTES-TOUT.jpg"

script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri /cspreport/allowlist
require-trusted-types-for 'script'

base-uri 'self';object-src 'none';script-src 'report-sample' 'nonce-SiKgJvFjYo9AEdeLQfN-Sw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri /cspreport/strict

script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri /cspreport/allowlist
base-uri 'self';object-src 'none';script-src 'report-sample' 'nonce-0Gku0KUU1-WIpX9d4UcZyQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri /cspreport/strict

attachment; filename="Icon_TopLeftBracket.svg"

attachment; filename="Icon_TopRightBracket.svg"

attachment; filename="Icon_BottomLeftBracket.svg"

attachment; filename="Icon_BottomRightBracket.svg"

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Requests	IP Address	Location	AS Autonomous System
21	142.250.186.46	United States	AS15169GOOGLE
10	142.250.185.72	United States	AS15169GOOGLE
10	104.102.48.31	Frankfurt am Main, Hesse, Germany	AS16625AKAMAI-AS
10	142.250.185.206	United States	AS15169GOOGLE
10	142.250.181.238	United States	AS15169GOOGLE
10	142.250.185.142	United States	AS15169GOOGLE
10	216.58.212.142	United States	AS15169GOOGLE
10	23.35.237.109	Frankfurt am Main, Hesse, Germany	AS16625AKAMAI-AS
10	104.18.86.42	United States	AS13335CLOUDFLARENET
10	172.217.18.14	United States	AS15169GOOGLE
221	21	-	-

Security Scan Report: www.callofduty.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies12

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History