ScanMalware.com

Security Scan Report: www.temu.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/dccae845-e5b3-48eb-ba57-d796ba020348Domain and IP registration (RDAP)/api/v1/rdap/dccae845-e5b3-48eb-ba57-d796ba020348How often this domain was scanned/api/v1/domain/stats/temu.comScan history for this domain/api/v1/domain/history/temu.com?limit=15
This website contacted 25 IPs in 3 countries across 7 domains to perform 498 HTTP transactions. The main domain is temu.com and was registered 23 years ago.

Submitted URL: https://www.temu.com/kuiper/uk1.html?subj=bundle-un&_bg_fs=1&_p_mat2_type=a1005&_p_jump_id=1261&_x_vst_scene=adg&_p_rfs=1&_x_ads_channel=kol_affiliate&_x_campaign=affiliate&_x_cid=4075404362kol_affiliate&_x_ads_csite=affiliate_goods_share&g_site=142&g_lg=fr&g_region=20&g_ccy=EUR&aff_goods_share_page=1&goods_id=601099764014819&_x_ns_adg_stid=6ca61a4347844e60_njmgzgm

The Cisco Umbrella rank of the primary domain is #654 of the top 1 million websitesTop 1K Site

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

Official Temu storefront on its own long-established, top-ranked domain with no credential/payment forms and no threat-intel, hunting rule or exfiltration signals.

Safety Factors (5)
Established 23-year-old domain with top-1K Cisco Umbrella ranking
Brand in page metadata matches the domain (self-branding, not impersonation)
No credential, login or payment form present on the page
No Indicators of Compromise, hunting rule, Safe Browsing or kit-roster hits
Only IDS alerts are informational PHP-webshell heuristics that the scanner itself notes fire on legitimate sites
Domain age information unavailable

Details

Page Title

Temu | Explore the Latest Clothing, Beauty, Home, Jewelry & More

Scan Type

public

Domain Name Analysis

The domain 'www.temu.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www'. The registrable portion 'temu' spans 4 characters split between 2 vowels and 2 consonants. Breaking it apart gives 2 words: t, emu. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.temu.com/kuiper/uk1.html?subj=bundle-un&_bg_fs=1&_p_mat2_type=a1005&_p_jump_id=1261&_x_vst_scene=adg&_p_rfs=1&_x_ads_channel=kol_affiliate&_x_campaign=affiliate&_x_cid=4075404362kol_affiliate&_x_ads_csite=affiliate_goods_share&g_site=142&g_lg=fr&g_region=20&g_ccy=EUR&aff_goods_share_page=1&goods_id=601099764014819&_x_ns_adg_stid=6ca61a4347844e60_njmgzgm

Page Load Overview

6.58s
Total Load Time
5.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:12,835 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical48% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
48%
government public service
48%
e-commerce shopping
38%
adult content
37%
technology software
35%

Detected Features

Search
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
42162.159.141.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
19132.145.55.19Oracle · CLOUDSlough, England, United Kingdom
AS31898Oracle Corporation
19151.101.130.58Fastly · CDNUnited States
AS54113Fastly, Inc.
19151.101.66.58Fastly · CDNUnited States
AS54113Fastly, Inc.
19162.159.141.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
19172.66.1.241Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
194.207.236.117Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
19172.66.1.242Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1920.123.108.148Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
19151.101.2.58Fastly · CDNUnited States
AS54113Fastly, Inc.
49825--

Detected Technologies5

Cloudflare Bot Management
55%
PayPal
40%
HTTP/3
40%
HSTS
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DD852A39E23834BB454702D4FC3B7F7D75CE911EC3828A6351E8812A07BACEB6E56159

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:PjxrBom7aBHGkS581Enivt1whgzUATF3OyKFP:PjxrBom7aBHGkS58YivtkgzUHyKFP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1710886:IQ7AgCaASCAQMcgFKhoDDJCoEduGNCMAglAUDkgNIggSAjKqCKgEcQCTA68hwC4KEAECjBgmBUgewAHdQNcLIOBWC1AwBhgw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:008181a101e1f1f1
Perceptual Hash:e21ce36b1ce31c59
Difference Hash:370d2f6f3b8bcb8b
Wavelet Hash:0081b7b381e1f1ff
Color Hash:#5b3a78

Other Hashes

Crop Resistant:b3b3b2b4b4b4b4b3,bcb2a094aa868584,370d2f6f3b8bcb8b

Scan History

Scan history not available

Unable to load historical scan data