Security Scan Report: corneliusor.gov

Site favicon
Submitted: Nov 23, 2025, 10:18:06 PMCompleted: Nov 23, 2025, 10:20:50 PMpubliccompleted
Loading additional data...

Summary

This website contacted 43 IPs in 2 countries across 10 domains to perform 74 HTTP transactions. The main domain is corneliusor.gov and was registered NaN years ago.

Submitted URL: https://corneliusor.gov/

AI Security Verdict

High Risk

Confidence: 88%

7
Risk Score

Site appears to impersonate Google on a .gov domain; likely phishing.

Risk Factors
Brand impersonation on a non‑official domain
UNRANKED domain presenting a well‑known brand name
Domain age information unavailable

Details

Page Title

Cornelius, OR | Official Website

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government

(95%)

Domain Information

Within the United States government-restricted top-level domain (.gov), 'corneliusor.gov' is registered while skipping any subdomain. The core label 'corneliusor' covers 11 characters split between five vowels and 6 consonants. Splitting it apart reveals two words: cornelius, or. The median word length lands at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://corneliusor.gov/

Page Load Overview

2.01s
Total Load Time
74
HTTP Requests
10
Domains
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:5,711 chars
Detector Agreement:100%

Website Classification

Primary Category

government95% confidence
Type: spa
Method: structural

All Detected Categories

government
95%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
49192.196.0.193United States
AS36489NETSOLUS-NETWORKS
3213.107.213.44United States
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
8142.250.184.195United States
AS15169GOOGLE
3142.250.186.136United States
AS15169GOOGLE
3142.250.186.163United States
AS15169GOOGLE
3142.250.186.74United States
AS15169GOOGLE
3216.239.32.36United States
AS15169GOOGLE
2142.250.185.170United States
AS15169GOOGLE
1142.251.140.168United States
AS15169GOOGLE
1142.250.185.202United States
AS15169GOOGLE
7443--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T158B339A4FA4C6837806B31C8E577624854BE8332D2079C89FCBD53F06BD9CE8D5761A9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:jgZxp623pUnU4pRVz+8HZmmA8fg+G65BWY1tlZ7D:jq4c21tl1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:116798:NwGCAQAOMowkAAIsCIUOGGlkIZYGlAQUYAxYAgoJZAM+BKBFZEkRcGAHexIAkQBggEeCPSxxMUoEAIMAHHYYSQQUWAAjNTDQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff79080c0c080ff
Perceptual Hash:fc8687718919f84e
Difference Hash:da24252f2fa99d32
Wavelet Hash:fff7d080c0c080ff
Color Hash:#8b79d2

Scan History

Scan history not available

Unable to load historical scan data