Security Scan Report: hameem.net

Submitted: Completed: publiccompleted
This website contacted 15 IPs in 2 countries across 7 domains to perform 14 HTTP transactions. The main domain is hameem.net and was registered 5 years ago.

Submitted URL: https://hameem.net/adobe.live/index.html

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Fake 'protected PDF' viewer behind a Windows-only gate on a 5-year-old domain with a single-source phishing report and obfuscated scripts — a document-lure page likely distributing malware. No forms, but do not download anything.

Risk Factors (5)
Threat-intel phishing report on the primary domain
Deceptive 'protected document' / 'View Files' social-engineering lure with no real document
Brand-adjacent path name (/adobe.live/) on an unrelated domain
Operating-system targeting gate steering users to Windows
Obfuscated inline JavaScript with encode/decode routines
Domain age information unavailable

Details

Page Title

PDF Viewer

Scan Type

public

Domain Name Analysis

Within the network infrastructure generic top-level domain (.net), 'hameem.net' is registered and has no subdomain. The second-level label 'hameem' is 6 characters long holding three vowels versus 3 consonants. Word splitting yields two words: ham, eem. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hameem.net/adobe.live/index.html

Page Load Overview

1.08s
Total Load Time
430 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:883 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software81% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
81%
documentation technical
80%
corporate business
56%
adult content
39%
news media journalism
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1491.238.160.176United Kingdom
AS52148Enix Ltd
0104.26.14.77Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.153.119Google · CDNUnited States
AS15169Google LLC
0142.250.154.104Google · CDNUnited States
AS15169Google LLC
0142.250.154.103Google · CDNUnited States
AS15169Google LLC
0142.251.14.99Google · CDNUnited States
AS15169Google LLC
0142.251.110.103Google · CDNUnited States
AS15169Google LLC
0104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.26.15.77Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.152.119Google · CDNUnited States
AS15169Google LLC
1415--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F3A5D81B8E0F56A07F3828BF4B87A6497010F79395C39794F0DF4C9DF64AE1A264926C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:3z+EHVWfOTIXuT8+o7rjyHlnxXuT8+o7r6iXuT8+o7rly2lnm:a5f/XS8+Q3MlnxXS8+QWiXS8+Q5Rlnm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2266729:IHBCkn1EMkeAQAgF/dArNRGgggk5ZJB+AAAcBHUAoWQIQI1OgABmwAAIAMQIgKGsPLBgAAKiElIoziIziSSXEIAQKPZDVGoi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9c84848c9c9c1c1c
Perceptual Hash:9e7701ddcd656700
Difference Hash:313d0d3d3139b9b1
Wavelet Hash:9d9c849c9c9c1d1d
Color Hash:#35d22d

Scan History

Scan history not available

Unable to load historical scan data