What Gridinsoft observed on Biogenyxlabs.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260827212621-26a4e043
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Suspicious Website
- Evidence basis
- First-party site analysis External vendor intelligence: Contradictory context — not used for this decision
The independent current review does not support the prior Phishing classification: no credential-theft flow, impersonated login, malicious redirect, executable delivery, malware file, payload, command, exploit, hash, or exact harmful URL was reproduced, and the fresh VirusTotal snapshot contained zero malicious and zero suspicious engines. A Safe verdict is also not supported. The site markets medical treatments and claims licensed staff, extensive experience, and more than 25,000 procedures, but the reviewed apex pages do not identify the clinicians, medical director, professional licenses, or operating legal entity; the listed Dover address is an official registered-agent location; and current location pages contain cross-city contact and directions inconsistencies. The appropriate result is therefore Suspicious Website. This is a domain-level caution based on current transparency and identity evidence, not a claim that a phishing or malware sample was observed.
Analyst findings
Review 8 documented observations View evidence
A fresh supported Gridinsoft rescan reached the expected HTTPS apex without an external redirect, recorded no positive behavioral signal, and identified no exact credential receiver, impersonated login, malicious destination, automatic executable download, malware file, payload, command, exploit, or hash. The pre-review Phishing result came from the broad biogenyxlabs.com signature rather than a reproduced harmful object.
- Public artifact URL https://gridinsoft.com/online-virus-scanner/url/biogenyxlabs-com
-
Final URL
https://biogenyxlabs.com/ - Page element The fresh result recorded no positive behavioral signal.
- Analyst observation No specific phishing URL, credential receiver, malicious destination, file, payload, command, exploit, or hash was identified in the reviewed scope.
The current apex content presents Biogenyx as a regenerative-medicine clinic offering peptides, cell therapy, IV and NAD+ therapy, wellness, hair restoration, diagnostics, and aesthetic services. Current indexed About, Contact, and Hair Restoration pages remained consistent with that theme. The reviewed public form requested ordinary consultation fields such as name, email, phone, service interest, and message; no account password, one-time code, wallet secret, or impersonated third-party login was observed.
- Page element Current title: Home - Biogenyxlabs.
- Page element The site describes regenerative medicine, peptide therapy, cell therapy, IV and NAD+ therapy, wellness, hair restoration, diagnostics, and aesthetics.
- Page element The public consultation form requests name, email, phone, service interest, and a message.
- Analyst observation The reviewed public pages did not expose an impersonated third-party login, password field, one-time-code request, wallet-secret request, automatic executable download, or unrelated navigation destination.
Repeated direct HTTP requests to the apex and www from the review network received HTTP 202 SiteGround challenge pages for desktop, mobile, crawler, and command-line profiles. The supported Gridinsoft rescan and current public indexes supplied the current apex content used above. The challenge is an access-control boundary, not evidence that the site is either harmful or safe.
-
HTTP status
202 -
Final URL
https://biogenyxlabs.com/ - Page element The direct response used a SiteGround challenge path under /.well-known/sgcaptcha/.
- Analyst observation The challenge appeared across desktop, mobile, crawler, and command-line request profiles and was not treated as a malicious redirect.
The apex says procedures are performed by licensed medical staff, describes leadership with more than thirteen years of experience and over 25,000 successful procedures, and lists 8 The Green, Suite A, Dover, Delaware as its contact address. The reviewed apex pages did not name the clinicians, medical director, operating legal entity, or license records supporting those health-service representations. The official Delaware Division of Corporations registered-agent directory identifies that exact suite as the address of A Registered Agent, Inc. and Delaware Corporate Headquarters LLC, so it does not independently establish a patient-care location.
- Page element The site states that procedures are performed exclusively by licensed medical staff and that its team has more than thirteen years of global experience and over 25,000 successful procedures.
- Page element The apex Contact and About pages list 8 The Green, Suite A, Dover, DE 19901.
- Public artifact URL https://corp.delaware.gov/agents/
- Analyst observation The official Delaware registered-agent directory lists A Registered Agent, Inc. and Delaware Corporate Headquarters LLC at 8 The Green, Suite A, Dover, DE 19901.
- Analyst observation The reviewed apex pages did not identify a clinician, medical director, professional license number, or legal operating entity.
Certificate-transparency data exposed affiliate, Boston, Dallas, Fairfield, Houston, Scottsdale, Seattle, and Utah subdomains. Twelve bounded public paths across Utah, Houston, and Scottsdale were fetched: eleven returned HTTP 200 and one historical Houston path returned HTTP 404. The pages showed the declared clinic theme and ordinary contact fields, with no suspicious download or credential-theft string. Several location roots returned HTTP 404, and the current Utah page mixed Utah contact details with links to Houston and Scottsdale plus a directions link for a Houston address, creating a material location and operator-transparency inconsistency.
- DNS fact Location hosts resolved through sites.ludicrous.cloud; the apex and www resolved to 34.174.199.156.
-
HTTP status
200 -
HTTP status
404 - Page element The Utah page lists 3668 W 2150 N St., Floor 3, Lehi, UT 84043 but its Get Directions link targets 6800 West Loop South, Suite 400, Houston, Texas.
- Page element The Utah page links selected contact and navigation actions to houston.biogenyxlabs.com and scottsdale.biogenyxlabs.com.
- Analyst observation The reviewed location paths contained ordinary contact fields and no executable link, automatic download, password field, wallet-secret request, unrelated credential receiver, or known command-execution string.
The submitted host is the registrable apex, so exact-host and parent-domain review refer to the same biogenyxlabs.com domain; www was checked separately. urlscan returned no public exact-host record. OTX exposed seven root or location-subdomain URLs with no Google Safe Browsing match in those records. OpenPhish had no exact match, and Wayback returned no successful HTML snapshot. Certificate-transparency records documented the location hosts but did not identify harmful behavior. Unavailable URLhaus and ThreatFox APIs, the unavailable Common Crawl index, and unindexed sources were treated as unknown rather than clean.
- Public artifact URL https://urlscan.io/domain/biogenyxlabs.com
- Public artifact URL https://otx.alienvault.com/indicator/domain/biogenyxlabs.com
- Public artifact URL https://web.archive.org/web/*/https://biogenyxlabs.com/
- Analyst observation urlscan returned zero public exact-host results; OTX returned seven URL observations with no Google Safe Browsing match; Wayback returned no successful HTML snapshot.
- Analyst observation No exact biogenyxlabs.com URL was present in the reviewed OpenPhish feed.
- Analyst observation URLhaus and ThreatFox direct queries required authorization, and Common Crawl was unavailable; those interfaces were not counted as clean results.
The fresh external snapshot embedded in the Gridinsoft report showed 56 harmless, zero malicious, zero suspicious, and 34 undetected VirusTotal engines. Separate Avira and Norton sources still retained Phishing or malicious domain labels. None of the available adverse entries supplied a specific harmful URL, captured credential receiver, malware file, payload, or hash. This is a reputation disagreement, not sample-level proof.
- Page element Fresh VirusTotal snapshot: 56 harmless, 0 malicious, 0 suspicious, and 34 undetected engines.
- Analyst observation Separate Avira and Norton report sources retained domain-level Phishing or malicious labels.
- Analyst observation The available adverse labels did not identify an exact URL, credential receiver, file, payload, command, exploit, or hash.
The apex and www resolved to 34.174.199.156, used SiteGround name servers, and had Google-hosted mail plus SPF. The active TLS certificate covered biogenyxlabs.com and its wildcard subdomains. These facts support stable technical operation but do not validate the medical, business-identity, clinician, or location claims.
- DNS fact Apex and www A: 34.174.199.156; NS: ns1.siteground.net and ns2.siteground.net; MX: smtp.google.com.
- Certificate fact The active Let's Encrypt certificate covers biogenyxlabs.com and *.biogenyxlabs.com.
- Analyst observation Stable DNS and valid TLS do not independently verify the site's medical practitioners, operating entity, patient-care locations, or treatment claims.
Scope and limitations
- The exact submitted host is the registrable parent domain, so exact-host and parent-domain OSINT refer to the same biogenyxlabs.com apex; www and certificate-discovered location hosts were checked separately.
- Direct apex review from the available networks was constrained by a repeated SiteGround challenge. Current apex content was corroborated through the supported Gridinsoft rescan and current public search indexes; the challenge itself was not treated as a threat signal.
- The review covered the fresh Gridinsoft result, current indexed apex pages, twelve bounded Utah, Houston, and Scottsdale paths, discovered location-host roots, ordinary contact forms, DNS, TLS, redirects, download indicators, public URL intelligence, threat-intelligence context, and archive availability.
- No appointment, treatment, purchase, payment, patient intake, account registration, credential submission, phone call, email exchange, or in-person visit was performed by Gridinsoft.
- Gridinsoft did not inspect private patient records, employment records, professional-license portals, corporate formation documents, contracts, clinical protocols, payment systems, or internal location records.
- The reviewed pages' failure to identify practitioners or licenses does not prove that no licensed professional or lawful operating entity exists; it means the current public site did not supply verifiable support for material medical-service claims.
- Public search, urlscan, OTX, certificate, archive, feed, threat-intelligence, and sandbox indexes are finite. Unavailable, authentication-only, and unindexed results were treated as unknown rather than clean.
- External domain blacklist labels remain separately controlled context. They are not equivalent to a reproduced phishing URL or malware sample and did not determine the Gridinsoft verdict.
- The result applies to biogenyxlabs.com, its www alias, and the reviewed public location pages at the recorded time. It does not certify future content, unreviewed paths, private forms, treatment quality, legal compliance, or the real-world identity of an undisclosed operator.
Help protect others by sharing this page on social media! The more people who know about biogenyxlabs.com, the fewer chances they have to deceive someone else. Help others evaluate biogenyxlabs.com by sharing this page on social media!