Security Scan: Background Image Page

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6409b1a1-00b4-4f9c-b36a-35bebd525e2e Domain and IP registration (RDAP)/api/v1/rdap/6409b1a1-00b4-4f9c-b36a-35bebd525e2e Certificate Transparency/api/v1/ct/raphaelaguilar.matmcc.org How often this domain was scanned/api/v1/domain/stats/raphaelaguilar.matmcc.org Scan history for this domain/api/v1/domain/history/raphaelaguilar.matmcc.org?limit=15

This website contacted 2 IPs in 1 country across 4 domains to perform 7 HTTP transactions. The main domain is raphaelaguilar.matmcc.org and was registered 10 years ago.

Submitted URL: https://raphaelaguilar.matmcc.org/netsource/

Effective URL:

https://raphaelaguilar.matmcc.org/netsource/download.html

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Analyst-vetted fake Adobe 'secured document / Download Document' kit on a compromised aged domain, confirmed by a critical YARA rule; it delivers a remote-management agent. Do not download or run anything from this page.

Risk Factors (5)

Known malicious kit identified by the analyst-vetted kit roster (fake Adobe secured-document lure)

YARA rule Adobe_Secure_Document_RMM_Lure_Kit matched on the HTML body

Brand impersonation of Adobe on a domain unrelated to Adobe

Lure page designed to deliver a remote-management agent (RMM) to the visitor's device

Suspicious folder path /netsource/ on a host with no Cisco Umbrella ranking

Domain age information unavailable

Details

Page Title

Background Image Page

Scan Type

public

Domain Name Analysis

The domain 'raphaelaguilar.matmcc.org' uses the non-profit oriented generic top-level domain (.org) with subdomain 'raphaelaguilar'. Count 6 characters in 'matmcc' containing 1 vowel alongside 5 consonants. Splitting it apart reveals three words: mat, m, cc. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

16.90s

Total Load Time

18 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:328 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software44% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

44%

documentation technical

38%

healthcare medical

35%

news media journalism

34%

government public service

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	72.167.48.109	United States	AS398101GoDaddy.com, LLC
3	142.251.14.95Google · CDN	United States	AS15169Google LLC
7	2	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A861515BA9F3005B390790756BF36B062665D003D20ACA593FBD62A8CF8599584A73CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nBr+5LMAFtyizQfYn9lPh7TsFWtXFtWyN8y7euXDc:nBr0z9zQfk9lFoFWtVtWyneuXDc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3290:AAgACiBsJkMEAGAAgAAAQEBAIAAABABGIhFwACEAAoFAiDABAmAUAAAgAACAACAEgAFAAAgAAACSABAAyEyECgBgAAAJAIKA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00001c3c3c3c0000

Perceptual Hash:9c1c6363ed9c9c98

Difference Hash:c4b23232b2aab084

Wavelet Hash:00063e3e7e7e427e

Color Hash:#4a40bf

Other Hashes

Crop Resistant:8c888e96aaa89696,c4b23232b2aab084

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: raphaelaguilar.matmcc.org