Security Scan Report: services.adobeacrobatupdate.xyz

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 6 domains to perform 11 HTTP transactions. The main domain is adobeacrobatupdate.xyz and was registered 3 days ago.

Submitted URL: https://services.adobeacrobatupdate.xyz/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Adobe update portal on a 2-day-old domain that pushes a .exe and a .Vbs script (r2.dev) as an 'Acrobat security patch' - brand impersonation and malware distribution; do not download or run anything.

Risk Factors (6)
Impersonation of Adobe's brand and identity on a domain Adobe does not own
Distribution of executable and VBS script payloads from third-party hosts (github.com, r2.dev)
Fabricated trust signals (fake app-store style rating, user count, developer address)
2-day-old domain with critical risk registration age
Clickfix-style instructions telling the user to run the downloaded file
Phishing threat-intelligence match on the primary domain
Domain age information unavailable

Details

Page Title

Adobe Acrobat - Extension Update Portal

Scan Type

public

Domain Name Analysis

Within the open generic top-level domain (.xyz), 'services.adobeacrobatupdate.xyz' is registered; it also runs on subdomain 'services'. Its registrable label 'adobeacrobatupdate' stretches across 18 characters containing nine vowels alongside nine consonants. Segmentation suggests 3 words: adobe, acrobat, update. Expect six characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://services.adobeacrobatupdate.xyz/

Page Load Overview

0.45s
Total Load Time
110 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,296 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software45% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
45%
corporate business
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1142.251.14.132Google · CDNUnited States
AS15169Google LLC
1142.251.13.139Google · CDNUnited States
AS15169Google LLC
1192.178.183.94Google · CDNUnited States
AS15169Google LLC
1142.250.154.102Google · CDNUnited States
AS15169Google LLC
117--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18A02F82712F0210A6A97D4807D92DB0A7B61D943D246C6B93DED0396CFCDA51C8BB6EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Ra+arbCdc5V0RECiayGghA5X+hYnBexE4K9gSJwyanQExn/CTdIp:Y+pkhZrvp/CT2p

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8389:gS9kngAQEgFB0EoJy4AR8BKAwoGMKuKA7JBN5DDjBAIQCAAAhg3WAABC1bA12lAOdDAxcKSGIAAPqqgDICSYCCAlFpclM4Wk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffdfdfff8387e7
Perceptual Hash:bec9833ec13c36c1
Difference Hash:78783b3b422e2f5f
Wavelet Hash:9fbf81838f838383
Color Hash:#402dd2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data