ScanMalware.com

Security Scan Report: nygrenconsulting.com

Site favicon
Submitted: Sep 23, 2026, 3:47:26 AMCompleted: Sep 23, 2026, 3:48:09 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Long-established consulting site appears compromised — a critical EtherHiding malware-exfiltration network alert fired, the primary domain is flagged as a malware loader, and it loads a multi-feed-flagged malicious resource. Do not interact.

Risk Factors (5)
Critical malware/command-and-control IDS network alert (EtherHiding exfiltration)
Primary domain flagged as a malware loader (single-source, unverified)
Malicious third-party script/resource domain xaz2.com (multi-feed corroborated)
External Ethereum RPC endpoint plus crypto API usage in page JavaScript
Behavioral profile consistent with a compromised legitimate site injecting a blockchain-hosted loader
Domain age information unavailable

Details

Page Title

Nygren Consulting – Governance Strategy Leadership

Scan Type

public

Domain Name Analysis

The domain 'nygrenconsulting.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'nygrenconsulting' spans 16 characters with 4 vowels and twelve consonants. It segments into 3 words: ny, gren, consulting. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nygrenconsulting.com

Page Load Overview

10.49s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,735 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network92% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
92%
adult content
61%
government public service
60%
corporate business
45%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23151.101.66.159Fastly · CDNUnited States
AS54113Fastly, Inc.
21142.251.20.95Google · CDNUnited States
AS15169Google LLC
21104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
21188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
864--

Detected Technologies9

WordPressv7.1.2
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
Flywheel
40%
Swiper
20%
Lightbox
20%
Font Awesome
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FC339272BD170094362F629FA1A3B25C51686CCAD42A73E7F0786017B579DE733E2D0A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:e9i5Q62I/xE6x4g5bn/99Zdypa9RK3UYls6aj:MiCWVypUK+P

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:52624:ILQmtIh0GZGEVOCB4jI0nDHDSRYIOJ2CqAwJxCKAEhBDEkUgiSSi45DkoMNAzGVVJkFBrI8BMEB4TEAT7DACGeHgA+RlYmwz

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff91810121ffffff
Perceptual Hash:ee4ed49593b1904e
Difference Hash:302521594d2f3f23
Wavelet Hash:ff81000101c3ffff
Color Hash:#9653ac

Other Hashes

Crop Resistant:302521594d2f3f23,ccccce55d1d17979

Scan History

Scan history not available

Unable to load historical scan data