Security Scan Report: teemaker.in

Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 3 countries across 12 domains to perform 228 HTTP transactions. The main domain is teemaker.in and was registered 8 years ago.

Submitted URL: https://teemaker.in

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate 8-year-old t-shirt shop whose pages are compromised with a ClearFake/ClickFix EtherHiding loader; two critical YARA hits, vetted kit roster matches and critical malware IDS alerts make it unsafe to visit.

Risk Factors (5)
Compromised site injecting ClearFake / ClickFix malware chain into every visitor's browser
EtherHiding: page scripts query a Polygon smart contract to resolve a malicious next-stage server
Obfuscated JavaScript hiding actively blocklisted RPC/loader hosts
Critical IDS malware alerts (EtherHiding exfiltration) during page load
Threat-intel match against the primary domain itself (single-source 'unknown loader' malware tag)
Domain age information unavailable

Details

Page Title

teemaker.in

Scan Type

public

Domain Name Analysis

You're looking at domain 'teemaker.in' on the Indian country-code top-level domain (.in) while skipping any subdomain. Its registrable label 'teemaker' stretches across 8 characters containing four vowels alongside four consonants. Tokenizing the label suggests two words: tee, maker. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://teemaker.in

Page Load Overview

75.40s
Total Load Time
11.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:9,065 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%
e-commerce
40%
news/blog
40%

Detected Features

Search
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24173.254.28.86Phoenix, Arizona, United States
AS31898Oracle Corporation
17142.251.14.95Google · CDNUnited States
AS15169Google LLC
17192.0.73.2San Francisco, California, United States
AS2635Automattic, Inc
17104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17142.251.14.94Google · CDNUnited States
AS15169Google LLC
17152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
17104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
17178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
17104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22813--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T119840872B2322D3721AB51CED4AE3B0B61E6D70BC68701D4F3BC469D6BD9DA07152319

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:ZliBKV/y6BcBQAcoAOAHfAplMdjA7eaTivZVvj1iGDz6gOCG/xB19fJJNKXeeJG2:ZqKZWFEDIP7eaTivZVZiGf6gUHe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:389076:wBQR4AIMI5AgJEoeBKQ1UUAAqgBWQkUA8gQwzgZhSqyZBUaaCQAV0CGYVgh1aRClRFgASEKXgIAoY+AFGUYiAECgLBxaW4CA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefeffffffffffff
Perceptual Hash:d555555554aaaaaa
Difference Hash:0000000000000000
Wavelet Hash:0e0e0e0e02020202
Color Hash:#931f3c

Other Hashes

Crop Resistant:0000000000000000

Scan History

Scan history not available

Unable to load historical scan data