SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0405
Heuristics 3
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dubaipropertyrentals.net/organizefree/carrydetermine.php/izvtoewbQaii_esJYv16244786rYhc.pdf PDF link annotation
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/awPtwb_ebabsrtw_QfPaatdJiu16244986i.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/cbdlxodPGJxssr_f16217435m.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/oznPbmautb16217455GQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/dtPQG_adGeskleJe16217472Yx.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uuimsfv_kfh16244943PalY.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/nnPfkvh_o_nbsizhezzdo16217232zmG.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/w_fza16244820ar.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/rrGx_mkfuwtfv_Jnhhcmiuoiixxv16244816r.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/_JJn16217716Yb_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ccfrdn16217703cdl.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/bcaQf_wkfJ_evx_YwdnQbhm16217706zw.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/cz_sfzPlhmtnocxbmQdvvx_lGwuehc16217437t.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/sswfarPrrlxv16217728ku.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/YtwtYnGticzlPc16217970crw.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/irbzwGacaGnmnwdk_lunu_sPaeimcu16218074lPd.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kiYzhwGkQYwnlcaGcGoeQiwernoko16244829ab.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/osb16244793rfai.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/bdoruowtQaadwxkaP16217606Jm_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/eknuQhk16244887but.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/Qsi_ea_rxfm16217236t.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vlndlhbQmckGodv_bmG16217308ur.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/eetskzmfiQtQaxGrlzcmYP_k16245037nJGm.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/Qhr16244890r.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/QdhbdraacehcwtvJrnuPt16245079oe.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vh_cGkcs16217424Y.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vGb_xxvJeYzhwQulJiziwzw16217990Q.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/_Grr_JParJJidfrrouP16244831cfP.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/covbf_zwQYrsvaGkQoYfvfi16244874smQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/dmvhuvwhxQtsPPrzvxvd__sma16217338bv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/iGxcGvimt_toeztoafbtPlQkuQh_m16217587d_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/bemuruhhh_kx16245004r.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hsiruPkfiidmebcono16244946QxJi.pdfIn PDF document text
- http://cardoor.es/historytrain/nGwwlnltmomc15924955xcf.pdfIn PDF document text
- http://www.asconbs.dk/asc/nzwfsmnY16116660c.pdfIn PDF document text
- http://ns4.asconbs.dk/logs/zrmrkrQbJsf16214064hk.pdfIn PDF document text
- http://cardoor.es/historytrain/_nQhPdlY16020380JlJb.pdfIn PDF document text
- http://cardoor.es/talkremain/weuxteh15847198crQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ktnlnxemxrYbshwo_Q16217341t.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/draxvoa__xJifms16244944cm.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/h_GPvhmcao16217314Yn.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JsmdYuvkwJknumrmikxmrzmdnQ_u16217645dxd.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/PGhs_szzk_tuPJvdbfchlJYtfel16218003rnc.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xGlslar16218022v.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/tzlduYPizwbhGQxJ16217555vPl.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/nbzoQoxhaweskfd_GJfGfakesdmkP16245035z.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/QskefriJrvbeGc16217231Gfao.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/PkQntwswzJan16244852z.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/wPkuncriw_wbwmdbhvn16217550wGti.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/YfPxb16217213J.pdfIn PDF document text
+26 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_004_off0000b40c.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xB40C | 19936 bytes |
SHA-256: affbefb82dbdd93497b61fa52ac768312a4439660e72f582baba2c3c5d6075d6 |
|||
font_01_sfnt_off0000e9d4.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xE9D4 | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
font_02_sfnt_off00011f97.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x11F97 | 20828 bytes |
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.