Domain 'www.njstart.gov' uses the United States government-restricted top-level domain (.gov) and includes subdomain 'www'. Its registrable label 'njstart' stretches across 7 characters holding 1 vowel versus six consonants. It segments into two words: nj, start. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

html/da/a1/daa13df1-aa8b-4cb0-bcfe-14a9f8b24d4c_fallback.html.gz

NJSTART - /view/login/login.xhtml

html/da/a1/daa13df1-aa8b-4cb0-bcfe-14a9f8b24d4c.html.gz

default-src 'self'; font-src *; img-src * data:; script-src 'unsafe-eval' 'unsafe-inline' *; style-src 'unsafe-inline' *; connect-src *; form-action *; frame-ancestors 'self'; child-src *;object-src 'self' data: https://marketplace.phi-production.cloud;

default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: ; form-action 'none' ; frame-ancestors 'self' ; script-src 'unsafe-eval' 'unsafe-hashes' 'report-sample'; report-uri /csp_report

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

njstart.gov

✅ Low Risk - https://www.njstart.gov/bso/

Requests	IP Address	Location	AS Autonomous System
24	142.250.185.232	United States	AS15169GOOGLE
15	216.239.32.36	United States	AS15169GOOGLE
15	18.66.102.106	United States	AS16509AMAZON-02
15	142.250.185.234	United States	AS15169GOOGLE
15	45.60.124.188	United States	AS19551INCAPSULA
15	65.9.175.27	United States	AS16509AMAZON-02
15	142.250.186.35	United States	AS15169GOOGLE
15	142.250.186.100	United States	AS15169GOOGLE
15	142.250.185.72	United States	AS15169GOOGLE
15	35.161.23.240	Boardman, Oregon, United States	AS16509AMAZON-02
159	10	-	-

Security Scan Report: www.njstart.gov

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History