Security Report: galaxyfurniturestore.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0e3bd51d-f299-4ee2-a44a-61f477e7cda4 Domain and IP registration (RDAP)/api/v1/rdap/0e3bd51d-f299-4ee2-a44a-61f477e7cda4How often this domain was scanned/api/v1/domain/stats/galaxyfurniturestore.com Scan history for this domain/api/v1/domain/history/galaxyfurniturestore.com?limit=15

This website contacted 32 IPs in 3 countries across 18 domains to perform 109 HTTP transactions. The main domain is galaxyfurniturestore.com and was registered 7 months ago.

Submitted URL: https://galaxyfurniturestore.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Compromised WooCommerce furniture site serving an injected ClickFix fake-CAPTCHA overlay (Win+X/Terminal) plus EtherHiding exfiltration; primary domain flagged as malware by two feeds. Do not interact.

Risk Factors (5)

Analyst-vetted ClickFix (Win+X/Terminal) fake-CAPTCHA overlay kit injected into the page — a code-execution/social-engineering lure

Content-malware indicator of compromise on the PRIMARY domain (clearfake/malware) corroborated by 2 independent threat feeds

CRITICAL IDS alerts for EtherHiding exfiltration plus blockchain RPC C2 traffic (polygon.drpc.org, polygon-public.nodies.app)

Page loads a malicious-host third-party resource (checkyoubrowse.codes) via fetch

Unranked domain (not in Cisco Umbrella top 1M) with a credential login form, consistent with a compromised low-reputation host

Domain age information unavailable

Details

Page Title

Home - Galaxy Office Furniture

Scan Type

public

Favicon Hash

MMH3: 678798357

MD5: 063d2806e9f25fa78b568f3d0ddb7515

Domain Name Analysis

You're looking at domain 'galaxyfurniturestore.com' on the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'galaxyfurniturestore' spans 20 characters with 8 vowels and twelve consonants. Word splitting yields 3 words: galaxy, furniture, store. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.61s

Total Load Time

3.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:5,677 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking63% confidence

Type: spa

Method: ml+structural

All Detected Categories

finance banking

63%

e-commerce shopping

52%

healthcare medical

43%

cryptocurrency blockchain

42%

documentation technical

38%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.110.97Google · CDN	United States	AS15169Google LLC
3	150.171.28.10Azure · CLOUD	United States	AS8075Microsoft Corporation
3	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	20.250.198.32Azure · CLOUD	Zurich, Zurich, Switzerland	AS8075Microsoft Corporation
3	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.151.119Google · CDN	United States	AS15169Google LLC
3	142.251.14.149Google · CDN	United States	AS15169Google LLC
3	216.239.32.36Google · CDN	United States	AS15169Google LLC
3	150.171.109.107Azure · CLOUD	United States	AS8075Microsoft Corporation
109	32	-	-