Security Scan Report: pacharagems.com

Site favicon
Submitted: Sep 23, 2026, 1:18:15 PMCompleted: Sep 23, 2026, 1:19:10 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

10
Risk Score

Compromised jewelry site now serving a ClickFix fake-verification lure plus EtherHiding/AMOS malware infrastructure, and the primary domain carries a confirmed content-malware Indicators of Compromise hit. Do not visit.

Risk Factors
Content-malware Indicators of Compromise on the primary domain (EtherHiding/ClearFake)
Critical IDS malware alerts for EtherHiding exfiltration and AMOS ClickFix loader
ClickFix-style fake CAPTCHA/social-engineering verification page injected into the site
Multiple malicious third-party domains and blockchain RPC endpoints loaded by the page
Site content replaced/broken ('Nothing Found') consistent with defacement/compromise injection
4 Function() constructor calls indicating generated/obfuscated code on the page
Domain age information unavailable

Details

Page Title

Pachara Gems – แหวนเพชร แหวนหมั้น แหวนแต่งงาน เพชรใบเซอร์ GIA & HRD

Scan Type

public

Domain Name Analysis

You're looking at domain 'pacharagems.com' on the commercial generic top-level domain (.com). Count 11 characters in 'pacharagems' with four vowels and 7 consonants. Segmentation suggests 3 words: pac, hara, gems. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pacharagems.com

Page Load Overview

17.03s
Total Load Time
693 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,817 chars
Detector Agreement:50%

Website Classification

Primary Category

gambling betting91% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
91%
adult content
80%
e-commerce shopping
78%
entertainment media
72%
cryptocurrency blockchain
44%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13103.86.51.196Bangkok, Bangkok, Thailand
AS58955Bangmod Enterprise Co., Ltd.
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2138.124.60.214Switzerland
AS203273NetCrafters OU
2104.21.3.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.43.2Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
235.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.13.95Google · CDNUnited States
AS15169Google LLC
4115--

Detected Technologies6

JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18EC284339321057D7B8A87A881417229E4D5D617AD0E327EF3A020E8FC9D6E704A7B3D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:n9skoeDI6JDf2sqE/EB4JqgyJ3Y+dajWdNJ6Ih7a4r/ZdSZUaAhHkW1SJN:nprdyh9ddYWDZdypa91SL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:25997:aFsJKIQccCmRBJQKACCkFTUyhQDkCRwNMgQwAMgO8IGBIQayRQBQIE6DO8CI4RjC1btMCigKJoCwElAAqMBSgAioEQBBSCNq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c3c3ffffffff
Perceptual Hash:b03193c7c6ccccce
Difference Hash:0818163600000008
Wavelet Hash:3f070303f0f0f300
Color Hash:#86562d

Other Hashes

Crop Resistant:0818163600000008

Scan History

Scan history not available

Unable to load historical scan data