No Security Risks Detected
This domain appears to be safe and secure
100%
Score
Disclaimer: This assessment is based on automated analysis of publicly available information. Results are for informational purposes only. For critical applications, consult security professionals.
Scan Information
Last checked:January 8, 2026 22:48:52
Target URL:https://ntvtoday.pics/
Scan Complete
Refresh page after 10 minutes
for updated results
Page Information
Target URL
https://ntvtoday.pics/
Page Title
HellHot 100
Site FaviconStatus
Active
Host Information
Domain
ntvtoday.pics
Server
cloudflare
Country
United States
IP Address
172.67.198.75
ASN Information
13335
CLOUDFLARENET
Technologies
YouTube
Video players
Vue.js
JavaScript frameworks
HSTS
Security
Cloudflare
CDN
HTTP/3
Miscellaneous
SSL Certificate
HTTPS Enabled
Secure
Certificate Issuer
WE1
Valid From
2026-01-08 16:42:21
Valid Until
2026-04-08 17:40:57
Subject Name
ntvtoday.pics
Performance Statistics
36
Total Requests
3
Domains
3
IP Addresses
595.44 KB
Transfer Size
Content Size873.94 KB
HTTP Headers
access-control-allow-origin
*
access-control-expose-headers
Authorization
alt-svc
h3=":443"; ma=86400
cf-cache-status
DYNAMIC
cf-ray
9baf3ee428e9d19a-MCI
content-encoding
zstd
content-language
en-US
content-type
text/html; charset=utf-8
date
Thu, 08 Jan 2026 22:49:01 GMT
expect-ct
max-age=0
nel
{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
permissions-policy
geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
referrer-policy
no-referrer
strict-origin-when-cross-origin
report-to
{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ojRiFxO79flrAAvPYqy4bGYrKuyt6QzHXtihPgIDfwUsYkh3DOBmCeKjYi5OP9aqY2b4PDtjbjfHRuRBLSU9oXTdQX0XXKI6IdANfvZGFeAVyHKs2mHOd1g%3D"}]}
server
cloudflare
strict-transport-security
max-age=15552000; includeSubDomains
vary
accept-encoding
x-content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://storage.googleapis.com https://cdn.jsdelivr.net https://malsup.github.io https://static.cloudflareinsights.com https://telegram.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://cdn.jsdelivr.net https://netdna.bootstrapcdn.com; font-src 'self' https://fonts.gstatic.com https://www.gstatic.com https://netdna.bootstrapcdn.com data:; img-src 'self' data: https: blob:; media-src 'self' data: blob:; connect-src 'self' blob: https://api.pwagroup.ai wss://api.pwagroup.ai https://ads.pwagroup.ai https://preview.pwagroup.ai https://sentry.pwastage.xyz https://static.cloudflareinsights.com https://cdnjs.cloudflare.com https://malsup.github.io https://telegram.org https://oauth.telegram.org; worker-src 'self' blob:; manifest-src 'self'; frame-src https://telegram.org https://oauth.telegram.org https://preview.pwagroup.ai https://www.youtube.com; frame-ancestors 'self' https://dash.pwa.group https://preview.pwa.group https://*.pwa.group https://*.pwagroup.ai; base-uri 'self'; form-action 'self' https://preview.pwagroup.ai; object-src 'none'; upgrade-insecure-requests; report-uri https://dash.pwa.group/api/101/csp-report;
x-content-type-options
nosniff
x-dns-prefetch-control
off
x-download-options
noopen
x-permitted-cross-domain-policies
none
x-webkit-csp
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://storage.googleapis.com https://cdn.jsdelivr.net https://malsup.github.io https://static.cloudflareinsights.com https://telegram.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://cdn.jsdelivr.net https://netdna.bootstrapcdn.com; font-src 'self' https://fonts.gstatic.com https://www.gstatic.com https://netdna.bootstrapcdn.com data:; img-src 'self' data: https: blob:; media-src 'self' data: blob:; connect-src 'self' blob: https://api.pwagroup.ai wss://api.pwagroup.ai https://ads.pwagroup.ai https://preview.pwagroup.ai https://sentry.pwastage.xyz https://static.cloudflareinsights.com https://cdnjs.cloudflare.com https://malsup.github.io https://telegram.org https://oauth.telegram.org; worker-src 'self' blob:; manifest-src 'self'; frame-src https://telegram.org https://oauth.telegram.org https://preview.pwagroup.ai https://www.youtube.com; frame-ancestors 'self' https://dash.pwa.group https://preview.pwa.group https://*.pwa.group https://*.pwagroup.ai; base-uri 'self'; form-action 'self' https://preview.pwagroup.ai; object-src 'none'; upgrade-insecure-requests; report-uri https://dash.pwa.group/api/101/csp-report;
x-xss-protection
0
24 headers detected
Technology Stack Analysis
YouTube
Video players
YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.
Vue.js
JavaScript frameworks
Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.
HSTS
Security
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
Cloudflare
CDN
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
HTTP/3
Miscellaneous
HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
Website Cookies 1
pwauid
ntvtoday.pics
Value
PmzP0-bWXzbNR8uZ
Expires:1/8/2027
External Links 0
Requested Domains 3
ntvtoday.pics
Apex domain
No category information available
play-lh.googleusercontent.com
Unknown Type
No category information available
www.youtube.com
Unknown Type
No category information available