ScanMalware.com

Security Scan Report: www.southtrailfirefl.gov

Submitted: Nov 25, 2025, 12:06:32 PMCompleted: Nov 25, 2025, 12:08:51 PMpubliccompleted
Loading additional data...

Summary

This website contacted 18 IPs in 2 countries across 12 domains to perform 180 HTTP transactions. The main domain is southtrailfirefl.gov and was registered NaN years ago.

Submitted URL: https://www.southtrailfirefl.gov/

AI Security Verdict

High Risk

Confidence: 82%

7
Risk Score

Hidden password field and circular redirect indicate credential‑harvesting; treat as high‑risk phishing site.

Risk Factors
Hidden password field (credential harvesting)
Circular redirect (URL manipulation)
Login form on a low‑reputation, recently registered domain
Domain not listed in Cisco Umbrella top 1 M (unranked)
Domain age less than one year
Domain age information unavailable

Details

Page Title

South Trail Fire & Rescue District

Scan Type

public

Language

🇺🇸

English

(56% confidence)

Category

government

(48%)

Domain Information

Within the United States government-restricted top-level domain (.gov), 'www.southtrailfirefl.gov' is registered with subdomain 'www'. The registrable portion 'southtrailfirefl' spans 16 characters containing six vowels alongside 10 consonants. It segments into four words: south, trail, fire, fl. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.southtrailfirefl.gov/

Page Load Overview

8.00s
Total Load Time
180
HTTP Requests
12
Domains
23.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:56%
Script Type:Latin
Text Length:4,509 chars
Detector Agreement:100%

Website Classification

Primary Category

government48% confidence
Type: spa
Method: ml+structural

All Detected Categories

government
48%
government public service
47%
adult content
30%
phishing scam
29%
documentation technical
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
111142.250.186.138United States
AS15169GOOGLE
3969.64.226.226United States
AS13409PDX
14157.240.0.6Frankfurt am Main, Hesse, Germany
AS32934FACEBOOK
10104.17.24.14United States
AS13335CLOUDFLARENET
102a03:2880:f084:105:face:b00c:0:3Frankfurt am Main, Hesse, Germany
AS32934FACEBOOK
102a00:1450:4001:80f::200aFrankfurt am Main, Hesse, Germany
AS15169GOOGLE
102a00:1450:4001:82a::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
102a00:1450:4001:813::200aFrankfurt am Main, Hesse, Germany
AS15169GOOGLE
102606:4700::6811:180eUnited States
AS13335CLOUDFLARENET
102606:4700::6811:190eUnited States
AS13335CLOUDFLARENET
18018--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C7A309009EC8693A54228190F671FF5EAAA4D067D7518D8479BD10B9FFCDFCA0D232AD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:qAGH87h4+6lYK4xH2V2qLke9hr9/QwNjmVOr:qAGH87K+6lYK4xHdGrq+jd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:105021:gjshGoHKaAUIZCRCgIFQJggABikMgDEofYBQiNslVAC1O4E/ADFJQgicZiMIC5QwDIgoEIFGSQ1kRjACkxEQEsgKpAgCoA6Q

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff040059000000ff
Perceptual Hash:8a33f76ea348bc03
Difference Hash:6d5db9b9a3a5a15d
Wavelet Hash:ffff005d011010ff
Color Hash:#3a7840

Other Hashes

Crop Resistant:6d5db9b9a3a5a15d,4cf2b4a2b67d59dd,c94ce4464adb66eb,58e4b5ba99d9dbad,01418ac2e2c20143,c0b9a9b36125a1e9

Scan History

Scan history not available

Unable to load historical scan data