government

government public service

phishing/scam

English

_ga_CSLL4ZEK4L

The domain name 'www.cfo.gov' uses the United States government-restricted top-level domain (.gov), featuring subdomain 'www'. Count 3 characters in 'cfo' with 1 vowel and two consonants. Word splitting yields 2 words: cf, o. The median word length lands at 1.5 characters. No strong language cues emerged from the frequency lists.

utf8

affiliate

query

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:112:0

a602434d1edf45f9766b56be9ccb4c62be3e98ee07aa958f6784b56ce1b648cc

0567e41e05a083e43bdf401bd76382147ffadec3fec7cb171e8151c64560b42a

6d562a699c2709bdaa03daacd618770c78052b80d1f281d49f1316bb4711dba5

77b2dfc9e065286d780c87f72b5cad08761346ff564ddd3f79102f4d4027e9a6

5baec4ad34429357dabb274ea5e18fe1ffbc3a7f25aba47098dfee896ad58c3d

fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a

5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89

2f05feed2065b7385b156ebf3a7c6c19def3d412227cee0d46e8a53fb3e9ac41

c4b0fb9e123ad9f72c1192b6feff0bb0171be251bb76050b92e5e85c1fe3f757

081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22

2d9786674755c4855a618b2712997eb77bd4f52ed3dd43f43a33a3bb251d55ad

b8bd65cdd3fffa7533fb36919750e952d5b149c3b4128498a06227c1c0eb6245

9a9cde4f829d9e1b7aa30ed1a2ff504181ac855f2f7d195eeee43e09930b2492

9f58ddc860fd05257edb05652c075f26a53cfa127465d2593dc42f595cb8d141

6c416480829a153985f046ecdbea3330e506cd95b4e988f9d3294c8c778d103c

b8133934a6566ff024775c66e94cd131e40bece56213acbc4731288ae7d20a8d

2e80f638cb6426cd0b19cd21511e4f26fb140f9e366a370bd12a3c8241d0a57b

cc51bac3334e67d9224b60d04e3f02566cc2550a24278080546be7c8c9787b46

926fc2b2cf0e21bd69ff89240a8f0c22608196c2b699701dda5439afee276aba

robots

HandheldFriendly

MobileOptimized

viewport

keyword

image

The Council was established by the Chief Financial Officers (CFO) Act of 1990 (Public Law 101-576). It is composed of the CFOs and Deputy CFOs of the largest Federal agencies, senior officials of OMB, and Treasury who work collaboratively to improve financial management in the U.S. Government.

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

cfo.gov

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


    window.federalist = {
      path: {
        baseurl: ''
      }
    };



    jQuery(document).ready(function () {
        jQuery('.top').slick({
            lazyLoad: 'ondemand', // ondemand progressive anticipated
            infinite: true,
            autoplay: true,
            autoplaySpeed: 6000,
            dots: true,
            arrows: false
        });

        if (/career\-planning\-tool/.test(window.location.href)) {
            jQuery('button[type="button"], button[type="submit"]').createButtonEvents();
        }
        if (/training\-resources/.test(window.location.href)) {
            jQuery('button[type="button"], button[type="submit"]').createButtonEvents();
        }
    });



Requests	IP Address	Location	AS Autonomous System
39	13.32.99.100	New York, New York, United States	AS16509AMAZON-02
7	104.26.9.123	United States	AS13335CLOUDFLARENET
6	172.67.75.33	United States	AS13335CLOUDFLARENET
3	151.101.130.137	San Francisco, California, United States	AS54113FASTLY
2	216.239.32.36	United States	AS15169GOOGLE
2	3.174.46.115	United States	AS16509AMAZON-02
1	216.239.34.36	United States	AS15169GOOGLE
1	104.26.8.123	United States	AS13335CLOUDFLARENET
1	13.32.99.81	New York, New York, United States	AS16509AMAZON-02
1	151.101.66.137	San Francisco, California, United States	AS54113FASTLY
54	48	-	-

Security Scan Report: www.cfo.gov

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History