SUSPICIOUS
40
Risk Score
Machine Learning
- Nyx PDF Classifier suspicious score 0.2674
Heuristics 3
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://uncpbisdegree.com/download3.php?q=x-men-visionaries-jim-lee-tpb.pdf In PDF document text
- http://uncpbisdegree.com/download4.php?q=x-men-visionaries-jim-lee-tpb.pdfIn PDF document text
- http://picbum.de/x/men/x_men_visionaries_jim_lee_tpb.pdfIn PDF document text
- http://habnix.de/x/men/x_men_visionaries_jim_lee_tpb.pdfIn PDF document text
- http://brench.de/x/men/x_men_visionaries_jim_lee_tpb.pdfIn PDF document text
- https://comicbookrealm.com/series/2498/0/x-men-visionaries-jim-leeIn PDF document text
- http://giseye.de/x/men/x_men_visionaries_jim_lee_tpb.pdfIn PDF document text
- https://uncannyxmen.net/comics/collection/x-men-visionaries-jim-leeIn PDF document text
- http://riverside-resort.net/1/the-giroux-reader.pdfIn PDF document text
- http://riverside-resort.net/1/service-on-the-other-party-for-dissolution-legal-2.pdfIn PDF document text
- http://riverside-resort.net/1/the-boleyn-deceit-trilogy-2-laura-andersen.pdfIn PDF document text
- http://riverside-resort.net/1/trane-rtaa-chiller-manual.pdfIn PDF document text
- http://riverside-resort.net/1/south-western-federal-taxation-hoffman-solutions-2014.pdfIn PDF document text
- http://riverside-resort.net/1/solution-manual-university-physics-4th-edition.pdfIn PDF document text
- http://riverside-resort.net/1/snapon-mt2500-manual-guide.pdfIn PDF document text
- http://riverside-resort.net/1/the-diary-of-anne-frank-answers-to-study-guide.pdfIn PDF document text
- http://riverside-resort.net/1/tourism-nsc-grade-10.pdfIn PDF document text
- http://riverside-resort.net/1/the-road-to-makkah.pdfIn PDF document text
- http://www.ascendercorp.com/In PDF document text
- http://www.ascendercorp.com/typedesigners.htmlIn PDF document text
- https://www.amazon.com/X-Men-Visionaries-Jim-Lee-TPB/dp/0785109218In PDF document text
- https://www.amazon.com/Comics-Graphic-Novels-Books/b?ie=UTF8&node=4366In PDF document text
- https://www.amazon.com/Graphic-Novels-Comics-Books/b?ie=UTF8&node=4390In PDF document text
- https://www.goodreads.com/book/show/295680.X_Men_VisionariesIn PDF document text
- https://www.amazon.com/product-reviews/0785109218In PDF document text
- https://www.amazon.com/X-Men-Visionaries-Jim-Lee-TPB/product-reviews/0785109218In PDF document text
- https://www.mycomicshop.com/search?TID=662521In PDF document text
- https://www.amazon.co.uk/X-Men-Visionaries-Jim-Lee-TPB/dp/0785109218In PDF document text
- https://www.amazon.co.uk/Genre-Comics-Graphic-Novels-Books/b?ie=UTF8&node=274105In PDF document text
- https://www.amazon.co.uk/Super-Heroes-Genre-Books/b?ie=UTF8&node=503398In PDF document text
- https://www.abebooks.com/book-search/isbn/0785109218/In PDF document text
- http://go.microsoft.com/fwlink/?LinkID=617350In PDF document text
- http://go.microsoft.com/fwlink/?LinkId=521839&CLCID=0409In PDF document text
- http://go.microsoft.com/fwlink/?LinkID=246338&CLCID=0409In PDF document text
- https://go.microsoft.com/fwlink/?linkid=868922In PDF document text
- http://go.microsoft.com/fwlink/?LinkID=286759&CLCID=409In PDF document text
- http://go.microsoft.com/fwlink/?LinkID=617297In PDF document text
- https://www.amazon.com/X-Men-Visionaries-Jim-Lee-TPB/productIn PDF document text
- https://www.abebooks.com/book-search/isbn/0785109218In PDF document text
- https://0.r.bat.bing.com/?ld=d38yGuNXVybSmpZGmrxwIwTDVUCUyoLeyyd4HfPyq4kIyihAvvrZpVfp_0AtX3sGDWF9xZ3epHvTInmUqR98w4e_gh-7FdXDVfKzXHHnZPzojWKnimRPWHBrFHEUeO4pKkNdtJbSBIP6r4w52wq3IYTh_-JnkPOeh-wMlgEDLJbUKthh4t&u=http%3a%2f%2ftracker.marinsm.com%2frd%3fcid%3dvkkb7e0xh0%26mkwid%3di0vXy6Y4%26pcrid%3d73392450956934%26pdv%3dc%26lp%3dhttps%3a%2f%2fwww.abebooks.com%2fX-Men-Visionaries-Jim-Lee-TPB-Chris%2f22768221574%2fbd%3fcm_mmc%3dmsn-_-new-_-PLA-_-v01%2526cm_mmc%253Dmsn-_-Bing%252BUS%252BShopping-_-Ad%252Bgroup%252B%2525231-_-%7bproduct_groups%7dIn PDF document text
- https://33000006.r.bat.bing.com/?ld=d3Mxa1_Z6YPPovhBj-9sIqnzVUCUwV7TSxkFcmMG3ccg4dt9vBEvClQ1FHbvPZZndNuhny9Itze_ou0qQAZM6emR-M8hVNQ9KamEzsVIzdBdXmDsPfJbFrvoo2pWvArO1-hNoXrFI40yB6-cEZuapCYQTWVf9YxD4-dg_58ntCiqnzA02d&u=http%3a%2f%2ftracking.deepsearch.adlucent.com%2fadlucent%2fRedirector%3fretailer%3drakuten%26adl_channel%3dbingproductads%26adl_sku%3d4b75dae9a2d72cea556769cf450b27f1_0BMC%26adl_adType%3dPLA%26adl_adid%3d77584333927031%26adl_device%3dc%26adl_plaid%3d4581183918004202%26url%3dhttp%3a%2f%2ftracking.deepsearch.adlucent.com%2fadlucent%2fRedirector%3fretailer%3drakuten%26adl_channel%3dbingproductads%26adl_sku%3d4b75dae9a2d72cea556769cf450b27f1%26adl_adType%3dPLA%26adl_adid%3d77584333927031%26adl_device%3dc%26adl_plaid%3d4581183918004202%26url%3dhttps%3a%2f%2fwww.rakuten.com%2fshop%2fmandnmedia%2fproduct%2fXM-0785109218%2f%26scid%3dpla_bing_mandnmedia%26adid%3d27314%26msclkid%3d%7bmsclkid%7d%26utm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3d%255BADL%255D%2520Vendors%2520Generic%2520-%2520All%26utm_term%3d4581183918004202%26utm_content%3d%255BADL%255D%2520Vendors%2520Generic%2520-%2520AllIn PDF document text
- https://fedoraproject.org/wiki/Licensing/LiberationFontLicenseIn PDF document text
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off000120d5.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x120D5 | 14396 bytes |
SHA-256: 16b67fc0aeccdb6803d7c3e7e5fe5928f8e9f783f630208c1cb4f1737a10f76f |
|||
font_01_sfnt_off00014d34.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x14D34 | 10492 bytes |
SHA-256: 8d59a50b50cbdc6e18940d99de356ccfc9078c9318108e0e2b8ae3301af62a43 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.