SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0405
Heuristics 3
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ttPlirvbcizf16217710kGvb.pdf PDF link annotation
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uPom_az_ksttxlaxm16244805eahx.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/asodxP16217956ldY.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/thclhfva_kxev16217259a.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/QmsQG16217714ixQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uot_cmiQxu_kmuG16217457k__Q.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JrrGvexknvG_fzk16218071ox.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JY_YPQPJoxrdhJfu16217344sdn.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/Gtvmbtli16244873vJ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/bxlncYat_ks16217704uoh.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/PPr_wz_GxQ_Yz16244942ez.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xshPosblYPnrtJPJbtthmv16244830zQr_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/dxlG16218002brst.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/fmrhcJozJcm_oxrkzsrzfQPG16217711bl.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/QsnwrGvfnhsnaafQoarei__uozwYlY16244826b.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kxwJerzrtd16258823f.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/masmhcv16217954Paiw.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xzJYYaavQPJltlaasxGJdcddQ16244951_Pm.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/smlJ_mQhftQxnvwxlb16217425_Px.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/bdu___xPkotkvxPnlf16217989bo.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zGuQ_xlmfhrcztuc16244956ak.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ftYzvz16218055lakP.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JYtavzdJGkwdPxrP_kGeP16258609vam.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/QrQdvYhl_dwfhzsnwten16258758oi.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kh_ft_vYiPmQhbYbxobJeYQv16258780hr.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JJ_x_r16217589sce.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/wo_uzoxezleG16244919nP.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/tusuorfbnYhamc_nwPknldlrheakh16258810sGbb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/aiin16218008Yto.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zGnvxbasishtviws16217939Gvnb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/osb16244793rfai.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hGddPelPJrfQlfPd16217588aud.pdfIn PDF document text
- http://cardoor.es/talkremain/sJJ15847101iidJ.pdfIn PDF document text
- http://www.asconbs.dk/asc/iGsJdQPY15979141v.pdfIn PDF document text
- http://www.bercel.com/bbs/Ymr12095964rdh.pdfIn PDF document text
- http://www.citrusheightsplumbing.net/.well-known/kfJ15710265wb.pdfIn PDF document text
- http://tribuna.kr.ua/growsociety/ctca15818389nxmG.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kQtzmGde_GfGoc_bx16218004wG.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/t_PtlkwzexifabfQu16217991e_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/dmvhuvwhxQtsPPrzvxvd__sma16217338bv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hkifJkQeovJsecl16217331wvbv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/utbGwbzaxcJzvGderGk16217391s.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/lvhcxsYurPukfn16258783sw_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hlQmx16244848cYvt.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ucueavahmbvwno16217572rdGl.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ktrtkd_xrvxfvnwdseJntzbdul_w_z16218052fm.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/dea_vztwQdhYarv_lmneJof16217346h.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/iYumu16217322nw.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/eoxrYzvYsnwdwtQQvxnYlGY16217544iPh.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kmc16217737z.pdfIn PDF document text
+25 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_004_off0000b2b5.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xB2B5 | 19856 bytes |
SHA-256: a930245e90be17a336a7679d31e9d416ddec66c65020bec75b59b2e2bfc19120 |
|||
font_01_sfnt_off0000e847.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xE847 | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
font_02_sfnt_off00011e08.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x11E08 | 20828 bytes |
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.