Is realmebel.pro a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a Russian-language online furniture retailer operating under the RealMebel name, presenting catalogues for kitchens, living rooms, bedrooms, children’s furniture, sofas, mattresses, and related home products, together with delivery, installation, measurement, ordering, and callback services.

Scam/Impersonation Risk

The site’s ordinary retail presentation and absence of page-level fraud indicators do not outweigh the confirmed external threat signals. The domain is blacklisted by multiple external sources, with four malicious and three suspicious detections recorded, including a Tier-1 security detection. Runtime testing also identified substantial post-interaction page changes, non-whitelisted external requests and posts, and password-form activity, although no wallet-connect, clipboard-hijacking, cloaking, or brand-impersonation behavior was detected. The result is a material risk for account access, credential submission, and financial transactions; the apparent furniture-retail model should not be treated as sufficient evidence of safety. Evidence:

• The homepage presents RealMebel as a furniture retailer with catalogue, ordering, callback, and registration functions.
• External reputation checks recorded 4 malicious detections, 3 suspicious detections, and a confirmed blacklist status.
• Browser testing recorded 27 external XHR requests, 13 external posts, 9 non-whitelisted XHR requests, 1 non-whitelisted post, and a maximum post-interaction DOM difference of 4,387.
• Domain registration continuity: registered 2013-10-09 (~12.87 years old); archival records cover 165 snapshots from 2014 through 2026 across 13 tracked years.

Regulatory Verification Notes

The site includes company-information, delivery, payment, warranty, return-policy, contact, and dealer-related content, but the available evidence does not independently verify the operating legal entity. No licensing or registration number is presented in the analysed material; for a general furniture retailer this is primarily a disclosure and entity-verification gap, rather than standalone evidence of a scam. The available business content is consistent with direct furniture sales and associated services, but the critical external reputation findings require the legal and commercial disclosures to be validated before engagement. Evidence:

• The homepage identifies the business as “Интернет-магазин RealMebel” and provides company-information, contact, delivery, payment, and service sections.
• The site offers custom kitchens, delivery, installation, measurement, and dealer services, with three customer-facing forms for contact, callbacks, and ordering or registration.
• The domain was registered through Registrar of Domain Names REG.RU LLC.
• Hosting telemetry identifies AS29182, RU-JSCIOT - JSC IOT, RU; the site uses a DV TLS certificate issued by YR1, valid to 2026-09-25.

What to Verify Next

Before any sensitive interaction, an acquiring bank, procurement team, or prospective customer should independently confirm the operator’s legal name, registration status, and applicable consumer-commerce requirements through official records. Payment should be limited to methods offering dispute or chargeback protection until the merchant, delivery terms, warranty, return process, and fulfilment capability have been confirmed through independently sourced contact details. Existing accounts should be reviewed for reused passwords, and any credentials previously submitted to the site should be changed through trusted channels.

Summary Verdict

The overall posture is critical risk. The site presents a coherent consumer-retail façade, but the converging external threat detections and sensitive-interaction concerns make its apparent legitimacy insufficient for normal account, credential, or financial use. The operating identity remains unverified.

Infrastructure Integrity

The site resolves directly to a likely origin infrastructure address rather than a CDN edge, with no CDN or WAF identified. It is hosted by RU-JSCIOT - JSC IOT in Russia on AS29182; this provides a concrete hosting attribution but no meaningful protective mitigation against the external reputation concerns.

Closing Assessment

Access should be limited to non-sensitive observation while independent legal, merchant, payment, and contact-channel checks are completed; credential, account, and financial interactions should not proceed unless those checks produce satisfactory results.