education learning

corporate

English

_ga_544YTDK3L3

_ga_KH331M994Q

_gid

TempData

The domain name 'www.freyberg.ac.nz' uses the New Zealand country-code top-level domain (.ac.nz) with subdomain 'www'. The registrable portion 'freyberg' spans 8 characters holding 2 vowels versus 6 consonants. Tokenizing the label suggests 2 words: frey, berg. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

html/b6/30/b630ac51-faf8-4e1c-8646-a2130026668a.html.gz

default-src * 'unsafe-inline' 'unsafe-eval' data: blob:;

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:225:0

default-src 'self' blob: *;script-src 'nonce-odse6wTU' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self' https://*.google-analytics.com *.google.com;style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com https://*.google-analytics.com;font-src 'self' data: blob: *;img-src 'self' data: blob: * https://*.google-analytics.com;media-src 'self' data: blob: *;child-src 'self' data: blob: *;frame-src 'self' data: blob: *;manifest-src 'self' data: blob: *;object-src 'self' data: blob: *;worker-src 'self' data: blob: *;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-IKSs8euc' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-dZBU3rsM' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com *.instagram.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:211:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:112:0

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js

aca9aa167c49bb795ec65721af6185b71676fee6ea016c907fd5336703c702d7

4148d0c90ebd46c31db6786edc9679893db53c97e68fee894309bdf9913cc9d5

1ae8b8d9bb3c5ff401e392f124c46681edcf7ad45a9798f052d77a8d33303d9c

c90adf0d26f53d986942459fac19e69ddd9396e4b7e0ddcd377a617f27686193

dc6c0b25c2be9a572410d35eaf774fc4dee94a378da88464bab4a1c8c5efb6cc

f1a61277e3f902f50ab42015d8b07218db9b7601bb0967e54a52bfdcb4fa7e81

db610cc3be5ad205fae278740c5b46d58b8077eb26b4a781beecd27a214bccb7

ce5c81af2342adeca2941d5b481324eddc41b538511ac45edd01c983c4612f90

91c2f501b7af6fe0c08403f47683d304d4e9f5fb1a367a6a8c57193f5836c7d3

9a3eccb0dec188b2859c3b1df9bcaaf705d2c21ae904adbb2ba926a9c3706870

dc2e3d452b29b4e20185ba22b26707db0a837e0e17c6a075ddc1acf794999b9d

69609cb8516655fb71fbc362399b2f1e533bd82c4ca3d1797704e6dce4d183a1

519031e12a4dbc79f870f80ae8044831f1cfbe647f7d8c0b69e3abecc60c1d65

685e5fbb37abb6ecbbe76a317446840db662a90e9d83739a07643bf34b7190d2

112e58bd7e2652d71e9908792aa8e2806739718c12e52af503f5f28a6aab138c

9f64d8299842b2278470f8086dee6b3099fe1cb6a228a8b66dc8c9502623406a

d240de15a77ffef93c6231ebe130f27471daabbdc2c14ae53c7864c2388df813

c10dded6435c160969688a4108662062f1c8a994cacf7d782d636aee030aa17e

775964b7bb060ff5c5acf09cac801fe8bff7895bfc1d1bb22bca6cb9b3c856e2

f76345fbf022b8c4e4af7555b624d86417b8022fc80f31bc89c4b5952dd60105

3977322faa4deb0f4c48db5da42362ed2b3929e623eeff860815ef5b11a5d470

XSS-type attack inside CKEditor 4 by persuading a victim to paste a specially crafted HTML code into the Color Button dialog

ReDoS vulnerability in Autolink plugin and Advanced Tab for Dialogs plugin

XSS vulnerability in the Clipboard plugin

XSS vulnerability in the Fake Objects plugin

Inject malformed URL to bypass content sanitization for XSS

cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code

7c9140c08434a4a8417a537942371a7d1f57df775925d95232c026cc1bb73a3c

7f44a17a2ad3e171a10e62f920c3760440977451301a7cdf14f4240caf4d8423

efe4a578c392fcb5b945bef7e586e3e1dd5fdca3669cb562ee15d44889bc4c0e

4b8d1c212be9bf84da71e1328a63c54c0324b6b78ca712a70fe18a50e517e5cc

cb0e354f5636ff9871fdb267f60ba12c194bfd254f6c55e58f52b62e4c90a2e3

ce970066ca7afedb14af784c1edd3ba1d904401ccb0f4c56b502b2deac68cfa9

2b5f1106ca065c38af6f988642bde06b69f94ebfecd5a536d6144f9f46cefebb

6368d41784e6d674cc8a74df2a9b35c571012b672fecee31bb21418c2b98554f

913820e758096612d197524d47a6a1ac06159255a618ff50dc14fe9bdcefd42d

8239729174b79385e1f3a34ebcea87c89179b32e1a7f720b1aa405a18abf839b

ee04cd8fe1a5f94ed0bb3bb4a96e9a21ebcde80d940d206a7fd17f67c707978f

faec80c374b82961a41e66d937f558a77031a0af42a1cc45af41af9384e95076

02af3a9cee0042e973c37c05c4e784545e9a202a576e8f48bbb8e9b60388bdef

ee1ee5fc9df3960631fbecd1b0f392f2eeea29467881c0c4ad45e95bc319618e

5caf15b7e9a07f19235964764049e7f083abe6af30bac813b7577095965323a2

b1d070dc1a7856a06028dc732c9b19c065b713d2bb8fa4b5db0bb3b621819b08

1f93cb3b730cb57a5dd2b8b81a9b54fe6b0590234fb93b1a1f69fb1d37a73d76

408cf4a439a480e6e2b29b8da17ec21a401c9160d666fc9596bee46ce624448a

f0cb7342cee563abe6a3f59c138a466e0204454a8500dee803c6a05750ea6a22

94743fbca2e6f52d6dbca173c2e996227d96cd26299957e56b488d1d60582807

1a6757ed3e58664229b3445c3b37a4efe195189bac182a4d4262c76179adb0e9

width=device-width, initial-scale=1, maximum-scale=1, interactive-widget=resizes-content

viewport

SKYPE_TOOLBAR

title

An inclusive and diverse Palmerston North High School.

description

google-site-verification

https://prodcdn.sporty.co.nz/cms/12387/logo.png?ts=2492125857

AlK2UR5SkAlj8jjdEc9p3F3xuFYlF6LYjAML3EOqw1g26eCwWPjdmecULvBH5MVPoqKYrOfPhYVL71xAXI1IBQoAAAB8eyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiV2ViVmlld1hSZXF1ZXN0ZWRXaXRoRGVwcmVjYXRpb24iLCJleHBpcnkiOjE3NTgwNjcxOTksImlzU3ViZG9tYWluIjp0cnVlfQ==

Amm8/NmvvQfhwCib6I7ZsmUxiSCfOxWxHayJwyU1r3gRIItzr7bNQid6O8ZYaE1GSQTa69WwhPC9flq/oYkRBwsAAACCeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXN5bmRpY2F0aW9uLmNvbTo0NDMiLCJmZWF0dXJlIjoiV2ViVmlld1hSZXF1ZXN0ZWRXaXRoRGVwcmVjYXRpb24iLCJleHBpcnkiOjE3NTgwNjcxOTksImlzU3ViZG9tYWluIjp0cnVlfQ==

A9nrunKdU5m96PSN1XsSGr3qOP0lvPFUB2AiAylCDlN5DTl17uDFkpQuHj1AFtgWLxpLaiBZuhrtb2WOu7ofHwEAAACKeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

A93bovR+QVXNx2/38qDbmeYYf1wdte9EO37K9eMq3r+541qo0byhYU899BhPB7Cv9QqD7wIbR1B6OAc9kEfYCA4AAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXN5bmRpY2F0aW9uLmNvbTo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

A1S5fojrAunSDrFbD8OfGmFHdRFZymSM/1ss3G+NEttCLfHkXvlcF6LGLH8Mo5PakLO1sCASXU1/gQf6XGuTBgwAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXRhZ3NlcnZpY2VzLmNvbTo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

html/b6/30/b630ac51-faf8-4e1c-8646-a2130026668a_nodriver.html.gz

Freyberg High School - HOME

freyberg.ac.nz

Abuse

Google LLC

GOOGLE


    /*! loadCSS. [c]2017 Filament Group, Inc. MIT License */
    /* This file is meant as a standalone workflow for
    - testing support for link[rel=preload]
    - enabling async CSS loading in browsers that do not support rel=preload
    - applying rel preload css once loaded, whether supported or not.
    */
    (function (w) {
        "use strict";
        // rel=preload support test
        if (!w.loadCSS) {
            w.loadCSS = function () { };
        }
        // define on the loadCSS obj
        var rp = loadCSS.relpreload = {};
        // rel=preload feature support test
        // runs once and returns a function for compat purposes
        rp.support = (function () {
            var ret;
            try {
                ret = w.document.createElement("link").relList.supports("preload");
            } catch (e) {
                ret = false;
            }
            return function () {
                return ret;
            };
        })();

        // if preload isn't supported, get an asynchronous load by using a non-matching media attribute
        // then change that media back to its intended value on load
        rp.bindMediaToggle = function (link) {
            // remember existing media attr for ultimate state, or default to 'all'
            var finalMedia = link.media || "all";

            function enableStylesheet() {
                // unbind listeners
                if (link.addEventListener) {
                    link.removeEventListener("load", enableStylesheet);
                } else if (link.attachEvent) {
                    link.detachEvent("onload", enableStylesheet);
                }
                link.setAttribute("onload", null);
                link.media = finalMedia;
            }

            // bind load handlers to enable media
            if (link.addEventListener) {
                link.addEventListener("load", enableStylesheet);
            } else if (link.attachEvent) {
                link.attachEvent("onload", enableStylesheet);
            }

            // Set rel and non-applicable media type to start an async request
            // note: timeout allows this to happen async to let rendering continue in IE
            setTimeout(function () {
                link.rel = "stylesheet";
                link.media = "only x";
            });
            // also enable media after 3 seconds,
            // which will catch very old browsers (android 2.x, old firefox) that don't support onload on link
            setTimeout(enableStylesheet, 3000);
        };

        // loop through link elements in DOM
        rp.poly = function () {
            // double check this to prevent external calls from running
            if (rp.support()) {
                return;
            }
            var links = w.document.getElementsByTagName("link");
            for (var i = 0; i < links.length; i++) {
                var link = links[i];
                // qualify links to those with rel=preload and as=style attrs
                if (link.rel === "preload" && link.getAttribute("as") === "style" && !link.getAttribute("data-loadcss")) {
                    // prevent rerunning on link
                    link.setAttribute("data-loadcss", true);
                    // bind listeners to toggle media back
                    rp.bindMediaToggle(link);
                }
            }
        };

        // if unsupported, run the polyfill
        if (!rp.support()) {
            // run once at least
            rp.poly();

            // rerun poly on an interval until onload
            var run = w.setInterval(rp.poly, 500);
            if (w.addEventListener) {
                w.addEventListener("load", function () {
                    rp.poly();
                    w.clearInterval(run);
                });
            } else if (w.attachEvent) {
                w.attachEvent("onload", function () {
                    rp.poly();
                    w.clearInterval(run);
                });
            }
        }


        // commonjs
        if (typeof exports !== "undefined") {
            exports.loadCSS = loadCSS;
        }
        else {
            w.loadCSS = loadCSS;
        }
    }(typeof global !== "undefined" ? global : this));



    var sportyApp = {
        country: 'Nz'
    };



        var sportsground = sportsground || {};
    


	var googletag = googletag || {};
	googletag.cmd = googletag.cmd || [];
	(function () {
		var gads = document.createElement('script');
		gads.async = true;
		gads.type = 'text/javascript';
		var useSSL = 'https:' == document.location.protocol;
		gads.src = (useSSL ? 'https:' : 'http:') +
			'//www.googletagservices.com/tag/js/gpt.js';
		var node = document.getElementsByTagName('script')[0];
		node.parentNode.insertBefore(gads, node);
	})();



	googletag.cmd.push(function() {
		var mapping = googletag.sizeMapping().
			addSize([0, 0], [300, 250]).
			addSize([1183, 0], [728, 90]).
			build();

		googletag.defineSlot('/44071230/SportyBanner', [[300, 250], [728, 90]], 'div-gpt-ad-1468803611332-0').
            defineSizeMapping(mapping)
	    
		
		.setTargeting("Region", ["Manawatu"])
		.setTargeting("OrgType", ["Sportsground.Dal.Poco.EducationProviderType"])
		.setTargeting("Platform", ["MainSite"])
		.setTargeting("Environment", ["Prod"])
			.addService(googletag.pubads());
		googletag.pubads().enableSingleRequest();
		googletag.enableServices();
	});



	googletag.cmd.push(function() {
		googletag.defineSlot('/44071230/SportyBanner', [300, 250], 'div-gpt-ad-secondary')
		
	    
		.setTargeting("Region", ["Manawatu"])
		.setTargeting("OrgType", ["Sportsground.Dal.Poco.EducationProviderType"])
		.setTargeting("Platform", ["MainSite"])
		.setTargeting("Environment", ["Prod"])
			.addService(googletag.pubads());
		googletag.pubads().enableSingleRequest();
		googletag.enableServices();
	});
	googletag.cmd.push(function () { googletag.display('div-gpt-ad-secondary'); });
	

!function (f, b, e, v, n, t, s) { if (f.fbq) return; n = f.fbq = function () { n.callMethod ? n.callMethod.apply(n, arguments) : n.queue.push(arguments) }; if (!f._fbq) f._fbq = n; n.push = n; n.loaded = !0; n.version = '2.0'; n.queue = []; t = b.createElement(e); t.async = !0; t.src = v; s = b.getElementsByTagName(e)[0]; s.parentNode.insertBefore(t, s) }(window, document, 'script', 'https://connect.facebook.net/en_US/fbevents.js'); fbq('init', '605319272820585'); fbq('track', 'ViewContent');

window.gtranslateSettings = {"default_language":"en","languages":["en","mi","zh-CN","sm","fr","es","tl","vi","de","hi","ja","ko","ms","pa","th"],"wrapper_selector":".gtranslate_wrapper"}


    $(function () {
            CKEDITOR.timestamp = ' 14-Jan-2026 14:38  (734)';
            $.supersized({transition: 1,slide_interval: 7500,transition_speed: 700,keyboard_nav: 0,horizontal_center: 1,vertical_center: 1,slides: [{image:'//prodcdn.sporty.co.nz/cms/libraryassets/Wallpaper/My%20Wallpapers/b9612616-13f2-485b-988b-4f082ea8db35_wo.png'},{image:'//prodcdn.sporty.co.nz/cms/libraryassets/Wallpaper/My%20Wallpapers/a089e07a-aed8-45cf-88e7-9eea84d4918b_wo.png'}]});
        });



    window.fbAsyncInit = function () {
        if (typeof FB != 'undefined') {
            FB.init({
                appId: '849632328416506',
                autoLogAppEvents: true,
                xfbml: true,
                version: 'v14.0'
            });
        }
    };



        window.ga = window.ga || function () { (ga.q = ga.q || []).push(arguments) }; ga.l = +new Date;
        ga('create', 'UA-3749044-1', 'auto');
        ga('send', 'pageview');
    


        window.dataLayer = window.dataLayer || [];
        function gtag(){dataLayer.push(arguments);}
        gtag('js', new Date());
                    
            gtag('config', 'G-KH331M994Q');
            
        

Requests	IP Address	Location	AS Autonomous System
6	184.24.77.141	Australia	AS15169
6	142.250.186.174	Germany	AS32934
6	172.66.174.217	United States	AS13335CLOUDFLARENET
6	23.101.208.52	Sydney, New South Wales, Australia	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
6	157.240.0.35	Unknown	AS13335
6	157.240.0.6	Unknown	AS16509
6	172.66.158.188	United States	AS13335CLOUDFLARENET
6	142.251.140.163	Unknown	Unknown
6	108.138.7.69	Unknown	Unknown
6	142.251.141.106	Unknown	Unknown
96	16	-	-

Security Scan Report: www.freyberg.ac.nz

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History