Security Scan Report: mensvitalityaz.wpenginepowered.com

Site favicon
Submitted: Sep 17, 2026, 6:47:41 AMCompleted: Sep 17, 2026, 6:48:47 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 76%

8
Risk Score

Legitimate-looking medical clinic page but network evidence shows CRITICAL EtherHiding malware exfiltration alerts and a multi-source malware IoC (iclickfix) tied to a loaded resource — site is likely compromised. Avoid interaction.

Risk Factors (4)
CRITICAL network IDS malware/EtherHiding exfiltration alerts
Multi-source malware IoC on a resource associated with the page
Blockchain RPC domain lookups indicative of EtherHiding delivery technique
Site appears compromised: legitimate healthcare content hosts infection/loader activity
Domain age information unavailable

Details

Page Title

Men's Health Clinics – Testosterone Replacement Therapy | Primary Care Physicians for Men

Scan Type

public

Domain Name Analysis

The domain 'mensvitalityaz.wpenginepowered.com' uses the commercial generic top-level domain (.com) and includes subdomain 'mensvitalityaz'. Its registrable label 'wpenginepowered' stretches across 15 characters split between six vowels and 9 consonants. It segments into 3 words: wp, engine, powered. Median word length is six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mensvitalityaz.wpenginepowered.com

Page Load Overview

21.54s
Total Load Time
5.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:11,048 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical59% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
59%
adult content
44%
news/blog
20%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17141.193.213.11Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
6104.196.250.26Google · CDNThe Dalles, Oregon, United States
AS396982Google LLC
6104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.250.154.95Google · CDNUnited States
AS15169Google LLC
6192.178.183.113Google · CDNUnited States
AS15169Google LLC
6142.251.14.95Google · CDNUnited States
AS15169Google LLC
6188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6192.178.183.100Google · CDNUnited States
AS15169Google LLC
635.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
6142.251.110.97Google · CDNUnited States
AS15169Google LLC
10115--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T158E22B32E15500963E2ED76CF6E2B228D158A517C91667A7B0BE206C5FA45FB00E3F1F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:19fNwMKDfNQ62Ho/xE6x4aUg/5j/nfnDy2bfQmFa4r/ZdSZUaAfkW3FvBnN:19i5Q62I/xE6x4g5bn/BQ8Zdyp63hBN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33794:RTWJMCDAMBY4BQtYgIBQQgAgWMcUIpINZwAgqQA2AfJcHAPwGASQWIYqwkENAAoIK5CBaFxKjYtuxkFAgGE8MBNCMgBBgJwA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fe00000002ffff0e
Perceptual Hash:946493fc15c598ee
Difference Hash:0005a4ee3e31c7d8
Wavelet Hash:ff00000286ffff0f
Color Hash:#e0836c

Scan History

Scan history not available

Unable to load historical scan data