SUSPICIOUS
32
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0405
Heuristics 2
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uot_cmiQxu_kmuG16217457k__Q.pdf In PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ibJYxYf16244857mcw.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JJ_x_r16217589sce.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JJnQcethYfGc_mnrhtnmwhtYksG16217749x_z.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/fdarkdPztJ16217340ddJ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/husrbuPksGvr16217387ll.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/tPvoGe_rn16245007_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JkGnJrhaslzobksebY16244847dJP.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xroePbPQfxbr16217478mu.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/n_mokPJrwldzbklolmhnweGutfaP16217334c__h.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/dQmauzmYGlmeexrPxhJmfvaudxfad16217959k.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/dcthvkacPvaus16217462sdr.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/PkemikaztQ__lzQP16244798z.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/evflmtuvwvJuesncJ16217434Gn.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ktnlnxemxrYbshwo_Q16217341t.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/bnlrznzfwdeQcalskhQecxz16244989nek.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ifYmiPGdGnehxki16217753J.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/dtxQzsfftakhQmmfwse_c16218028wi.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/orbzfluulheY_kfnkwnuz16245003Je.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/odY_tlJzYlhhPhYkhhxmrbe16218053nsf.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xxwcvfb16217471h.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kzGbQx_wudtv16218049kdY.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ilmek16217252u.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/tmGzewJ_16244953ntvo.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/z_zffPihtrrJYhuQkuGtxnPimloxP16217702mmh.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zborxbmbbnYaQfJkmrJaePnYoblcn16217318PJv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ae_dh_nsfvumnJorQfPJdwG_16244871u.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uxurmdQsJQa16244978nteu.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/QGGbwGrivdPbmnshks_oY16244894kzi_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/nxufrwxonchfzfxtvveaktlb16217311ahtu.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ore_wJJvPsxloJabnPczdecmmlcbxu16217298Gt.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/nxJvJ_GrkJoxthavPlcskuQYn16244790P.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/mP_wne16217261bP.pdfIn PDF document text
- http://thedvdduplicationcompany.com/boardable/ai_twhodxJddssu15942400tz.pdfIn PDF document text
- http://citrusheightsplumbing.net/tmp/YuPGn_ksGelxc15916186w.pdfIn PDF document text
- http://ide.plandiv.gov.bd/wp-content/irvnsJ15739581e.pdfIn PDF document text
- http://citrusheightsplumbing.net/tmp/xbuiwsx_Pw15643262h.pdfIn PDF document text
- http://zakon.katolik.pl/rss/mcebcJwlfowhmkdxPorJG14482147u.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/sbloPtPfQzoYdmxtfdcalvtlah16244900ubG.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/lzedlldha16217748t.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JwmesdetmlmrdhiewuYwfrJzaPzv16217950mnx.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kdeQu16217388r_z.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/iubwzwentochbPfbc16217332s_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hzzkxsGcJwaJhPeYhrYlPllYvhcaPJ16218037ocd.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/tJdkitPbJorn_rbPPzcYcrui16245010Pc.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/nwocldrQvmsbznx16244979hovb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hdxrrmdxPmiQcQbhGzwlnJ16245025z.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zerukhJhbd16217547zP.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zGuQ_xlmfhrcztuc16244956ak.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/okurQnnPrdJsc_nmGtd16218051il.pdfIn PDF document text
+26 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_004_off0000b88e.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xB88E | 19984 bytes |
SHA-256: 7c9b833562f8a340856ba477450e53eb3a384ca9e0dc32cd01be4740f4b5e909 |
|||
font_01_sfnt_off0000ee7c.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xEE7C | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
font_02_sfnt_off0001243f.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x1243F | 20828 bytes |
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.