Security Scan: PDF Viewer

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/96390f2c-d5ab-4fd7-8116-4696bec76c77 Domain and IP registration (RDAP)/api/v1/rdap/96390f2c-d5ab-4fd7-8116-4696bec76c77How often this domain was scanned/api/v1/domain/stats/hameem.net Scan history for this domain/api/v1/domain/history/hameem.net?limit=15

This website contacted 14 IPs in 2 countries across 7 domains to perform 15 HTTP transactions. The main domain is hameem.net and was registered 5 years ago.

Submitted URL: https://hameem.net/docu/

AI Security Verdict

Confirmed Scam

Confidence: 94%

Risk Score

Established domain now serving an analyst-identified fake PDF Viewer kit that pushes a remote-access agent disguised as an Acrobat Reader installer; Windows-only gating and 4 cross-domain redirects. Do not download or run anything.

Risk Factors (5)

Known malicious phishing/remote-access kit matched by analyst-vetted kit roster

Single-source phishing threat-intel report on the primary domain

Four cross-domain redirects funneling to the lure page

Operating-system gating used to restrict delivery to Windows victims

Domain unranked in Cisco Umbrella despite 5+ years of age, consistent with a repurposed/hijacked host

Domain age information unavailable

Details

Page Title

PDF Viewer

Scan Type

public

Domain Name Analysis

The domain name 'hameem.net' uses the network infrastructure generic top-level domain (.net) with no subdomain. The core label 'hameem' covers 6 characters containing 3 vowels alongside 3 consonants. Splitting it apart reveals two words: ham, eem. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.73s

Total Load Time

426 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:883 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software81% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

81%

documentation technical

80%

corporate business

56%

adult content

39%

news media journalism

31%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	91.238.160.176	United Kingdom	AS52148Enix Ltd
1	104.26.15.77Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.155.119Google · CDN	United States	AS15169Google LLC
1	142.250.154.104Google · CDN	United States	AS15169Google LLC
1	142.251.110.105Google · CDN	United States	AS15169Google LLC
1	142.251.110.99Google · CDN	United States	AS15169Google LLC
1	104.16.80.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.68.67Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.151.119Google · CDN	United States	AS15169Google LLC
1	142.251.157.119Google · CDN	United States	AS15169Google LLC
15	14	-	-