SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0405
Heuristics 3
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dubaipropertyrentals.net/idealow/causemusic.php/csafoiruJdzuc16257434_ib.pdf PDF link annotation
- http://dubaipropertyrentals.net/idealow/causemusic.php/xGGPiahleka_YxJbvacebwu16215298hsfk.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/vbifhhQ_khm16243601v.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/dPu16215975Qur.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/woisaoJbJae_ueaee16257436saoJ.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/kYdtunccvakbeoh16243597vho.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/uvzcxtesx16215198Gu.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/evudkGJmkGowvQxmQunhdmQncszaon16215584eYi.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/dnurG_sscsk_Qwv16257556ee.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/btlYdt_mPiPlucniGsn16257582hzQ_.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/QvbrkbkJnknmPxkxls_bJcrzaw16215770ozbl.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/unu16215353P_h.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/lbecdxGPoxnkGJrsQdnJvc16243854ci.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/lntnfGtibmYri16215462Qrth.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/_kudwsrcfntulenfuvQwunnklixP16243848tJG.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/cseJckzovdftPoYzhsucshrYus_zw16243707te.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/onwflvJPvuJrczGb_zGrwf_rxmncn16243698mu.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/uzrfieubkYlPxnmkPh_Yw16243714_.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/ixcb_re_lmfnzhGkrmddbem16215550v.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/J_rfiP_utknhoQxkPxaskt_QkvaPY16215726QG.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/bdihbrdGmfk__hzlJusc_ul16257605shY.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/zlGvxzPrGlYuatsombzov_uz16215985rlr.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/dlzdPxYucfvsaf16215468kvxP.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/enQbrlsJw16216140sJts.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/nbbPuhoftrdkPnm_xizrhiwPx16243621hJn.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/Gt_xweuuxrmikPmwPvJPbGePhhJY16257501Jwr.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/zerGJznaQww_16216152cf.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/dukscnlaGrmkcwnlumklkPtmm16257679oxi.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/Qtf16215279P.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/azGivdnwYkQm16215430Jh.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/aJJizkzhn_xcwlYhfouulxasos16216126asl_.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/QecktkYl_Yz16215228cw.pdfIn PDF document text
- http://kbatory.bazafirm.pl/icacwnYtevxbvGzG5083986_Jo.pdfIn PDF document text
- http://eksensunger.com/layouts/index.php/dhxzGxdnnhklGd6885477nYiQ.pdfIn PDF document text
- http://apbmchaplain.com/growstep/uQxxbJvGaahuvw16159352nha.pdfIn PDF document text
- http://tandemparaglading.com/extlib/dYnwtPYzibfzQYnmkbrz___zx_kQ15552253tzcb.pdfIn PDF document text
- http://tandemparaglading.com/extlib/oQbrsxfdbQwfsthlnhforkzdcu15987057vc.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/daacnGvmlJGPmuPz16215440bQd.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/aeonzQz16215640rGld.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/GdbsdvvaneQGv_uY16215267J.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/fQnoanlYJlnxaoGvubvfduhih16215184enz.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/uJhscuohwnoPdJ16215435uf.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/_itfPQocGaixxQefYiirdlYxue16243836_Qv.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/PsuiihcrkYJQwYhe16215906sJ.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/PnfiixzGtaiJuPYGravst16215618lPf.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/GJccrufGssPQd_vJYbePkvJn_16257427i.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/ePPQfffsscGQhhilxvizQtQlbd16257526clmn.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/JkPPGaYfaJGf16243622ulx.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/bmvhJu16257403cez.pdfIn PDF document text
- http://dubaipropertyrentals.net/idealow/causemusic.php/PJmkxcfJdnYclfhiuowJoa_16243858h.pdfIn PDF document text
+25 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_004_off0000af6e.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xAF6E | 19864 bytes |
SHA-256: 2b7cb36ba22b1d4e14358b52368c28dffec11c1e911711bba7c8ddd01cca0eab |
|||
font_01_sfnt_off0000e502.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xE502 | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
font_02_sfnt_off00011ac3.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x11AC3 | 20828 bytes |
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.