Security Scan Report: mattsportclub.pl

Submitted: Completed: publiccompleted
This website contacted 22 IPs in 2 countries across 9 domains to perform 110 HTTP transactions. The main domain is mattsportclub.pl and was registered 8 years ago.

Submitted URL: https://mattsportclub.pl

AI Security Verdict

Confirmed Scam

Confidence: 96%

9
Risk Score

Legitimate 8-year-old Polish fitness club whose site has been compromised: a CRITICAL EtherHiding/ClickFix kit, YARA malware match and IDS malware alerts inject hidden loader scripts and gambling spam.

Risk Factors (5)
Known malicious kit (IClickFix / EtherHiding loader) identified on an 8-year-old Polish fitness-club site — strong indication the legitimate site has been compromised
Critical YARA malware match and three CRITICAL network IDS malware alerts (EtherHiding / ClickFix)
Injected SEO/gambling spam content in English, Dutch and German (casino, pokies, winbet) unrelated to the fitness club business
Obfuscated scripts hiding threat-feed hosts and reading a further stage from a blockchain smart contract
Indicators of Compromise on both the primary domain and a loaded external resource (zvh4.com)
Domain age information unavailable

Details

Page Title

MattSportClub Pleszew | Siłownia i klub Fitness – Profesjonalna siłownia i klub fitness w Pleszewie.

Scan Type

public

Domain Name Analysis

You're looking at domain 'mattsportclub.pl' on the Polish country-code top-level domain (.pl) without a subdomain. The core label 'mattsportclub' covers 13 characters containing 3 vowels alongside ten consonants. Tokenizing the label suggests 2 words: matt, sportclub. The median word length lands at 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mattsportclub.pl

Page Load Overview

3.50s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇵🇱Polish
Code: pl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pl-PL
Text Length:7,067 chars
Detector Agreement:75%

Website Classification

Primary Category

cryptocurrency blockchain63% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
63%
education learning
42%
government public service
41%
healthcare medical
41%
blog personal website
39%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
577.55.252.116Poland
AS15967Nazwa.pl Sp.z.o.o.
5192.178.183.95Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
574.125.29.95Google · CDNUnited States
AS15169Google LLC
5104.26.13.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.250.154.138Google · CDNUnited States
AS15169Google LLC
5142.251.151.119Google · CDNUnited States
AS15169Google LLC
5142.251.110.94Google · CDNUnited States
AS15169Google LLC
5172.217.112.4Google · CDNUnited States
AS15169Google LLC
11022--

Detected Technologies5

WordPressv7.0.4
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F2B3A6B239CE3865310F12CFA017310C91979AF6D917B9E6F1BB611C53B4C9633E266A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:kRdVeAXgqDwLO30hQ9UL5J0osOMvHEG+4kuT:kRdv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:112306:GRoCAjDxIDgsEwcBJgCA4QDEhMAAISIwCIMKmqFKSjEmhsMpiAAiwBKBHQpYQGIjimC+AWXkAKQ9BgRgqGNRSCYMBgwCIMEg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fe9f98fafafefece
Perceptual Hash:dd1d93c3c1c13c3c
Difference Hash:5232329212000010
Wavelet Hash:2e3f1858b8bcf4c0
Color Hash:#6fac53

Other Hashes

Crop Resistant:5232329212000010

Scan History

Scan history not available

Unable to load historical scan data