Security Scan Report: enterprise.welcomeware.live

Redirected to:
https://enterprise.welcomeware.live/login.jsf
Site favicon
Submitted: May 3, 2026, 8:58:11 PMCompleted: May 3, 2026, 8:59:29 PMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 1 country across 4 domains to perform 12 HTTP transactions. The main domain is enterprise.welcomeware.live and was registered NaN years ago.

Submitted URL: https://enterprise.welcomeware.live

Effective URL: https://enterprise.welcomeware.live/login.jsfRedirected

The Cisco Umbrella rank of the primary domain is #180,923 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 78%

3
Risk Score

The site shows a login form but lacks malicious indicators; age and lack of IoCs suggest low risk, though low domain ranking and heavy JS obfuscation warrant caution.

Risk Factors
Low Cisco Umbrella ranking (#180,923) for a site claiming a corporate brand
Critical JavaScript obfuscation score with high‑entropy and concatenation patterns
Safety Factors
Long‑standing domain registration (over 8 years)
No malicious Indicators of Compromise or YARA matches
No credential exfiltration observed in JavaScript behavior
Self‑branding (no impersonation of a known brand)
Domain age information unavailable

Details

Page Title

Human Verification

Scan Type

public

Language

🇺🇸

English

(68% confidence)

Category

corporate business

(52%)

Domain Information

Within the .live top-level domain, 'enterprise.welcomeware.live' is registered with subdomain 'enterprise'. Count 11 characters in 'welcomeware' with 5 vowels and six consonants. Tokenizing the label suggests two words: welcome, ware. Median word length comes out to 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://enterprise.welcomeware.live

Page Load Overview

2.50s
Total Load Time
31
HTTP Requests
2
Domains
140 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:68%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:68%
Script Type:Latin
Text Length:174 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business52% confidence
Type: webapp
Method: ml+structural

All Detected Categories

corporate business
52%
technology software
26%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
103.167.227.52United States
AS16509Amazon.com, Inc.
73.171.214.116United States
AS16509Amazon.com, Inc.
744.205.83.239Ashburn, Virginia, United States
AS14618Amazon.com, Inc.
765.8.131.119United States
AS16509Amazon.com, Inc.
314--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14A22085368264407605B589DAA72D25C6647C307810E88EDFFAF97F48FDF6BC42236AC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:CJGC3gCUUD1wCF+qaLv0X2ZzUhfOFgTm0DKDnBQfmW1qaRCVXUuziEsmw9oj:FBaff9wnBi31qaRcFG4wc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9985:pe8CW9KGBJyUDoIIAFgBDQEAAgEgAREgSAeobKMGwzQEYENSAFLYLADgcBADAQQwUIhwkBjCCkvHHLYkhQk4I1QA2BCBghoC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e6e6e6eefefefefe
Perceptual Hash:f73322cc8ccca633
Difference Hash:0c0c0c0800000000
Wavelet Hash:e6e6e6e600000000
Color Hash:#bfe06c

Other Hashes

Crop Resistant:0c0c0c0800000000

Scan History

Scan history not available

Unable to load historical scan data