Security Report: afrogarnics.us - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/26fc56ec-7ef2-4cac-9c7a-62b127bb861b Domain and IP registration (RDAP)/api/v1/rdap/26fc56ec-7ef2-4cac-9c7a-62b127bb861b Certificate Transparency/api/v1/ct/afrogarnics.us How often this domain was scanned/api/v1/domain/stats/afrogarnics.us Scan history for this domain/api/v1/domain/history/afrogarnics.us?limit=15

This website contacted 11 IPs in 3 countries across 11 domains to perform 142 HTTP transactions. The main domain is afrogarnics.us and was registered 26 years ago.

Submitted URL: https://afrogarnics.us

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate-looking hair-care storefront compromised and injected with the ClickFix Win+X/Terminal 'Human Verification' malware overlay (roster-confirmed kit, YARA + EtherHiding + critical IDS). Do not follow its instructions.

Risk Factors (7)

Known malicious ClickFix Win+X/Terminal overlay kit injected into the page (analyst-vetted, CRITICAL phishing)

Malware YARA rules matched in page HTML (ClickFix overlay + packed blockchain contract loader)

EtherHiding: obfuscated script fetches its next-stage payload host from a Polygon smart contract (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co hidden until decoded)

Threat-intel malware report on the primary domain (two independent feeds)

Impersonates Cloudflare's verification UI and instructs visitors to paste attacker-controlled commands into Windows Terminal / PowerShell

Page title/section text advertises 'Human Verification' content that has no place on a hair-care retailer's site — evidence of compromise/tampering

Loads code from unranked third-party host browse-codes-enter.beer and threat-fed host poyanercold.top

Domain age information unavailable

Details

Page Title

Transform With Hair Oil Treatment - Best Unisex Oil of USA

Scan Type

public

Favicon Hash

MMH3: -966720981

MD5: 346bd88820518ed54a07123d48bbdef5

Domain Name Analysis

You're looking at domain 'afrogarnics.us' on the United States country-code top-level domain (.us) and has no subdomain. Count 11 characters in 'afrogarnics' containing 4 vowels alongside 7 consonants. It segments into three words: afro, garni, cs. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.64s

Total Load Time

15.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:7,134 chars

Detector Agreement:75%

Website Classification

Primary Category

corporate35% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate

35%

healthcare medical

26%

news/blog

20%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
22	174.138.176.150	New York, New York, United States	AS19318Interserver, Inc
12	142.251.13.97Google · CDN	United States	AS15169Google LLC
12	185.111.111.157	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
12	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
12	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
12	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
12	142.251.14.95Google · CDN	United States	AS15169Google LLC
12	68.70.204.1	Switzerland	AS44239proinity GmbH
12	142.251.20.94Google · CDN	United States	AS15169Google LLC
142	11	-	-