Security Scan Report: marycar.com.br

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 3 domains to perform 11 HTTP transactions. The main domain is marycar.com.br and was registered 6 years ago.

Submitted URL: https://marycar.com.br/Adobe/Acrobat_Reader/

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Fake 'PDF Viewer' page at marycar.com.br/Adobe/Acrobat_Reader/ impersonating Adobe and pushing a bogus Acrobat Reader installer that installs a remote-access agent; confirmed by roster-anchored CRITICAL hunting-rule hit. Do not download or run anything.

Risk Factors (5)
Known malicious kit identified by analyst-vetted roster (fake Acrobat PDF-viewer installer / remote-access agent)
CRITICAL hunting rule malware-pattern match on the page HTML
Impersonation of Adobe Acrobat Reader on a non-Adobe domain, including a spoofed /Adobe/Acrobat_Reader/ path
Social-engineering lure: Windows-only gate and 'installer required' pretext used to deliver remote-management tooling
Page text is garbled/obfuscated with honeypot fields and browser-fingerprint/challenge tokens indicating anti-analysis screening
Domain age information unavailable

Details

Page Title

PDF Viewerother network

Scan Type

public

Domain Name Analysis

You're looking at domain 'marycar.com.br' on the Brazilian country-code top-level domain (.com.br) and has no subdomain. Count 7 characters in 'marycar' holding two vowels versus 5 consonants. Splitting it apart reveals two words: mary, car. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

BUSINESS CONTRACT ae ee eee He a mee bee me Corry Cooma Sameet ne eee Ret we Hae ee ee ee ee rn ee eee eer a ee rrr Pree a [eens oe eed a he eo er FA Oe Rae eee tem ewe tee, tee ee ot eee ed Neen...

Page Load Overview

4.31s
Total Load Time
411 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:261 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software82% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
82%
documentation technical
76%
news media journalism
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5142.251.152.119Google · CDNUnited States
AS15169Google LLC
3104.26.14.77Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3177.154.191.246Brazil
AS53038IDC19 SOLUCOES EM TECNOLOGIA DA INFORMACAO LTDA
113--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F174E085C9A739A17E92D0B56B2873183738D0A3C184DD9C394CE6E8CFE27158DF6B58

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:ccrK3P7yVtTdyLkH7jVgEH1Tszg2rWS4wAB3sGnGf8d97MuMP:jgLk/VgEH1TWfOLnx0P

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:357657:AQNWKSJQGD0A0QjYheKQj2QIGLOWBYIGoGCSEqYIBoJRbhBwIYAhIBkyCRpVKkAoAAwtAIk0OQIGpRhIoEAKAKIR8AvFJRTI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8087878787870707
Perceptual Hash:ffff00fe4800fe00
Difference Hash:2c2c2c3c3c2c1c8c
Wavelet Hash:818f878f8f8f0707
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data