SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0405
Heuristics 3
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dubaipropertyrentals.net/idealow/causemusic.php/mmhvQfYlrP16216174kPk.pdf PDF link annotation
- http://dubaipropertyrentals.net/idealow/causemusic.php/_olQsibhezxJxePvmzPwn16215339o.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/Qa_ekmmdlrbiitdfvnzc_xvcavhie16215489erw.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/eta16215348f_.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/fGcQdGlcxunPcvhzwcxlYQrmexsJJ16243857tls.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/uvidsxQvwhiPfrtzeGevrfYwhu16243706dtPa.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/xf_akkowPbnzsstYathQvt16215474fvw.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/cvmwleseJxrnlti16215260lvdd.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/ncfuuY_fzdiuizJdYJchfa16215268kwu.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/GxvwJoschhiYs16243759x_.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/drfwroPQY_lokxswbrGrrbPtdYnn16243642P.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/tlokwneGcvxeonmxtaGntsaQioewl16216181vznw.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/xGGPiahleka_YxJbvacebwu16215298hsfk.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/PdhxncQbfPG16215617ulu.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/_khdz__owm16215580uQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/GJawwbb16215424wlJr.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/YeQ_vdbuvd_GiPnYkJYPufGeks16215901_lo.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/lrohm_uoafimoJbvlmQzununftJua_16243876wunt.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/trcnwrauno16215538_ldl.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/iafPazarPYnJzw16243692xoYG.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/eYeY_xmvPhbwGiw16243776m.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/snx_16243585Poie.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/zoQzdaso16215599mQzv.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/kfuezzotQninrocdoaGeiethwcf16215255zh.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/raJd__h_ckbJnaQdtYa_lrezYhx16215979f.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/i__YdQliJrniuJxvvci16215388udsv.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/mlvaPvhamifk16243667J.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/fQkndxnluhi_imJas16243688PiY.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/GmkvrlQPd_wYmznfkv16243732vah.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/oaJYvauxGsxmnvPmGee16215305zkuc.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/cltbtYkhlobwfdQdGwvn_Psuuxfrs16216113GQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/hhlmJnYtszxi16215273o.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/Qtf16215279P.pdfIn PDF document text
- http://kookhoekvandinie.com/traineither/lxedlGsud15881425rJ.pdfIn PDF document text
- http://www.toledano.fr/images/_szsatvhnQinz15872631m.pdfIn PDF document text
- http://www.toledano.fr/images/fvkoJsatzu_dn_P15918834JiPk.pdfIn PDF document text
- http://www.goldae.ch/img/mhxmvlJk15615512u.pdfIn PDF document text
- http://www.mehmanesh.com/remainnote/determinepast.php/tdhQfwow15443090Jh.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/lwPiucreunJaJto16243691dx.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/Qecb_lrlz_eeuhcwxleQri16216168shJ.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/rfGzYfb_YfkdYwdaGzht16215412a.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/PdzlnQdu_YGadhmdenYv_tvfvr16215253c_QY.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/zPhPYmv16215303e.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/rseQcYeGhnsfQnvYot16243705s.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/ldiiJxl16215924xYad.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/uwoeGavoGsnQYmkda16215795rG.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/mvfsniGdd16243661PG.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/_YccmvzxJJo_16215439hY.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/ikhnedxrebnzJflitivmG_16216133wmc.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/tsbGuzsGxlehwafJzbhhPazfwQ16215764nva.pdfIn PDF document text
+26 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_004_off0000ae9f.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xAE9F | 19904 bytes |
SHA-256: 02df1dbb5fd37065ffce0d7ec498fded54fecc59c4d54748f3cfe34f0843886c |
|||
font_01_sfnt_off0000e42b.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xE42B | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
font_02_sfnt_off000119ee.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x119EE | 20828 bytes |
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.