Security Report: domomoda.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8abfdce4-5db2-4cc7-a8b9-d436ae14b0a3 Domain and IP registration (RDAP)/api/v1/rdap/8abfdce4-5db2-4cc7-a8b9-d436ae14b0a3How often this domain was scanned/api/v1/domain/stats/domomoda.com Scan history for this domain/api/v1/domain/history/domomoda.com?limit=15

This website contacted 15 IPs in 2 countries across 13 domains to perform 153 HTTP transactions. The main domain is domomoda.com and was registered 10 years ago.

Submitted URL: https://domomoda.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate Ukrainian flooring store whose pages have been compromised: HTML carries the analyst-vetted UAC-0277/LunexStealer ClickFix loader (YARA CRITICAL, EtherHiding via Polygon RPC, CRITICAL IDS malware alerts). Visiting risks a stealer infection.

Risk Factors (5)

Known stealer kit (UAC-0277/LunexStealer) injected into the site's HTML

EtherHiding traffic-distribution loader reading configuration from Polygon smart contracts via public RPC nodes

Critical IDS detection of ClickFix domain and EtherHiding exfiltration traffic

Threat-intel report labelling the primary domain domomoda.com as an 'unknown stealer (malware)' (single-source, unverified)

Obfuscated JavaScript with an eval() call concealing the malicious loader

Domain age information unavailable

Details

Page Title

ДомоМода - інтернет магазин покриття для підлоги

Scan Type

public

Favicon Hash

MMH3: 990421011

MD5: 8a3ef783c113550d7893127afbf57ebf

Domain Name Analysis

Domain 'domomoda.com' uses the commercial generic top-level domain (.com) and has no subdomain. Count 8 characters in 'domomoda' split between 4 vowels and 4 consonants. Splitting it apart reveals 3 words: do, momo, da. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

9.28s

Total Load Time

2.5 MB

Total Size

Language Analysis

Primary Language

🇺🇦Ukrainian

Code: uk

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:uk

Text Length:6,641 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business42% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

42%

real estate property

42%

corporate

35%

government public service

30%

e-commerce shopping

27%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	192.178.183.97Google · CDN	United States	AS15169Google LLC
10	142.251.13.95Google · CDN	United States	AS15169Google LLC
10	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
10	142.251.14.94Google · CDN	United States	AS15169Google LLC
10	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	142.251.110.97Google · CDN	United States	AS15169Google LLC
10	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
153	15	-	-