Security Scan: A2A MedNet

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9e2fe5ec-4b3a-40eb-83c0-3194b5f65bcc Domain and IP registration (RDAP)/api/v1/rdap/9e2fe5ec-4b3a-40eb-83c0-3194b5f65bccHow often this domain was scanned/api/v1/domain/stats/a2a-mednet.com Scan history for this domain/api/v1/domain/history/a2a-mednet.com?limit=15

This website contacted 12 IPs in 3 countries across 8 domains to perform 134 HTTP transactions. The main domain is a2a-mednet.com and was registered 3 years 6 months ago.

Submitted URL: https://a2a-mednet.com

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised pharmacy site carrying an analyst-vetted ClickFix blockchain loader (EtherHiding); primary domain flagged as malware by two feeds with CRITICAL malware IDS alerts.

Risk Factors (6)

Domain-matched YARA detection of a packed ClickFix / blockchain-stage loader

Content-malware Indicators of Compromise on the primary domain, corroborated by two independent threat feeds

EtherHiding: next-stage address retrieved from a smart contract, evading static blocklists

Multiple CRITICAL network IDS malware/phishing alerts during page load

Hidden Turkish gambling spam links injected into legitimate pharmacy content (compromised site)

Unranked domain with no legitimacy signals (score 20/100) despite 3-year age

Domain age information unavailable

Details

Page Title

A2A MedNet

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

The domain 'a2a-mednet.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'a2a-mednet' stretches across 10 characters with 4 vowels and 4 consonants; it also includes one digit and one hyphen. Tokenizing the label suggests five words: a, 2, a, med, net. Average segment length settles at one character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

79.77s

Total Load Time

1.2 MB

Total Size

Language Analysis

Primary Language

🇹🇷Turkish

Code: tr

Confidence:24%

Script:Latin

Direction:ltr

Detection Details

Text Length:53,020 chars

Detector Agreement:33%

Website Classification

Primary Category

gambling betting100% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

100%

adult content

100%

entertainment media

100%

technology software

99%

healthcare medical

99%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	204.186.24.199	East Stroudsburg, Pennsylvania, United States	AS3737PenTeleData Inc.
11	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
11	142.251.14.95Google · CDN	United States	AS15169Google LLC
11	57.150.78.65Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
11	107.180.112.211	United States	AS398101GoDaddy.com, LLC
11	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
11	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
11	142.251.14.113Google · CDN	United States	AS15169Google LLC
11	142.251.14.94Google · CDN	United States	AS15169Google LLC
0	12	-	-