Domain 'preview.webflow.com' uses the commercial generic top-level domain (.com), featuring subdomain 'preview'. The registrable portion 'webflow' spans 7 characters split between 2 vowels and 5 consonants. Word splitting yields 2 words: web, flow. Average segment length settles at 3.5 characters. 'web' most often appears in Chinese (Pinyin). You will also see it in English and Vietnamese contexts.

html/fe/78/fe78964d-c578-4715-b032-b0e378378d5a.html.gz

frame-ancestors 'self' https://preview.webflow.com; report-uri https://webflow.report-uri.com/r/t/csp/reportOnly

frame-ancestors 'self' https://*.webflow.com https://webflow.com

frame-ancestors 'self' https://*.webflow.com https://webflow.com; report-uri https://webflow.report-uri.com/r/t/csp/reportOnly

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZO-CF

X-UA-Compatible

Script

HSTS

Webflow

Webflow - Home

⚠️ High Risk - https://preview.webflow.com/preview/home-874cf4?utm_medium=preview_link&utm_source=designer&utm_content=home-874cf4&preview=34a4d73f358a3848e504163c3a1f0728&workflow=sitePreview

Requests	IP Address	Location	AS Autonomous System
19	13.226.247.220	United States	AS16509AMAZON-02
1	13.226.247.18	United States	AS16509AMAZON-02
1	54.91.241.83	Ashburn, Virginia, United States	AS14618AMAZON-AES
1	34.197.248.129	Ashburn, Virginia, United States	AS14618AMAZON-AES
1	142.250.181.227	United States	AS15169GOOGLE
1	13.226.247.67	United States	AS16509AMAZON-02
1	104.18.34.147	United States	AS13335CLOUDFLARENET
1	142.250.185.170	United States	AS15169GOOGLE
1	172.64.153.109	United States	AS13335CLOUDFLARENET
1	52.204.204.228	Ashburn, Virginia, United States	AS14618AMAZON-AES
37	19	-	-

Security Scan Report: preview.webflow.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History