Security Scan Report: tricountyhealthut.gov

Redirected to:
https://tricountyhealthut.gov/.well-known/sgcaptcha/?r=%2F&y=ipc:178.6...
Submitted: Oct 28, 2025, 1:21:15 PMCompleted: Oct 28, 2025, 1:22:55 PMpubliccompleted
Loading additional data...

Summary

This website contacted 19 IPs in 2 countries across 4 domains to perform 10 HTTP transactions. The main domain is tricountyhealthut.gov and was registered NaN years ago.

Submitted URL: https://tricountyhealthut.gov/

Effective URL: https://tricountyhealthut.gov/.well-known/sgcaptcha/?r=%2F&y=ipc:178.63.16.224:1761657690.912Redirected

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

No security concerns detected; site appears legitimate.

Safety Factors
Established domain age (>2 years)
Minimal risk category per analysis
No suspicious forms or data collection
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

Robot Challenge Screen

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

malicious

(49%)

Domain Information

Within the United States government-restricted top-level domain (.gov), 'tricountyhealthut.gov' is registered with no subdomain. The registrable portion 'tricountyhealthut' spans 17 characters split between six vowels and 11 consonants. Breaking it apart gives four words: tri, county, health, ut. Median word length comes out to 4.5 characters. Most frequently, 'tri' shows up in Swedish. Usage also turns up in Norwegian and English contexts. Net impression: Swedish phrase.

Screenshot

Security scan screenshot of https://tricountyhealthut.gov/

Page Load Overview

22.79s
Total Load Time
10
HTTP Requests
4
Domains
88 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:105 chars
Detector Agreement:100%

Website Classification

Primary Category

malicious49% confidence
Type: static
Method: ml+structural

All Detected Categories

malicious
49%
government
48%
other
47%
suspicious phishing
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
0172.217.23.106United States
AS15169GOOGLE
0142.250.184.195United States
AS15169GOOGLE
0108.138.2.142United States
AS16509AMAZON-02
035.215.114.36Los Angeles, California, United States
AS15169GOOGLE
02600:9000:2490:7800:5:acf3:db40:21United States
AS16509AMAZON-02
0108.138.2.209United States
AS16509AMAZON-02
02600:9000:2490:b800:5:acf3:db40:21United States
AS16509AMAZON-02
02a00:1450:4001:813::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
02600:9000:2490:4000:5:acf3:db40:21United States
AS16509AMAZON-02
0108.138.2.71United States
AS16509AMAZON-02
1019--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17E73E1DD37600ED8CC9687D2673821493487B4EDE4504951F29E2BE4FF8B69D4AE068F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:9IQS0tz0jiTbitkDfLMerF89xSuvcOKNGYUxYo3myMRdQmy:9r/itkDfLKKW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:80656:UgABACUEVARyooAEaoMDTQOIAAmvRiAfMFKgCkqFaCmuIqOIAEwYREhgAYQCVizUoCIQxWgkUqAwAgBICOgK9tAFiNAEFpsG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000ffffff
Perceptual Hash:dd029add22b2fd22
Difference Hash:11310a4d32320022
Wavelet Hash:081808009affffff
Color Hash:#d28279

Other Hashes

Crop Resistant:11310a4d32320022

Scan History

Scan history not available

Unable to load historical scan data