Security Report: pdfhost.io - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a65f41e0-9fe1-4f81-bdde-fed464fbc3ba Domain and IP registration (RDAP)/api/v1/rdap/a65f41e0-9fe1-4f81-bdde-fed464fbc3baHow often this domain was scanned/api/v1/domain/stats/pdfhost.io Scan history for this domain/api/v1/domain/history/pdfhost.io?limit=15

This website contacted 7 IPs in 1 country across 7 domains to perform 31 HTTP transactions. The main domain is pdfhost.io and was registered 8 years ago.

Submitted URL: https://pdfhost.io/v/maTYQa.jg_mqfilserawxgxdgxhhgsx_1

AI Security Verdict

High Risk

Confidence: 70%

Risk Score

PDF viewer hosting a Microsoft 365 / Adobe Sign 'confidential document' phishing lure on a non-official file host; no capture form on-page, but the document impersonates brands and pushes a click/security-code action.

Risk Factors (4)

Document inside the page impersonates Microsoft 365 and Adobe Sign branding on a domain that is neither

Classic 'confidential document / security code' phishing lure template

Random filename and free anonymous file-host placement typical of mass-distributed phishing documents

External ad/analytics scripts (adtrafficquality.google, googlesyndication) monetizing/serving the viewer

Domain age information unavailable

Details

Page Title

mqfilserawxg-xdgxhhgsx (1).pdf | PDF Hostother network

Scan Type

public

Domain Name Analysis

Domain 'pdfhost.io' uses the British Indian Ocean Territory country-code top-level domain (.io) and has no subdomain. The second-level label 'pdfhost' is 7 characters long split between one vowel and 6 consonants. Word splitting yields two words: pdf, host. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

PDE @ tone Q z00%y Q & B 2 S EB. Microsoft | Microsoft 365 You have received a confidential document | VIEW / OPEN DOCUMENT |

Page Load Overview

N/A

Total Load Time

491 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,442 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software91% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

91%

documentation technical

79%

government public service

73%

download file sharing

63%

cryptocurrency blockchain

59%

Detected Features

OG: article

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.16.79.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.14.97Google · CDN	United States	AS15169Google LLC
4	142.251.13.155Google · CDN	United States	AS15169Google LLC
4	216.239.32.36Google · CDN	United States	AS15169Google LLC
4	142.251.20.155Google · CDN	United States	AS15169Google LLC
4	142.251.13.132Google · CDN	United States	AS15169Google LLC
0	7	-	-