government public service

healthcare medical

government

documentation technical

English

_ga_CSLL4ZEK4L

bm_sv

PG_AUTH_TOKEN

JSESSIONID

PG_CLIENT_SESSION

ak_bmsc

Within the United States government-restricted top-level domain (.gov), 'www.pay.gov' is registered and includes subdomain 'www'. Count 3 characters in 'pay' split between 1 vowel and two consonants. Splitting it apart reveals one word: pay. No strong language cues emerged from the frequency lists.

html/a2/d7/a2d7c673-7cb8-4a29-b23b-d2877a05de2b_fallback.html.gz

Pay.gov - Home

searchString

formToken

html/a2/d7/a2d7c673-7cb8-4a29-b23b-d2877a05de2b.html.gz

default-src 'self'; script-src 'self' 'unsafe-inline' prod.accdab.net/ www.cdn-net.com/ six.cdn-net.com/ www.cdn-path.com/ www.google.com/recaptcha/ dap.digitalgov.gov www.gstatic.com/recaptcha/ www.google-analytics.com www.paypal.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; frame-src prod.accdab.net/ www.cdn-net.com/ six.cdn-net.com/ www.cdn-path.com/ www.gstatic.com/ www.google.com/ www.paypal.com; img-src 'self' www.gstatic.com/ data: www.paypalobjects.com; connect-src 'self' https://www.google-analytics.com/ prod.accdab.net/ www.paypal.com

1c587b7f44e114b89050518dfb75d9ac63fcfc75e5b7dca490391da843c06c26

2f05feed2065b7385b156ebf3a7c6c19def3d412227cee0d46e8a53fb3e9ac41

770b0318e1b90c64af95f4bf607cccda3b5d442507760bbe9ae5cab4cc2d834b

2653654a083cbd4157e05658aaaa10649b31cb7f19cd42596d6bafa34f2af548

50cee5e6aa07db03b466ac34eb79c85df2b24fee2c56ca218ff8d2045ae57736

7dd9caa249ed26b2365e1f5ed1afb8e942505e624724ca54896c78628f44d2d3

049aabc0a353851ede482c6c2769d4e96b5aa53a852af378d86f098c5aa0dccf

f707d60968571aeb7b82522d253966eb36656e7c343f6c66ac606fb79015d2a2

viewport

format-detection

_csrf

_csrf_header

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';


	/* Clickjacking prevention */
	if (self === top) {
	    var antiClickjack = document.getElementById("antiClickjack");
	    antiClickjack.parentNode.removeChild(antiClickjack);
	} else {
	    top.location = self.location;
	}



    pgMessages['error.format.money'] = 'Must be in US currency format.';
    pgMessages['session.timeout.seconds'] = 'seconds';
    pgMessages['session.timeout.minutes'] = 'minutes';

    $(function() {
        paygovSubmitOnEnter();

        // bind a click event to the 'skip' link
        $(".skip").on('click', function(event) {
            // strip the leading hash and declare
            // the content we're skipping to
            var skipTo = "#" + this.href.split('#')[1];

            // Setting 'tabindex' to -1 takes an element out of normal
            // tab flow but allows it to be focused via javascript
            $(skipTo).attr('tabindex', -1).on('blur focusout', function () {
                // when focus leaves this element,
                // remove the tabindex attribute
                $(this).removeAttr('tabindex');
            }).focus(); // focus on the content container
        });

        if( !cookiesEnabled() ) {
            $("#cookiesRequiredError").show();
        }
        if(isIE()) {
            $("#unsupportedBrowser").show();
        }

		
    });



$(function() {
    //Hack to put common payments on top on mobile:
    //if (window.screen.width <= 640)
    if (getWindowWidth() <= 640)
        $('#commonPaymentsContainer').insertBefore(
                '#needToPayContainer');
});



		$(function() {
			if (true) {
				openAlert(false);
			} else {
				closeAlert(false);
			}
		});
	


    var postLink = function( action, showLoadingScreen ) {
    	$("#linkPostForm").attr("action", action);
    	$("#linkPostForm").submit();

        //show modal loading screen, if requested:
        if(showLoadingScreen===true)
            blurScreen();
    }


Requests	IP Address	Location	AS Autonomous System
81	184.25.148.35	Billerica, Massachusetts, United States	AS20940Akamai International B.V.
23	184.25.148.42	Billerica, Massachusetts, United States	AS20940Akamai International B.V.
1	18.165.140.42	United States	AS16509AMAZON-02
1	216.58.209.168	United States	AS15169GOOGLE
83	4	-	-

Security Scan Report: www.pay.gov

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History