Security Report: smarthomedirect.com.au - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/051e2f05-a279-4402-b65a-95c9fc24681a Domain and IP registration (RDAP)/api/v1/rdap/051e2f05-a279-4402-b65a-95c9fc24681a Certificate Transparency/api/v1/ct/smarthomedirect.com.au How often this domain was scanned/api/v1/domain/stats/smarthomedirect.com.au Scan history for this domain/api/v1/domain/history/smarthomedirect.com.au?limit=15

This website contacted 22 IPs in 3 countries across 24 domains to perform 71 HTTP transactions. The main domain is smarthomedirect.com.au and was registered 6 years ago.

Submitted URL: https://smarthomedirect.com.au

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Compromised smart-home storefront weaponised with EtherHiding malware: 20 CRITICAL EtherHiding exfil IDS alerts, content-malware Indicators of Compromise on the primary domain and loaded exploit-kit hosts, blockchain C2 traffic, and a fake CAPTCHA pushing PowerShell clipboard commands. Do not visit or interact.

Risk Factors (6)

CRITICAL IDS malware alerts (EtherHiding exfiltration, x20)

Content-malware Indicator of Compromise on the primary domain (malware loader)

Multiple exploit-kit domains loaded (abcsgftr.cc, mon-blanc-02.cfd, thu-ipad-03.cfd)

Blockchain RPC connections used as malware C2/exfiltration channel

Fake CAPTCHA/verification prompting users to paste PowerShell commands (ClickFix)

Very new domain (59 days) with no reputation, hosting active malware delivery

Domain age information unavailable

Details

Page Title

Smart Home Direct – Smart Home Automation & Smart Home Device Experts

Scan Type

public

Favicon Hash

MMH3: -847545613

MD5: 426650008c8722f12bb1caaf96b3aa07

Domain Name Analysis

Domain 'smarthomedirect.com.au' uses the Australian country-code top-level domain (.com.au) while skipping any subdomain. The second-level label 'smarthomedirect' is 15 characters long holding 5 vowels versus ten consonants. Word splitting yields 3 words: smart, home, direct. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.31s

Total Load Time

1.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-AU

Text Length:4,703 chars

Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping68% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

e-commerce shopping

68%

education learning

65%

government public service

55%

blog personal website

45%

healthcare medical

35%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	45.56.216.139	Toronto, Ontario, Canada	AS40092HostPapa
3	104.18.40.137Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
3	172.64.147.119Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	104.18.10.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
3	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
71	22	-	-