documentation technical

government public service

government

English

_dd_s

_ga_G0S9P0SS5G

_ga_N77WXZTGBN

_ga_CSLL4ZEK4L

_gat_gtag_UA_186002608_1

_gid

You're looking at domain 'gsafleet.gov' on the United States government-restricted top-level domain (.gov) and has no subdomain. The second-level label 'gsafleet' is 8 characters long containing 3 vowels alongside 5 consonants. Tokenizing the label suggests 3 words: gs, a, fleet. Median word length is two characters. No strong language cues emerged from the frequency lists.

html/d2/e6/d2e67ddd-43c7-440d-9b85-ee7c77e28858_fallback.html.gz

GSAFleet.gov

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:112:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:225:0

Looking for U.S. government information and services? Visit USA.gov

viewport

theme-color

GSA Fleet is a one-stop shop for leasing, buying, and renting vehicles for federal agencies. GSAFleet.gov helps you manage your fleet and currently serves as a replacement for FMVRS

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

gsafleet.gov


      // Only initialize DAP analytics if the script loads successfully
      var dapScript = document.getElementById('_fed_an_ua_tag');
      if (dapScript) {
        dapScript.addEventListener('load', function () {
          // DAP script loaded successfully;
        });
        dapScript.addEventListener('error', function () {
          // Do not initialize DAP if script fails to load
          console.warn('Failed to load DAP analytics script');
        });
      }
    

Requests	IP Address	Location	AS Autonomous System
10	3.160.150.3	Unknown	Unknown
6	142.250.185.168	Unknown	Unknown
5	216.239.32.36	Unknown	Unknown
2	3.30.62.22	Unknown	Unknown
2	3.174.46.56	Unknown	Unknown
1	172.217.18.14	Unknown	Unknown
1	18.66.147.88	Unknown	Unknown
0	18.66.147.82	Unknown	Unknown
0	3.160.150.88	Unknown	Unknown
0	3.160.150.70	Unknown	Unknown
27	31	-	-

Security Scan Report: gsafleet.gov

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History