Security Scan Report: lh.gecnnrl.com

Submitted: Jul 26, 2026, 5:50:11 PMCompleted: Jul 26, 2026, 5:51:35 PMpubliccompleted

This website contacted 1 IP in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is lh.gecnnrl.com and was registered 3 months ago.

Submitted URL: https://lh.gecnnrl.com/NeemaHospitalityManagement/download.html

AI Security Verdict

High Risk

Confidence: 90%

8
Risk Score

Fake Adobe 'secured document' download page matching an analyst-vetted phishing kit that delivers a remote-management agent. Do not open the downloaded file; report it.

Risk Factors (5)
Known malicious phishing kit (fake Adobe secure-document download page) identified by the vetted kit roster
CRITICAL high-precision YARA match (Adobe_Secure_Document_RMM_Lure_Kit)
Brand impersonation of Adobe on an unrelated, recently registered domain
Social-engineering 'download complete' page used to deliver a remote-management agent
Page misspells 'download' as 'dewnload', consistent with a copied lure template
Domain age information unavailable

Details

Page Title

Background Image Page

Scan Type

public

Domain Name Analysis

You're looking at domain 'lh.gecnnrl.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'lh'. The core label 'gecnnrl' covers 7 characters split between one vowel and six consonants. Segmentation suggests three words: gec, n, nrl. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lh.gecnnrl.com/NeemaHospitalityManagement/download.html

Page Load Overview

3.52s
Total Load Time
73 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:335 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical42% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
42%
healthcare medical
38%
news media journalism
37%
government public service
37%
technology software
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4198.71.59.189United States
AS8560IONOS SE
41--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16F61514BA9F3005B390790716BF36B062675C043D20ACA593FBD62A8CF85A9594A73CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TBr+5LMAFtyizQfYn9lPh7TsFWtytWyN8y7euXDc:TBr0z9zQfk9lFoFWtytWyneuXDc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3312:EgkBIcAZAAAAIAgEAAAIAABAAVSAZJAIAAMABBgsBgBiUAAQ0AADgCAIVGICAEAAAUgYAgAAACASBkKAIgAAAEAACAAAAAAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3c3c3c0000
Perceptual Hash:9999662699cccc9b
Difference Hash:200cb232322a1428
Wavelet Hash:0c0c3c3c3c3c0000
Color Hash:#d2b679

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data