SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0405
Heuristics 3
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dubaipropertyrentals.net/perhapsactual/momentfield.php/vlkvoctQdtwhiJi16204025kd_.pdf PDF link annotation
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/PbktokbvQbulohcoicxtsulmQc16204453h.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/bxc16204583chb.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/endsYmzvbhobcJbYQenPhad16204519Px.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/xdaxuleutQJsa__ba16204100aasm.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/JoPktPJnordh16203984bso.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/xkQiiGluoo16203989zk.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/lbYPccctn_oxurnPbbmt16204016P.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/esms16204118l.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/YxocxlYndzYxuxoYkwGk16204568ahk.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/ukwmm_ei16203829_bhk.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/k_iiJdrPwsnsPeilxumJhufcatmev16204264sQP.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/e_arJYsxPYnlPwsokJYabrnkzshf16204204im.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/rbmw16203926z.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/_bozfPuuYGeonfrmrx16204135QxQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/alYmJz16204186kk_.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/mzJnicbPtzsrGPssdxfhwGzQ16204112meQz.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/ehQatxcPQbliGrlPraeelefbc_lw16203993nvrQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/koonQiiafs16203871cJ.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/iefYowvekczxafxzGJPvfuczmkvcee16204403dzw.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/e_taoYczwxnmikoxzfdYc16204012k.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/xozswrtJaJlwtlwQzebnouhk16204440wh.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/_vrecmxbox16203928b.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/JGhelrPrePirJzYtYlohuQYx_nP16203805ne_.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/rilJfhxbbechePzhiwu__ico_16204773wdha.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/wQlYwnuld16203862c.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/GvwvePkfldiQ16204071bw.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/laQPPotaarmYm16204140svfs.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/tidGexf16204395iYf.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/lGQQu_xlvwtbcaef_Yfsdvvrws16204013ms.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/GsuPmeewd_osQ_h16204679v.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/wbuY_nJskQkPYknlumn_bvoQtmwoe16204393vivG.pdfIn PDF document text
- http://www.toledano.fr/logs/osxdJYowucivfGf_cxeirt15872031GYGP.pdfIn PDF document text
- http://www.trinketsltd.com/linda/iGvcflJnduzbit12306214zkvQ.pdfIn PDF document text
- http://www.permatatour.co.id/houractual/nYt15853815_.pdfIn PDF document text
- http://toledano.fr/images/nvzr15972345tb.pdfIn PDF document text
- http://apbmchaplain.com/growstep/rJbsYc15967343dox.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/svecfmt_fr_QodP16203866Q.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/QdnlsJc_n16204637dQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/iaPucdibcJzrJkhswllPiua16204741zo.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/YxvlPdnlGrhfJ___QaGdmri16204274lhcv.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/utxecQhbPQwGJbPGJwQdfdYs16204554nne.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/caGzh_PtJoGvfdJxbPYma16204762ii.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/wnQaPwrmenJlovkvfwkweik16203847Gvs_.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/shcsmasJ_aP_ditkkntwixdvcdhst16204459w.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/JtvuscuevP16204396oasb.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/QkPulGnsQwrccsclcxabetddQcP16204439w.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/nGuJwsY_ndnwrbYP_JnsJdY16204108_wli.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/Y_otQlrGvno_uede_boa_YalJoaeJb16204564trJx.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/_bdu_eGdaecQQevznPloskwer16204688ftP.pdfIn PDF document text
+24 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_004_off0000af3d.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xAF3D | 19780 bytes |
SHA-256: 4fa1e1f62893db1504b694ba157ca733dbc9a64fe6775bec7c5c9e8d41f3a745 |
|||
font_01_sfnt_off0000e491.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xE491 | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
font_02_sfnt_off00011a52.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x11A52 | 20828 bytes |
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.