Security Scan Report: tepolymers.com

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 4 domains to perform 99 HTTP transactions. The main domain is tepolymers.com and was registered 2 years 11 months ago.

Submitted URL: https://tepolymers.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Compromised legitimate polymer company site serving an IClickFix/EtherHiding ClickFix loader: vetting shows obfuscated blockchain-hosted payload, 5 CRITICAL malware IDS alerts and malware Indicators of Compromise on tepolymers.com and zvh4.com. Avoid.

Risk Factors (4)
ClickFix/EtherHiding malware loader injected into the page (IClickFix kit)
Critical IDS malware alerts including EtherHiding exfiltration and ClickFix C2 domains
Obfuscated script decoding to threat-feed hosts and blockchain-hosted next-stage payload
Indicators of Compromise on both the primary domain and a loaded third-party domain
Domain age information unavailable

Details

Page Title

صفحه اصلی - تهران پلیمر شرق

Scan Type

public

Domain Name Analysis

You're looking at domain 'tepolymers.com' on the commercial generic top-level domain (.com) and has no subdomain. The core label 'tepolymers' covers 10 characters containing 3 vowels alongside 7 consonants. Segmentation suggests two words: te, polymers. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

2ygline sPIVVAE SSP @sz Lob uated 49 Loatyo & Sika EL Loclod ef Ware ef} Ulolando Q PS de % “ (TPS. B04) lai ) Bp 04 J UY & Pe ee % Wl (pg> 7) Cull08 4) Foy punaud Ga Vo add jl Gy pork) ye} Cpa Ao...

Page Load Overview

12.84s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR
Text Length:5,103 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical87% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
87%
corporate business
43%
corporate
35%
blog personal website
31%
news/blog
20%

Detected Features

Search
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
27195.28.169.22Iran
AS212216Netafraz Iranian Ltd.
2435.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
24188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
24192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
994--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C764C7727769192E316F02CFE0173B0C918BDFE7E5A1AAE0F7B7011191B5CA236561E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:fRdE47CiJADWAmA9RAij4Fsr0N0Tmn3GNgNAx6DJZOjZTLPStS+er83d:fRdEpHrcij4Fsr0NqNBLA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:314520:ghkBIZCniMQysUzAEg9o2MGLIAbIhEoRgpQGgIBjDuE5RqCqAIYApRAEIkpMAXivRQSIYzq2igATIEAgbwmRZEL5kCRa0PLT

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff07060003ffefcf
Perceptual Hash:b306f9cc3ccb8623
Difference Hash:671e4c4d8fe41b1b
Wavelet Hash:bf07000001ffefcf
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data