Security Scan: PDF Viewer

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e3426bf7-4bb0-441b-8402-cf35f49be895 Domain and IP registration (RDAP)/api/v1/rdap/e3426bf7-4bb0-441b-8402-cf35f49be895How often this domain was scanned/api/v1/domain/stats/d-fr7.live Scan history for this domain/api/v1/domain/history/d-fr7.live?limit=15

This website contacted 14 IPs in 2 countries across 12 domains to perform 43 HTTP transactions. The main domain is d-fr7.live and was registered 1 month ago.

Submitted URL: https://d-fr7.live/view/pages/github/index.html#[email protected]

Effective URL:

https://d-fr7.live/view/pages/index.php?vtoken=1fec8b6f25864c97b1161fe...

Redirected

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

New, unranked domain serves a fake 'PDF Viewer' that gates access on verifying the specific victim email [email protected] found in the URL, with DevTools/right-click blocking — a phishing lure.

Risk Factors (5)

Victim email in URL fragment used as a per-victim phishing lure

Domain registered 3 days ago and absent from Cisco Umbrella top 1M

Title/domain mismatch ('PDF Viewer' on d-fr7.live)

JavaScript anti-analysis blocking DevTools and right-click

Content gates access on 'email provider verification' for a specific named victim

Domain age information unavailable

Details

Page Title

PDF Viewer

Scan Type

public

Domain Name Analysis

You're looking at domain 'd-fr7.live' on the .live top-level domain while skipping any subdomain. The second-level label 'd-fr7' is 5 characters long split between 0 vowels and three consonants; it also includes one digit and one hyphen. Splitting it apart reveals three words: d, fr, 7. Expect one character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.45s

Total Load Time

1.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:989 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software82% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

82%

documentation technical

81%

corporate business

38%

adult content

27%

government public service

25%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	92.113.23.104	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
3	172.217.208.95Google · CDN	United States	AS15169Google LLC
3	192.178.183.94Google · CDN	United States	AS15169Google LLC
3	92.113.16.14	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
3	142.251.151.119Google · CDN	United States	AS15169Google LLC
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
3	142.251.155.119Google · CDN	United States	AS15169Google LLC
3	104.26.14.77Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.157.119Google · CDN	United States	AS15169Google LLC
3	142.251.156.119Google · CDN	United States	AS15169Google LLC
43	14	-	-