Security Scan Report: pdfhost.io

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 7 domains to perform 32 HTTP transactions. The main domain is pdfhost.io and was registered 8 years ago.

Submitted URL: https://pdfhost.io/v/maTYQa.jg_mqfilserawxgxdgxhhgsx_1

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

PDF hosted on pdfhost.io renders a fake 'confidential document' notice bearing Microsoft 365 / Adobe Sign branding, a known credential-phishing lure. No form on-page, but treat the document as untrustworthy and do not follow its links.

Risk Factors (3)
Microsoft 365 / Adobe Sign confidential-document lure served from an unrelated third-party PDF host
Brand impersonation of a different entity on a mismatched domain
Random filename and free-hosting placement consistent with phishing campaign distribution
Domain age information unavailable

Details

Page Title

mqfilserawxg-xdgxhhgsx (1).pdf | PDF Hostother network

Scan Type

public

Domain Name Analysis

You're looking at domain 'pdfhost.io' on the British Indian Ocean Territory country-code top-level domain (.io) and has no subdomain. The core label 'pdfhost' covers 7 characters containing 1 vowel alongside six consonants. Segmentation suggests two words: pdf, host. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

PDE @ tone Q z00%y Q & B 2 S EB. Microsoft | Microsoft 365 You have received a confidential document | VIEW / OPEN DOCUMENT |

Page Load Overview

N/A
Total Load Time
498 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,442 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software91% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
91%
documentation technical
79%
government public service
73%
download file sharing
63%
cryptocurrency blockchain
59%

Detected Features

Search
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4192.178.183.97Google · CDNUnited States
AS15169Google LLC
4142.251.110.154Google · CDNUnited States
AS15169Google LLC
4216.239.32.36Google · CDNUnited States
AS15169Google LLC
4142.251.14.157Google · CDNUnited States
AS15169Google LLC
4142.251.20.132Google · CDNUnited States
AS15169Google LLC
07--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D6131931A140163E51074FD4F0E6B339300FD21AE6879490BBAE42954BD9DEDE77A2FA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:I3FFbUP69QhWSJoIRIHLt14bfpOF/4VTqfq:iay0WwoIRiy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:45483:QqBoggYJAgTEM/fuOIiEgFFGwkAhDgI9OQCy0Y4AmJVDUFzgHKIIKNBgikVWEAIEBSwgAaJAGsRAwwSEGERA6E9+yTEQCQGz

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data