Security Scan Report: advocates4consumerprotection.com

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 3 domains to perform 21 HTTP transactions. The main domain is advocates4consumerprotection.com and was registered 13 years ago.

Submitted URL: https://advocates4consumerprotection.com/wp-includes/js/tinymce/skins/iudjh9iwd182.php?id=1

AI Security Verdict

High Risk

Confidence: 72%

8
Risk Score

The scanned URL is a randomly named PHP file under WordPress's wp-includes assets directory, and it is flagged as a gozi/mqsttang/wikiloader malware indicator. Pattern fits a compromised WordPress site serving a loader; avoid interacting.

Risk Factors (2)
Suspicious executable PHP file hidden under a WordPress core asset directory (/wp-includes/js/tinymce/skins/), consistent with a compromised WordPress install hosting a malware loader
Threat-intel indicator naming the Gozi/mqsttang/wikiloader malware family on the scanned URL itself (single-source, unverified)
Domain age information unavailable

Details

Page Title

Page not found - Advocates4ConsumerProtectionother network

Scan Type

public

Domain Name Analysis

The domain 'advocates4consumerprotection.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The core label 'advocates4consumerprotection' covers 28 characters split between eleven vowels and 16 consonants, along with one digit. Word splitting yields 4 words: advocates, 4, consumer, protection. Average segment length settles at 8.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

(ADVOCATES emmenten & (888) 362-4249 GB dduffy@advocatesdconsumerprotection.com Home Advocacy for Consumer Rights ~ Services ~ Nationwide Service Areas ~ Blogs ContactUs ~ WHOOPS, THAT PAGE IS GONE...

Page Load Overview

8.39s
Total Load Time
625 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,305 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service62% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
62%
news media journalism
46%
adult content
45%
finance banking
41%
healthcare medical
40%

Detected Features

Search
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7209.17.116.165Ashburn, Virginia, United States
AS19871Network Solutions, LLC
7142.250.154.95Google · CDNUnited States
AS15169Google LLC
7142.251.13.94Google · CDNUnited States
AS15169Google LLC
213--

Detected Technologies10

WordPressv7.1.4
100%
50%
OpenRestyv1.29.2.3
40%
40%
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19E63A8E2F484B03FE48B7B5871CAE53473915110CF4AABA272F9916CCF95BA911F218D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:R8BKZdypanGB/pKzDYBBzDYB2WzDYB2qWeJwaWeJwSWeJwjsKYhTzQzdDMjYQuT8:ReyypZB/pxSsGTsquscNsqf5iq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:71257:CMwCYAgzRIR4TEFNQVjihIEAQgGTXAJUDxTEaqIgpwugZiNKEAB6AogE4AS50HAAmARWpFBBCBWKAEdQRojI05IoioOgwAkg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7003cffe7ffffff
Perceptual Hash:f33322b3b3a2a3a2
Difference Hash:0c4c20000c0c0000
Wavelet Hash:0000fcfcc2c2fefe
Color Hash:N/A

Other Hashes

Crop Resistant:0c4c20000c0c0000

Scan History

Scan history not available

Unable to load historical scan data