ScanMalware.com

Security Scan Report: theamericanheadacheinstitute.com

Site favicon
Submitted: Oct 8, 2026, 10:12:30 PMCompleted: Oct 8, 2026, 10:13:54 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Legitimate-looking medical clinic site, but it loads a blockchain RPC and carries a CRITICAL EtherHiding malware IDS alert plus malware Indicators of Compromise on the primary domain and a third-party resource — likely compromised to serve a loader.

Risk Factors (5)
Content-malware Indicators of Compromise on the primary domain (single-source 'unknown loader')
Multi-source corroborated malware IoC (iclickfix) on third-party resource zvh3.com loaded by the page
CRITICAL IDS malware alert (ET MALWARE EtherHiding Exfil M2) — overrides positive signals
Blockchain RPC endpoint contacted by a site with no legitimate need for one
Unranked domain (low reputation prior, weak on its own)
Domain age information unavailable

Details

Page Title

Head & Facial Pain Treatment - American Headache Institute

Scan Type

public

Domain Name Analysis

The domain name 'theamericanheadacheinstitute.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'theamericanheadacheinstitute' is 28 characters long holding 13 vowels versus 15 consonants. Splitting it apart reveals four words: the, american, headache, institute. Median word length is 8 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://theamericanheadacheinstitute.com

Page Load Overview

24.74s
Total Load Time
12.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:6,002 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical91% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
91%
government public service
44%
corporate
35%
adult content
35%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2035.173.16.116Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
3209.126.25.56United States
AS36444Liquid Web, L.L.C
3142.251.20.120Google · CDNUnited States
AS15169Google LLC
3142.251.157.119Google · CDNUnited States
AS15169Google LLC
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3142.250.154.97Google · CDNUnited States
AS15169Google LLC
3142.251.110.94Google · CDNUnited States
AS15169Google LLC
9827--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12CE33BF3078820771E976398A1B8F22C6276C00AEB1649C1B3FD825DDF55ED355FAA48

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:RKVXfjOhomNmnpwo5yp623T/zK01MZBk1/LB2bEXCsqjV:ReyEPV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:145187:QADABIAAHMhRAYERgFugoKQL7VgUMTNCA7aABE2yhD5GrEACWSBDAFRB28HBggXkO6iBWkWsIYAIgAhIETiRowACIwCVIAFb

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:08f0c04000ffffdf
Perceptual Hash:e444bb9311c1f86f
Difference Hash:9a0706a696150c36
Wavelet Hash:00f1c04000ffffff
Color Hash:#77d22d

Other Hashes

Crop Resistant:9a0706a696150c36,78f8b16840402010,270706a2a6869294

Scan History

Scan history not available

Unable to load historical scan data