government public service

documentation technical

government

e-commerce shopping

English

_ga_P63MV52JR7

WSS_FullScreenMode

wvcookie

_wpcmWpid

wpcmVal

MSOWebPartPage_PostbackSource

MSOTlPn_SelectedWpId

MSOTlPn_View

MSOTlPn_ShowSettings

MSOGallery_SelectedLibrary

MSOGallery_FilterString

MSOTlPn_Button

__EVENTTARGET

__EVENTARGUMENT

__REQUESTDIGEST

MSOSPWebPartManager_DisplayModeName

MSOSPWebPartManager_ExitingDesignMode

MSOWebPartPage_Shared

MSOLayout_LayoutChanges

MSOLayout_InDesignMode

_wpSelected

_wzSelected

MSOSPWebPartManager_OldDisplayModeName

MSOSPWebPartManager_StartWebPartEditingName

MSOSPWebPartManager_EndWebPartEditing

__VIEWSTATE

__VIEWSTATEGENERATOR

btnG

html/c7/e2/c7e21a81-780a-486d-88f3-59c1a8a80bd5.html.gz

frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;

attachment; filename*=utf-8''main%5fsurplus%2ejs; filename="main_surplus.js"

attachment; filename*=utf-8''hide%5fsurplus%2ejs; filename="hide_surplus.js"

application/json;odata=verbose;charset=utf-8

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:102:0

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-oSSjhw8V' blob: 'self' connect.facebook.net 'wasm-unsafe-eval' https://*.google-analytics.com *.google.com;style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com https://*.google-analytics.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com https://fonts.gstatic.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data: *.tenor.co *.tenor.com https://*.giphy.com;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://td.doubleclick.net *.google.com *.doubleclick.net;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-Biz3v8Pg' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

f2662aad8e28540f7

fb:page Facebook Social Plugin

GENERATOR

progid

viewport

twitter:card

twitter:site

twitter:description

twitter:image

twitter:title

The West Virginia State Agency for Surplus Property is a unit under the Purchasing Division. In operating the State and Federal Surplus Property Programs, our state agency has assisted thousands of eligible organizations by offering good, usable property at a substantially-reduced price.

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

wv.gov

// <![CDATA[ 

var g_SPOffSwitches={};
// ]]>


RegisterSod("require.js", "\u002f_layouts\u002f15\u002frequire.js?rev=bv3fWJhk0uFGpVwBxnZKNQ\u00253D\u00253DTAG0");

RegisterSod("strings.js", "\u002f_layouts\u002f15\u002f1033\u002fstrings.js?rev=qTd5Iu3wkfWjQOhKADG18A\u00253D\u00253DTAG0");

RegisterSod("sp.res.resx", "\u002f_layouts\u002f15\u002f1033\u002fsp.res.js?rev=FnWveYddVjlqQYS2ZBOOzA\u00253D\u00253DTAG0");

RegisterSod("sp.runtime.js", "\u002f_layouts\u002f15\u002fsp.runtime.js?rev=b4ALuVIis\u00252F0aRAk0v45b7Q\u00253D\u00253DTAG0");RegisterSodDep("sp.runtime.js", "sp.res.resx");

RegisterSod("sp.js", "\u002f_layouts\u002f15\u002fsp.js?rev=yFmRMk3\u00252BonVca3uigeldpA\u00253D\u00253DTAG0");RegisterSodDep("sp.js", "sp.runtime.js");RegisterSodDep("sp.js", "sp.ui.dialog.js");Regi

RegisterSod("sp.init.js", "\u002f_layouts\u002f15\u002fsp.init.js?rev=97hPMueyl6jDMorWQ5mA8w\u00253D\u00253DTAG0");

RegisterSod("sp.ui.dialog.js", "\u002f_layouts\u002f15\u002fsp.ui.dialog.js?rev=GTfRW\u00252BnjERpOykGpM7MeSg\u00253D\u00253DTAG0");RegisterSodDep("sp.ui.dialog.js", "sp.init.js");RegisterSodDep("sp.u

RegisterSod("core.js", "\u002f_layouts\u002f15\u002fcore.js?rev=oShS9yyYASoeDr3\u00252FbLsE\u00252FQ\u00253D\u00253DTAG0");RegisterSodDep("core.js", "strings.js");

RegisterSod("browserScript", "\u002f_layouts\u002f15\u002fie55up.js?rev=Shuu1g6uWO0NsqelvvA\u00252BCg\u00253D\u00253DTAG0");RegisterSodDep("browserScript", "strings.js");

RegisterSod("sp.core.js", "\u002f_layouts\u002f15\u002fsp.core.js?rev=5D02ggW50qEu9m3r5YM10g\u00253D\u00253DTAG0");RegisterSodDep("sp.core.js", "strings.js");RegisterSodDep("sp.core.js", "sp.init.js")

RegisterSod("mQuery.js", "\u002f_layouts\u002f15\u002fmquery.js?rev=zeeZfPaZG\u00252BxQFPWnIYgcuQ\u00253D\u00253DTAG0");

RegisterSod("sharing.js", "\u002f_layouts\u002f15\u002fsharing.js?rev=7KGxlHsOaaimBYlVNibQCg\u00253D\u00253DTAG0");RegisterSodDep("sharing.js", "strings.js");RegisterSodDep("sharing.js", "mQuery.js");

RegisterSod("clienttemplates.js", "\u002f_layouts\u002f15\u002fclienttemplates.js?rev=RGFo3xMjzq7UOjQLSwQKzg\u00253D\u00253DTAG0");

RegisterSod("inplview", "\u002f_layouts\u002f15\u002finplview.js?rev=c45lDkE\u00252FIAdJ193OMaegmg\u00253D\u00253DTAG0");RegisterSodDep("inplview", "strings.js");RegisterSodDep("inplview", "core.js");

RegisterSod("dragdrop.js", "\u002f_layouts\u002f15\u002fdragdrop.js?rev=7LzXB9XhgAiK9Cy0ku\u00252FUsQ\u00253D\u00253DTAG0");RegisterSodDep("dragdrop.js", "strings.js");

RegisterSod("quicklaunch.js", "\u002f_layouts\u002f15\u002fquicklaunch.js?rev=JakQZhaRortJty\u00252BR3c387A\u00253D\u00253DTAG0");RegisterSodDep("quicklaunch.js", "strings.js");RegisterSodDep("quickla


$(document).ready(function() {
$(".navigation").hideAway();
$('#search').css('display', 'block');
});



  window.dataLayer = window.dataLayer || [];
  function gtag(){dataLayer.push(arguments);}
  gtag('js', new Date());

  gtag('config', 'G-P63MV52JR7');



//<![CDATA[
var theForm = document.forms['aspnetForm'];
if (!theForm) {
    theForm = document.aspnetForm;
}
function __doPostBack(eventTarget, eventArgument) {
    if (!theForm.onsubmit || (theForm.


//<![CDATA[
var MSOWebPartPageFormName = 'aspnetForm';
var g_presenceEnabled = true;
var g_wsaEnabled = false;

var g_correlationId = 'cd8bcba1-51df-505a-26e2-97b22f70526e';
var g_wsaQoSEnabled = fal


//<![CDATA[
(function(){

        if (typeof(_spBodyOnLoadFunctions) === 'undefined' || _spBodyOnLoadFunctions === null) {
            return;
        }
        _spBodyOnLoadFunctions.push(function()


//<![CDATA[
Sys.WebForms.PageRequestManager._initialize('ctl00$ScriptManager', 'aspnetForm', [], [], [], 90, 'ctl00');
//]]>



$(document).ready(function() { 
//attach function to input and make text grayed out on page load 
textReplacement($('#GoogleSearch').css("color", "black")); 
}); 
// the function: 

function textRepl


$(document).ready(function() { 
//attach function to input and make text grayed out on page load 
textReplacement($('#GoogleSearch2').css("color", "#414042")); 
}); 
// the function: 

function textR


//<![CDATA[
var _spFormDigestRefreshInterval = 1440000;window.SPThemeUtils && SPThemeUtils.ApplyCurrentTheme(true);var _fV4UI = true;
function _RegisterWebPartPageCUI()
{
    var initInfo = {editable


	var pattern = /http(s)*:\/\/translate.google.com+/;

    if (window.top !== window.self && !pattern.test(window.top.location)) {
        document.body.innerHTML='The official website is hosted at ad


var images = [
  '/images/Surplus/flowers.jpg',
  '/images/Surplus/flowers.jpg',
  '/images/Surplus/flowers.jpg']

var which = Math.floor(Math.random() * images.length);
var img = document.getElement

Requests	IP Address	Location	AS Autonomous System
13	13.107.253.44	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
4	142.250.184.232	United States	AS15169GOOGLE
4	157.240.0.6	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
4	157.240.0.35	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
4	129.71.224.134	Charleston, West Virginia, United States	AS7925WVNET
4	216.239.34.36	United States	AS15169GOOGLE
4	216.239.32.36	United States	AS15169GOOGLE
4	13.107.226.44	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
4	206.16.212.157	United States	AS394572TYLERTECH-NIC1
4	2001:4860:4802:32::36	United States	Unknown
77	17	-	-

Security Scan Report: www.state.wv.us

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History