Security Scan Report: lapaca.webdirecto.com

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 3 HTTP transactions. The main domain is webdirecto.com and was registered 6 years ago.

Submitted URL: https://lapaca.webdirecto.com/wp-includes/Text/tdweain/yogsqwj/gmehpir/ggg/adobe/adobe.html

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Compromised WordPress host serving a fake Adobe 'protected PDF' sign-in page that harvests credentials and ships them to a Telegram bot. Do not enter any credentials.

Risk Factors (5)
Brand impersonation of Adobe on a non-Adobe domain
Credential harvesting form (password field) behind a fake 'protected PDF' sign-in lure
Telegram bot token in inline script enabling exfiltration of submitted data
Compromised WordPress paths and randomized directories hosting the page
Domain unranked in Cisco Umbrella despite the brand claim
Domain age information unavailable

Details

Page Title

Adobe PDF Reader

Scan Type

public

Domain Name Analysis

The domain name 'lapaca.webdirecto.com' uses the commercial generic top-level domain (.com) and includes subdomain 'lapaca'. Its registrable label 'webdirecto' stretches across 10 characters containing four vowels alongside 6 consonants. Splitting it apart reveals 3 words: web, direct, o. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Addcomments [E) Requeste-signat. © Z Fillesign Seealltools ++ wee Starred Set as defautt Adobe cloud storage Your files El sonten sy opened - PDF Scans Shared byyou Shared by others Protected Documen...

Page Load Overview

0.83s
Total Load Time
487 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:217 chars
Detector Agreement:50%

All Detected Languages

🇺🇸en(96%)🇨🇳zh(4%)

Website Classification

Primary Category

technology software55% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
55%
documentation technical
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
179.112.153.148Spain
AS57269Digi Spain Telecom S.A
1142.251.127.95Google · CDNUnited States
AS15169Google LLC
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
33--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13BD413310E032E7F8D1FC5A5A6477A1EDDF08AD7C88A9715FEE8868249CAED1151F0D8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:Ba1SYtRc33CMaoQTA7VJuEiAC6VaV9CCCCCuxm0uq4O8ZXn0auEiAC6VaV9CCCC2:BUtRc33CMBcA/bO8Z3GA/p

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:600509:RoRYMAwAYAATwBIQoqsIIV2pIpmZ4RNCWACBY1bgDkBAB8AvyxVJASZRQgDDUgQJitRwoBgAAIwAsWFYAMAACoU1AORXEEaa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00181818180000
Perceptual Hash:88a6f69988e699b3
Difference Hash:b28cb2b3b3b30d11
Wavelet Hash:ff031819195dc1c1
Color Hash:07200010002

Scan History

Scan history not available

Unable to load historical scan data