ScanMalware.com

Security Scan Report: carewellphcy.com

Site favicon
Submitted: Sep 20, 2026, 2:47:25 PMCompleted: Sep 20, 2026, 2:48:23 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Legitimate-looking pharmacy site appears compromised: a critical EtherHiding malware IDS alert, a malware-flagged loaded domain (qaz0.com), and a malware loader IoC on the primary domain indicate malicious script injection. Avoid entering credentials.

Risk Factors (4)
Content-malware Indicator of Compromise on the primary domain (loader)
Content-malware Indicator of Compromise on a page-loaded resource (qaz0.com, 2 feeds)
Critical network IDS malware alert (EtherHiding exfiltration)
Blockchain RPC gateway loaded by the page, typical of EtherHiding delivery
Domain age information unavailable

Details

Page Title

Carewell Pharmacy | Trusted Local Pharmacy in Bronx

Scan Type

public

Domain Name Analysis

You're looking at domain 'carewellphcy.com' on the commercial generic top-level domain (.com). The core label 'carewellphcy' covers 12 characters split between three vowels and nine consonants. It segments into 4 words: care, well, ph, cy. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://carewellphcy.com

Page Load Overview

14.18s
Total Load Time
3.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:10,714 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical78% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
78%
news/blog
35%
corporate
35%
e-commerce
20%

Detected Features

Login Form
Search
Articles
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22160.153.180.59United States
AS398101GoDaddy.com, LLC
11172.217.208.95Google · CDNUnited States
AS15169Google LLC
11142.251.20.97Google · CDNUnited States
AS15169Google LLC
11142.251.157.119Google · CDNUnited States
AS15169Google LLC
11142.250.154.95Google · CDNUnited States
AS15169Google LLC
1135.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
11142.251.156.119Google · CDNUnited States
AS15169Google LLC
11188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.26.13.95Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17615--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EE033C72E10918932F1E477DF261F13C93A4A651E606A776B4F1396CA4DC9FA00AAC4F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:hdUqQm0PIlGDzHz8CMe9ihptH+44r/ZdSZUaAhHkW/BIX9Nj8qQdWF/UN:hmqQmsSGDjAxMrZdypa9/B89NtQdWF/Y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:38457:Bo0GOpuaUCC4s4EoCgKKwTIgUYIAReACIuXZAACIAITBCzhkVUccMAbAFIAL4IIi6ACTIq7IP4RYCUYCBSFAcuMBEwAEFINl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8100f7d3d3d18383
Perceptual Hash:ecc317c01ddccaac
Difference Hash:290d273333233737
Wavelet Hash:fd00d3d3d1d18783
Color Hash:#784f3a

Other Hashes

Crop Resistant:290d273333233737

Scan History

Scan history not available

Unable to load historical scan data