Security Scan Report: heallexa.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 33 IPs in 2 countries across 23 domains to perform 73 HTTP transactions. The main domain is heallexa.com and was registered 5 months ago.

Submitted URL: https://heallexa.com/

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Self-branded healthcare provider search site with search-only forms, no credential or payment fields, and no threat-intel, YARA, IDS, or exfiltration evidence. Only anomaly is a 7-hop cross-domain redirect chain.

Risk Factors (1)
Seven cross-domain redirects observed before the final page load — worth noting as an unexplained redirect chain, though not malicious on its own
Safety Factors (5)
Self-branding consistent across domain, title, and meta tags
No password, disguised-password, or payment fields on the page
No Indicators of Compromise, YARA, IDS, or Safe Browsing evidence
No cross-origin credential form submissions or credential exfiltration
Presents substantive healthcare directory content (specialties, insurance plans, state listings)
Domain age information unavailable

Details

Page Title

Heallexa | AI Powered Healthcare Search

Scan Type

public

Domain Name Analysis

You're looking at domain 'heallexa.com' on the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'heallexa' stretches across 8 characters with four vowels and four consonants. Breaking it apart gives four words: he, all, ex, a. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://heallexa.com/

Page Load Overview

1.97s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,085 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical88% confidence
Type: webapp
Method: ml+structural

All Detected Categories

healthcare medical
88%
government public service
40%
documentation technical
37%
corporate
35%
education learning
31%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
965.8.131.63Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
265.8.131.105Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
252.219.216.82Aws · CLOUDSan Jose, California, United States
AS16509Amazon.com, Inc.
2142.251.110.97Google · CDNUnited States
AS15169Google LLC
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
220.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
2104.26.10.196Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
2150.171.109.99Azure · CLOUDUnited States
AS8075Microsoft Corporation
2216.239.34.36Google · CDNUnited States
AS15169Google LLC
7333--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AC94D7D323C40B3F55178744E6D17B6A11AAC18AC99AE08CFBAE64736DC3CE11576BE0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:navXRCebx/c64Jysq7veemrhmixTIkEYTT2AmIwr1HGICs/exUVrbEfv8nV+bhXz:nXej83G9BdBdgJr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:440460:EcJMAIgBQVKSReX0QKbHIWoBQC6JRgRC5kEDmRFMck2soAAxCAgI8UJGAhCRSAQLDAJEWXJQQQKVeQUQA4KgLYpCYYFoDkPV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7ff0000ffffe7
Perceptual Hash:e1cbf21a4ac9c94b
Difference Hash:0b0c0293ad001e0e
Wavelet Hash:e1c7f30000cfefc3
Color Hash:#6653ac

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data