DoxlySee whether a PDF carries the structural red flags real attacks actually use, before you open it in a full reader.
PDF is one of the most common file types used in phishing and malware campaigns, precisely because it looks harmless. A PDF is not just a page of text — it is a container that can hold JavaScript, actions that fire automatically when the file opens, embedded files, and links that lead somewhere different from what the visible text suggests. None of that is visible when you look at a page.
This tool reads a PDF's internal object structure and flags those specific mechanisms if they are present, entirely on your device. It is worth being precise about what this is not: it does not scan against malware signatures, it cannot tell you a file is safe, and a clean result is not a guarantee. It is a structural heuristic check, not antivirus, and some of what it flags — embedded JavaScript especially — is also used by entirely ordinary interactive forms. Treat a flag as a reason to look closer, not a verdict.
No, and it is worth being direct about that. It does not check the file against malware signatures the way antivirus software does. It looks for the structural mechanisms — embedded scripts, auto-launch actions, embedded files, suspicious links — that real malicious PDFs use, and tells you what it found. A clean result means none of those specific mechanisms are present, not that the file is guaranteed safe.
It can be. Interactive forms sometimes use embedded JavaScript for entirely legitimate reasons, such as validating a field or auto-filling a date. This tool cannot tell the difference between that and a malicious script, so it flags the presence of JavaScript either way and leaves the judgement to you.
No. Like every tool on this site, the file is read and inspected entirely in your browser. Nothing is sent anywhere, including to a virus-scanning service — that would require uploading the file, which this tool does not do.
Do not click it from inside the PDF. If the document claims to be from a company or person you know, verify through a separate channel — call them using a number you already had, rather than one printed in the document.
Not automatically, but it is worth noting: attackers sometimes encrypt a malicious PDF specifically because it prevents automated scanners from looking inside, then hand the password to the victim separately. If you were not expecting a protected document from that sender, treat it with extra caution.
Combine PDFs in any order you like.
Break one PDF into many, or take a range.
Delete the pages you don't need.
Keep only the pages you pick.
Rearrange, rotate and drop pages.
Turn pages the right way up.
Make an oversized PDF fit.
Photos and scans into one PDF.