Security Scan: PDF Viewer

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7818fa89-919a-428d-a0b6-ce81ae3546d9 Domain and IP registration (RDAP)/api/v1/rdap/7818fa89-919a-428d-a0b6-ce81ae3546d9How often this domain was scanned/api/v1/domain/stats/healthlicense-zeta.vercel.app Scan history for this domain/api/v1/domain/history/healthlicense-zeta.vercel.app?limit=15

This website contacted 14 IPs in 1 country across 6 domains to perform 13 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://healthlicense-zeta.vercel.app/

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Impersonates a PDF viewer behind a Windows-only gate with honeypot/fingerprint cloaking; network alerts show executable download, anti-debug binary and ScreenConnect/Telegram traffic. Do not open.

Risk Factors (5)

Page masquerades as a PDF viewer but serves no document content — only a Windows-only gate and download prompts

IDS indicators consistent with executable delivery, packed binary, anti-debugging and remote-access tooling

Anti-analysis cloaking (honeypots, browser fingerprinting, challenge token) on a page with no legitimate function

Hosted on a free instant-publishing vercel.app subdomain with no attributable registration age

Zero legitimacy signals: no legal pages, no contact details, no organization identity, unranked domain

Domain age information unavailable

Details

Page Title

PDF Viewer

Scan Type

public

Domain Name Analysis

Domain 'healthlicense-zeta.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'healthlicense-zeta'. Count 6 characters in 'vercel' containing 2 vowels alongside four consonants. It segments into two words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.09s

Total Load Time

440 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:943 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software84% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

84%

documentation technical

72%

corporate business

57%

entertainment media

39%

adult content

37%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	104.26.14.77Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	142.251.156.119Google · CDN	United States	AS15169Google LLC
0	142.251.14.147Google · CDN	United States	AS15169Google LLC
0	142.250.154.106Google · CDN	United States	AS15169Google LLC
0	142.251.14.103Google · CDN	United States	AS15169Google LLC
0	142.251.110.105Google · CDN	United States	AS15169Google LLC
0	104.26.15.77Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	142.251.154.119Google · CDN	United States	AS15169Google LLC
13	14	-	-