SUSPICIOUS
40
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0426
Heuristics 3
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://uncpbisdegree.com/download3.php?q=swift-car-exterior-design.pdf In PDF document text
- http://uncpbisdegree.com/download4.php?q=swift-car-exterior-design.pdfIn PDF document text
- http://telecoworld.org/reads-online/swift-car-exterior-design.pdfIn PDF document text
- http://losangelesfirstszechuanwok.com/reads-online/swift-car-exterior-design.pdfIn PDF document text
- http://quicktradeimpex.com/reads-online/swift-car-exterior-design.pdfIn PDF document text
- http://trvayten.org/reads-online/swift-car-exterior-design.pdfIn PDF document text
- https://www.indiacarnews.com/news/maruti-swift-2017-5889/In PDF document text
- http://riverside-resort.net/1/solutions-for-arfken-6th-edition.pdfIn PDF document text
- http://riverside-resort.net/1/the-end-of-the-cold-war-note-taking-study-guide-answer.pdfIn PDF document text
- http://riverside-resort.net/1/statistics-for-engineers-scientists-solution-manual.pdfIn PDF document text
- http://riverside-resort.net/1/transgender-101-a-simple-guide-to-a-complex-issue.pdfIn PDF document text
- http://riverside-resort.net/1/toyota-camry-engine-diagram.pdfIn PDF document text
- http://riverside-resort.net/1/skyrim-words-of-power-guide.pdfIn PDF document text
- http://riverside-resort.net/1/stage-4-bone-cancer-healed.pdfIn PDF document text
- http://riverside-resort.net/1/the-ghost-of-assholes-past.pdfIn PDF document text
- http://riverside-resort.net/1/snoop-troop-it-came-from-beneath-the-playground.pdfIn PDF document text
- http://riverside-resort.net/1/swamutra-chikitsa.pdfIn PDF document text
- https://www.indiacarnews.com/news/maruti-swift-2017-5889In PDF document text
- http://www.ascendercorp.com/In PDF document text
- http://www.ascendercorp.com/typedesigners.htmlIn PDF document text
- https://www.youtube.com/watch?v=1y2w4okCn-IIn PDF document text
- https://www.cardekho.com/Maruti/Maruti_Swift/picturesIn PDF document text
- https://www.zigwheels.com/newcars/Maruti-Suzuki/Swift/picturesIn PDF document text
- https://www.carid.com/suzuki-swift-accessories/In PDF document text
- https://www.carid.com/shop-by-product/In PDF document text
- https://www.carid.com/suzuki-accessories/In PDF document text
- https://www.carwale.com/marutisuzuki-cars/swift/In PDF document text
- https://www.cartrade.com/maruti-suzuki-cars/swift/imagesIn PDF document text
- https://www.youtube.com/watch?v=BJNwODA5N5EIn PDF document text
- http://go.microsoft.com/fwlink/?LinkId=521839&CLCID=0409In PDF document text
- http://go.microsoft.com/fwlink/?LinkID=246338&CLCID=0409In PDF document text
- https://go.microsoft.com/fwlink/?linkid=868922In PDF document text
- http://go.microsoft.com/fwlink/?LinkID=286759&CLCID=409In PDF document text
- http://go.microsoft.com/fwlink/?LinkID=617297In PDF document text
- https://www.carwale.com/marutisuzuki-cars/swiftIn PDF document text
- https://fedoraproject.org/wiki/Licensing/LiberationFontLicenseIn PDF document text
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off0000aedd.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xAEDD | 14856 bytes |
SHA-256: ed5b41c4b99789647fefe312fd9b2988543f344ee6609dba94829a06a8105b83 |
|||
font_01_sfnt_off0000dc6f.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xDC6F | 9068 bytes |
SHA-256: 41bbfb59e145a9e43eb08e5a0234e63e621ea537aeee29dd44440f4356b502b9 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.