ScanMalware.com

Security Scan Report: tedjcreation.com

Submitted: Completed: publiccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Compromised e-commerce site injecting the analyst-vetted IClickFix/EtherHiding ClickFix loader: CRITICAL IDS trojan alerts, a primary-domain malware match and obfuscated on-chain payload retrieval.

Risk Factors (5)
Confirmed ClickFix/EtherHiding malware kit injected into the page (analyst-vetted kit roster, CRITICAL)
CRITICAL IDS/network trojan alerts for EtherHiding exfiltration and ClickFix command infrastructure (zvh4.com)
Threat-intelligence malware match on the scanned primary domain (unknown loader)
Obfuscated JavaScript concealing threat-feed blockchain RPC hosts and an on-chain payload retrieval mechanism
Likely compromised legitimate storefront now serving a loader to visitors, including Windows-targeting ClickFix lures
Domain age information unavailable

Details

Page Title

TedjCréation

Scan Type

public

Domain Name Analysis

The domain name 'tedjcreation.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'tedjcreation' spans 12 characters holding five vowels versus 7 consonants. Tokenizing the label suggests three words: ted, j, creation. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tedjcreation.com

Page Load Overview

4.26s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:2,087 chars
Detector Agreement:67%

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%

Detected Features

Search
Articles
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1151.210.173.83France
AS16276OVH SAS
11172.217.208.95Google · CDNUnited States
AS15169Google LLC
11192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
11142.251.14.94Google · CDNUnited States
AS15169Google LLC
11192.178.170.95Google · CDNUnited States
AS15169Google LLC
11104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11142.250.154.94Google · CDNUnited States
AS15169Google LLC
888--

Detected Technologies11

WordPressv6.9.1
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
Blocksy
50%
WordPress Block Editor
30%
WooCommerce
20%
Jetpack
20%
Blocksy Companion
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D7B33AB3B25814773A6F83DA9021325DE09AE616C751A2E8F5FA611DC3F4CF2326351E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:iRdCbDq04bqkmk0Kk/BkHO48AHwFjwvvyr1M98kpcijE8i+QkVmuG5kaF:iRdCq07ZmG6O48AwBlF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:116569:DmBhNE2KeISpQEQAtAIJ5DSCIQiQxjNAtmgicCgBIxsJuLIEdAfcUUN9jQAEScTBZVEgAbIKARjBokmYDJEFWIAIQGAH0Mg5

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff5f5f7f3f30000
Perceptual Hash:eeea11e53d11d11a
Difference Hash:6b65252d27e625c1
Wavelet Hash:aff1f5f5b1f20000
Color Hash:#3a7867

Other Hashes

Crop Resistant:6b65252d27e625c1,0000000202020202,8f1f3f3d0f818583,ad0c252426e6f632

Scan History

Scan history not available

Unable to load historical scan data