ScanMalware.com

Security Scan Report: theglorius.com

Site favicon
Submitted: Oct 11, 2026, 6:53:02 PMCompleted: Oct 11, 2026, 6:54:02 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Fake Cloudflare 'verification' page running a ClickFix kit: it tells Windows users to paste code into PowerShell/Terminal. Confirmed by YARA, 19 critical IDS malware alerts and a two-feed malware threat-intel match on the primary domain.

Risk Factors (5)
Known malicious ClickFix (Win+X Terminal paste) kit served from the page
Fake Cloudflare bot-verification overlay impersonating Cloudflare's security challenge
CRITICAL IDS alerts for EtherHiding malware exfiltration (19 hits)
Primary domain flagged as malware ('clearfake') by two independent threat-intel feeds
Blockchain testnet RPC connections consistent with EtherHiding/loader operation
Domain age information unavailable

Details

Page Title

The Glorius

Scan Type

public

Domain Name Analysis

The domain 'theglorius.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'theglorius' spans 10 characters holding 4 vowels versus 6 consonants. Segmentation suggests four words: the, g, lori, us. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://theglorius.com

Page Load Overview

5.66s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,787 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping41% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
41%
blog personal website
37%
education learning
32%

Detected Features

Search
Products
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.20.95Google · CDNUnited States
AS15169Google LLC
9142.251.127.207Google · CDNUnited States
AS15169Google LLC
9142.251.14.97Google · CDNUnited States
AS15169Google LLC
9142.251.14.94Google · CDNUnited States
AS15169Google LLC
9188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.110.207Google · CDNUnited States
AS15169Google LLC
93.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
93.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
915.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
16918--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FBB30973B46804B73A9F43EEA466B20EE5A6F606CA0187A1FAFC116C93F1DE1305715D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:5WDqCuJWVAxMAEAffAvDAKAdAbMD7WUQJfHEFSuHYiGj2rGDjDZtcsjlXjQ/3qeB:YqCMn5QEv2W+EFQxgYw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:116011:EMAxGLLAExCAApnACBkwgCkNgCEPPCIimCggGASKLQULCQAjAAwEY0MJiWQMUQtI6CwpEg1AiiCiY3BsETcEACUysZkyQQJT

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc1c1c1e7efcbfb
Perceptual Hash:e9689b969629921f
Difference Hash:6b030b930e8e1333
Wavelet Hash:838181c1e7e3c3fb
Color Hash:#d26c2d

Other Hashes

Crop Resistant:6b030b930e8e1333,08088ccc0c442c3c,c77f7f334f9f3f09

Scan History

Scan history not available

Unable to load historical scan data