ScanMalware.com

Security Scan Report: pdfhost.io

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9279adf5-7e6f-454b-a80f-4d02809e6c10Domain and IP registration (RDAP)/api/v1/rdap/9279adf5-7e6f-454b-a80f-4d02809e6c10How often this domain was scanned/api/v1/domain/stats/pdfhost.ioScan history for this domain/api/v1/domain/history/pdfhost.io?limit=15
This website contacted 7 IPs in 1 country across 7 domains to perform 30 HTTP transactions. The main domain is pdfhost.io and was registered 8 years ago.

Submitted URL: https://pdfhost.io/v/maTYQa.jg_mqfilserawxgxdgxhhgsx_1

AI Security Verdict

Low Risk

Confidence: 58%

3
Risk Score

Legitimate file-host page rendering a user-uploaded PDF whose text is an Adobe Sign/Microsoft 365 'confidential document' lure. No forms, IoC, hunting rule or IDS hits on the page itself; treat the document as suspect and do not follow its instructions.

Risk Factors (2)
Hosted document uses Adobe Sign / Microsoft 365 impersonation language typical of a phishing lure
User-uploaded file content cannot be verified and is the apparent vehicle for the lure
Safety Factors (6)
Established 8-year-old domain (pdfhost.io)
Site displays its own brand (self-branding, not impersonation by the page itself)
No forms, no credential or payment fields on the page
No Indicators of Compromise, hunting rule, IDS or JavaScript behavioral hits
External scripts and network targets are mainstream, ranked providers
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

mqfilserawxg-xdgxhhgsx (1).pdf | PDF Hostother network

Scan Type

public

Domain Name Analysis

You're looking at domain 'pdfhost.io' on the British Indian Ocean Territory country-code top-level domain (.io). The core label 'pdfhost' covers 7 characters holding 1 vowel versus six consonants. Word splitting yields two words: pdf, host. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

[pa}| © @up Gum Gem ‘Search Public PDFs... Q Q 3z00%r @ iS HH Microsoft | Microsoft 365 You fave ceecived a contin ceemment VW / CFEN DOCUMENT

Page Load Overview

N/A
Total Load Time
489 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,442 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software91% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
91%
documentation technical
79%
government public service
73%
download file sharing
63%
cryptocurrency blockchain
59%

Detected Features

Search
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4192.178.183.97Google · CDNUnited States
AS15169Google LLC
4192.178.183.156Google · CDNUnited States
AS15169Google LLC
4216.239.32.36Google · CDNUnited States
AS15169Google LLC
4142.251.110.154Google · CDNUnited States
AS15169Google LLC
4142.251.110.132Google · CDNUnited States
AS15169Google LLC
07--

Detected Technologies1

Open-Graph-Protocolvarticle
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19F131931A180153E11074FD4F0E6B339304FD21AE6879490BFAE42954BD9DEDA77A2FA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:IvFFbUP69QhWSJoIRIHLt14bfpOF/4VTIV/1:way0WwoIRAVd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:45367:AaoCSEw44lKDJMAoeq/AhGHEEETQBhIAxAESYEuJ4TINAABoQIGBqBxAxwDIUrFIhQAQEklSEFJkDZiY4kS1BguEETBOokjD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffc3c3c3c3c1
Perceptual Hash:f893133b393b1313
Difference Hash:d9003b33333b2b33
Wavelet Hash:00ffffc3c1c1c1c1
Color Hash:N/A

Other Hashes

Crop Resistant:8000440c3c240082,8a802b33332b2b33,682d5b4ac9ba6a29,272a2c26261c2ea6,261999d9d9999946,08103013c8c86179

Scan History

Scan history not available

Unable to load historical scan data