Security Scan Report: northfieldmn.gov

Submitted: Nov 21, 2025, 10:07:52 AMCompleted: Nov 21, 2025, 10:10:38 AMpubliccompleted
Loading additional data...

Summary

This website contacted 64 IPs in 2 countries across 16 domains to perform 101 HTTP transactions. The main domain is northfieldmn.gov and was registered NaN years ago.

Submitted URL: https://northfieldmn.gov/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Page impersonates Google brand on a government domain, flagged as high‑risk phishing.

Risk Factors
Brand impersonation (Google) on unrelated .gov domain
Unranked domain presenting a well‑known brand
Domain age information unavailable

Details

Page Title

Northfield, MN - Official Website | Official Website

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(54%)

Domain Information

Within the United States government-restricted top-level domain (.gov), 'northfieldmn.gov' is registered while skipping any subdomain. Count 12 characters in 'northfieldmn' holding three vowels versus 9 consonants. Segmentation suggests two words: northfield, mn. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://northfieldmn.gov/

Page Load Overview

2.04s
Total Load Time
101
HTTP Requests
16
Domains
2.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:9,346 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service54% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
54%
government
48%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
66208.90.191.81United States
AS393775IPP-AS
9142.250.181.227United States
AS15169GOOGLE
4216.58.206.42United States
AS15169GOOGLE
313.33.187.114New York, New York, United States
AS16509AMAZON-02
3142.250.186.99United States
AS15169GOOGLE
235.190.52.95United States
AS396982GOOGLE-CLOUD-PLATFORM
2142.251.140.168United States
AS15169GOOGLE
2216.239.34.36United States
AS15169GOOGLE
2142.250.185.138United States
AS15169GOOGLE
234.98.91.45Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
10164--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A6343AA8AA4C2436411731C8F43B6758AD7E4233E3079CAAFDBCA3B4DBC5CD49572199

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:nA+qcdevTuH55B285Claj+KsE6WZpj95n4L7rR:nTVdJH95CMjn6WTj969

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:230464:g1wILDIMAbEmABGBhqcWwWhgEMEkZQ0pDAKjNAQAA94ISBSYxUBU2QCAQJQINAEQDgolJBIcXwaZEFgkGAoizYLiBwFPLYCB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff3f00180070ffff
Perceptual Hash:c81bb6916bd96433
Difference Hash:c37fe1f3d3a48047
Wavelet Hash:7f030018007affff
Color Hash:#53ac5a

Scan History

Scan history not available

Unable to load historical scan data