Security Scan: PDF Viewer

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e28c3cc5-cb50-4ff3-a9f0-4a0d21bf9bce Domain and IP registration (RDAP)/api/v1/rdap/e28c3cc5-cb50-4ff3-a9f0-4a0d21bf9bce Certificate Transparency/api/v1/ct/dndair.com How often this domain was scanned/api/v1/domain/stats/dndair.com Scan history for this domain/api/v1/domain/history/dndair.com?limit=15

This website contacted 14 IPs in 2 countries across 10 domains to perform 17 HTTP transactions. The main domain is dndair.com and was registered 39 years ago.

Submitted URL: https://dndair.com/iv/doc.html

Downloads:

AI Security Verdict

Moderate Risk

Confidence: 78%

Risk Score

Fake 'PDF Viewer' page that force-downloads a ScreenConnect remote-access installer from a third-party instance, with honeypot/fingerprint anti-analysis gating. A Windows-only lure delivering an executable — avoid.

Risk Factors (5)

Forced executable/installer download (ScreenConnect RAT client) on page load

Fake PDF/document viewer lure with Adobe-styled messaging

Bot/analysis evasion: honeypot, browser fingerprinting and challenge-timestamp fields

OS-conditioned delivery restricting the installer to Windows desktop

Cross-domain redirect chain (4 cross-domain hops)

Safety Factors (4)

Domain is 14 years old (registered 2012) and previously established

No credential, password or payment forms present (0 password / 0 payment fields)

No JavaScript YARA malware patterns detected and no known-kit roster match

Established domain (5372 days old) with no strong malicious indicators — risk clamped from 8 to 5

Domain age information unavailable

Details

Page Title

PDF Viewer

Scan Type

public

Favicon Hash

MMH3: -1482289937

MD5: 45d4414e5d5a8b0d273c811595d550da

Domain Name Analysis

Domain 'dndair.com' uses the commercial generic top-level domain (.com) with no subdomain. The second-level label 'dndair' is 6 characters long split between 2 vowels and four consonants. It segments into two words: dnd, air. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.84s

Total Load Time

576 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:943 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software83% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

83%

documentation technical

72%

corporate business

57%

entertainment media

39%

adult content

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	50.87.143.172	Phoenix, Arizona, United States	AS46606Unified Layer
1	104.26.15.77Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.150.119Google · CDN	United States	AS15169Google LLC
1	192.178.183.104Google · CDN	United States	AS15169Google LLC
1	142.251.14.106Google · CDN	United States	AS15169Google LLC
1	192.178.183.103Google · CDN	United States	AS15169Google LLC
1	172.67.68.67Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.151.119Google · CDN	United States	AS15169Google LLC
1	142.251.153.119Google · CDN	United States	AS15169Google LLC
1	142.251.155.119Google · CDN	United States	AS15169Google LLC
17	14	-	-