Security Report: pdfhost.io - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/855fab57-578c-46e9-84a1-ce68e6303ac7 Domain and IP registration (RDAP)/api/v1/rdap/855fab57-578c-46e9-84a1-ce68e6303ac7How often this domain was scanned/api/v1/domain/stats/pdfhost.io Scan history for this domain/api/v1/domain/history/pdfhost.io?limit=15

This website contacted 7 IPs in 1 country across 7 domains to perform 32 HTTP transactions. The main domain is pdfhost.io and was registered 8 years ago.

Submitted URL: https://pdfhost.io/v/maTYQa.jg_mqfilserawxgxdgxhhgsx_1

AI Security Verdict

Low Risk

Confidence: 72%

Risk Score

Legitimate file host serving a user-uploaded PDF that impersonates Microsoft 365 / Adobe Sign with a 'confidential document' phishing lure. The viewer page itself is safe; the document content is malicious.

Risk Factors (3)

Impersonation of Microsoft 365 / Adobe branding on a non-Microsoft, non-Adobe domain

Phishing 'confidential document' lure embedded in the hosted PDF

Hosted file uses random/obfuscated filename (mqfilserawxg-xdgxhhgsx) typical of mass phishing distribution

Safety Factors (5)

Hosting domain pdfhost.io is 8 years old and well established

No credential or payment form on the scanned page (0 forms, 0 password/payment fields)

No Indicators of Compromise, hunting rule malware hits, or IDS alerts detected

Established domain (3001 days old) with no strong malicious indicators — risk clamped from 7 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3

Domain age information unavailable

Details

Page Title

mqfilserawxg-xdgxhhgsx (1).pdf | PDF Hostother network

Scan Type

public

Domain Name Analysis

The domain name 'pdfhost.io' uses the British Indian Ocean Territory country-code top-level domain (.io) without a subdomain. The core label 'pdfhost' covers 7 characters holding 1 vowel versus 6 consonants. Word splitting yields 2 words: pdf, host. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

[pa}| © @up Gum Gem ‘Search Public PDFs... Q Q 3z00%r @ iS HH Microsoft | Microsoft 365 You fave ceecived a contin ceemment VW / CFEN DOCUMENT

Page Load Overview

N/A

Total Load Time

487 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,442 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software91% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

91%

documentation technical

79%

government public service

73%

download file sharing

63%

cryptocurrency blockchain

59%

Detected Features

OG: article

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.16.80.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.250.154.97Google · CDN	United States	AS15169Google LLC
4	142.251.110.157Google · CDN	United States	AS15169Google LLC
4	216.239.32.36Google · CDN	United States	AS15169Google LLC
4	142.251.110.155Google · CDN	United States	AS15169Google LLC
4	142.251.14.132Google · CDN	United States	AS15169Google LLC
0	7	-	-