government

corporate

English

zsltssn

csrfc

zsstssn

zalb_be2cb13735

The domain name 'www.cityofhaywardmn.gov' uses the United States government-restricted top-level domain (.gov); it also runs on subdomain 'www'. The core label 'cityofhaywardmn' covers 15 characters split between 4 vowels and 11 consonants. Breaking it apart gives four words: city, of, hayward, mn. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

html/a1/28/a128c074-c6fb-4816-9a23-f40e64cc2f6d_fallback.html.gz

Home | City of Hayward

html/a1/28/a128c074-c6fb-4816-9a23-f40e64cc2f6d.html.gz

MTQ3OWJkMTFjNWE4ZjZhMjM0MTIxY2MxNWRlOWMyNmQ=

require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
script-src 'report-sample' 'nonce-GRiKe-NnEbcP9HB1BNKBoA' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/viewer/

object-src 'none';base-uri 'self';script-src 'nonce-h5y1qwoEam368u3LzK64LA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1

default-src 'none', frame-ancestors 'none', sandbox

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-fileview

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/product-feedback-gathering

script-src 'report-sample' 'nonce-Pw9ruCH1QvugYDJehr83nw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveOsidBootstrap/cspreport;worker-src 'self'
script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveOsidBootstrap/cspreport/allowlist
require-trusted-types-for 'script';report-uri /_/DriveOsidBootstrap/cspreport

frame-ancestors https://drive.google.com
require-trusted-types-for 'script';report-uri /drivesharing/_/DriveShareDialogUi/cspreport
script-src 'report-sample' 'nonce-OjTnJ_z3VQWUZlkcyw-Z_w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /drivesharing/_/DriveShareDialogUi/cspreport;worker-src 'self'
script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /drivesharing/_/DriveShareDialogUi/cspreport/allowlist

script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/js/bg/ https://translate.google.com/translate_a/element.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-drive/_/js/k=boq-drive.DriveShareDialogUi.en_US.MRD-FXagn7k.2018.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/;report-uri /drivesharing/_/DriveShareDialogUi/cspreport/fine-allowlist

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msaispmnec:805:0

require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
script-src 'report-sample' 'nonce-Wp2igh_p6WsN3N91k5TSsQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self'
script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/focus

Weather Widget

de0258c85987570178bc4eb71cfa8b6e18e5f93846dfc94aff78e5ae969a7300

cabadf9690f46f6438d1681377bf50088ade256d779a3af86023fb80f30cbbb2

e4567fb3addbecbfd8df58bc4df722d9fdd1d7b20e5b5bdfe9bc072abbb8d37e

03f3b09be341816c88e16171b58175f8e1bf147413b1f42a67b2d028cd046388

0d6c22c521a6d8f580a98b154cc92fc16540609f6469abda042ca3166ebcfaed

d5be9da3532914182440f22f7e315565539dd83328b1579f1e09c2380e707dfa

229ecc9c030781bbe4d0fe9aea4d34db6ba5e383ef533c62fcc14273c631d610

13be82e091e38e9bd3676b38be5d604d678d695d370c6f482d20b646aa7cadd9

83a550735b1e2ac7f3a4c9b770d4ec9d4178fd58d0441d3edff96009a5e92a1d

8bee67f35bbdd40dbcc59be1b9a3735ccbc2f5d3d8198b021a3b3d9114315ca7

9a96b61ba420e15b95355ef45ed231797fcaeaf55955c77dc7072967965bf1ab

8103e98beed6d06b577d471a85afcd153903bc3fb30043c83fb30d3314f69202

46150c3d5c09b472c141eb0e96825acbf7408ab1e8d10eca85aac1857014ae73

fc54684fdeecb52ac9cd8da3be036f23b3729d34888eda45b5612152d4a721c7

0b3de82478e2d67c5a3f605bf92cdf0c8ca039f65fad42a4b209427f8813e4e6

48808838591d52c77336f281fddfbc236e77d90a71171d69c22fde3d2ef3a5c6

b822b82da1fdbb44bc0e85180799aabf56622c1b7f5d886745ad615007d411fc

bc98cac78332d4cb0991256fa062f5953823ae38c47043d5a675b95688868e7b

0149ecdd2adfad97b02f4d2dc6ea4c0f6174d5d42d2db6d6d230962746a6213b

width=device-width, initial-scale=1.0, shrink-to-fit=no

viewport

generator

twitter:card

twitter:url

twitter:title

keywords

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

require-trusted-types-for 'script';report-uri /cspreport
script-src 'report-sample' 'nonce-W3v_IEOrmpBlw7PbZdxhCA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

document.documentElement.removeAttribute('data-nojs');

window.zs_content_format="0";window.zs_resource_url = "/";window.isDefaultLogo = "false";window.zs_site_resource_id = "1891156000000002014";

window.zs_resource_id = "1891156000000002015";window.zs_resource_type = "1";window.zs_site_resource_path = "";window.zs_resource_full_path = "/";window.zs_site_resource_id = "1891156000000002014";window.zs_site_type = "0";window.zs_resource_contentstate = "2";window.zs_page_reviewer =  null;


!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src='https://weatherwidget.io/js/widget.min.js';fjs.parentNode.insertBefore(js,fjs);}}(document,'script','weatherwidget-io-js');



!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];
if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src='https://weatherwidget.io/js/widget.min.js';
fjs.parentNode.insertBefore(js,fjs);}}(document,'script','weatherwidget-io-js');


Google authentication and security services

Google

✅ Low Risk - https://www.cityofhaywardmn.gov/

Requests	IP Address	Location	AS Autonomous System
33	136.143.185.12	United States	AS2639ZOHO-AS
15	172.217.18.10	United States	AS15169GOOGLE
12	172.67.181.105	United States	AS13335CLOUDFLARENET
8	142.250.184.195	United States	AS15169GOOGLE
6	142.250.184.228	United States	AS15169GOOGLE
5	142.250.185.238	United States	AS15169GOOGLE
4	142.250.186.110	United States	AS15169GOOGLE
4	172.217.23.110	United States	AS15169GOOGLE
3	142.250.185.99	United States	AS15169GOOGLE
3	173.194.76.84	United States	AS15169GOOGLE
121	55	-	-

Security Scan Report: www.cityofhaywardmn.gov

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History