ScanMalware.com

Security Scan Report: sau49nh.gov

Submitted: Oct 12, 2025, 12:19:34 PMCompleted: Oct 12, 2025, 12:20:20 PMpubliccompleted
Loading additional data...

Summary

This website contacted 33 IPs in 2 countries across 8 domains to perform 10 HTTP transactions. The main domain is sau49nh.gov and was registered NaN years ago.

Submitted URL: https://sau49nh.gov/

AI Security Verdict

Low Risk

Confidence: 82%

2
Risk Score

Site shows a Cloudflare DNS error; no malicious content but domain is new and unranked.

Risk Factors
Newly registered domain (<180 days) increases suspicion
Unranked domain in Cisco Umbrella may indicate low reputation
Cloudflare DNS misconfiguration could be exploited if not corrected
Safety Factors
No malicious Indicators of Compromise matches found
No credential or payment forms present
No external links or redirects detected
Domain age information unavailable

Details

Bot Protection Detected

This website is protected by Cloudflare bot protection. Our scanner was challenged or blocked during access.

Page Title

DNS points to prohibited IP | sau49nh.gov | Cloudflare

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government

(48%)

Domain Information

You're looking at domain 'sau49nh.gov' on the United States government-restricted top-level domain (.gov). Its registrable label 'sau49nh' stretches across 7 characters split between two vowels and three consonants; it also includes 2 digits. Splitting it apart reveals 3 words: sau, 49, nh. Average segment length settles at two characters. 'sau' most strongly signals Chinese (Zhuyin). You will also see it in Vietnamese and Romanian contexts. Overall, 'sau49nh.gov' reads as Chinese (Zhuyin) with character flair.

Screenshot

Security scan screenshot of https://sau49nh.gov/

Page Load Overview

19.50s
Total Load Time
10
HTTP Requests
8
Domains
300 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:854 chars
Detector Agreement:100%

Website Classification

Primary Category

government48% confidence
Type: static
Method: ml+structural

All Detected Categories

government
48%
technology software
30%
documentation technical
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10104.18.39.62United States
AS13335CLOUDFLARENET
0103.21.244.9United States
AS13335CLOUDFLARENET
0104.17.69.73United States
AS13335CLOUDFLARENET
0108.138.7.86United States
AS16509AMAZON-02
0104.17.230.6United States
AS13335CLOUDFLARENET
0172.66.0.201United States
AS13335CLOUDFLARENET
0104.18.31.78United States
AS13335CLOUDFLARENET
0146.75.122.6Frankfurt am Main, Hesse, Germany
AS54113FASTLY
018.244.18.79United States
AS16509AMAZON-02
0162.159.140.203United States
AS13335CLOUDFLARENET
1033--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D6F1B872F5F8293A0153C26331A9BB2D39A59057DBB608E5769E81721F4EF92FD03284

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:lua/Paael22zEzFVB6P8G9YnX3CeNwusFW:ka/iP2dV8lYnX3Cet

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7495:DACCDq4GAxAOkGIwBJVAuFgMUhGGMWQMAGBKWMAApKMCITgAggCHkEBhEYADK5AuVQIJBQcGKDkEBBVdXQYADCkoYAkOoDBx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data