SUSPICIOUS
40
Risk Score
Machine Learning
- Nyx PDF Classifier suspicious score 0.3350
Heuristics 3
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://uncpbisdegree.com/download3.php?q=xmas-card-design-studio.pdf In PDF document text
- http://uncpbisdegree.com/download4.php?q=xmas-card-design-studio.pdfIn PDF document text
- https://www.thestationerystudio.com/christmas-cards/studio-designs-christmas-cards-c4569.htmlIn PDF document text
- https://www.thestationerystudio.com/index.cfmIn PDF document text
- https://www.thestationerystudio.com/christmas-cards/In PDF document text
- https://howchristmas.com/tag/christmas-card-design-studioIn PDF document text
- https://www.designstudiocreations.com/In PDF document text
- http://riverside-resort.net/1/swallowing-the-moon-poems.pdfIn PDF document text
- http://riverside-resort.net/1/understanding-nursing-research-6th-edition.pdfIn PDF document text
- http://riverside-resort.net/1/standards-focus-character.pdfIn PDF document text
- http://riverside-resort.net/1/togaf-solution-architecture.pdfIn PDF document text
- http://riverside-resort.net/1/the-art-of-selling.pdfIn PDF document text
- http://riverside-resort.net/1/the-dopefiend-part-2-of-the-dopemans-trilogy.pdfIn PDF document text
- http://riverside-resort.net/1/sony-slt-a37k-digital-cameras-owners-manual.pdfIn PDF document text
- http://riverside-resort.net/1/teaching-with-caldecott-books-activities-across-the-curriculum.pdfIn PDF document text
- http://riverside-resort.net/1/the-long-lost-map-pierdomenico-baccalario.pdfIn PDF document text
- http://riverside-resort.net/1/solutions-horngren-chapter-23.pdfIn PDF document text
- https://www.designstudiocreations.comIn PDF document text
- http://www.ascendercorp.com/In PDF document text
- http://www.ascendercorp.com/typedesigners.htmlIn PDF document text
- https://683629.r.bat.bing.com/?ld=e3CLnq25BrXYMtPQxApZj9cDVUCUwuQdlbtivBm8NBlpvt5O3olgNuxkTH3jEVmmkoSKTZsA730a2BygylALRThT-XzlPAO9_mz3wooEX7f43U-sgXHfaB1ROjbsbGawuaWuEa8HO13Ix50pK6p2GwJTg1cWqxNbfiTfNTEXKu1ABs_g4Q&u=aHR0cCUzYSUyZiUyZnd3dy5ub2JsZXdvcmtzY2FyZHMuY29tJTJmYzMyNzNkeHNnLWhvbGlkYXktcGFsbXMtaHVtb3ItY2hyaXN0bWFzLXBhcGVyLWNhcmQtbm9ibGV3b3Jrcy5odG1sJTNmbXNjbGtpZCUzZCU3Ym1zY2xraWQlN2QIn PDF document text
- https://683629.r.bat.bing.com/?ld=e3gDiqjKZzExp_jh-WEDl-3TVUCUzF1e7xJJMk9_gZ8F_a73VQ6Ji6HkGGYCTdPTtv3_vVY4cMRzdUutkgzlVvfN4h-okjjw8CeFd1x2I9kwGnGPp0MEKtCQnWuwOJu94NqOeqApYyO_6B-iQhfb28zKKOSimoQDWuCMcYih7EMTK8_Te9&u=aHR0cCUzYSUyZiUyZnd3dy5ub2JsZXdvcmtzY2FyZHMuY29tJTJmYzY2NjVjeHNnLXZpc2lvbnMtb2YtY2hyaXN0bWFzLWZ1bm55LWNocmlzdG1hcy1jYXJkLW5vYmxld29ya3MuaHRtbCUzZm1zY2xraWQlM2QlN2Jtc2Nsa2lkJTdkIn PDF document text
- https://683629.r.bat.bing.com/?ld=e3qPwjPHjZIOaRV-WTvIahgTVUCUx8jSJLIMuL5poYuWzKFEmMx2AWwc1TH9TCmAGlSE5jEdLMSMFAzDaBkB_tj_o6zBOCRgORLSYjs2j5wCoopoEQC66CUNiSox1O5tVJKwk_bbAVNgWLu9UX9dutJ5tsHSTRaVuORrcFQfl1lvrkMJx9&u=aHR0cCUzYSUyZiUyZnd3dy5ub2JsZXdvcmtzY2FyZHMuY29tJTJmMTc4MS14bWFzLW1hbnRsZS1odW1vci1jaHJpc3RtYXMtY2FyZC1qb25hcy1iZXJnc3RyYW5kLmh0bWwlM2Ztc2Nsa2lkJTNkJTdibXNjbGtpZCU3ZAIn PDF document text
- https://www.designboom.com/design/design-studio-christmas-cards/In PDF document text
- https://www.shutterfly.com/cards-stationery/christmas-cardsIn PDF document text
- https://www.canva.com/learn/christmas-cards/In PDF document text
- https://www.postermywall.com/index.php/g/christmas-greeting-cardsIn PDF document text
- https://www.studio.co.uk/shop/en/studio/christmas-cardsIn PDF document text
- https://www.hallmark.com/christmas/christmas-cards/In PDF document text
- https://www.hallmark.com/christmas/In PDF document text
- https://www.shutterfly.com/cards-stationeryIn PDF document text
- https://www.snapfish.com/photo-gift/christmas-and-holiday-cardsIn PDF document text
- http://go.microsoft.com/fwlink/?LinkID=617350In PDF document text
- http://go.microsoft.com/fwlink/?LinkId=521839&CLCID=0409In PDF document text
- http://go.microsoft.com/fwlink/?LinkID=246338&CLCID=0409In PDF document text
- https://go.microsoft.com/fwlink/?linkid=868922In PDF document text
- http://go.microsoft.com/fwlink/?LinkID=286759&CLCID=409In PDF document text
- http://go.microsoft.com/fwlink/?LinkID=617297In PDF document text
- https://www.designboom.com/design/design-studio-christmas-cardsIn PDF document text
- https://www.canva.com/learn/christmas-cardsIn PDF document text
- https://44104706.r.bat.bing.com/?ld=e3wzQCuPUFRUp1YMlIw2Q-SjVUCUzrfaVbPhsVSgje0RBtrfWys1R57QVGChoFh_uDFicJTJvzeADoxtRz7fNTR-UQRGAewMwo6HnT2tJLpW_svd02cGnkrzRSU_T0PvFa8wkb9ZCHCnVQlh3nqKQ5W1ykuaPJxRNCP7fVjicqBB7YG7vj&u=aHR0cCUzYSUyZiUyZjcwNDIueGc0a2VuLmNvbSUyZnRyayUyZnYxJTNmcHJvZiUzZDQwMSUyNmNhbXAlM2Q0NTU1JTI2YWZmY29kZSUzZHBnMzcwMTYlMjZrY3QlM2Rtc24lMjZrY2hpZCUzZDQ0MTA0NzA2JTI2Y2lkJTNkNzU5MzUwODE5MjY4NjUlMjZrZHYlM2RjJTI2a3BpZCUzZENQXzg3MjVfNzM1OTQ1ZGU3NDI2NGYwMjgyN2IxY2NlY2ZlOGQ1ODUlMjZjcml0ZXJpYWlkJTNkcGxhLTQ1Nzk1MzQ2NTA2NDM3MTYlMjZxdWVyeVN0ciUzZHhtYXMlMjUyMGNhcmQlMjUyMGRlc2lnbiUyNTIwc3R1ZGlvJTI2YWRncm91cGlkJTNkMTIxNDk2MDUxNTQxMjk2NyUyNmNhbXBhaWduaWQlM2QyNzgzNzI2NjglMjZsb2NwaHklM2QlMjZ1cmwlM2RodHRwcyUzYSUyZiUyZnd3dy5zbmFwZmlzaC5jb20lMmZwaG90by1naWZ0JTJmY2FyZHNwZHAlM2ZjYXRlZ29yeSUzZFN0b3JlQ2F0XzE2ODU3JTI2ZGclM2RlYzNmOTg0ODMzYTk0Y2E0ODBjODdlMzZlYjIwODNhMiUyNnNrdSUzZENvbW1lcmNlUHJvZHVjdF84NzI1JTI2ZCUzZDczNTk0NWRlNzQyNjRmMDI4MjdiMWNjZWNmZThkNTg1JTI2aXN0Q29tcGFueUlkJTNkYjg1NjFjNGUtZWJmNS00N2U5LThjNjMtM2YxZDEyN2FjMTZjJTI2aXN0SXRlbUlkJTNkeG1xbGl4bWltbSUyNmlzdEJpZCUzZHh6d3clMjZDSUQlM2R1cyU3Y3NlbSU3Y2JuZyU3Y3NmJTdjSVJfQmluZ19TaG9wcGluZyU3Y3Vua25vd24lN2NvdGglN2NDUF84NzI1XzczNTk0NWRlNzQyNjRmMDI4MjdiMWNjZWNmZThkNTg1JTI2a3MlM2QxJTI2Q0lEJTNkdXMlN2NzZW0lN2NibmclN2NzZiU3Y3Nob3BwaW5nX2hvbGlkYXktY2FyZHMlN2NjJTdjb3RoJTdjJTI2a19jbGlja2lkJTNkX2tlbnNob29fY2xpY2tpZF8lMjZtc2Nsa2lkJTNkJTdibXNjbGtpZCU3ZAIn PDF document text
- https://999773.r.bat.bing.com/?ld=e3cWsNIpE3TJf5ZqQrvClQiDVUCUz7Ojd8C-n17O13d_YoghUNwDiftwGLQJKc5Cl_sbCzIq0P-qgf-0_mbxiU5e1RR04VUfLud5igNqc_XFwKrXc2mg3QaJOxE758YxmvWIVMtm0rfQpBJAxGThP4FNxg1Sb-5nY9DScJbbNg5C6iDP6V&u=aHR0cHMlM2ElMmYlMmZ3d3cudXByaW50aW5nLmNvbSUyZmZsYXQtZ3JlZXRpbmctY2FyZHMuaHRtbCUzZmF0dHIzJTNkMTkxNDIlMjZhdHRyMSUzZDY0OSUyNmF0dHI0JTNkNjUxJTI2YXR0cjE5JTNkMTE2NCUyNmF0dHI1JTNkMTE2OSUyNmF0dHI2JTNkNjY5JTI2cHJvZHVjdF9pZCUzZDE2JTI2aDElM2RDaHJpc3RtYXMrQ2FyZCtQcmludGluZyUyNiUyNml2JTNkX19pdl9tX2VfY183NzEwMzI5MzQ5NjMwNl9rXzQ1ODA3MDI4ODExOTY5NTdfZ18xMjMzNjUyMTMwODAwMTUyX3BfMl9iX2JlX2RfY192aV9fJTI2dXRtX3NvdXJjZSUzZGJpbmclMjZ1dG1fbWVkaXVtJTNkY3BjJTI2dXRtX2NhbXBhaWduJTNkVVAlMjU3Q1Nob3BwaW5nJTI1N0NHcmVldGluZ19DYXJkcyUyNTdDRlRPJTI1N0MoJTI1MjQyNjUpJTI1N0NMMyUyNnV0bV90ZXJtJTNkNDU4MDcwMjg4MTE5Njk1NyUyNnV0bV9jb250ZW50JTNkTDMlMjUyMCUyNTdDJTI1MjBDYXRjaC1BbGwlMjUyMCUyNTdDJTI1MjBHcmVldGluZyUyNTIwQ2FyZHMIn PDF document text
- https://2514355.r.bat.bing.com/?ld=e3RQvzHl5nChNJAwrrjbfoEjVUCUwE7WzPanfZ-wIpkKtcTyapfpLF6b0SV5u0DiK3x2F2tQTC-Tyr1Z73cmPvLwAeV0HPvFLL4iQ-UiE55Gwwy591VpRC6LkBpvHz4xk7maoy6qY0CB9hoXyCwBeTDHjYMmlhaN0opqX_3vgyD-vRsjB9&u=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 PDF document text
- https://2514355.r.bat.bing.com/?ld=e3xXh6ld8eSGkxLa4Wud1LQzVUCUx4vaz8YakXHih1doWqCYUKG_1_k5FvlrAnsxW-YOPehD67EQ5ZAfqe4M_PrgmOFiP5rM8VwWxvUuOUA0XccmTTc5DTepTJ1Zczb8s7LGs-qOXPj-J9vLlT9Qc6f8KoNXFQIriUHsSbMRAS8tJFs04A&u=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 PDF document text
- https://2514355.r.bat.bing.com/?ld=e3NcreNzYber5yMd_VwpsDqDVUCUzYhsRMZvFzmqZll9u8eL_Y1dyPQYwyjFZpaGO4oc17zXvJiuvhbk-a5F24VOWsRriAzderFcJ5SChK3wP-2yjxF9zDXz-iXp9EwATonvj1m_VMvuG4t-t-pAcmmCObVo93JkoQfRDwFKRRPPysjtOM&u=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 PDF document text
- https://230137.r.bat.bing.com/?ld=e3sNigUo2Pqlk2HCT28RFITzVUCUywuukJDzTX6MGhepWoB4r261UqOIBk_070qU3g8I4IRRcXKvI1waKEYoO54bl2O-o18jYotS_QnKkslAl48cvQFVCF0bx3UYNnWRBbrOsTpIfUXkpJPmE2SZmMUwYF2yUxnlLftnxhhzjduqTGcZTK&u=aHR0cCUzYSUyZiUyZmNsaWNrc2VydmUuZGFydHNlYXJjaC5uZXQlMmZsaW5rJTJmY2xpY2slM2ZsaWQlM2Q0MzcwMDAyODQ4OTA4MjQxOCUyNmRzX3Nfa3dnaWQlM2Q1ODcwMDAwMzY0MzczODE2NiUyNiUyNmRzX2VfYWRpZCUzZDc2NTUzNTM5Njk0MzUwJTI2JTI2ZHNfdXJsX3YlM2QyJTI2ZHNfZGVzdF91cmwlM2RodHRwJTNhJTJmJTJmd3d3LnNtaWxlYm94LmNvbSUyZmxwJTJmY2FyZHMtdGVtcGxhdGVzLWFuaW1hdGVkLWdlbjEuaHRtbCUzZnBhcnRuZXIlM2Rtc25lZSUyNmNhbXBhaWduJTNkJTI2c2VhcmNoX3VzX2NhcmRzX2Jyb2FkX2ZyZWUlN2VEZXNpZ25fQ2FyZHNfQnJvYWRfRnJlZSU3ZSUyNnV0bV9zb3VyY2UlM2RiaW5nJTI2dXRtX21lZGl1bSUzZGNwYyUyNnV0bV9jYW1wYWlnbiUzZHNlYXJjaF91c19jYXJkc19icm9hZF9mcmVlJTI2dXJsJTNkc21pbGVib3guY29tJTI2dXRtX3Rlcm0lM2R4bWFzJTI1MjBjYXJkJTI1MjBkZXNpZ24lMjUyMHN0dWRpbyUyNm1zY2xraWQlM2QlN2Jtc2Nsa2lkJTdkJTI2dXRtX3NvdXJjZSUzZGJpbmclMjZ1dG1fbWVkaXVtJTNkY3BjJTI2dXRtX2NhbXBhaWduJTNkc2VhcmNoX3VzX2NhcmRzX2Jyb2FkX2ZyZWUlMjZ1dG1fdGVybSUzZGZyZWUlMjUyMGNhcmQlMjUyMGRlc2lnbiUyNnV0bV9jb250ZW50JTNkRGVzaWduX0NhcmRzX0Jyb2FkX0ZyZWUIn PDF document text
- https://fedoraproject.org/wiki/Licensing/LiberationFontLicenseIn PDF document text
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00011de9.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x11DE9 | 14904 bytes |
SHA-256: 4ce927fa7a4c23aff578fb031fd65e413d37b0964179afda6f4f5e800d2e32c9 |
|||
font_01_sfnt_off00014b14.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x14B14 | 11032 bytes |
SHA-256: 9c12fddff18a5a1182b3fc3a60089ff37c7f81ffe7e567e4f7651d3cd00acc60 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.