Security Scan Report: www.normalil.gov

Submitted: Oct 10, 2025, 1:36:13 PMCompleted: Oct 10, 2025, 1:36:53 PMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 1 country across 2 domains to perform 13 HTTP transactions. The main domain is normalil.gov and was registered NaN years ago.

Submitted URL: https://www.normalil.gov/

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

No security concerns detected; site appears legitimate.

Safety Factors
Well‑established domain age
Government .gov TLD
Standard Cloudflare challenge page
No suspicious external links or redirects
Domain age information unavailable

Details

Bot Protection Detected

This website is protected by Cloudflare bot protection. Our scanner was challenged or blocked during access.

Page Title

Just a moment...

Scan Type

public

Language

🇺🇸

English

(51% confidence)

Category

technology software

(61%)

Domain Information

Domain 'www.normalil.gov' uses the United States government-restricted top-level domain (.gov), featuring subdomain 'www'. The core label 'normalil' covers 8 characters holding 3 vowels versus 5 consonants. Segmentation suggests two words: normal, il. Average segment length settles at four characters. 'normal' most often appears in Italian. You may catch it in French and Romanian as well.

Screenshot

Security scan screenshot of https://www.normalil.gov/

Page Load Overview

1.64s
Total Load Time
13
HTTP Requests
2
Domains
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:51%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:51%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:341 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software61% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
61%
government
48%
documentation technical
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.18.94.41United States
AS13335CLOUDFLARENET
2104.18.34.60United States
AS13335CLOUDFLARENET
2104.18.95.41United States
AS13335CLOUDFLARENET
2172.64.153.196United States
AS13335CLOUDFLARENET
22606:4700::6812:5e29United States
AS13335CLOUDFLARENET
22606:4700::6812:5f29United States
AS13335CLOUDFLARENET
136--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C2826C379956201B723B4FA77164F7548011F288E70293AEF063AE58D7C9A4F26727EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Va+C9yIPl2boVmJkEqmB8AbNngvAjDq6RxDOtpym8otLryjsXQ:U+Ccq4brJkxI2vAjD/5Dod3A

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18292:iBnAkCFqxiKMAFaAKADsKzwEiICNDBEZHAyAJOaRViBkSDFtEANAFAFJeIYQZQBLMwASJYHqUTA2gyHLLApHGACEEEEAWVP5

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfc7c7c7ffffffe7
Perceptual Hash:b03882cfc6ccc6cf
Difference Hash:101c141c0000000c
Wavelet Hash:fcc0ccc03c3c1c00
Color Hash:#78663a

Other Hashes

Crop Resistant:101c141c0000000c

Scan History

Scan history not available

Unable to load historical scan data