Security Report: tfbworkwear.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6ed221fe-8667-46bd-9f58-f73c68fc72f2 Domain and IP registration (RDAP)/api/v1/rdap/6ed221fe-8667-46bd-9f58-f73c68fc72f2 Certificate Transparency/api/v1/ct/tfbworkwear.com How often this domain was scanned/api/v1/domain/stats/tfbworkwear.com Scan history for this domain/api/v1/domain/history/tfbworkwear.com?limit=15

This website contacted 9 IPs in 2 countries across 7 domains to perform 126 HTTP transactions. The main domain is tfbworkwear.com and was registered 4 years 1 month ago.

Submitted URL: https://tfbworkwear.com

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Legit-looking 5-year-old Thai workwear store, but a CRITICAL EtherHiding malware IDS alert, a blockchain RPC exfil sink, and malware Indicators of Compromise (incl. loaded xaz2.com) indicate the site is compromised. Avoid until cleared.

Risk Factors (4)

CRITICAL network IDS detection of EtherHiding malware exfiltration

Blockchain RPC connection consistent with on-chain payload delivery

Indicators of Compromise: primary domain reported as RAT malware

Indicators of Compromise: loaded third-party domain reported as malware by 2 feeds

Domain age information unavailable

Details

Page Title

หน้าแรก - TFB WORKWEAR

Scan Type

public

Favicon Hash

MMH3: -1416170396

MD5: c8705ec5efa01eee89ef9d036e2487cf

Domain Name Analysis

Domain 'tfbworkwear.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'tfbworkwear' spans 11 characters containing three vowels alongside 8 consonants. Tokenizing the label suggests four words: t, fb, work, wear. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

21.08s

Total Load Time

3.8 MB

Total Size

Language Analysis

Primary Language

🇹🇭Thai

Code: th

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:th

Text Length:1,858 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking75% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking

75%

healthcare medical

54%

adult content

47%

documentation technical

45%

news media journalism

38%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	142.251.20.95Google · CDN	United States	AS15169Google LLC
14	103.4.217.209	Thailand	AS63940dragonhispeed
14	142.251.14.97Google · CDN	United States	AS15169Google LLC
14	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	216.239.32.36Google · CDN	United States	AS15169Google LLC
14	104.26.13.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	142.251.13.95Google · CDN	United States	AS15169Google LLC
14	142.251.110.97Google · CDN	United States	AS15169Google LLC
14	142.250.154.94Google · CDN	United States	AS15169Google LLC
126	9	-	-