Security Scan: PDF Viewer

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e8138de0-2f09-4222-939c-fed81c3a569c Domain and IP registration (RDAP)/api/v1/rdap/e8138de0-2f09-4222-939c-fed81c3a569cHow often this domain was scanned/api/v1/domain/stats/shringdoc.shop Scan history for this domain/api/v1/domain/history/shringdoc.shop?limit=15

This website contacted 3 IPs in 1 country across 3 domains to perform 11 HTTP transactions. The main domain is shringdoc.shop and was registered 5 months ago.

Submitted URL: https://shringdoc.shop/Adobe_Installer

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed malicious fake PDF-viewer page impersonating Adobe: it instructs visitors to download an 'Adobe' reader installer that is actually a remote-access agent, matching an analyst-vetted kit and a critical hunting rule. Do not download or run anything.

Risk Factors (6)

Known malicious kit identified with analyst-vetted ground truth (fake Acrobat/PDF viewer RMM kit)

Critical hunting rule Fake_Acrobat_Reader_PDF_Viewer_Installer_Kit matching the page body

Impersonates Adobe branding/installer on a domain that is not Adobe's

Delivers a file named as a document-reader installer that is actually a remote-access agent giving the operator control of the machine

Operating-system gating to Windows desktop only

Domain unranked in Cisco Umbrella and only 174 days old

Domain age information unavailable

Details

Page Title

PDF Viewer

Scan Type

public

Domain Name Analysis

Domain 'shringdoc.shop' uses the commerce-oriented generic top-level domain (.shop). The registrable portion 'shringdoc' spans 9 characters split between 2 vowels and seven consonants. Breaking it apart gives three words: s, hring, doc. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.85s

Total Load Time

424 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:261 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software82% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

82%

documentation technical

76%

news media journalism

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	142.251.156.119	United States	AS15169Google LLC
3	172.67.160.180	United States	AS13335Cloudflare, Inc.
3	172.67.68.67	United States	AS13335Cloudflare, Inc.
11	3	-	-