Security Scan Report: adobefileviewer.dpdns.org

Redirected to:
blob:https://adobefileviewer.dpdns.org/30f27810-dc79-4523-a68a-28b1913...
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 6 HTTP transactions. The main domain is dpdns.org and was registered 1 year 8 months ago.

Submitted URL: https://adobefileviewer.dpdns.org/

Effective URL:
blob:https://adobefileviewer.dpdns.org/30f27810-dc79-4523-a68a-28b1913...
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

High-risk Adobe-themed file-viewer page collects email and includes an inline Telegram bot token capable of exfiltrating data; no password/payment fields found.

Risk Factors (4)
Inline Telegram bot token capable of exfiltrating submitted data
Adobe-branded hostname on a non-Adobe domain
'Protected Document' and 'Verify your email address' social-engineering lure
Email-harvesting form
Domain age information unavailable

Details

Page Title

PDf Document*

Scan Type

public

Domain Name Analysis

The domain name 'adobefileviewer.dpdns.org' uses the non-profit oriented generic top-level domain (.org), featuring subdomain 'adobefileviewer'. Its registrable label 'dpdns' stretches across 5 characters split between zero vowels and 5 consonants. Breaking it apart gives two words: dp, dns. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

. 7 . | | - 7 | Protected Document* ] Verify your email address Enter Email CD Stay signed in For a week

Page Load Overview

0.69s
Total Load Time
1.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:132 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical38% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
38%
technology software
32%
healthcare medical
30%
adult content
30%
news media journalism
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1159.89.102.253Frankfurt am Main, Hesse, Germany
AS14061DigitalOcean, LLC
199.84.152.47Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
199.84.152.83Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
65--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10995C0549DD31D314E13E27A0D7F79923834984B068CED61368C9BA09F8923D97F6EAC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:i/fm8DBgP1aA7zzZO5NX/c1xZMnY8QwafURCuet59mBPOGnTEfSW8zXTDZXHuw:+fm8DBgP1aGzMNHSfURC29MWew

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1896654:AyxApIwiCQUEZy1BBEQAgi6ChIZFcCGkJMArAEAggalSCgIFkKD4HAAHRMwSgKiQmSwLgeVKvAbYgEgZTBIFAIZaAwiKAADM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bf9ba185ddc1c9fb
Perceptual Hash:bb9f8dd8842666c8
Difference Hash:69734b4d11191943
Wavelet Hash:bf8b8185cdc18dd1
Color Hash:N/A

Other Hashes

Crop Resistant:69734b4d11191943

Scan History

Scan history not available

Unable to load historical scan data