SUSPICIOUS
32
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0405
Heuristics 2
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dubaipropertyrentals.net/organizefree/carrydetermine.php/PPr_wz_GxQ_Yz16244942ez.pdf In PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/PtPaJQvfPnrYfznzQfiPklbJ16217598Pwnn.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/lrodQzwQskrQssQJudzzfGPJ16258676nJY.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/buxkzoJsYnuhmzhwnmrxl16217697J.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/QdmebaxevmrmxittQfxbfcP16244845tz.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xammbdoetnczonnrtdiYQenu16258803_f.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/fQPznshufi16258767wwx.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uPePdxsPmiQfbcfYPruQGaQa16217325shsw.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/Padi16217244sx_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/wlbavvf16244791kYod.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/tusvGzbkrizkxkxavoQxPzfdszPztc16258850m_ru.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/enGtYznk_lYfarhzsPsGbrY16217696msP.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/drsYzoccfYrhedmbcmtiYvYnn16258602fJo.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/br_tkdGtu_mxottGnkdditPoh16258760tYv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kmmoJklbollkx16218069f.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/omreorJdrvzPwaGairbJvahPewvaa16217545t.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/swomhhGJmffdrrJPdcke16217670PehP.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/slYmtsYGoYJ16218016Gi.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uuics_ss_fwu_mbi16217304P.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/rikdt16244945Ph.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/umYxlkzxYJvxhcucxtJlJrbid16258618m.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/fek16217661_wa.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/rzPszmlxo16218046tihh.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vGvdnGdswc_wv_lrra16217698mbb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/nztnicmGuYm16217329h.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/oihkudxdxhdi_GrGfJ16217715k.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zbblJbJtPztilbiil_xa16258597m_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/cdzolJtPiYcPubaJxnaYkhetuttm16218083P.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/wctkds_hv_adfmmwQrhbi_mQx16217999ef.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/aub16217201hQ.pdfIn PDF document text
- http://www.toledano.fr/media/QnazekicoctcYx15901574a.pdfIn PDF document text
- http://www.asconbs.dk/asc/ceGhzb16000541mxbr.pdfIn PDF document text
- http://www.toledano.fr/media/wYYdkYuYhin15917964tGve.pdfIn PDF document text
- http://www.abualhaj.ae/managecarry/PashYYearivwGutnYGlumllwkxmb16004227dYtY.pdfIn PDF document text
- http://citrusheightsplumbing.net/tmp/GGkolzlru_iavrcwaoJhnkdskhleQ16126995ze.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/wfducPlmbfvcbtPYtiGfY_wGxJtfo16217557s.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uxcdffihYPkoah16217477wPw.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/osb16244793rfai.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/fYkePocduzkQdJ16244853llon.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uxvzmov_dt_tds16258696Q.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/sirQiQmtm16258840J.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/cstmkx_GGsiJG_zxxbn16217392ieu.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kntPczaxdcQYQunvrQbmvt16217210hxc.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/voQudibkkilznvztwQQl16217605mdv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zborxbmbbnYaQfJkmrJaePnYoblcn16217318PJv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/_liJhtvdJxm_hvmf16258813bzkt.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/wJcQhsmrQvawJP16218107Ph.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hGoJlrirc_whdrtvQzxGltJxoG16217777s.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xkvnc_aeodrxnzQPke16258654oo.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/iaYd_kmJfzbYGmGnJrzQeecv16258871Yh.pdfIn PDF document text
+23 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_004_off0000abd7.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xABD7 | 19856 bytes |
SHA-256: a930245e90be17a336a7679d31e9d416ddec66c65020bec75b59b2e2bfc19120 |
|||
font_01_sfnt_off0000e169.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xE169 | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
font_02_sfnt_off00011726.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x11726 | 20828 bytes |
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.