ScanMalware.com

Security Scan Report: thamyresheros.com

Submitted: Sep 14, 2026, 2:47:28 AMCompleted: Sep 14, 2026, 2:47:52 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

CONFIRMED ClickFix fake-CAPTCHA malware kit: roster-anchored CRITICAL YARA hit plus primary-domain 'iclickfix' malware threat-intel match. Visitors are lured to paste a Windows LOLBin command. Avoid and report.

Risk Factors (4)
Known ClickFix fake-CAPTCHA malware kit served from the primary domain
CRITICAL YARA match for LOLBin fake-CAPTCHA payload delivery
Threat-intel report tagging the primary domain as iclickfix malware
Fake 'Verification required' prompt designed to induce users to paste and execute a malicious command
Domain age information unavailable

Details

Page Title

My Blog – My WordPress Blog

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'thamyresheros.com' is registered. Its registrable label 'thamyresheros' stretches across 13 characters split between four vowels and nine consonants. Tokenizing the label suggests four words: th, amy, res, heros. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://thamyresheros.com

Page Load Overview

4.50s
Total Load Time
207 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:45%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:265 chars
Detector Agreement:100%
Language mismatch: Declared as pt-BR but detected as en

Website Classification

Primary Category

technology software59% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
59%
blog personal website
35%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
645.148.96.13Porto Alegre, Rio Grande do Sul, Brazil
AS53107EVEO S.A.
4142.251.13.105Google · CDNUnited States
AS15169Google LLC
4104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
452.63.121.74Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
4142.251.152.119Google · CDNUnited States
AS15169Google LLC
225--

Detected Technologies7

WordPressv6.8.8
100%
MetaGenerator
100%
PHP
50%
MySQL
50%
Cloudflare
50%
HTTP/3
40%
Cloudflare Turnstile
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12992C732B1B900577F1F9BA9C1927329FA98EA11CA06E37671F5311885A4DF700F762E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:OeCc0JmqE0+lGN+sv3rqWRXdqZsTaAd69K3h1rbNslQCfEGHRmy4kWhxEHo5y40n:tCZmqE0z3r3ZdqZUaARkWhxEHo5y40c2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20466:88exTIQSA3gkKQJoCChARCR7JnkMRIEMgxoQsBQAEljNsEEmwIswqLhE2JAK8FhACJQwACAaNKYGYxAKIITiKFAA0gBAiIhI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9f8789ffffffffff
Perceptual Hash:be3e1e86c6c34169
Difference Hash:20383b0000000000
Wavelet Hash:1f07017f0f0f0f0f
Color Hash:#87c599

Other Hashes

Crop Resistant:20383b0000000000

Scan History

Scan history not available

Unable to load historical scan data