Security Scan Report: gm4u.co.uk

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 4 domains to perform 18 HTTP transactions. The main domain is gm4u.co.uk and was registered 4 years 7 months ago.

Submitted URL: https://gm4u.co.uk

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Compromised site with a ClearFake blockchain contract loader injected into the HTML, corroborated by a malware-loader threat-intel report; page content is multilingual gambling SEO spam. No forms, so risk is drive-by payload delivery rather than phishing.

Risk Factors (4)
Known malicious ClearFake loader injected into the page (critical, analyst-vetted kit family)
Threat-intel report of malware loader on the primary domain
Encoded/obfuscated inline JavaScript with a smart-contract fetch pattern
Page is low-value multi-language gambling SEO spam, indicating a compromised or hijacked host
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'gm4u.co.uk' uses the United Kingdom country-code top-level domain (.co.uk) and has no subdomain. The registrable portion 'gm4u' spans 4 characters with 1 vowel and two consonants; it also includes one digit. Splitting it apart reveals 3 words: gm, 4, u. Median word length comes out to 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Top-Funktionen des Woolbet Casinos: Was Spieler wissen mussen public / archive_feed Das Online-Gliicksspiel hat in den letzten Jahren stetig an Beliebtheit gewonnen, und Woolbet Casino ist dabei kein...

Page Load Overview

1.26s
Total Load Time
439 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:12%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:5,515 chars
Detector Agreement:50%
Language mismatch: Declared as en-US but detected as de

Website Classification

Primary Category

gambling betting90% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
90%
entertainment media
65%
adult content
44%
education learning
28%
documentation technical
28%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6213.160.71.18Germany
AS12574Hosting.de GmbH
374.125.29.95Google · CDNUnited States
AS15169Google LLC
365.9.130.119Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
365.9.130.11Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
185--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16AD31970A794183A367703BDE876BA0829398933DA4E66E6F4FFD15885C1F9311B170E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:m/yNWOtA/7xKtVAuWSgzypr/FhbRTwID4le4rpaGyaCa4zc4pdOcCci41NI3aZTQ:PNNtA/9KaGV/jmtIJtUR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:140849:KhANIt6KICAAEMkBiWaBIaWHAeIWeFiIZAIACJ4iIgCYEASJRBAjHR0ACxoRwQAokhsFC0KYYFAAGkS4FUEARCCQCVIMAgJC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0202027e02067e
Perceptual Hash:b4e5c398c3383cc7
Difference Hash:008426b4e036bcec
Wavelet Hash:ff7f02027e02037e
Color Hash:N/A

Other Hashes

Crop Resistant:008426b4e036bcec

Scan History

Scan history not available

Unable to load historical scan data