government public service

government

documentation technical

news/blog

forum

English

_fbp

_ga_515YSN5M89

monsido

ASP.NET_SessionId

Domain 'www.orlando.gov' uses the United States government-restricted top-level domain (.gov) with subdomain 'www'. The registrable portion 'orlando' spans 7 characters with 3 vowels and 4 consonants. Segmentation suggests 1 word: orlando. No strong language cues emerged from the frequency lists.

html/90/a5/90a5eadc-a2b0-48ea-a9c8-1e5b9e619860_fallback.html.gz

Home - City of Orlando

__EVENTTARGET

__EVENTARGUMENT

__SEAMLESSVIEWSTATE

__VIEWSTATE

ctl08$txtSearch

ctl08$btnSearch

English
is your current preferred language.

mainForm

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js

default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-J4pcpnnL' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-vThWHm3w' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:169:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:138:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgtc:46:0

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-AAcYmpFr' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-axNWN0BV' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

theme-color

OpenCities - https://granicus.com/product/opencities

generator

viewport

apple-mobile-web-app-capable

Orlando.gov - City of Orlando's Official Website

msapplication-TileColor

/files/ocfavicon/Public/browserconfig.xml?V=636546419712297296

msapplication-config

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


        document.documentElement.className = document.documentElement.className.replace(/\bno-js\b/g, "js");
    


                window.__oc_flags_ImprovedBreakpointEventHandling = true;
            


            var __metaQueryBreakpoints = {
                'sc-size-4': '(max-width: 480px)',
                'sc-size-3': '(min-width: 480px) and (max-width: 768px)',
                'sc-size-2': '(min-width: 768px) and (max-width: 992px)',
                'sc-size-1': '(min-width: 992px)'
            }

            var __ocSizePoints = [
                { min: 0, name: 'sc-size-4' },
                { min: 480, name: 'sc-size-3' },
                { min: 768, name: 'sc-size-2' },
                { min: 992, name: 'sc-size-1' }
            ];

        

window.jQuery || document.write('<script src="/files/templates/00000000-0000-0000-0000-000000000000/7d7464b8-f248-4433-b870-efe915aca122/v/3591/jquery-1.12.4.min.js?seamlessts=638996791194113980" ><\/script>')


        var OpenCities = OpenCities || {};
        OpenCities.Paths = {
            SiteTemplate: '/files/templates/00000000-0000-0000-0000-000000000000/7d7464b8-f248-4433-b870-efe915aca122/v/3591/',
            ThemePath: '/files/templates/00000000-0000-0000-0000-000000000000/7d7464b8-f248-4433-b870-efe915aca122/v/3591/'
        };
    

(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-5TF8T7M');


!function(f,b,e,v,n,t,s)
{if(f.fbq)return;n=f.fbq=function(){n.callMethod?
n.callMethod.apply(n,arguments):n.queue.push(arguments)};
if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';
n.queue=[];t=b.createElement(e);t.async=!0;
t.src=v;s=b.getElementsByTagName(e)[0];
s.parentNode.insertBefore(t,s)}(window, document,'script',
'https://connect.facebook.net/en_US/fbevents.js');
fbq('init', '339909306718042');
fbq('track', 'PageView');



//<![CDATA[
var theForm = document.forms['mainForm'];
if (!theForm) {
    theForm = document.mainForm;
}
function __doPostBack(eventTarget, eventArgument) {
    if (!theForm.onsubmit || (theForm.onsubmit() != false)) {
        theForm.__EVENTTARGET.value = eventTarget;
        theForm.__EVENTARGUMENT.value = eventArgument;
        theForm.submit();
    }
}
//]]>



//<![CDATA[
window.WebForm_PostBackOptions||document.write('<script type="text/javascript" src="/WebResource.axd?d=Zt7f1_qFl1LzB-l2dc34lsuPLRBrjhyraGLi1sMUJ3Y9MJ3Rkf-jSA2jecUOqeyos8OV_JwZt7B0WkeqbXFAYwG8hS3ll9tQXz1EVGHd4Ac1&amp;t=638901392248157332"><\/script>');//]]>



//<![CDATA[
(window.Sys && Sys._Application && Sys.Observer)||document.write('<script type="text/javascript" src="/ScriptResource.axd?d=h0e7LRH-er9a49QQfYPSX4SvpXpCB0JdX5nLHu7JfnojGRVr-NQv8wp8nLnafNoQ0Kp5VrALOXTF2hJwKvrYR1FuIN4fv-1ntgAyZElmNmSD0YB-kqfANavUuikKQRXMjs7CTEj6qd4_JPCP4DKL7UzqYRhANjJPIA4nV6ksbrU1&t=5c0e0825"><\/script>');//]]>



//<![CDATA[
(window.Sys && Sys.WebForms)||document.write('<script type="text/javascript" src="/ScriptResource.axd?d=LUa0nC6yndngih0OYNQf6tDKYBGcfyjrqh4JscDL229Ldd-yd1V72BEKP6fSLM9nhhT5CoPB1-zsXWRDRPhyYCXYW5y7L9yQLEnByW0oS0DfdIbtYJHBYzngHXtSknTDNsrkbrt0w69dz2MyN-6U1BJL5_o4_fMUEUAHwlr3Wll9KIKy4-nNu7qi6A4J2SOo0&t=5c0e0825"><\/script>');//]]>



//<![CDATA[
Sys.WebForms.PageRequestManager._initialize('ctl05$seamless_script_manager', 'mainForm', [], [], [], 90, '');
//]]>



    try{
        function SeamlessEndRequestHandler(sender, args) {
            try {
                var dataItems = args.get_dataItems();
                if(dataItems.ctl05_seamless_script_manager)
                    document.getElementById('__SEAMLESSVIEWSTATE').value = dataItems.ctl05_seamless_script_manager;
            }
            catch (e) { }
        }

        Sys.WebForms.PageRequestManager.getInstance().add_endRequest(SeamlessEndRequestHandler);
    }
    catch (e) { }


OpenCitiesResourceStrings["Sys Js Get Updates For Search"] = "Get updates for this search";


$(document).ready(function() {
	
	// PROTECT ABBREVIATED DATES FROM GOOGLE TRANSLATE
	// JUN 2023 - add notranslate to other protected classes
	$(function() {
 		$('.list-item-block-date').addClass('notranslate');
 		$('.contact-email').addClass('notranslate');
 		$('.contact-address').addClass('notranslate');
 		$('.contact-venue').addClass('notranslate');
	});
	

	// OPEN PDFs IN A NEW WINDOW
	//$('a[href$=".pdf"]').each(function() { $(this).prop('target', '_blank'); });


	// SCAN ALL LINKS INSIDE #main-content
	// OPEN EXTERNAL LINKS IN A NEW TAB

   $("#main-content a[href^=http]").each(function(){

      // excluded domains list - this will not be considered "external" links
      var excludes = [
         'orlando.gov',
         'www.orlando.gov',
         'alpha.orlando.gov',
	 'beta.orlando.gov',
         'cityoforlando.net',
         'www.cityoforlando.net'
      ];
      for(i=0; i<excludes.length; i++) {
         if(this.href.indexOf(excludes[i]) != -1) {
            return true; // continue each() with next link
         }
      }

      if(this.href.indexOf(location.hostname) == -1) { 
    // it exists 
} {

           // attach a do-nothing event handler to ensure we can 'trigger' a click on this link
           $(this).click(function() { return true; });

           //$(this).attr({
               //target: "_blank",
               //title: "Opens in a new window"
           //});
           $(this).prop('target', '_blank');

           $(this).click(); // trigger it
      }
   	 
   }) 
   
});



        var _monsido = _monsido || [];
            _monsido.push(['_setDomainToken', 'Bj4zw9fKfYzu_jkf1MXbBw']);
            _monsido.push(['_withStatistics', 'true']);


spanishCodes=["es-419","es","/en/es"];englishCodes=["en","en-us"];function getLanguage(a){a&&typeof a==="string"&&(a=a.toLowerCase());console.log("transformed text:",a);switch(a){case "es-419":case "es":case "/en/es":return"ES";case "/en/pt":case "pt":return"PT";case "/en/ht":case "ht":return"HT";case "en-us":case "en":return"EN"}}
var localeCodeGTM,setLocaleCode=function(){var a=getLanguage(google_tag_manager["rm"]["97981256"](8));console.log(a);var b=getLanguage(google_tag_manager["rm"]["97981256"](9));console.log(b);return a===void 0?b:a!=b?a:b};console.log("getting language attribute");localeCodeGTM=setLocaleCode();dataLayer.push({user_selected_lang:localeCodeGTM});console.log("found lang code:"+localeCodeGTM);

dataLayer.push({OC_PageName:google_tag_manager["rm"]["97981256"](10)});

var element=document.querySelector(".qualtrics-link");
if(element){var currentHref=element.getAttribute("href"),pageName=google_tag_manager["rm"]["97981256"](27),encodedInfo=encodeURIComponent(pageName);google_tag_manager["rm"]["97981256"](28)!="no contact name"&&(encodedInfo=encodedInfo+"\x26contactName\x3d"+encodeURIComponent(google_tag_manager["rm"]["97981256"](29)));google_tag_manager["rm"]["97981256"](30)!="noContactPhone"&&(encodedInfo=encodedInfo+"\x26contactPhone\x3d"+encodeURIComponent(google_tag_manager["rm"]["97981256"](31)));google_tag_manager["rm"]["97981256"](32)!="noContactEmail"&&(encodedInfo=encodedInfo+"\x26contactEmail\x3d"+encodeURIComponent(google_tag_manager["rm"]["97981256"](33)));
var newHref=currentHref+"?serviceName\x3d"+encodedInfo;element.setAttribute("href",newHref)};

var element=document.querySelector(".qualtrics-link");
if(element){var currentHref=element.getAttribute("href"),pageName=google_tag_manager["rm"]["97981256"](46),encodedInfo=encodeURIComponent(pageName);google_tag_manager["rm"]["97981256"](47)!="no contact name"&&(encodedInfo=encodedInfo+"\x26contactName\x3d"+encodeURIComponent(google_tag_manager["rm"]["97981256"](48)));google_tag_manager["rm"]["97981256"](49)!="noContactPhone"&&(encodedInfo=encodedInfo+"\x26contactPhone\x3d"+encodeURIComponent(google_tag_manager["rm"]["97981256"](50)));google_tag_manager["rm"]["97981256"](51)!="noContactEmail"&&(encodedInfo=encodedInfo+"\x26contactEmail\x3d"+encodeURIComponent(google_tag_manager["rm"]["97981256"](52)));
var newHref=currentHref+"?serviceName\x3d"+encodedInfo;element.setAttribute("href",newHref)};

Requests	IP Address	Location	AS Autonomous System
30	23.212.200.96	Frankfurt am Main, Hesse, Germany	AS16625AKAMAI-AS
5	216.239.34.36	United States	AS15169GOOGLE
4	142.250.185.99	United States	AS15169GOOGLE
3	23.53.42.19	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	142.250.184.232	United States	AS15169GOOGLE
3	142.250.185.234	United States	AS15169GOOGLE
3	157.240.0.35	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
2	157.240.0.6	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
1	64.233.184.157	United States	AS15169GOOGLE
1	142.250.184.234	United States	AS15169GOOGLE
60	68	-	-

Security Scan Report: www.orlando.gov

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Scan History