ScanMalware.com

Security Scan Report: moodesign.mu

Site favicon
Submitted: Oct 14, 2026, 6:50:54 PMCompleted: Oct 14, 2026, 6:51:43 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate 13-year-old furniture store whose pages are compromised with an analyst-confirmed ClickFix/EtherHiding overlay that lures Windows users into Terminal to run a blockchain-hosted malware loader.

Risk Factors (5)
Injected ClickFix 'Human Verification' / Win+X Terminal overlay distributing malware
EtherHiding: next-stage payload address fetched from a blockchain smart contract
Obfuscated script concealing threat-intel-flagged hosts (tenderly.co, drpc.org, 1rpc.io)
Multiple CRITICAL IDS malware/exploit-kit alerts on page traffic
Primary domain flagged as a malware loader in threat intelligence
Domain age information unavailable

Details

Page Title

Moodesignother network

Scan Type

public

Domain Name Analysis

Domain 'moodesign.mu' uses the Mauritian country-code top-level domain (.mu). The registrable portion 'moodesign' spans 9 characters holding 4 vowels versus 5 consonants. Segmentation suggests two words: moo, design. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://moodesign.mu

Page Load Overview

9.66s
Total Load Time
11.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-GB
Text Length:4,363 chars
Detector Agreement:67%

Website Classification

Primary Category

corporate35% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate
35%
e-commerce shopping
29%
documentation technical
26%
social_media
25%
e-commerce
20%

Detected Features

Login Form
Articles
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2350.116.64.178Phoenix, Arizona, United States
AS31898Oracle Corporation
7172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
7142.251.110.95Google · CDNUnited States
AS15169Google LLC
735.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7142.251.153.119Google · CDNUnited States
AS15169Google LLC
7178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
7162.159.128.61Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.13.139Google · CDNUnited States
AS15169Google LLC
24032--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16C24A6A1B99C0C3B121782CBA016365E70D7EE72DD6348E4F3F7426963E9DE07691239

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:89gFu/VMAxYAwApfAB/AK7fLMXvACEU1AwHoFx6PevTz+B0GJXZdrO37F7WA30ZU:8IarlSGCCEU1AwHoFxomTz+Sx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:217203:tB1ohgQLAcmibaAAABmwqqEYY4BeYhYBAEYeBFGDLTMNDBisAakkADeKlwBQCTJasjgiyqAqgChp0AwJFgaAQQpAAEAwYFVD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff0f0f0f8f8f0f9
Perceptual Hash:cc52b1b7b7459268
Difference Hash:8881111111121213
Wavelet Hash:66f0f0f0f0f0f0f0
Color Hash:#6d1f93

Other Hashes

Crop Resistant:8881111111121213,3263303ce8a8e4b1,a3a3b3b0b8e1e0b0,897c63271f181c0f,e8a98980ec93da78

Scan History

Scan history not available

Unable to load historical scan data