Security Scan Report: diabetescareth.com

Site favicon
Submitted: Oct 1, 2026, 1:35:45 PMCompleted: Oct 1, 2026, 1:36:57 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Established Thai health blog compromised and injected with analyst-confirmed ErrTraffic/Exvicy loader and ClickFix 'Human Verification' Win+X Terminal lure, plus multiple malicious sub-resources — do not visit or run any pasted command.

Risk Factors (4)
Injected ErrTraffic/Exvicy WordPress loader using atob + XOR + new Function code execution
Fake Cloudflare-style 'Human Verification' ClickFix overlay instructing Win+X → Terminal → paste command (PowerShell execution)
Page loads six externally-reported malicious domains in addition to the injected kit
Legitimate 12-year-old Thai diabetes health blog appears compromised and weaponised to serve ClickFix to visitors
Domain age information unavailable

Details

Page Title

หน้าแรก - เบาหวานถ้ารู้จริงก็เบาใจ

Scan Type

public

Domain Name Analysis

The domain name 'diabetescareth.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'diabetescareth' is 14 characters long with six vowels and 8 consonants. Splitting it apart reveals 3 words: diabetes, care, th. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://diabetescareth.com/

Page Load Overview

8.95s
Total Load Time
2.9 MB
Total Size

Language Analysis

Primary Language

🇹🇭Thai
Code: th
Confidence:63%
Script:Unknown
Direction:ltr

Detection Details

Text Length:9,023 chars
Detector Agreement:75%

Website Classification

Primary Category

documentation technical42% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
42%
technology software
37%
news/blog
35%
corporate
35%
government public service
33%

Detected Features

Articles
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19103.30.127.84Thailand
AS56067453 Ladplacout Jorakhaebua
4150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
474.125.29.95Google · CDNUnited States
AS15169Google LLC
4142.250.154.97Google · CDNUnited States
AS15169Google LLC
4104.21.3.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
4142.251.110.94Google · CDNUnited States
AS15169Google LLC
4172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
11525--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15334D5B33E865839210911D3221A3A0D54D9DE93FE32F9C472AE514AEFF6F151442EEB

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:isxUtEPV8pLAHn9RxMqcp40kGJ0lvDPzz8BM:iS8ppO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:250497:16RmZ0kasMWAgMRQAFCBFTiICEhBIQY3EBCAgB5UAQhMkJiBIJYwmAICVSZCQ8sYRqKm4ARIA68ZxYiSNuCJQAmJkWCgCglg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefeffe7e7ffffff
Perceptual Hash:aa5555ff22aa8855
Difference Hash:0000000909010101
Wavelet Hash:0e0e1e0f0f1f0f0f
Color Hash:#7ad22d

Other Hashes

Crop Resistant:0000000909010101

Scan History

Scan history not available

Unable to load historical scan data