Security Scan Report: nicoleling.com

Redirected to:
https://nicoleling.com/
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 5 domains to perform 101 HTTP transactions. The main domain is nicoleling.com and was registered 14 years ago.

Submitted URL: https://nicoleling.com/wp-admin/alexus1kc.php

Effective URL:
https://nicoleling.com/
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Legitimate 14-year-old therapy site appears compromised: a random-named PHP file in wp-admin is flagged as malware and behaves as a webshell. Do not submit data or download files until the site is cleaned.

Risk Factors (4)
Indicators of Compromise: malware-typed match on the primary domain nicoleling.com
Indicators of Compromise: malware-typed match on the URL path /wp-admin/alexus1kc.php
Suspicious PHP file with an obfuscated/random name placed in wp-admin — consistent with a WordPress webshell or backdoor
WordPress installation appears compromised, so other pages may serve malicious payloads or redirects
Domain age information unavailable

Details

Page Title

Home - Nicole Ling

Scan Type

public

Domain Name Analysis

The domain 'nicoleling.com' uses the commercial generic top-level domain (.com) with no subdomain. Count 10 characters in 'nicoleling' with 4 vowels and six consonants. Segmentation suggests two words: nicole, ling. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Home Professional Backgrounci Personal Therapy Members Area Consultation Contact Do you need fast recovery for depression, anxiety and trauma healing? Nicole Ling offers a straightforward and no- no...

Page Load Overview

4.28s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,240 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network78% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
78%
corporate
25%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9135.190.31.54Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1134.149.120.3Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1135.244.153.44Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1134.149.36.179Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1134.120.190.48Google · CDNKansas City, Missouri, United States
AS396982Google LLC
11150.171.109.99Azure · CLOUDUnited States
AS8075Microsoft Corporation
620.119.121.103Azure · CLOUDDulles, Virginia, United States
AS8075Microsoft Corporation
120.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
13.171.214.4Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1019--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17A446BB27E4B2533472F12CB601BA60C546995ABC520E5D1F9BD405893F8EF132E7B8E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:81EHPj+c00ig1+QjXPajyiR+OBhNaXe13LmQrgHyAVFMzscm9MQhJS:81EHPj+c00ig1+QjXPajyAz3QOmyAMzr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:264417:YiYQAI6DBMglAoQoFwBt0ce2wBBLEAETwvjkGkCjQlLIwUGM4QSCA4goFgA4EgRDAGyAo0maMoEKMQAMA4mYShQIUXBgiqKH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f8f8fce0c0c0ffff
Perceptual Hash:da5ba1480eacc7b5
Difference Hash:8010000000000f0e
Wavelet Hash:f8e0f880c000ffff
Color Hash:07002180000

Scan History

Scan history not available

Unable to load historical scan data