technology software

government

documentation technical

corporate

English

_ga_SECP2Q731L

The domain name 'keystoneco.gov' uses the United States government-restricted top-level domain (.gov) with no subdomain. The second-level label 'keystoneco' is 10 characters long containing 4 vowels alongside 6 consonants. Breaking it apart gives 2 words: keystone, co. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

base-uri 'self'; connect-src 'self' *.cloud.google.com *.google-analytics.com *.googleanalytics.com *.googleapis.com; default-src 'none'; font-src 'self' themes.googleusercontent.com *.gstatic.com cdnjs.cloudflare.com; form-action 'self'; frame-ancestors *; frame-src *; img-src *  data: blob: 'unsafe-inline'; object-src 'self'; script-src 'self' *.dialogflow.com *.google-analytics.com *.google.com *.googleanalytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com d3js.org 'nonce-hlxOdVc63xS2Sul83dJZiarI_Ua9eU3U'; style-src * 'unsafe-inline'; media-src 'self' blob: data: https://storage.googleapis.com

base-uri 'self'; connect-src 'self' *.cloud.google.com *.google-analytics.com *.googleanalytics.com *.googleapis.com; default-src 'none'; font-src 'self' themes.googleusercontent.com *.gstatic.com cdnjs.cloudflare.com; form-action 'self'; frame-ancestors *; frame-src *; img-src *  data: blob: 'unsafe-inline'; object-src 'self'; script-src 'self' *.dialogflow.com *.google-analytics.com *.google.com *.googleanalytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com d3js.org 'nonce-EPUCd9l2odcm4WVhJ1bC2clfdhAAUnLw'; style-src * 'unsafe-inline'; media-src 'self' blob: data: https://storage.googleapis.com

base-uri 'self'; connect-src 'self' *.cloud.google.com *.google-analytics.com *.googleanalytics.com *.googleapis.com; default-src 'none'; font-src 'self' themes.googleusercontent.com *.gstatic.com cdnjs.cloudflare.com; form-action 'self'; frame-ancestors *; frame-src *; img-src *  data: blob: 'unsafe-inline'; object-src 'self'; script-src 'self' *.dialogflow.com *.google-analytics.com *.google.com *.googleanalytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com d3js.org 'nonce-3wRCHJ0_O8Tf88RMRD1TaTclxNxCDoYl'; style-src * 'unsafe-inline'; media-src 'self' blob: data: https://storage.googleapis.com

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:112:0

script-src 'report-sample' 'nonce-8AExSFZ62eEBTOmJe4RQDA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

a-ezfno7xyrzb

reCAPTCHA

SnapApp™ -
Low Code Application Builder

A7vZI3v+Gz7JfuRolKNM4Aff6zaGuT7X0mf3wtoZTnKv6497cVMnhy03KDqX7kBz/q/iidW7srW31oQbBt4VhgoAAACUeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

width=device-width, initial-scale=1, shrink-to-fit=no

viewport

https://keystone-189032799983.us-central1.run.app

description

https://storage.googleapis.com/keystone-co-prod-keystone-public/open-graph-image.png

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

keystoneco.gov


    window.dataLayer = window.dataLayer || [];
    function gtag() {
        dataLayer.push(arguments);
    }
    gtag('js', new Date());
    gtag('config', 'G-SECP2Q731L');



            let firebaseConfig = JSON.parse("{\"api_key\":\"AIzaSyCe4vNSPEj5xZcX8qab35uu-SJoLDIhsyg\",\"auth_domain\":\"keystone-co-prod.firebaseapp.com\",\"database_url\":\"\",\"id\":\"1:189032799983:web:8d8ca4e4ff0f68b97f051a\",\"location_id\":\"\",\"measurement_id\":\"G-SECP2Q731L\",\"messaging_sender_id\":\"189032799983\",\"project\":\"keystone-co-prod\",\"storage_bucket\":\"keystone-co-prod.firebasestorage.app\",\"web_app_id\":\"1:189032799983:web:8d8ca4e4ff0f68b97f051a\"}");
            let firebaseConfigJS = {
                apiKey: firebaseConfig.api_key,
                appId: firebaseConfig.web_app_id,
                authDomain: firebaseConfig.auth_domain,
                measurementId: firebaseConfig.measurement_id,
                messagingSenderId: firebaseConfig.messaging_sender_id,
                projectId: firebaseConfig.project,
                storageBucket: firebaseConfig.storage_bucket,
            };
            firebase.initializeApp(firebaseConfigJS);
            firebase.analytics();
        


          var firebase_auth_providers = [
      "google.com",
      "apple.com",
      "email",
      "facebook.com",
      "github.com",
      "microsoft.com",
      "phone",
      "twitter.com",
      "yahoo.com",
      "anonymous",
  ];

    


        firebase_auth_providers = firebase_auth_providers.filter(function (el) {
            return typeof el === 'object';
        });
        
            
        
            
        
            
                firebase_auth_providers.push('google.com');
            
        
            
        
            
        
            
        
            
        
            
        
            
        
        const urlParams = new URLSearchParams(window.location.search);
const next = urlParams.get("next");
const uiConfig = {
  signInOptions: firebase_auth_providers,
  callbacks: {
    signInSuccessWithAuthResult: function (authResult, redirectUrl) {
      let post_data = {
        idToken: authResult.user.xa,
      };
      $.ajax({
        type: "POST",
        async: false,
        url: "/session-login",
        data: JSON.stringify(post_data),
        contentType: "application/json; charset=utf-8",
        success: function (response) {
          if (
            window.location.href.indexOf("/login") !== -1 ||
            window.location.href.indexOf("/register") !== -1
          ) {
            if (next) {
              window.location.href = next;
            } else {
              window.location.href = "/";
            }
          } else {
            location.reload();
          }
        },
        error: function (textStatus, errorThrown, response) {
          let error =
            typeof response.Error == "undefined"
              ? textStatus.responseJSON.Error
              : response.Error;
          toastr.error(error);
          setTimeout(function () {
            window.location.reload();
          }, 2000);
        },
      });
      return false;
    },
  },
  signInFlow: "popup",
};
try {
  const ui = new firebaseui.auth.AuthUI(firebase.auth());
  ui.start("#firebaseui-auth-container", uiConfig);
} catch (err) {
  console.error(err);
}
    

Requests	IP Address	Location	AS Autonomous System
22	216.239.32.36	United States	AS15169GOOGLE
6	142.250.186.99	United States	AS15169GOOGLE
5	142.250.181.251	United States	AS15169GOOGLE
3	216.239.34.21	United States	AS15169GOOGLE
2	142.250.185.132	United States	AS15169GOOGLE
2	216.58.212.131	United States	AS15169GOOGLE
1	142.250.185.104	United States	AS15169GOOGLE
1	216.239.34.36	United States	AS15169GOOGLE
1	172.217.23.106	United States	AS15169GOOGLE
0	216.58.206.59	United States	AS15169GOOGLE
22	61	-	-

Security Scan Report: keystoneco.gov

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History