government public service

education learning

German

AL_SESS-S

JSESSIONID

Domain 'www.bafa.de' uses the German country-code top-level domain (.de) with subdomain 'www'. Count 4 characters in 'bafa' holding 2 vowels versus two consonants. Splitting it apart reveals 2 words: b, afa. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

html/df/90/df9041d9-3923-4a39-8a5b-2cf634c863e1_fallback.html.gz

BAFA - Startseite

resourceId

input_

pageLocale

templateQueryString

submit

searchService

perma_status_facebook

perma_status_twitter

perma_status_gplus

html/df/90/df9041d9-3923-4a39-8a5b-2cf634c863e1.html.gz

default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com *.youtube-nocookie.com *.itzbund.de *.energiewechsel.de *.deutschland-machts-effizient.de *.app.powerbi.com *.karriere.bafa.de *.atlas.geomer-maps.de *.twitter.com api.signalize.com; object-src 'self' multimedia.gsb.bund.de; media-src 'self' multimedia.gsb.bund.de *.youtube.com *.youtube-nocookie.com; frame-src karriere.bafa.de atlas.geomer-maps.de app.powerbi.com *.energiewechsel.de *.deutschland-machts-effizient.de *.youtube-nocookie.com *.itzbund.de *.youtube.com *.twitter.com; img-src 'self' data: *.youtube.com *.youtube-nocookie.com *.itzbund.de *.openstreetmap.org *.twimg.com; connect-src 'self' *.itzbund.de; frame-ancestors 'self' *.kfw.de *.bafa.de *.energiewechsel.de; upgrade-insecure-requests;

default-src 'self' 'unsafe-inline'; img-src *

default-src 'self' 'unsafe-inline'; allow 'self'; img-src *

title

width=device-width, initial-scale=1.0, maximum-scale=1.5, user-scalable=1

viewport

generator

Eq-DkdLBLyfcv_IikLvuM9I3ljqTE_W1NUYOnDGqIBg

google-site-verification

keywords

description

twitter:card

twitter:site

twitter:title

twitter:description

https://www.bafa.de/SharedDocs/Bilder/DE/Allgemein/twittercard.png?__blob=wide&v=2

twitter:image

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

bafa.de

✅ Low Risk - https://www.bafa.de/DE/Home/home_node.html

Requests	IP Address	Location	AS Autonomous System
54	80.245.159.150	Unknown	Unknown
54	1	-	-

Security Scan Report: www.bafa.de

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History