SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0314
Heuristics 3
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dubaipropertyrentals.net/organizefree/carrydetermine.php/evflmtuvwvJuesncJ16217434Gn.pdf PDF link annotation
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kucnYstsfPrchedbsYQPuusc_16244875kf.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zPatwt_wzokdaharPbt16218031n.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/eftlrhtmkPG_wi16217419bsho.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/swomhhGJmffdrrJPdcke16217670PehP.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xzfJPmQ_Qkce16217483ink.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/undfhlawhkhirirnfvv16217604mhhz.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/h_zeaz_xurYJrbw16218026rdb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JbQJzulvozhPmaxiomkr16218114f.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/YfPxb16217213J.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/fmrhcJozJcm_oxrkzsrzfQPG16217711bl.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kmmoJklbollkx16218069f.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/rrGx_mkfuwtfv_Jnhhcmiuoiixxv16244816r.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/z_zffPihtrrJYhuQkuGtxnPimloxP16217702mmh.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/_iaxGk_di16217552naz.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/YPcGoaev_oeYoYzszlYlsiJnhwd16244802kbw.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ebJehts_YGdQxwx16245050_JdY.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JvwYmbindYeGJnY_PPndGemtr16217310rvsu.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/PooaJiviefcmJnsxmvohmcan16217416lb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JkGnJrhaslzobksebY16244847dJP.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kmc16217737z.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/mu_lbielmm16217452tJQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/PPr_wz_GxQ_Yz16244942ez.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/krt16217326rva.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/iGzYodabkPxtwncthYzhloevcwvblP16217556ta.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/Q_aruz_YfncdcxuhxrrburP16217249Gr.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/odY_tlJzYlhhPhYkhhxmrbe16218053nsf.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/klwaaYseG16244950cQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/mGmbJGsaiGarYnebaPdkdbc_fJx16217514svux.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vGvdnGdswc_wv_lrra16217698mbb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ePJnQtkmQfePGenk16217565haQx.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/tdzlQmboiPexueJdbfdwuc16244872nhx.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/tQuQvcaGtJw16244959zc.pdfIn PDF document text
- http://www.olviya.com.ua/actualwhole/vGxt_r15662351zcG.pdfIn PDF document text
- http://parvazbronze.ir/iYPdhYn4395261.pdfIn PDF document text
- http://stripvip.com/wp-content/dlYuiGvmcP_fcleJ11000504P.pdfIn PDF document text
- http://www.toledano.fr/media/cPJhuiieQknGQxzGk15870931xzhs.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xsYY16217594bJ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/awPtwb_ebabsrtw_QfPaatdJiu16244986i.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/wvwJ16217692eu_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/clhrPomtob16245002d.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/aJxPPY16244980v.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/sJmQf_sddJYwubGn16217591f.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/swx16244893c.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/tQlQsl_aosaioJxtshYcade16217583wciv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/Ydba16217383Jrxl.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zbksGuddcaskhcrkerGl16244809f_s.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/tJdkitPbJorn_rbPPzcYcrui16245010Pc.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hnuvdYvQPmhrtzQxeYhhcxb16244832zv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/tYafstmaazYccJhPo16245076lnbm.pdfIn PDF document text
+26 more URL(s)
🗂 Part of campaign:
dubaipropertyrentals.net
262 samples
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_005_off0000c77f.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xC77F | 20104 bytes |
SHA-256: a599e7cd47ffd3fb4bd3ea598b34bf65de80a47753c0140a87e007779b0ba926 |
|||
font_01_sfnt_off0000fdcf.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xFDCF | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
font_02_sfnt_off00013395.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x13395 | 20828 bytes |
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.