government public service

government

English

_fbp

VisitorStatus

CMSUserPage

ASP.NET_SessionId

CMSLandingPageLoaded

ARRAffinitySameSite

_ga_HDP9SBH1PR

CMSPreferredCulture

ARRAffinity

CMSCsrfCookie

_hjSession_306871

_hjSessionUser_306871

Domain 'www.horizons.govt.nz' uses the New Zealand country-code top-level domain (.govt.nz); it also runs on subdomain 'www'. The second-level label 'horizons' is 8 characters long split between three vowels and five consonants. Splitting it apart reveals 1 word: horizons. Median word length is 8 characters. No strong language cues emerged from the frequency lists.

html/b9/18/b918209d-b4b9-4806-9ad0-08cd051218bb_fallback.html.gz

Home - Horizons Regional Council

__CMSCsrfToken

__EVENTTARGET

__EVENTARGUMENT

__VIEWSTATE

__VIEWSTATEGENERATOR

__EVENTVALIDATION

searchtext

query

ctl00$CampaignMonitor$txtName_exWatermark_ClientState

ctl00$CampaignMonitor$txtName

ctl00$CampaignMonitor$txtEmail_exWatermark_ClientState

ctl00$CampaignMonitor$txtEmail

ctl00$CampaignMonitor$ddlCustomFields

ctl00$CampaignMonitor$SimpleCaptcha$txtSecurityCode

ctl00$CampaignMonitor$submitBtn

html/b9/18/b918209d-b4b9-4806-9ad0-08cd051218bb.html.gz

default-src 'self' blob: *;script-src 'nonce-0clfsLTm' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self' https://*.google-analytics.com *.google.com;style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com https://*.google-analytics.com;font-src 'self' data: blob: *;img-src 'self' data: blob: * https://*.google-analytics.com;media-src 'self' data: blob: *;child-src 'self' data: blob: *;frame-src 'self' data: blob: *;manifest-src 'self' data: blob: *;object-src 'self' data: blob: *;worker-src 'self' data: blob: *;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-mzxtnQi1' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:106:0

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-oW5RSDJT' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-MPk0eb2e' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

_hjSafeContext

embedCommunication

682c2461685ccab9440db6922fcc1e08743ee9e15866549c190a7906fce8b7ee

83a3dad0e2b07d3ec4ece31d37fad1e8156060b2ff3003342395e3d5edb689bb

width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0

viewport

Horizons Regional Council ensures the sustainable use of natural resources for the Horizons (Manawatū-Whanganui) region

description

Horizons Regional Council, Tararua,  Manawatu, Manawatū, Horowhenua, Rangitikei, Rangitīkei, Whanganui, Wanganui, Palmerston North City, Waitomo, Taupo, Stratford

keywords

facebook-domain-verification

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

horizons.govt.nz


        (function (d, t) {
            var bh = d.createElement(t), s = d.getElementsByTagName(t)[0];
            bh.type = 'text/javascript';
            bh.src = 'https://www.bugherd.com/sidebarv2.js?apikey=lnd083nsmnbdax275wp8iq';
            s.parentNode.insertBefore(bh, s);
        })(document, 'script');
    


			window.dataLayer = window.dataLayer || [];
			function gtag(){dataLayer.push(arguments);}
			gtag('js', new Date());
			gtag('config', 'G-HDP9SBH1PR');
		


//<![CDATA[
var theForm = document.forms['aspnetForm'];
if (!theForm) {
    theForm = document.aspnetForm;
}
function __doPostBack(eventTarget, eventArgument) {
    if (!theForm.onsubmit || (theForm.onsubmit() != false)) {
        theForm.__EVENTTARGET.value = eventTarget;
        theForm.__EVENTARGUMENT.value = eventArgument;
        theForm.submit();
    }
}
//]]>



	//<![CDATA[

function PM_Postback(param) { if (window.top.HideScreenLockWarningAndSync) { window.top.HideScreenLockWarningAndSync(1080); } if(window.CMSContentManager) { CMSContentManager.allowSubmit = true; }; __doPostBack('ctl00$CMSPortalManager$am',param); }
function PM_Callback(param, callback, ctx) { if (window.top.HideScreenLockWarningAndSync) { window.top.HideScreenLockWarningAndSync(1080); }if (window.CMSContentManager) { CMSContentManager.storeContentChangedStatus(); };WebForm_DoCallback('ctl00$CMSPortalManager$am',param,callback,ctx,null,true); }
//]]>



	//<![CDATA[

var CMS = CMS || {};
CMS.Application = {
  "language": "en",
  "isRTL": "false",
  "imagesUrl": "/CMSPages/GetResource.ashx?image=%5bImages.zip%5d%2f",
  "isDebuggingEnabled": false,
  "isDialog": false,
  "applicationUrl": "/"
};

//]]>



//<![CDATA[
function WebForm_OnSubmit() {
null;
return true;
}
//]]>



			!function(f,b,e,v,n,t,s)
			{if(f.fbq)return;n=f.fbq=function(){n.callMethod?
			n.callMethod.apply(n,arguments):n.queue.push(arguments)};
			if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';
			n.queue=[];t=b.createElement(e);t.async=!0;
			t.src=v;s=b.getElementsByTagName(e)[0];
			s.parentNode.insertBefore(t,s)}(window,document,'script',
			'https://connect.facebook.net/en_US/fbevents.js');
			fbq('init', '619710305049321');
			fbq('track', 'PageView');
		


			_linkedin_partner_id = "514489";
			window._linkedin_data_partner_ids = window._linkedin_data_partner_ids || [];
			window._linkedin_data_partner_ids.push(_linkedin_partner_id);
		


			(function () {
				var s = document.getElementsByTagName("script")[0];
				var b = document.createElement("script");
				b.type = "text/javascript"; b.async = true;
				b.src = "https://snap.licdn.com/li.lms-analytics/insight.min.js";
				s.parentNode.insertBefore(b, s);
			})();
		


//<![CDATA[
Sys.WebForms.PageRequestManager._initialize('ctl00$manScript', 'aspnetForm', ['tctl00$pnlNewsletterSignup','','tctl00$ctxM',''], [], [], 90, 'ctl00');
//]]>



                                                        (function () {
                                                                var frameName = new ds07o6pcmkorn({
                                                                    openElementId: "#shielded-logo"
                                                                });
                                                                frameName.init();
                                                        })();
                                                    


			<div class="search-result">
				<div class="search-result__body js-search-result-item" data-searchterm="{{ title }}">
					<a href="/system/search-enhanced?searchtext={{ title }}" class="search-result-title">
						<strong class="link">{{ title }}</strong>
					</a>
					
				</div>
			</div>
		


			<div class="search-result">
				<div class="search-result__body">
					<div class="search-result__content">
						<p>No results found</p>
					</div>
				</div>
			</div>
		


			// Console-polyfill. MIT license.
			// https://github.com/paulmillr/console-polyfill
			// Make it safe to do console.log() always.
			(function (global) {
				'use strict';
				global.console = global.console || {};
				var con = global.console;
				var prop, method;
				var dummy = function () { };
				var properties = ['memory'];
				var methods = ('assert,clear,count,debug,dir,dirxml,error,exception,group,' +
					'groupCollapsed,groupEnd,info,log,markTimeline,profile,profiles,profileEnd,' +
					'show,table,time,timeEnd,timeline,timelineEnd,timeStamp,trace,warn').split(',');
				while (prop = properties.pop()) if (!con[prop]) con[prop] = {};
				while (method = methods.pop()) if (typeof con[method] !== 'function') con[method] = dummy;
				// Using `this` for web workers & supports Browserify / Webpack.
			})(typeof window === 'undefined' ? this : window);
		


	//<![CDATA[
WebServiceCall('/cmsapi/webanalytics', 'LogHit', '{"NodeAliasPath":"/Home","DocumentCultureCode":"en-NZ","UrlReferrer":""}')
//]]>



//<![CDATA[

var callBackFrameUrl='/WebResource.axd?d=beToSAE3vdsL1QUQUxjWdTYjVUS8StBcEMT3XXElD_meS-HN-KvKkC1Xs1VBrgFPa2ya7rDlz_AmhmmWLT2npg2&t=638628640040000000';
WebForm_InitCallback();Sys.Application.add_init(function() {
    $create(Sys.Extended.UI.TextBoxWatermarkBehavior, {"ClientStateFieldID":"ctl00_CampaignMonitor_txtName_exWatermark_ClientState","id":"ctl00_CampaignMonitor_txtName_exWatermark","watermarkCssClass":"form-control WatermarkText","watermarkText":"Name"}, null, null, $get("ctl00_CampaignMonitor_txtName"));
});
Sys.Application.add_init(function() {
    $create(Sys.Extended.UI.TextBoxWatermarkBehavior, {"ClientStateFieldID":"ctl00_CampaignMonitor_txtEmail_exWatermark_ClientState","id":"ctl00_CampaignMonitor_txtEmail_exWatermark","watermarkCssClass":"form-control WatermarkText","watermarkText":"Email"}, null, null, $get("ctl00_CampaignMonitor_txtEmail"));
});
//]]>



	/*<![CDATA[*/
	(function() {
		var sz = document.createElement('script'); sz.type = 'text/javascript'; sz.async = true;
		sz.src = '//siteimproveanalytics.com/js/siteanalyze_6073863.js';
		var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(sz, s);
	})();
	/*]]>*/
	

Requests	IP Address	Location	AS Autonomous System
4	216.58.206.74	United States	AS15169GOOGLE
1	18.66.102.51	United States	AS16509AMAZON-02
1	18.245.86.97	United States	AS16509AMAZON-02
1	104.17.24.14	United States	AS13335CLOUDFLARENET
1	157.240.0.6	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
1	104.26.14.52	United States	AS13335CLOUDFLARENET
1	104.18.10.207	United States	AS13335CLOUDFLARENET
1	20.36.44.168	Canberra, Australian Capital Territory, Australia	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
1	142.250.185.99	United States	AS15169GOOGLE
1	172.67.71.148	United States	AS13335CLOUDFLARENET
65	62	-	-

Security Scan Report: www.horizons.govt.nz

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History