Security Scan Report: ultimateworkwear.co.uk

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 6 domains to perform 153 HTTP transactions. The main domain is ultimateworkwear.co.uk and was registered 22 years ago.

Submitted URL: https://ultimateworkwear.co.uk

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate 22-year-old workwear shop whose page has been compromised with an injected ClickFix/EtherHiding loader; IDS CRITICAL alerts and a vetted IClickFix kit confirm malware delivery. Do not visit.

Risk Factors (5)
Compromised legitimate website serving a ClickFix/EtherHiding malware loader
Analyst-vetted malicious kit (IClickFix) confirmed on the page
CRITICAL IDS alerts for malware C2/exfiltration and ClickFix domain resolution
Obfuscated JavaScript decoding to hidden Ethereum RPC and threat-feed hosts
Primary domain linked in threat-intel as a malware loader
Domain age information unavailable

Details

Page Title

Ultimate Workwear – Protecting Your Workforce!

Scan Type

public

Domain Name Analysis

The domain name 'ultimateworkwear.co.uk' uses the United Kingdom country-code top-level domain (.co.uk) and has no subdomain. The registrable portion 'ultimateworkwear' spans 16 characters holding 7 vowels versus 9 consonants. Breaking it apart gives three words: ultimate, work, wear. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

AboutUs ContactUs FAQs ck Our Winter Deal: Free Shipping on orders over £150! ULTIMATE ce . >) Need Help? My Account O- All Categories Search products. Q Ley nanan anenae Q Login (mn = WORKWEAR sal...

Page Load Overview

6.31s
Total Load Time
6.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-GB
Text Length:10,307 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business44% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
44%
documentation technical
42%
government public service
33%
news/blog
20%

Detected Features

Login Form
Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2878.109.175.75United Kingdom
AS61323Ans Academy Limited
25172.217.208.95Google · CDNUnited States
AS15169Google LLC
25192.178.183.94Google · CDNUnited States
AS15169Google LLC
25185.182.91.172United Kingdom
AS61323Ans Academy Limited
25104.26.12.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
25188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1536--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T181B408F2F2AC2575262F43E6E1BA715D79E670AECB4104E0F2BD9A9883D1CD0731648D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:ZRd1HpF/+9AgCAoA7fALJgqzc/QVk5wpo3IF6Z3byBvfy0z9Ub5m6GoXoUzE6Kc6:ZRdF5otkvq3IF6ZLyBXy0z9Ub5xDTk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:507582:IJTNKAgpAA+OGJQCALBgAGQVUy4wxMsxUALAYhBZMACAjAABAGQCioAwJykZIGVGbYUCoSaCoQApl4g4cgAeHEkgDUhQwIRA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ff0001070fffff
Perceptual Hash:be5ec13521641e1f
Difference Hash:f3797575777d0aeb
Wavelet Hash:00ff0001070fffff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data