ScanMalware.com

Security Scan Report: northgreenbush.gov

Submitted: Nov 21, 2025, 10:52:15 AMCompleted: Nov 21, 2025, 10:54:59 AMpubliccompleted
Loading additional data...

Summary

This website contacted 12 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is northgreenbush.gov and was registered NaN years ago.

Submitted URL: https://northgreenbush.gov/

AI Security Verdict

High Risk

Confidence: 85%

7
Risk Score

Site appears to impersonate Amazon on a newly registered .gov domain; likely phishing.

Risk Factors
Brand impersonation on an unusual .gov domain
Newly registered domain (< 180 days)
Lack of legitimate reputation (unranked in Cisco Umbrella)
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

503 Service Temporarily Unavailable

Scan Type

public

Language

🇺🇸

English

(59% confidence)

Category

documentation technical

(64%)

Domain Information

The domain 'northgreenbush.gov' uses the United States government-restricted top-level domain (.gov). The registrable portion 'northgreenbush' spans 14 characters with 4 vowels and ten consonants. Segmentation suggests 2 words: north, greenbush. The median word length lands at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://northgreenbush.gov/

Page Load Overview

0.17s
Total Load Time
2
HTTP Requests
1
Domains
2 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:59%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:59%
Script Type:Latin
Text Length:620 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical64% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
64%
technology software
51%
government
48%
cryptocurrency blockchain
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
254.192.35.73United States
AS16509AMAZON-02
254.192.35.105United States
AS16509AMAZON-02
02600:9000:213f:ce00:d:b017:32c0:93a1United States
AS16509AMAZON-02
02600:9000:2130:a600:d:b017:32c0:93a1United States
AS16509AMAZON-02
02600:9000:213f:ca00:d:b017:32c0:93a1United States
AS16509AMAZON-02
02600:9000:213f:f200:d:b017:32c0:93a1United States
AS16509AMAZON-02
054.192.35.57United States
AS16509AMAZON-02
02600:9000:2130:1600:d:b017:32c0:93a1United States
AS16509AMAZON-02
02600:9000:2130:9800:d:b017:32c0:93a1United States
AS16509AMAZON-02
02600:9000:213f:5c00:d:b017:32c0:93a1United States
AS16509AMAZON-02
212--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F5C08CEBE4823169E4A360780C832B88F24480CC90F8901006E22F6261CB5A6EB83B12

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:qVZxgROsWyAI340wmE5HJoXbvxL4AqWA1RAI340wmE5HJsClINqz:qzxUSyAII0wmE5poXLx0AqWYRAII0wmW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:6cde4b1f695c1c0657153c2a302e9da6

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3ffffffffffffff
Perceptual Hash:e666666666666626
Difference Hash:0c00080000000000
Wavelet Hash:c0fcfcfc00000000
Color Hash:#a6e06c

Other Hashes

Crop Resistant:0c00080000000000

Scan History

Scan history not available

Unable to load historical scan data