Security Scan Report: lidopatch.com

Site favicon
Submitted: Oct 9, 2026, 4:24:52 PMCompleted: Oct 9, 2026, 4:25:41 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

A long-registered LidoPatch pain-patch page is compromised/malicious: the primary domain and loaded scripts match multi-source ClearFake/PowerShell-injector malware intel, and the page runs blockchain RPC code fitting a wallet drainer. Avoid.

Risk Factors (4)
Content-malware Indicator of Compromise (ClearFake) on the primary domain, corroborated by multiple feeds
Page loads three externally flagged malware resources (PowerShell injector and ClearFake exploit kits)
Blockchain RPC connections embedded in an unrelated health-product page — wallet-drainer/malware-loader signature
Domain unranked in Cisco Umbrella despite 15-year registration (possible compromise/re-purpose)
Domain age information unavailable

Details

Page Title

LidoPatch – OTC Lidocaine Pain Patch

Scan Type

public

Domain Name Analysis

You're looking at domain 'lidopatch.com' on the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'lidopatch' spans 9 characters with 3 vowels and six consonants. Word splitting yields 2 words: lido, patch. Expect 4.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lidopatch.com

Page Load Overview

10.66s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,148 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical79% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
79%
documentation technical
66%
government public service
61%
adult content
33%
blog personal website
30%

Detected Features

OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18107.180.117.214United States
AS398101GoDaddy.com, LLC
10104.16.248.249Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.21.16.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
1015.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
103.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
10104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1035.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1015.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
10172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17817--

Detected Technologies12

WordPressv6.3.13
100%
Modernizrv3.3.1-respond-1.4.2.min
100%
JQueryv3.7.0
100%
Bootstrapv1.3.0
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10BD33A739C45841691972BCCD266EB0C91BFD228CB46CAE5B9FCE09CA3C5FD50863368

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:3kOCerNSlOdPYmscwyVObyrarqnK8Lb660UjJtrIJhD99/oCN9rRTEpLfBrOHMrg:3kbOdgOwyVzaun7b660Ujn8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:138226:AEysBRcUOUptAiADxGDBDKOMKBgEJgIQYgJRQ9BFpBx1QeMSJNEmagS6aZgBERKYCTBaBLSCGgCIWEsKMFKU8gQgBwjVghFm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff9f1f1f1ff8181
Perceptual Hash:edcd3296cc349269
Difference Hash:ecc3c3c3c3cc0f0f
Wavelet Hash:fef0e0f0717f0101
Color Hash:#b279d2

Scan History

Scan history not available

Unable to load historical scan data