Security Scan Report: wvpaycard.gov

Submitted: Nov 25, 2025, 11:29:37 PMCompleted: Nov 25, 2025, 11:30:49 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 17 HTTP transactions. The main domain is wvpaycard.gov and was registered NaN years ago.

Submitted URL: https://wvpaycard.gov/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Phishing site impersonating Citibank; do not provide any information.

Risk Factors
Brand impersonation/typosquatting on an unranked, recently registered domain
Unranked domain (low reputation) used to mimic a major financial institution
Recent domain age (< 1 year) combined with brand claims
Domain age information unavailable

Details

Page Title

Home

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government

(95%)

Domain Information

Within the United States government-restricted top-level domain (.gov), 'wvpaycard.gov' is registered and has no subdomain. The core label 'wvpaycard' covers 9 characters containing two vowels alongside seven consonants. Segmentation suggests 3 words: wv, pay, card. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wvpaycard.gov/

Page Load Overview

1.79s
Total Load Time
17
HTTP Requests
1
Domains
142 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:3,106 chars
Detector Agreement:100%

Website Classification

Primary Category

government95% confidence
Type: dynamic
Method: structural

All Detected Categories

government
95%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17129.71.225.6Charleston, West Virginia, United States
AS7925WVNET
171--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18152C950CE5809A3C1424AD1FDB0BB8DACD78DABC3066C9675EC409CABD2FC65C631DA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:+xrc5Q815fNP3eAX2caAVfM5ASvBQYcnA+RX1EJ1KQa:+xrcT7fNfea2caAVfMmSJQH5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14113:hByySw04EQ+AFADQD0ftIEg5gFR8Ao0ABlUjqaQCBARpFhIQgBCkHABSeVAEQg+CCFP2IMKimAhhpMcScCI+ACkCoB+OFsHQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0e00fffffffffffe
Perceptual Hash:950a159c9d9caecd
Difference Hash:fcf84b4b6b79b266
Wavelet Hash:0e000000fffffebe
Color Hash:#867d2d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data