SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0405
Heuristics 3
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dubaipropertyrentals.net/organizefree/carrydetermine.php/tcosiatG_iuciksxnG16244922zxv.pdf PDF link annotation
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/_xcmJrcamnrtxxmo16244928a.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/Qsi_ea_rxfm16217236t.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/Y_a16217285ws.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/srYhzslcmw_ckQQsv16217712_Y.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vhivnekGhcseeQrlcfeawxenbPnb16217512_Yxt.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/YvmmiebhibclovltovuxnuvrcGnxt16217299bQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/rweYkoxJoldtw_YvdrQYv16258804QfGb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/utbGwbzaxcJzvGderGk16217391s.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ratdmGfxxo16258672Gx.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/a_o16244920alul.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/bQnwzGsbrfdnaccznutunfurJQb16217465Y.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xuzbeiberolQlJrnuiQJdPohza16217751s.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/nsGzokhPfvowicYzfmn_QldYmz_l16244794cYc.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JJnQcethYfGc_mnrhtnmwhtYksG16217749x_z.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/wur_Qczrviokcbvrstaxa16217250l.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uJisw_cmiGwQtkoeGYmwniJdmGteu16258657uvx.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/cPPkrzflcJr16258619PGmn.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/QdrxzrtbbzQb16217775khJY.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/laolkkcdrJfG16218001s.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/oxothfP_dkPsrwQxlsbJxx16258864wfs.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/YzYuQwvrcsaieuvmhsmQhYkkixbd16217701_iw.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xxlmdzrJnhYlncatenPislzdlGcbzs16258706uuc.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/isvn16258782v.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/rrwkk16217946lla.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/fmbvaz_QPdte_kecmxmb16218182o.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vlb16258719t_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vPYtsii16218056caYt.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/h_zeaz_xurYJrbw16218026rdb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/YitYiJGl16217709u.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/azrahixwlQzzrrssnhe_b16218171s.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vPtwumezh16217333ucii.pdfIn PDF document text
- http://www.toledano.fr/images/liws15872929dlQG.pdfIn PDF document text
- http://www.ggpgcrajajipuram.com/flash/pdf/index.php/u_hklQuhswPYhk6782470bd.pdfIn PDF document text
- http://www.toledano.fr/logs/vsi_hoaoYG_Ykn_uJYw_iseJlbk15918208Qh.pdfIn PDF document text
- http://goldae.ch/css/nonuvfJuoQJwcYkthkicQQrvwQro16087909YseG.pdfIn PDF document text
- http://wemarketcy.com/pages/mrGJhfYhznt14784460Jiw.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/GYovrenGnYhQakxQlPuhz16217971Gmzb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/iaPvbvcstQYtik16217693ez.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/unoludedPkdJlvkzvhv__G16217945Qhm.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/skPcvfdultPu16244948YYnG.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/fPwG_trGfJwuoeJanoJhc_mQYGP16244916b.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vctPYisJJYbckstPPvfGmlm16217653vhfv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/eskdPGnwdbsrQdtPY16217562cl.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JsmdYuvkwJknumrmikxmrzmdnQ_u16217645dxd.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/lbeaoPJcmsYkYQQzdJtiGmf16217415td.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/fhsPsJmnwczmmfQ16258814wdc.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/mGmbJGsaiGarYnebaPdkdbc_fJx16217514svux.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/undfhlawhkhirirnfvv16217604mhhz.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/lutowomrsaYoefetQPdlswhe_dzP16258704Q.pdfIn PDF document text
+25 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_004_off0000b304.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xB304 | 19824 bytes |
SHA-256: 1007b9c0d29cc5a5933239e4adf9ccb29bdb5162302804c4f70c80d630bfaf41 |
|||
font_01_sfnt_off0000e879.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xE879 | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
font_02_sfnt_off00011e3a.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x11E3A | 20828 bytes |
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.