government

English

TS0145f6a3

TS015af12b

BIGipServer~caia.treasury.gov~Shared~caia.treasury.gov_443_lbve_tcp_pl

CAPTMPL

The domain name 'caia.treasury.gov' uses the United States government-restricted top-level domain (.gov) and includes subdomain 'caia'. The second-level label 'treasury' is 8 characters long split between three vowels and 5 consonants. It segments into 1 word: treasury. Median word length comes out to 8 characters. No strong language cues emerged from the frequency lists.

Name

pf.submit

html/4f/47/4f470698-9776-44f1-bf3d-f6e0ab6b5b06.html.gz

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

US-TREASURY-SOC

Timothy Metzinger

United States Department of the Treasury

Daniel L Smicker

US-DEPARTMENT-OF-THE-TREASURY


        // Dynamic spacing between IDP buttons
        /*
        var authContainer = document.querySelector("#auth-box > div:nth-child(1) > div");
        var idpBtns = authContainer.getElementsByTagName("form");
        var authContainerHeight = authContainer.clientHeight;
        var marginTop = (authContainerHeight - (idpBtns[0].clientHeight * idpBtns.length))/idpBtns.length;
        for (i=1;i<idpBtns.length;i++){
            idpBtns[i].style.marginTop = marginTop + "px";
        }
        */
        let info = document.getElementById('information');
        let info_heading = document.getElementById('info_heading');
        let default_info_heading = info_heading.innerHTML;
        let default_info = info.innerHTML;
        function handler(info_id, event) {
            idpHeading = document.getElementById('btn_' + info_id);
            idpInfo = document.getElementById(info_id);
            info.style.transition = "all 4s";
            info_heading.style.transition = "all 4s";
            if (event == 'enter') {
                info_heading.innerHTML = idpHeading.innerHTML;
                info.innerHTML = idpInfo.innerHTML || '';
            }
        }
    

HSTS

ASAP Production

✅ Low Risk - https://caia.treasury.gov/as/authorization.oauth2?scope=openid&response_type=code&redirect_uri=https%3A%2F%2Fwww.asap.gov%2FASAPGov%2Foidc-callback&state=knbv9TsgWTWh6S1DWj31EFYYh-TzFoncMJcBbh3z9Fs&code_challenge_method=S256&client_id=cd4a049e-a956-4c7b-a73a-dc84bf559a95&code_challenge=4UUoUVZ_8vNh_0hVURDd6gsCvifyYy_1x8eVTM7r5BM

Requests	IP Address	Location	AS Autonomous System
13	166.123.230.239	San Jose, California, United States	AS13506US-DEPARTMENT-OF-THE-TREASURY
6	2610:108:4100:100c::9:15	San Jose, California, United States	AS13506US-DEPARTMENT-OF-THE-TREASURY
13	2	-	-

Security Scan Report: caia.treasury.gov

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History