ScanMalware.com

Security Scan Report: www.hepburnadvocate.com.au

Site favicon
Submitted: Sep 29, 2026, 2:24:31 PMCompleted: Sep 29, 2026, 2:25:54 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/319d27f6-764d-463a-aef4-e6f39b480e05Domain and IP registration (RDAP)/api/v1/rdap/319d27f6-764d-463a-aef4-e6f39b480e05Certificate Transparency/api/v1/ct/hepburnadvocate.com.auHow often this domain was scanned/api/v1/domain/stats/hepburnadvocate.com.auScan history for this domain/api/v1/domain/history/hepburnadvocate.com.au?limit=15

This website contacted 99 IPs in 8 countries across 86 domains to perform 387 HTTP transactions. The main domain is hepburnadvocate.com.au and was registered 30 years ago.

Submitted URL: https://www.hepburnadvocate.com.au/story/9358007/tens-of-thousands-protest-spains-housing-crisis/

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

Legitimate-looking news article, but it pulls two third-party resources flagged as 'osx fluttershell' malware by multiple feeds; ad-chain malvertising risk to visitors despite no forms, impersonation or credential theft on the page.

Risk Factors (3)
Multi-source malware ('osx fluttershell') indicators on two third-party domains loaded by the page — potential malvertising / drive-by delivery to visitors
Heavy third-party ad/script surface (23 unsecured third-party script hosts) providing the delivery path for the flagged resources
Domain unranked in Cisco Umbrella and only 274 days old
Safety Factors (6)
Page itself is a news article (og:type=article) on a regional Australian news brand; content is reporting on Spain's housing protest
No password, disguised-password or payment fields — no credential harvesting
No brand impersonation; site displays its own brand
No YARA JavaScript malware patterns, no known phishing kit, no IDS alerts
Cross-origin credential exfiltration not detected
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Tens of thousands protest Spain's housing crisis | The Advocate - Hepburn | Hepburn, VIC

Scan Type

public

Domain Name Analysis

The domain 'www.hepburnadvocate.com.au' uses the Australian country-code top-level domain (.com.au) and includes subdomain 'www'. Its registrable label 'hepburnadvocate' stretches across 15 characters containing 6 vowels alongside nine consonants. It segments into two words: hepburn, advocate. Average segment length settles at 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.hepburnadvocate.com.au/story/9358007/tens-of-thousands-protest-spains-housing-crisis/

Page Load Overview

7.04s
Total Load Time
7.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-au
Text Length:75,776 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property44% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
44%
news/blog
35%
corporate
35%
news media journalism
34%
government public service
32%

Detected Features

OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9399.84.152.101Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3104.19.152.69Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.13.154Google · CDNUnited States
AS15169Google LLC
3104.18.25.18Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
318.66.102.16Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3104.16.144.111Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
354.79.253.251Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
3146.75.121.44Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
3142.250.154.97Google · CDNUnited States
AS15169Google LLC
3143.204.173.87Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
38799--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T125452D71F410662F923708C8BAA9EF1A72D9E30BE1D64820E1DA531887DDD78B51F397

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:miPdDY362QLSvCKny39TiBa+2UrUTfNp1l+ik22jKOi:n3+afNp1l+ikLjKv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1201160:iMLjAMIEAKQptUgYDCgAJSchJAYGwYOVHBwQAaBKsJBKYIogcEoKwmtHIUyIIBDBAEKqkhwJMBCEwgGgiQRAQyoRMBhABh4G

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00183c1c3c1c0000
Perceptual Hash:9cc936c5371cc963
Difference Hash:0c32b33232323d0d
Wavelet Hash:0018bdbfbd9d8187
Color Hash:#2dd29e

Other Hashes

Crop Resistant:aaaabea6aaaa378e,0c32b33232323d0d

Scan History

Scan history not available

Unable to load historical scan data