Security Review

Is g-meh.com legit or a scam?

Our verdict:Suspicious· 53/100

Cracked music-production plugin library with documented malware complaints and mixed security ratings despite 3+ years of operation.

g-meh.comScanned 1d ago
0
Trust score
SUSPICIOUS
Heuristics 74·MT 40
Category tags
piracy & cracked software#Cracked App78% MT confidence
Warning signals (1)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
2/92
Engines flagged this URL
Domain Age
4 years old
Registered Aug 18, 2022
MT Intelligence
Suspicious
High likelihood · 78% confidence
SUSPICIOUS

Warning signs detected

Cracked music-production plugin library with documented malware complaints and mixed security ratings despite 3+ years of operation. Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Website Preview

Screenshot of g-meh.com
LIVE RENDER
g-meh.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
High scam likelihoodengineMT · Guardiantrust40/100
MT AgentLive web researchVisual inspection
0%
Confidence
G-MEH operates as a piracy platform distributing cracked digital audio workstations, VST plugins, and sample libraries. The domain is legitimate in age (registered August 2022, ~3+ years old) and hosted on Cloudflare infrastructure with valid SSL. However, the evidence package contains four separate malware complaints from Reddit users reporting trojans and PUPs in downloaded files, including specific cases where Pianoteq and other plugins were flagged by 35+ antivirus engines. One independent security scanner (ANY.RUN) previously flagged the site with a malicious-activity verdict. While independent review aggregators show mixed ratings (40/100 average, with one scanner reporting 90/100 and another noting "average to good"), and some TikTok and Reddit users claim years of safe use, the pattern of malware reports is consistent and credible. The site's lack of business registration, privacy-protected WHOIS, and absence of contact details are typical of piracy operations but do not themselves indicate active fraud. The core risk is that downloads may be compromised with malware, not that the site is a phishing or fake-shop scam.
Full dossier
Analysis complete

Page Content

G-MEH presents itself as "the home for your musical needs" with sections for DAWs, VSTs, premium samples, an AI image generator, and a forum. The page includes a notice about regional instability and directs users to report issues on Discord. No contact email, phone, or postal address is provided. The site has one social link (Discord) and no login form or countdown timers.

Infrastructure

Hosted on Cloudflare (IP 104.21.73.4) with valid SSL from Google Trust Services, 50 days to expiry. The hosting IP has zero abuse reports and a clean reputation score (0/100). No malware or phishing blocklist hits detected by major browser blocklists. Our sandbox did not flag the page itself.

Domain History

Registered August 18, 2022 (~3+ years old), via Cloudflare registrar with privacy protection disabled in WHOIS. The domain is not indexed in global traffic rankings. No evidence of homoglyph attacks, IDN abuse, or cross-domain redirects.

Web Reputation

Antivirus engines show 0/92 flagging as malicious, though alphaMountain.ai and Gridinsoft marked it as "not recommended" and "suspicious" respectively. Independent review aggregators report mixed trust: one shows 40/100 (questionable), another reports 90/100 with clean scan results, and a third notes "average to good" trust. The site has a small an independent review aggregator presence (3.8/5 from 2 reviews). However, four separate Reddit and Instagram reports document malware and trojans in downloaded files, with users citing specific cases of Pianoteq and other plugins flagged by 35+ antivirus vendors. An ANY.RUN sandbox previously flagged the site with a malicious-activity verdict.

Risk Factors
7
  • Four documented malware complaints from Reddit users reporting trojans and PUPs in downloaded VST and DAW files.
  • ANY.RUN sandbox previously flagged the site with a malicious-activity verdict.
  • No business registration, owner information, or contact details; privacy-protected WHOIS typical of piracy operations.
  • Gridinsoft flagged the site as suspicious; alphaMountain.ai marked it as not recommended.
  • Mixed independent review scores (40/100 average trust rating) despite some positive mentions.
  • Operates as a cracked-software distribution platform, inherently exposing users to malware risk from compromised downloads.
  • Not indexed in global traffic rankings, limiting transparency and third-party oversight.
Positive Signals
5
  • Domain is 3+ years old with consistent operation, not a newly-registered throwaway.
  • Valid SSL certificate from Google Trust Services with clean expiry timeline.
  • Hosting IP has zero abuse reports and clean reputation score.
  • Some users on Reddit and TikTok report years of safe use without issues.
  • Small but positive an independent review aggregator presence (3.8/5 from 2 reviews) and one independent scanner reported 90/100 trust score.
AI Recommendation
Do not download files from this site. The documented malware complaints and ANY.RUN malicious-activity flag indicate a significant risk that downloads may be compromised with trojans or PUPs. If you need music-production software, use legitimate sources or free open-source alternatives.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for g-meh.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
3.8 yrs
Registered Aug 2022
Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Independent review aggregators
40/100 · questionable
Average across 1 independent review aggregator.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
4 scam reports · 4 positive
Web ratings
Scores pulled directly from third-party trust & review sites
ScamAdviser
40/100
Questionableopen
Key findings
7 headline facts from open-web research
  • Domain registered August 18, 2022 (approx. 3+ years old as of 2026), hosted on Cloudflare with privacy-protected WHOIS.
  • Website provides free and cracked DAWs, VST plugins, samples, and libraries for music production; competes with other piracy sites like plugincrack.com.
  • Multiple Reddit users in r/Piracy and r/CrackedPluginsXI report malware, trojans, or PUPs in downloads (e.g. Pianoteq, Analog Lab Pro, files flagged by 35+ VT vendors).
  • Security scanners show mixed results: PCrisk 90/100 (1/92 engines flagged), Scamadviser average/good trust but notes hidden owner and Gridinsoft caution (72-79/100).
  • ANY.RUN sandbox previously flagged https://g-meh.com with "Malicious activity" verdict.
  • Positive mentions on TikTok and some Reddit users claim long-term use without issues; has small Trustpilot page with 3.8/5 from 2 reviews.
  • No traditional scam (phishing, fake shops) detected; risks tied to pirated software potentially bundled with malware.
Scam reports (4)
Direct quotes from public scam databases, forums, and news.
  • Reddit r/Piracyopen

    "A warning to all, G-MEH is NOT safe. ... Overall, if you ask me, don't use G-MEH to install cracked plugins."

  • Reddit r/Piracyopen

    "ive been using gmeh for years without issue but yesterday i downloaded Pianoteq with trojan."

  • Reddit r/Piracyopen

    "I tried downloading from G-meh (a site in the megathread) and firefox flagged the file as malicious, then I scanned it and this is what came out"

  • Instagram commentopen

    "its good but it has problems with malware just like every other piracy platform. ... the last time i tried to download some stuff, it turned out like 3 plugins were malware"

Positive reviews (4)
Quotes indicating the site is legitimate.
  • Trustpilotopen

    "g-meh.com •2 reviews. 3.8"

  • Scamadviseropen

    "gmeh.com has an average to good trust score. ... It seems that gmeh.com is legit and safe to use and not a scam website."

  • PCrisk scanneropen

    "90 / 100 Trust Score ... Scan results were largely clean at the time of review. ... No Threats Found"

  • TikTokopen

    "Go check out g-meh for free plug-ins! ... This is a website where you can get free digital audio workstations, plug ins, sample libraries and VSTs."

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Reddit users in r/Piracy report multiple instances of malware and trojans in downloads from G-MEH, including specific cases where Pianoteq and other plugins were flagged by 35+ antivirus engines. An Instagram commenter noted that 3 plugins downloaded from the site turned out to be malware. Conversely, independent review aggregators and some TikTok and Reddit users describe the site as legitimate and safe, with one scanner reporting a 90/100 trust score and another noting "average to good" trust. A small an independent review aggregator page shows 3.8/5 from 2 reviews. The ANY.RUN sandbox previously flagged the site with a malicious-activity verdict. No traditional scam (phishing, fake shop, credential harvest) was detected; the risk is tied to pirated software potentially bundled with malware.

Antivirus Engines

Detection matrix · live
2 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

0Malicious2Suspicious58Harmless92Engines
0
of 92
alphaMountain.ai
Suspicious· not recommended
Gridinsoft
Suspicious· suspicious

2 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles1
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.

Domain & Encryption

Domain History
Age4 years old
RegistrarCloudflare, Inc.
RegisteredAug 18, 2022
ExpiresAug 18, 2026
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresAug 1, 2026 (50d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://g-meh.com/
  • 2200https://g-meh.com/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

  • Treat g-meh.com as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked g-meh.com as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • g-meh.com currently scores 53/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. g-meh.com presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 50 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • g-meh.com is 3.8 years old, registered on 8/18/2022 through Cloudflare, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • 2 out of 92 antivirus engines in our malware network flagged g-meh.com as malicious or suspicious. Even one detection is a meaningful signal.
  • No. g-meh.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • g-meh.com resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • Independent trust-rating sites currently show the following for g-meh.com: ScamAdviser: 40/100. Those scores come from user reviews and their own heuristics, so they are worth comparing against our verdict.

Final Verdict

0
Trust / 100
Final Verdict·g-meh.com
SUSPICIOUS

G-MEH is a cracked VST and DAW library site with a 3+ year history, but multiple users report malware and trojans bundled in downloads. While some claim long-term safe use, the malware complaints and mixed security signals outweigh the positive reviews.

Do not download files from this site. The documented malware complaints and ANY.RUN malicious-activity flag indicate a significant risk that downloads may be compromised with trojans or PUPs. If you need music-production software, use legitimate sources or free open-source alternatives.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.