government public service

social media network

documentation technical

news media journalism

government

English

_ga_81VT3TZFZY

responsiveGhost

CP_TrackBrowser

ai_session

screenWidth

ai_user

__RequestVerificationToken

viewportHeight

screenHeight

CP_IsMobile

ASP.NET_SessionId

viewportWidth

The domain 'cityofavalon.gov' uses the United States government-restricted top-level domain (.gov) while skipping any subdomain. Its registrable label 'cityofavalon' stretches across 12 characters split between five vowels and seven consonants. Tokenizing the label suggests three words: city, of, avalon. Median word length comes out to 4 characters. 'city' most often appears in Chinese (Pinyin). Usage also turns up in English and Dutch contexts.

query

gtrans

vote

html/9f/46/9f462dbe-7d8c-4132-a01a-d98b797c23dd.html.gz

frame-ancestors 'self' https://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data: blob:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src *

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-YHqZ0GYd' blob: 'self' connect.facebook.net 'wasm-unsafe-eval' https://*.google-analytics.com *.google.com;style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com https://*.google-analytics.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com https://fonts.gstatic.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data: *.tenor.co *.tenor.com https://*.giphy.com;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://td.doubleclick.net *.google.com *.doubleclick.net;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;

script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri /cspreport/allowlist

script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri /cspreport/allowlist
require-trusted-types-for 'script'

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:102:0

default-src *.facebook.com *.fbcdn.net *.instagram.com blob:;script-src *.instagram.com static.cdninstagram.com *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-5J40Mqjq' blob: 'self' 'wasm-unsafe-eval' https://*.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src *.instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com;connect-src *.instagram.com wss://edge-chat.instagram.com connect.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* ws://localhost:* blob: *.cdninstagram.com wss://*.instagram.com:* 'self';font-src *.instagram.com static.cdninstagram.com data: *.fbcdn.net *.intern.facebook.com *.facebook.com https://fonts.gstatic.com;img-src *.instagram.com *.facebook.com *.fbcdn.net data: *.cdninstagram.com *.whatsapp.net blob: *.fbsbx.com android-webview-video-poster: *.oculuscdn.com *.giphy.com *.tenor.co *.tenor.com www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk https://www.gstatic.com https://*.google-analytics.com;media-src *.facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com cdn.fbsbx.com lookaside.fbsbx.com data: blob: https://*.giphy.com *.tenor.co *.tenor.com;child-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;frame-src *.instagram.com *.facebook.com *.fbsbx.com fbsbx.com data: www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk;manifest-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;object-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;block-all-mixed-content;upgrade-insecure-requests;

YouTube video player

viewport

category0

theme-color

description

keywords

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

cityofavalon.gov

(function(w,d,s,l,i){w.GAMeasurementID='G-81VT3TZFZY';w[l]=w[l]||[];w[l].push({'gtm.start':
				new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
				j=d.createElement(s),dl=l!


					var enableTelemetry = 'false'
					var aiConfig = {
					instrumentationKey: '1cde048e-3185-4906-aa46-c92a7312b60f'						
					}
					var appInsights = window.appInsights || function (a) { funct


		function populateAntiForgery(token) {
			var input = document.createElement("input");
			input.name = "__RequestVerificationToken";
			input.type = "hidden";
			input.value = token;
			var absPat =


		window.departmentHeader = {};
		window.pageSectionTracker = {};
		window.isResponsiveEnabled = true;
		window.isRemoveSetHeights= false;
		if (window.isRemoveSetHeights) {
			document.documentEleme


		window.Pages = window.Pages || {};
		// FrontEnd RWD initialization
		window.Pages.rwdReady = $.Deferred();
		window.Pages.toolBarDeferred = $.Deferred();
		window.Pages.rwdSetupComplete = $.Deferr


		setEditorVariables(false, 840);
		function getPrintPreviewType() { return 0; } function printPreview() {pPreview(getPrintPreviewType()); }
	

jQuery(document).click(function (event) {
	var target = jQuery(event.target);
	if (target.attr('src') && target.parents('.image').length && target.parents('.widget').length) {
		var text = target.attr


		(function () {
			function setupMenu() {
				const menuID = 'mainNavMenu';
				const menuType = MAIN_MENU;

				//setup menu manager properties for main menu
				if (!menuManager.mobileMainNav && t



		$(document).ready(function () {
			try {
				$(".widgetSearchButton.widgetSearchButton78a81bea-288c-4995-85a0-40b3b1af00b2").click(function (e) {
				e.preventDefault();
					if (false||$("#ysnSea


	//Updates search icons href to have the correct queryString
	function searchBtnApplyQuery() {
		document.getElementById("btnSearchIcon").href = "/Search?searchPhrase=" + document.getElementById("sea


	//Render slideshow if info advacned items contain one.
	$(document).ready(function (e) {
		$('#divInfoAdvc40bf0a3-fbe5-43d8-92c3-ee270ad0453c .InfoAdvanced.widgetItem').each(function () {
			renderS


				$(window).on("load", function () {
					$.when(window.Pages.rwdSetupComplete)
						.done(function () {
							renderExternalBannerSlideshow('banner1',
								{"BannerOptionID":56,"ThemeID":17,"


	//Render slideshow if info advacned items contain one.
	$(document).ready(function (e) {
		$('#divInfoAdv717d46ca-e16b-43d7-b233-62d60ad1db71 .InfoAdvanced.widgetItem').each(function () {
			renderS

// <!--
	window.$ = window.$ || window.parent.$;

	$(window).on('load', function () {
		//Wait for the DOM to load completely before executing carousel logic since its all based on carousel width wh


	//Render slideshow if info advacned items contain one.
	$(document).ready(function (e) {
		$('#divInfoAdv2a0e0d7b-df9b-4ae4-a97c-d10e3d5fdc60 .InfoAdvanced.widgetItem').each(function () {
			renderS


		$(function () {
			var miniCalendar = new MiniCalendar();
			miniCalendar.init({
				widgetId: "41132b8c-1920-4328-b210-248c6cfb1200",
				preventNavigationOnArrows: false,
				displayDatesOutsideO


				$(window).on("load", function () {
					$.when(window.Pages.rwdSetupComplete)
						.done(function () {
							renderBanner('banner2-57',
								'banner2',
								{"BannerOptionID":57,"ThemeID"


	//Render slideshow if info advacned items contain one.
	$(document).ready(function (e) {
		$('#divInfoAdv50630df6-8dab-437f-a109-d027551b0e7d .InfoAdvanced.widgetItem').each(function () {
			renderS


	$(document).ready(function (e) {		
	    renderSlideshowIfApplicable($('#divEditor' + '26877ab4-d185-4500-94d3-a277fa0872ca'));
	});



  // If you do not want to maintain aspect ratio: set to zero
  const aspectRatio = 1.4;
  const selector = ".facebook-container";
  const minWidth = 220;
  const maxWidth = 500; // Facebook widget w


		
		$.when(window.Pages.rwdReady).done(function () {
			var tabbedWidgetID = 'divTabbed0198593f-96a0-4604-8a68-fd72ce6902f2';
			var mediaQuerySize = 25;
			if (mediaQuerySize > 0) {
				var mediaEl


		
		$.when(window.Pages.rwdReady).done(function () {
			var tabbedWidgetID = 'divTabbed84356f3d-ef9e-4ce1-b017-74d9e6ac1f2b';
			var mediaQuerySize = 25;
			if (mediaQuerySize > 0) {
				var mediaEl


	//Render slideshow if info advacned items contain one.
	$(document).ready(function (e) {
		$('#divInfoAdv69915d06-389f-4e6f-adbf-1b7cfe3b8253 .InfoAdvanced.widgetItem').each(function () {
			renderS


	//Render slideshow if info advacned items contain one.
	$(document).ready(function (e) {
		$('#divInfoAdv5e518c3d-4546-43a4-84c7-eee881933f5a .InfoAdvanced.widgetItem').each(function () {
			renderS



		$(document).ready(function () {
			var filter = {
				targetId: '1',
				targetType: 1
			}

			new SplashModalRender().triggerRender(filter);
		});



  function getValueTS(elem, attr) {
    const val = elem.css(attr);
    if (val === undefined) return undefined;
    const num = parseInt(val, 10);
    if (num === NaN) return undefined;
    return n



  function googleTranslateElementInit() {
    new google.translate.TranslateElement({ pageLanguage: "en",   includedLanguages : "en,es"}, "google_translate_element");
    // begin accessibility comp


        $(function () {
            document.cookie = "responsiveGhost=0; path=/";
        });
        $(window).on("load", function () {
            $('body').addClass('doneLoading').removeClass('hi

loadCSS('//fonts.googleapis.com/css?family=Open+Sans:300,300italic,500,500italic,600,600italic,700,700italic,800,800italic,italic,regular|Oswald:200,300,500,600,700,regular|Yellowtail:regular|');

Requests	IP Address	Location	AS Autonomous System
106	142.250.186.163	United States	AS15169GOOGLE
1	157.240.0.174	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
1	172.67.74.220	United States	AS13335CLOUDFLARENET
1	172.217.18.3	United States	AS15169GOOGLE
1	57.144.248.128	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
1	157.240.253.1	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
1	142.250.184.246	United States	AS15169GOOGLE
1	142.250.185.142	United States	AS15169GOOGLE
1	216.58.206.46	United States	AS15169GOOGLE
1	104.26.11.19	United States	AS13335CLOUDFLARENET
218	113	-	-

Security Scan Report: cityofavalon.gov

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History