SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0405
Heuristics 3
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dubaipropertyrentals.net/organizefree/carrydetermine.php/GrQsfrzfoeQoubdlPsbz16217640_.pdf PDF link annotation
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/bfQwiouo_tx16258592fP.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/mGskaYJrczehbrkk16218042uw.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vGvdnGdswc_wv_lrra16217698mbb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/GvYehzub_ax_GmtvzzazvdhdhJG_16258851ez.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/bxcel_le16244795re.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kvwwseaGlGzQaoefGoilrGldiPJ16258588vdna.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JfebwlwlsnrhoePalGQunod16217686wb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/i_Qruus16217542l.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xammbdoetnczonnrtdiYQenu16258803_f.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/obmbwrdJcbuh_Gf16258600u.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ebiYt16244930vt.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/iaYd_kmJfzbYGmGnJrzQeecv16258871Yh.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zerukhJhbd16217547zP.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xxwcvfb16217471h.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JwmesdetmlmrdhiewuYwfrJzaPzv16217950mnx.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/GekiwxGJuinrlcam_rJvwJceoote16218023JmPv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kvzQvbsilJPfs16218062ti.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uxcdffihYPkoah16217477wPw.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/smlJ_mQhftQxnvwxlb16217425_Px.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/fh_PnGvQohzdrQtnPschc16244935_heG.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/Ykswl16244796mPwb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/iGzYodabkPxtwncthYzhloevcwvblP16217556ta.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zbblJbJtPztilbiil_xa16258597m_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/QmsQG16217714ixQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/_PQYalcPlx16217690xcY.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/wQbdsYYtvbv16258614o.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xdxz_zJexmrxmGohQQodt_rmP_t16258775rlr.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uufvaiJceza_f16217563iYu_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JeiJvQrwhi16244864kfJ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/PldzoGkJkftcQ16244924zco.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kzlwGJ_Jzvv16217393b.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/abGGtb_rcsww_QxueiotofQad_P16244958kz.pdfIn PDF document text
- http://stanthonylocal.com/docs/k_u_Jk_naisslvkkw_ldYchfd13677909tl.pdfIn PDF document text
- http://tribuna.kr.ua/growsociety/wQlfw_hifun15676180bus.pdfIn PDF document text
- http://sales.980x.com/ajaxpage/index.php/QoxPbsovvbbvP_nsucrumsnJtl11045054QtYm.pdfIn PDF document text
- http://stripvip.com/wp-content/fskbouuQcoQbwx_udhchzb11348789iao.pdfIn PDF document text
- http://sales.980x.com/ajaxpage/index.php/nhPaGkoitcwhfYkJkwfxlhioufth11269590ueb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/GGJQwrJlknwhPoim16217484P_Y.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ikdbfGhloe16218017didr.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hzewJ16258807wiJ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hndib16258608s.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/dQmrbuihGQQoufwGmhut16258587n.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/GQQJffvisxhfuimthYzswbb16217529wkza.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/wkfYvn16217313_h.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/dmfesddYefhwGlnrnPrhwcdGc16258819btn.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/QoiGtQldGkJvGzvofblQQeGh16258773Jea.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/rwck_tG16258748uGhl.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/eoxrYzvYsnwdwtQQvxnYlGY16217544iPh.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/masmhcv16217954Paiw.pdfIn PDF document text
+26 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_004_off0000b2e3.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xB2E3 | 19864 bytes |
SHA-256: 2b7cb36ba22b1d4e14358b52368c28dffec11c1e911711bba7c8ddd01cca0eab |
|||
font_01_sfnt_off0000e877.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xE877 | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
font_02_sfnt_off00011e3a.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x11E3A | 20828 bytes |
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.