government public service

Norwegian

nfd-enable-cf-opt

You're looking at domain 'apis.google.com' on the commercial generic top-level domain (.com) and includes subdomain 'apis'. Its registrable label 'google' stretches across 6 characters split between 3 vowels and 3 consonants. Breaking it apart gives one word: google. Most frequently, 'google' shows up in Sinhala. It also appears in Danish and English contexts.

phone-country

phone_without_country_code

html/5c/7a/5c7acc14-c5f4-41ff-82bf-caebb2ac409a.html.gz

script-src 'report-sample' 'nonce-YgwFtXpxPnl5GL6P5FXbEg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AdditnowStoreUi/cspreport;worker-src 'self' blob:
script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://youtube.googleapis.com https://s.ytimg.com https://youtube.com https://www.youtube.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.google-analytics.com/analytics.js https://www.googleapis.com/appsmarket/v2/installedApps/ https://clients1.google.com/complete/search https://www.gstatic.com/feedback/js/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://maps.googleapis.com;report-uri /_/AdditnowStoreUi/cspreport/allowlist
require-trusted-types-for 'script';report-uri /_/AdditnowStoreUi/cspreport

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/appsdev-boq-js-css-signers

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:103:0

application/x-www-form-urlencoded;charset=UTF-8

Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=

width=device-width, initial-scale=1, shrink-to-fit=no

viewport

csrf-token

apple-mobile-web-app-title

application-name

msapplication-TileColor

https://minside.autopassferje.no/images/icons/browserconfig.xml

msapplication-config

theme-color

logged-in

referrer

default-src 'none'; font-src 'self' data:; img-src 'self' data:; style-src 'unsafe-inline'; media-src 'self' data:; script-src 'unsafe-inline' data:; object-src 'self' data:; frame-src 'self' data:;

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


                      document.addEventListener('DOMContentLoaded', function() {
                        const phoneInput = document.getElementById('phone');
                        const submitButto

X-UA-Compatible

HTTP/3

HSTS

AutoPASS for ferje

✅ Low Risk - https://apis.google.com/additnow/l?applicationid=180181176205&__ls=ogb&__lu=https://iry.uih.mybluehost.me/vv/autopas/login.htm

Requests	IP Address	Location	AS Autonomous System
1	216.239.32.36	United States	AS15169GOOGLE
1	216.58.206.46	United States	AS15169GOOGLE
1	142.250.186.35	United States	AS15169GOOGLE
1	50.6.34.49	Frankfurt am Main, Hesse, Germany	AS31898ORACLE-BMC-31898
1	216.239.34.36	United States	AS15169GOOGLE
1	142.250.185.238	United States	AS15169GOOGLE
1	142.251.140.168	United States	AS15169GOOGLE
1	2001:4860:4802:34::36	United States	AS15169GOOGLE
1	2a00:1450:4001:82f::2008	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
1	2a00:1450:4001:812::200e	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
13	13	-	-

Security Scan Report: apis.google.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History