Security Scan Report: heekgroup.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 4 countries across 10 domains to perform 94 HTTP transactions. The main domain is heekgroup.com and was registered 10 years ago.

Submitted URL: https://heekgroup.com/

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Unlicensed Chinese movie-streaming aggregator with suspicious ad/redirect infrastructure and one unverified phishing report; no credential or payment forms, so risk is moderate rather than confirmed fraud.

Risk Factors (5)
Unverified single-source phishing report against the hosting domain
Suspicious randomized third-party script/asset hosts including .cc and '.academy' domains
Offers free full-version commercial films with no licensing or business disclosure — likely unlicensed streaming
Low business-legitimacy score (30/100); no contact, legal or ownership information beyond a generic 'contact us' link
Unranked in Cisco Umbrella despite a 10-year-old registration, suggesting the domain is not a reputable service
Domain age information unavailable

Details

Page Title

韩国电影在线观看 - 免费高清蓝光高清每日更新一键畅看 | 国产电影

Scan Type

public

Domain Name Analysis

Domain 'heekgroup.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'heekgroup' stretches across 9 characters with 4 vowels and five consonants. Tokenizing the label suggests 3 words: he, ek, group. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://heekgroup.com/

Page Load Overview

2.60s
Total Load Time
5.9 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:2,154 chars
Detector Agreement:80%

Website Classification

Primary Category

documentation technical82% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
82%
entertainment media
81%
technology software
77%
adult content
77%
real estate property
52%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
676.76.21.21Aws · CLOUDWalnut, California, United States
AS16509Amazon.com, Inc.
4192.178.183.95Google · CDNUnited States
AS15169Google LLC
463.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
4104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4111.45.11.83China
AS9808China Mobile Communications Group Co., Ltd.
4142.250.154.94Google · CDNUnited States
AS15169Google LLC
4188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.64.154.211Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.17.154.53Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4163.181.254.191United States
AS24429Zhejiang Taobao Network Co.,Ltd
9423--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E94310316156483D512B06CAA396737C21B7A25DDB0F5118BE7C2B798FCAECBB82315C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Bsn0FmM+VOQXGWhxYeM37OSQtTeLaWpqDnO1U2:6nXD+z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:60497:gkABFFBiqlC0LookHYQARwgooDASICguQIBgy2GAAyiCQghABCaMYQNXhBxgKCABgUQmUhBgFBUBAGAgzVSgSBUFqQoIBBpS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fd3f27ecf8ff8181
Perceptual Hash:bb932cd8c96c926c
Difference Hash:116c6d4909582323
Wavelet Hash:9d1f07a8f8fd8181
Color Hash:#934c1f

Other Hashes

Crop Resistant:116c6d4909582323

Scan History

Scan history not available

Unable to load historical scan data