ScanMalware.com

Security Scan Report: wellstonok.gov

Redirected to: https://www.wellstonok.gov/

Submitted: Dec 7, 2025, 12:51:38 PMCompleted: Dec 7, 2025, 12:52:46 PMpubliccompleted
Loading additional data...

Summary

This website contacted 37 IPs in 3 countries across 10 domains to perform 89 HTTP transactions. The main domain is wellstonok.gov and was registered NaN years ago.

Submitted URL: https://wellstonok.gov/

Effective URL: https://www.wellstonok.gov/Redirected

AI Security Verdict

High Risk

Confidence: 85%

7
Risk Score

Site hosts a malicious external link, posing a high risk of malware infection.

Risk Factors
External malicious link (assets.zyrosite.com) from the primary domain
Presence of malicious Indicators of Compromise
Low legitimacy signals for a .gov site
Domain age information unavailable

Details

Page Title

Home

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(63%)

Domain Information

Within the United States government-restricted top-level domain (.gov), 'wellstonok.gov' is registered and has no subdomain. Its registrable label 'wellstonok' stretches across 10 characters containing 3 vowels alongside 7 consonants. Tokenizing the label suggests 4 words: wells, to, no, k. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wellstonok.gov/

Page Load Overview

0.29s
Total Load Time
89
HTTP Requests
10
Domains
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:1,474 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service63% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
63%
government
48%
adult content
42%
forum community discussion
32%
real estate property
26%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2034.120.137.41Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
18172.64.144.254United States
AS13335CLOUDFLARENET
16142.250.185.164United States
AS15169GOOGLE
16216.58.206.42United States
AS15169GOOGLE
10104.18.43.2United States
AS13335CLOUDFLARENET
2142.250.186.170United States
AS15169GOOGLE
2142.250.186.138United States
AS15169GOOGLE
2172.217.168.74United States
AS15169GOOGLE
2142.250.185.74United States
AS15169GOOGLE
2142.250.185.202United States
AS15169GOOGLE
8937--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T184C35217D5B30257223FB894D071B718B1A3FB0F82A52BD4693542B217E7E6D31BB988

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:7zm6jKLhLsZHtQ/zB/VvuvwGdB7O8PKf4h/BbBCKt720wVvcp5uh54QkOvjcK0Ai:lwsWvvuFtYwi0wVvT0Ai

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:126866:A1KFOQwrliJGF4KRMCTOBiGAKxEEwFEQDExCECuEAGAscBgAQCQBgjERATKBwOgBUqKEJg2BEARkCksYWi4NDG4GIyFYhA1B

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff000000ffdf9f9f
Perceptual Hash:bc47b9f1e40c8ac3
Difference Hash:687875751e323333
Wavelet Hash:bf000000ffdf8f8f
Color Hash:#3a7878

Other Hashes

Crop Resistant:687875751e323333,fce2e0fedc99f393,f0c65c515564f7b4,c74c38b065594e26,50bdb6d678f066d8

Scan History

Scan history not available

Unable to load historical scan data