Domain 'www.thefishy.net' uses the network infrastructure generic top-level domain (.net); it also runs on subdomain 'www'. The registrable portion 'thefishy' spans 8 characters holding two vowels versus 6 consonants. Splitting it apart reveals 2 words: the, fishy. Median word length comes out to four characters. The linguistic tilt is English for 'the'. Secondary signals appear in Chinese (Pinyin) and Chinese (Zhuyin). Taken together, it feels English.

html/f1/6e/f16ef576-14ae-4eb7-b328-c96f844d7ffd.html.gz

require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport, script-src 'report-sample' 'nonce-HFcwFkG5tfuBBOrryGeL0g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist

script-src 'report-sample' 'nonce--evUQLlzUVwBpprj-Wt5-Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport

require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'report-sample' 'nonce-l9mlvapIy1xFUifv4-gSRg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist

script-src 'report-sample' 'nonce-kv3lExruxvG0B9Z2O55PKQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Tucows Domains Inc.

THEFISHY.NET

JQuery

Bootstrap

Cloudflare

HSTS

cdnjs

Google Analytics

Google AdSense

Wrexham v Portsmouth Head to Head

✅ Low Risk - https://www.thefishy.net/head2head.php?team1=Wrexham&team2=Portsmouth

Requests	IP Address	Location	AS Autonomous System
4	13.107.246.44	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
2	142.250.185.234	United States	AS15169GOOGLE
2	142.250.185.161	United States	AS15169GOOGLE
2	142.250.186.174	United States	AS15169GOOGLE
2	216.58.206.67	United States	AS15169GOOGLE
2	104.17.24.14	United States	AS13335CLOUDFLARENET
2	20.105.232.49	Amsterdam, North Holland, Netherlands	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
2	142.250.185.66	United States	AS15169GOOGLE
2	104.17.25.14	United States	AS13335CLOUDFLARENET
2	13.107.213.44	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
26	12	-	-

Security Scan Report: www.thefishy.net

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History