government

government public service

English

The domain 'osc.gov' uses the United States government-restricted top-level domain (.gov) without a subdomain. Its registrable label 'osc' stretches across 3 characters holding one vowel versus 2 consonants. Splitting it apart reveals two words: os, c. Average segment length settles at 1.5 characters. Most frequently, 'c' shows up in Breton. Usage also turns up in Galician and Portuguese contexts. Net impression: Breton phrase.

html/ba/06/ba06c2db-a8de-4d88-9e78-937c286b1441.html.gz

frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;

attachment; filename*=utf-8''homepagevideoarealist%2ejs; filename="homepagevideoarealist.js"

attachment; filename*=utf-8''jquery%2d3%2e7%2e1%2emin%2ejs; filename="jquery-3.7.1.min.js"

attachment; filename*=utf-8''vendor%2emin%2ejs; filename="vendor.min.js"

attachment; filename*=utf-8''OSC%2emin%2ejs; filename="OSC.min.js"

attachment; filename*=utf-8''slippry%2ejs; filename="slippry.js"

attachment; filename*=utf-8''flip%2emin%2ejs; filename="flip.min.js"

attachment; filename*=utf-8''tileSlider%2emin%2ejs; filename="tileSlider.min.js"

appId=cid-v1:96df85f6-e04f-4db4-b716-bb75f6127a60

application/json;odata=verbose;charset=utf-8

script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri /cspreport/allowlist

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:103:0

attachment; filename*=utf-8''Latin%2dMerriweather%2dBold%2ewoff2; filename="Latin-Merriweather-Bold.woff2"

attachment; filename*=utf-8''sourcesanspro%2dregular%2dwebfont%2ewoff2; filename="sourcesanspro-regular-webfont.woff2"

attachment; filename*=utf-8''sourcesanspro%2dbold%2dwebfont%2ewoff2; filename="sourcesanspro-bold-webfont.woff2"

attachment; filename*=utf-8''fa%2dsolid%2d900%2ewoff2; filename="fa-solid-900.woff2"

attachment; filename*=utf-8''fa%2dbrands%2d400%2ewoff2; filename="fa-brands-400.woff2"

attachment; filename*=utf-8''fa%2dregular%2d400%2ewoff2; filename="fa-regular-400.woff2"

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Requests	IP Address	Location	AS Autonomous System
9	99.84.152.87	United States	AS16509AMAZON-02
7	13.107.213.44	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
7	142.250.184.200	United States	AS15169GOOGLE
7	216.58.206.46	United States	AS15169GOOGLE
7	99.84.152.56	United States	AS16509AMAZON-02
7	142.250.186.78	United States	AS15169GOOGLE
7	20.185.66.27	Washington, Virginia, United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
7	142.250.185.238	United States	AS15169GOOGLE
7	216.239.34.36	United States	AS15169GOOGLE
7	20.50.88.238	Amsterdam, North Holland, Netherlands	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
100	14	-	-

Security Scan Report: osc.gov

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies8

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History