Security Report: pdfshwodas.top - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/efb9024f-45e3-427f-9a08-5ddbb2264464 Domain and IP registration (RDAP)/api/v1/rdap/efb9024f-45e3-427f-9a08-5ddbb2264464How often this domain was scanned/api/v1/domain/stats/pdfshwodas.top Scan history for this domain/api/v1/domain/history/pdfshwodas.top?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is pdfshwodas.top.

Submitted URL: https://pdfshwodas.top/

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Look-alike Chinese '极光PDF' download page matching a known fake-software kit; its download button serves an archive from an off-domain Aliyun OSS bucket. Do not download or run the file.

Risk Factors (5)

Known malicious fake-software download kit (cn-oss-fake-software-2026-11) identified by analyst-vetted roster

hunting-rule detection of CN_Fake_Software_OSS_Archive_Download on page content

Installer archive served from an off-domain Aliyun OSS Hong Kong bucket, not from the site's own host

Unranked domain presenting itself as the official website of a software product

HIGH-severity IDS alerts for hostile *.top domain traffic

Domain age information unavailable

Details

Page Title

极光PDF官方网站 - 国产软件、快速转换、自由编辑

Scan Type

public

Domain Name Analysis

Domain 'pdfshwodas.top' uses the .top top-level domain without a subdomain. The registrable portion 'pdfshwodas' spans 10 characters containing two vowels alongside eight consonants. Word splitting yields 4 words: pdfs, h, woda, s. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.51s

Total Load Time

1.4 MB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:60%

Script:Han

Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN

Text Length:2,926 chars

Detector Agreement:80%

Website Classification

Primary Category

government public service91% confidence

Type: static

Method: ml+structural

All Detected Categories

government public service

91%

blog personal website

90%

technology software

89%

corporate business

85%

documentation technical

85%

Detected Features

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	103.112.98.105	Hong Kong	AS400619AROSSCLOUD INC.
1	1	-	-

Detected Technologies4

100%

40%

40%

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T175D512734AB3786A2A2D19A268F63F056E54A447C40AC8D0FADC10DD7FCB7825D236DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

49152:HsimALZU1oSTks55QagkYAgq5+LSFJ0A2tU1IvkV:w

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2974814:SFESACACQVAdgIABFoZADGAUDpggHHBAACSOTVkFgmFIXkQEh4FEUJmWMPk5VmoDIIAA2AACnpmiFwBBhKIKuiChAggsgRxA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7c381cfffe7

Perceptual Hash:b6e793986ca4324e

Difference Hash:02484d0d231d2d4c

Wavelet Hash:ffe7e7c3800c3424

Color Hash:#79bed2

Other Hashes

Crop Resistant:02484d0d231d2d4c,21d0d6d4d0d60841

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: pdfshwodas.top