SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0405
Heuristics 3
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dubaipropertyrentals.net/perhapsactual/momentfield.php/w_bsiosxntfYazc16204216sYo.pdf PDF link annotation
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/uxmwhllbGP_froGddztcas16204531uclr.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/QcYoownJfG_zzf16203834kGQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/YfhhvJnlv_bcwQxibmGesiulxkau_16203959wYdl.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/vYitPQ16204501o.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/txelf16203815GeQP.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/uQP_ezxcotG_a16204546wkmQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/Qd_uwcalzdkJivu_ul16204511z.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/kPcdJadiYnGQxeks16204600_k.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/_eYreufQdzvQeQcmhtQaQlxvhcmt16204677biJd.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/ihYorwuiQebrbvzixtxc_rbb16204675biit.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/xhkJ16203839zQkJ.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/PQe16203842nxr.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/PftQPQxrirbrbJx_ofrQeo16204027J.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/ifeYfJcbtmJkvQPrs16204088fa.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/zdza_cQ_QuaGulhYPP16204055suP.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/_tYYe_sxitsiGPrvu16203884fbQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/Gollh16204097toQz.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/axcwct16204553e.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/xcuvdlQcJwranJexQGbQhPw_d16204534viJ_.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/QxebhJz16204075df.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/tatitboincz_mYodvQYfbhumwdv16204136vu.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/oslYru16203970llPs.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/bxfiYruha16204089tmc.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/iblle16203908l.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/dniYzPsbfkmlmt_tGQxwnthYrkuw16203999niPa.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/vubxvYd16204716d_.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/wboumtGuY16204525Qz.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/tltziuclQhPatdJdiQdxJ16204051b.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/wnJon16203899iurw.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/QmrJtweaf_icirw_ilGeGnQJJ16204175xY.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/nrQnfcfwQaco_fdtxvaulYvixcPsm16204594Qxu.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/vGeuwebhdrxueducbwbGrksxrctvd16204617rGxn.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/JizGkssae16203957skin.pdfIn PDF document text
- http://www.kryonbrasil.com.br/causesupport/GmG_kcxlo15659412lnPa.pdfIn PDF document text
- http://www.kamilciepienko.pl/friendbreak/xlo15692422tGlx.pdfIn PDF document text
- http://www.toledano.fr/images/YtP_ukraz15935460nP.pdfIn PDF document text
- http://www.kissbrideco.com/upload/beesvw6057383dPz.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/fiQow16204588zo.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/_fcd16203850wr.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/zeheiexdtJnGJmJcadJ16203985fPmQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/sYtvGJbfc_lnwr16203823d.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/xonhbGrdYlsdzGszeeneulQ16204578avwh.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/QYxYJuwfriwzQioscbkYk_nccPb16204595oxd.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/ea_fhhnQcekmJitfPckksxcz_zi16204547tow.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/sdzkkxvesxzxsufYutnruu16204039kY.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/JaPrwzlavdeeJdkQneox_16204210ee.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/fuiQbcdb16204693kPQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/Gn__audm_tbYivQfmh_Q_citsi16204218Yl.pdfIn PDF document text
- http://dubaipropertyrentals.net/perhapsactual/momentfield.php/vPu16204133baP.pdfIn PDF document text
+26 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_004_off0000b62f.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xB62F | 19856 bytes |
SHA-256: a930245e90be17a336a7679d31e9d416ddec66c65020bec75b59b2e2bfc19120 |
|||
font_01_sfnt_off0000ebc1.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xEBC1 | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
font_02_sfnt_off00012184.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x12184 | 20828 bytes |
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.