ScanMalware.com

Security Scan Report: www.ontariocountyny.gov

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/359f1de9-5550-40bf-91b9-cdf18bff74fdDomain and IP registration (RDAP)/api/v1/rdap/359f1de9-5550-40bf-91b9-cdf18bff74fdHow often this domain was scanned/api/v1/domain/stats/ontariocountyny.govScan history for this domain/api/v1/domain/history/ontariocountyny.gov?limit=15
This website contacted 6 IPs in 1 country across 2 domains to perform 12 HTTP transactions. The main domain is ontariocountyny.gov and was registered 6 years ago.

Submitted URL: https://www.ontariocountyny.gov/

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Phishing site impersonating Ontario County government; do not trust

Risk Factors (4)
Brand impersonation of a government agency on an unranked domain
Typo‑squatting domain name
Suspicious OCR text that does not match the expected government content
Lack of legitimate page content (only a verification placeholder)
Domain age information unavailable

Details

Page Title

Ontario County, NY - Official Website | Official Websiteother network

Scan Type

public

Domain Name Analysis

Within the United States government-restricted top-level domain (.gov), 'www.ontariocountyny.gov' is registered with subdomain 'www'. The second-level label 'ontariocountyny' is 15 characters long holding six vowels versus nine consonants. Breaking it apart gives 3 words: ontario, county, ny. Average segment length settles at 6 characters. Most frequently, 'ontario' shows up in Norwegian. You will also see it in Danish and Swedish contexts.

Screenshot

Security scan screenshot of https://www.ontariocountyny.gov/

Page Load Overview

48.92s
Total Load Time
366 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,700 chars
Detector Agreement:100%

Website Classification

Primary Category

government95% confidence
Type: spa
Method: structural

All Detected Categories

government
95%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2104.18.95.41United States
AS13335CLOUDFLARENET
2104.18.41.204United States
AS13335CLOUDFLARENET
2172.64.146.52United States
AS13335CLOUDFLARENET
2104.18.94.41United States
AS13335CLOUDFLARENET
22606:4700::6812:5e29United States
AS13335CLOUDFLARENET
22606:4700::6812:5f29United States
AS13335CLOUDFLARENET
126--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T185824B339A46101F72374FE77169F7548020F298B741A3AAF5A36E54C7CAD0B62623ED

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Va+gp9yIPl2boVmJkEqJvBKXue3oBe5u7UwnkV8cWIgqyHXZ:U+Acq4brJkxSe0MgwnkV8cWIaJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18553:lgpWAApUQyIgASKHABDIiCSWmAAXJDERmiCHcsTVgGAsQCDsAQAIQAOQ6YoKKQK1QgTeAiHTcDEUjCAaqI5FQIJEGmEgs1HJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c3cfffffffe7
Perceptual Hash:b03032cfc7c9cdcc
Difference Hash:181c161a0000000c
Wavelet Hash:0c00000cffffffc3
Color Hash:#403a78

Other Hashes

Crop Resistant:181c161a0000000c

Scan History

Scan history not available

Unable to load historical scan data