Security Scan Report: elhusseinyusmleprep.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 26 IPs in 3 countries across 15 domains to perform 108 HTTP transactions. The main domain is elhusseinyusmleprep.com and was registered 11 years ago.

Submitted URL: https://elhusseinyusmleprep.com/wp-includes/leafmailer.php

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Established domain, but the exact scanned /wp-includes/leafmailer.php URL is reported as malware and is consistent with an abused WordPress mailer script. Avoid interaction until the site owner confirms cleanup.

Risk Factors (3)
Malware threat-intelligence match on the primary domain and the exact scanned URL.
Presence of leafmailer.php under /wp-includes/, consistent with an abused or compromised WordPress mailer script.
Threat-intelligence reports are single-source and unverified, lowering confidence but not eliminating risk.
Domain age information unavailable

Details

Page Title

Page not found - EL Husseiny USMLE Programother network

Scan Type

public

Domain Name Analysis

The domain name 'elhusseinyusmleprep.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'elhusseinyusmleprep' spans 19 characters containing seven vowels alongside twelve consonants. Breaking it apart gives six words: el, hussein, yus, m, le, prep. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Home be “H 5 SE INY Y — to our Courses LogIn PRE PARA fo This page doesn't seem to exist. It looks like the link pointing here was faulty. Maybe try searching? Search. Q Terms and Conditions Our...

Page Load Overview

4.65s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:547 chars
Detector Agreement:94%

All Detected Languages

🇺🇸en(79%)🇩🇪de(21%)

Website Classification

Primary Category

technology software52% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
52%
government public service
48%
healthcare medical
46%
blog personal website
36%
education learning
34%

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
82172.67.178.8Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8104.21.48.49Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8216.198.54.3Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
4142.250.154.95Google · CDNUnited States
AS15169Google LLC
4216.198.53.3Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
4142.251.13.94Google · CDNUnited States
AS15169Google LLC
4192.178.183.97Google · CDNUnited States
AS15169Google LLC
420.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
4216.239.32.36Google · CDNUnited States
AS15169Google LLC
4142.251.127.155Google · CDNUnited States
AS15169Google LLC
10826--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15804E962BDB30826327F536FA487B18C3458419AE54D56F5F4F9806D86E9FC233B260E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:TNVhUJniu5t84yDBQL3nDPjUGTTRpJLBpfdXU8U7NXHGUQUna0UOelAgoAvA4fAj:RoSDBQL3nDItZJzFG4vBo/7DplS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:182952:KvSTIKTBBgRA9QQUgEtmoACBmhED1zIEOYEKYS7AAIqAJVgREhEhFACwJyvCUAmMCFMQQoCVkxH6pwBZkQ0ArMoJKEEDzFAz

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffff0000ff
Perceptual Hash:80ae0c0adf71f5d5
Difference Hash:f1f100cc00949494
Wavelet Hash:007fffffff000004
Color Hash:060000001c0

Scan History

Scan history not available

Unable to load historical scan data