government public service

government

corporate

English

_ga_CSLL4ZEK4L

_ga_HBYXWFP794

nmstat

The domain 'www.gsa.gov' uses the United States government-restricted top-level domain (.gov) with subdomain 'www'. The core label 'gsa' covers 3 characters containing one vowel alongside 2 consonants. Word splitting yields two words: gs, a. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

html/84/d1/84d1cade-c8e6-449d-b0e4-b98eede28b82_fallback.html.gz

Home | GSA

utf8

affiliate

query

html/84/d1/84d1cade-c8e6-449d-b0e4-b98eede28b82.html.gz

attachment; filename=hp_realestate_500x152_mobile.jpg

attachment; filename=hp_buying2_500x152_mobile.png

attachment; filename=hp_buyingSelling2_500x152.png

attachment; filename=hp_technology_500x152_mobile.jpg

attachment; filename=WebHeroFirstFrame-08262021_v2.jpg

attachment; filename=hp_realestate_1200x500_0.jpg

attachment; filename=hp_buying2_1200x500.jpg

attachment; filename=hp_selling_1200x500_0.jpg

attachment; filename=hp_technology2_1200x500.jpg

attachment; filename=gsagov_homepage_hero_h264_08252021.mp4

application/x-www-form-urlencoded; charset=UTF-8

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:112:0

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js

frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://gov1.qualtrics.com/csp-report

attachment; filename=768x428-6-Focus-Calendar.png

attachment; filename=768x428-6-Access.png

attachment; filename=768x428-5-USEITActandOccupancyData.jpg

1d53fab9fef1abe7a3e0e64b168d20ddb574af3f3967493f1129d124bf60f5a6

d28280e47cb4de4f8b8581c541dedfb23c71baef9722328d466d0934dcc5c046

f823dfa69d36fa260e404103ef2905ddf0b1851243dcb6a8c6ec10b94d0d45e7

a69d6d40c0c90f9fb3a3ead0c170b8d5d2509a3e9c20f5306e25e6ad8a8dca07

da78ea1aa224c725ad8160acc127d45ff5fc3c5597c30b48a0692aab0bb248a1

ff128dc05c030929b152a98cf243220c5cbad9c6ba2a90550704ec504ccb76a0

6403252007219f86469868e1127cdfa88ffdd593ee00ab288b652203902ac07e

2d52e6a3fa33fd0611391d71d3617997bf69b41ad943f216c2569def87beae08

7d6d889825f529c2f5d2c53d4c1dc1203594ad6b0742ef0f2f7fd65c526216e7

2f05feed2065b7385b156ebf3a7c6c19def3d412227cee0d46e8a53fb3e9ac41

77b2dfc9e065286d780c87f72b5cad08761346ff564ddd3f79102f4d4027e9a6

5baec4ad34429357dabb274ea5e18fe1ffbc3a7f25aba47098dfee896ad58c3d

e4464d31858105b3499d5b419d46f4ddd23bc753e875a0b8f110ea529ba3bf73

00e5ab020b6639aa126b5ebae57e8d8c9688ac69e748f53edd133c11875b3dde

990f83a5722a19de82144de2d695bcc5c90b8af0c36f79eb6905f15853bf7c58

63f8966d6ceaa1ffd6ceaa04ec3fb20fc6fcdfc63956321e5a72a83508f828a8

661203f8cf9a4ee7dbea579d6b7b4498a1073aa9a9846efe546740f0a6d227c6

1b489ab7f81d100e47070feb185ee8a8a12bb0da4034df75374dd1e0efd643f5

6164e6382c5c561960cd2f8358fe0afae1cbcc8a4a936c859021d2c6f167fd4e

e0d8f81d639d2ffd477d8a0d3896c6bb0b42c38113d4122fb2beb75c4cf51dc4

a7a1c9d7a863b1375ff2d65a0fd30dcd72fa4d15bb3945a6f386208e49498aed

f39aa5c19034d8d815bcef2ac0132677008cc4e1130818f6c3f3959406281672

862504070144a4b17a0e507cb065e52a8e243d9e3a522e2a1a9774beb5643a6e

57a25c8552b9593c78a482b634e4c0d1d147cdbd4a4abd7506f2a3746a0bc2c9

68c6ce2624e1e575db5f5532991a6aca582b870a4360d35e1873941243cfa1a4

c69bbfa13e8d7629657314c0f7d926da93de86ff5fdeb8d8e182473877e6514d

ddd57c46e0f7c84e1dcb47b753899b762abee5c8e54a118e57e11288b4a019a5

https://www.gsa.gov/sites/gsa.gov/themes/custom/gsa/custom_assets/images/open_graph_image.jpeg

MobileOptimized

HandheldFriendly

viewport

organization

Last-Modified

Our mission is to deliver the best customer experience and value in real estate, acquisition, and technology services to government and the American people.

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

gsa.gov

Abuse

Google LLC

GOOGLE

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZO-CF2

var _elqQ = _elqQ || [];
        _elqQ.push(['elqSetSiteId', '1311950425']);
        _elqQ.push(['elqUseFirstPartyCookie', 'gsasolutionssecure.gsa.gov']);
        _elqQ.push(['elqTrackPageView', window.location.href]);
        (function () {
          function async_load() {
            var s = document.createElement('script'); s.type = 'text/javascript';
            s.async = true;
            s.src = '//img.en25.com/i/elqCfg.min.js';
            var x = document.getElementsByTagName('script')[0];
            x.parentNode.insertBefore(s, x);
          }
          if (window.addEventListener) window.addEventListener('DOMContentLoaded', async_load, false);
          else if (window.attachEvent) window.attachEvent('onload', async_load);
        })();

window.dataLayer = window.dataLayer || []; window.dataLayer.push({"drupalLanguage":"en","drupalCountry":"US","siteName":"GSA","entityCreated":"1502650846","entityLangcode":"und","entityStatus":"1","entityUid":"53","entityUuid":"ed1e2129-eb2c-4bf4-be24-9dc90d2d7052","entityVid":"388906","entityName":"ASTO Migration","entityType":"node","entityBundle":"cmp_page","entityId":"985","entityTitle":"Home","userUid":0});

Requests	IP Address	Location	AS Autonomous System
59	54.192.35.100	United States	AS16509AMAZON-02
36	172.217.18.10	United States	AS15169GOOGLE
9	18.197.4.9	Frankfurt am Main, Hesse, Germany	AS16509AMAZON-02
8	216.239.34.36	United States	AS15169GOOGLE
5	142.250.186.170	United States	AS15169GOOGLE
4	142.250.184.232	United States	AS15169GOOGLE
3	20.140.56.69	San Antonio, Texas, United States	AS8070MICROSOFT-CORP-MSN-AS-BLOCK
2	3.174.46.115	United States	AS16509AMAZON-02
1	216.239.32.36	United States	AS15169GOOGLE
1	188.114.96.3	United States	AS13335CLOUDFLARENET
102	67	-	-

Security Scan Report: www.gsa.gov

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History