Security Scan Report: ocmedicare.com

Redirected to:
https://www.ocmedicare.com/
Site favicon
Submitted: Sep 22, 2026, 2:47:29 AMCompleted: Sep 22, 2026, 2:47:58 AMpubliccompleted

This website contacted 9 IPs in 2 countries across 10 domains to perform 54 HTTP transactions. The main domain is ocmedicare.com and was registered 4 years 1 month ago.

Submitted URL: https://ocmedicare.com

Effective URL:

https://www.ocmedicare.com/
Redirected

AI Security Verdict

Low Risk

Confidence: 65%

3
Risk Score

Established self-branded Medicare broker page, but its primary domain matches a RAT malware indicator and it loads the known malware domain xaz2.com, warranting a high-risk rating.

Risk Factors (3)
Content-malware (RAT) threat-intel indicator against the primary domain
Known malware domain xaz2.com loaded as a third-party resource
Unexpected blockchain testnet RPC connection on a non-crypto page
Safety Factors (7)
Domain is 17 years old (registered 2008) and well-established
No password, disguised-password, or payment fields — contact form is lead-generation only
No brand impersonation; page displays its own 'OCmedicare' brand
No YARA malware patterns, no network IDS alerts, no credential exfiltration
No cross-origin credential form submissions
Established domain (6560 days old) with no strong malicious indicators — risk clamped from 7 to 5
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

Orange County Medicare - Help and enrollment for Medicare Insurance plans in Orange County, Long Beach, and all of Southern California - Medicare Insurance plans in Orange County, Long Beach and all of California. We offer free advise and help your with your Medicare insurance decisions.

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'ocmedicare.com' is registered without a subdomain. The core label 'ocmedicare' covers 10 characters split between 5 vowels and 5 consonants. Splitting it apart reveals 2 words: oc, medicare. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ocmedicare.com

Page Load Overview

5.28s
Total Load Time
727 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:4,783 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical59% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
59%
government public service
53%
adult content
37%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6173.236.152.204Ashburn, Virginia, United States
AS26347New Dream Network, LLC
6104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
6104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.26.12.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6192.178.183.97Google · CDNUnited States
AS15169Google LLC
6157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
6157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
549--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FDE20A32E28404917E1EC769B2F2B27C9558A615DA036BE7B0FD306C5A585F700BBE1F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:s9fNwMKDfNQ62Ho/xE6x4aUg/5j/nfnDyn/uHuf4uMVE4/uJupu7q53Ir+jXdNJj:s9i5Q62I/xE6x4g5bn/bdXDZdypa99

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:31243:Ab9AAYRjYQRAEQEgHOVEMEjUghQzYIYKA4eFVYQoRcCn4IIESxGggGsERUdEJBMAMC4TZyhApIH6gQIJw5AKgKICQDGayGiQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfd3c3c3f3e7ffc3
Perceptual Hash:ed4c9392336c30de
Difference Hash:ba161696160c0e8e
Wavelet Hash:cb00c3c3c3c3fbc3
Color Hash:#9653ac

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data