Security Scan Report: musedesignstaging.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 19 IPs in 4 countries across 19 domains to perform 132 HTTP transactions. The main domain is musedesignstaging.com and was registered 7 years ago.

Submitted URL: https://musedesignstaging.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate interior-design business whose WordPress site is compromised and serving a ClearFake/ClickFix EtherHiding malware chain to visitors; do not browse, contact form is safe but the site itself is unsafe.

Risk Factors (6)
Known ClearFake/ClickFix malicious kit (ClearFake_BscSl_WordPress_Plugin_Loader, ClearFake_Polygon_Contract_Loader) identified on the page
EtherHiding: next-stage payload address fetched from a BSC testnet smart contract via public blockchain RPC
Three CRITICAL IDS malware alerts (EtherHiding Exfil M2)
Obfuscated JavaScript hides known-attacker and iclickfix malware hosts (1rpc.io, campaigntracker.icu, campaigntracker.run)
Page loads multiple domains flagged as malware delivery infrastructure (powershell injector, unknown loader)
Injected casino spam link suggesting unauthorized content injection into the CMS
Domain age information unavailable

Details

Page Title

Home Staging and Interior Design | Marin County | Muse Design & Staging

Scan Type

public

Domain Name Analysis

The domain 'musedesignstaging.com' uses the commercial generic top-level domain (.com) with no subdomain. Count 17 characters in 'musedesignstaging' containing six vowels alongside eleven consonants. Tokenizing the label suggests three words: muse, design, staging. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://musedesignstaging.com

Page Load Overview

5.13s
Total Load Time
5.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:9,171 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24162.241.24.62Phoenix, Arizona, United States
AS31898Oracle Corporation
6190.115.18.105United Arab Emirates
AS59692IQWeb FZ-LLC
6185.92.183.208Riga, Riga, Latvia
AS56971Cgi Global Limited
6142.251.127.95Google · CDNUnited States
AS15169Google LLC
695.129.234.18Russia
AS57724Ddos-guard Ltd
6172.217.117.4Google · CDNUnited States
AS15169Google LLC
652.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
615.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
6142.250.154.94Google · CDNUnited States
AS15169Google LLC
6188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13219--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T112543B62F2D4457B023B46D0916DB7ACFD3A9102E74599D9B1ECA3346BCDEEB016322C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:FTsiv07BBUj45aXDcNINTNdNdNUNTNdN6xgbeLzXLJh:FfeBBf5qpDXepDI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:301282:ErdDDAgUALmmCkogwKTgCSHSIDQAUKMBiMEoJFbBqagxR8iZCiVwIIF+Aw7EAFBETADAQAVFnCRMhpgQKMBwSQE0WIBAWhFK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff6f4c0000000fff
Perceptual Hash:b290976de9884dcb
Difference Hash:c4cca8a90b262d08
Wavelet Hash:ff674f0000003fff
Color Hash:#40bfb7

Scan History

Scan history not available

Unable to load historical scan data