Security Scan Report: g4gift.in

Site favicon
Submitted: Oct 9, 2026, 5:32:41 PMCompleted: Oct 9, 2026, 5:33:24 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Site looks like a real, aged WooCommerce gift shop, but its primary domain is flagged by two independent feeds as the 'clearfake' malware family and its scripts contact blockchain RPC nodes — consistent with a compromised/injected store. Avoid entering credentials or connecting a wallet.

Risk Factors (2)
Content-malware threat-intel match ('clearfake' malware family) on the page's primary domain, corroborated by two independent feeds
Injected blockchain/Web3 RPC traffic on a non-crypto e-commerce site (wallet-drainer/injection indicator)
Domain age information unavailable

Details

Page Title

g4gift

Scan Type

public

Domain Name Analysis

The domain name 'g4gift.in' uses the Indian country-code top-level domain (.in). Its registrable label 'g4gift' stretches across 6 characters split between one vowel and four consonants, notching one digit. Tokenizing the label suggests three words: g, 4, gift. The median word length lands at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://g4gift.in

Page Load Overview

6.07s
Total Load Time
3.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:7,010 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content51% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
51%
corporate business
50%
entertainment media
40%
education learning
39%
e-commerce shopping
37%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20198.12.238.143United States
AS398101GoDaddy.com, LLC
10142.251.13.95Google · CDNUnited States
AS15169Google LLC
1023.207.210.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
10172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
103.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
103.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
10142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
1035.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
10172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1023.67.142.207Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
13012--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15C8429A1BD674432215F21DB9053BB8D78B18DDFCA8596D0F5BC921ABBF4CA037A3108

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:kj9gJ2/HeMVrd5PORL0xIRHyEY4vCvK4JC66F003GxTmdgJZIz1P+qqloEkpZLqx:OgJpGrbwIWoEmKVtSOgJg1P+nuf+nfnt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:377916:iTHpgshkACA4WB0wig4AEBAJAEYsDMpJRQBVxhQQEAHMGgQBgmvmSQJgpBgBJMBSU1ORaAALEVJz0wWYhQJAMSAAQFQXASGg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffdfdbf9f1ffff
Perceptual Hash:cd1d074f4b0d4b47
Difference Hash:f14d12b3e1c30609
Wavelet Hash:00a70b1971f1f3e7
Color Hash:#b279d2

Scan History

Scan history not available

Unable to load historical scan data