SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0405
Heuristics 3
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dubaipropertyrentals.net/organizefree/carrydetermine.php/eek16217586lwu.pdf PDF link annotation
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/cvm_sm_zfbe16218034d.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/omor_oseQfudG16218167alcf.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/btlfbrifQktfxPux16244983a.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ss_Jrvw_xaomGuheheekovGo16217335vzP.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/iouubixetPhsfY16217473Jkfh.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/rzPszmlxo16218046tihh.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/wkfYvn16217313_h.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/rrixnGlna_PxhYvvGlz16244792Gz.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/szlliGQto16218086Yifz.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/wctkds_hv_adfmmwQrhbi_mQx16217999ef.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/YlbdovewfGiwoQvd16217965hY.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/Qsi_ea_rxfm16217236t.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xlukvzfrG16217390G.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/rbaPs16217944n.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JtcePdsnGs_uelen16244878Ja.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vzhxYkdmGGld16244987J.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xrwzcnt16217705rze.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vbizdcxtJzYs_niYuoJ_whomnv16218041kb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zGuQ_xlmfhrcztuc16244956ak.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ikdbfGhloe16218017didr.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zxYceezedudzJfY_QtcdJfv_16244881t.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ae_dh_nsfvumnJorQfPJdwG_16244871u.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/Pztd16217618dxkv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kzGbQx_wudtv16218049kdY.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/PYktQi_hoamJewkxc16218094x.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vctPYisJJYbckstPPvfGmlm16217653vhfv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/mQziQw_icQsoczYlJzvfsGhkzr_rae16244996er.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zfbnhrmhmvQGPJPQimrziwusfkJ16245082i.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/scz16217581ohl.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/nvabvhmtGsvurP16244907cvQw.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/mGskaYJrczehbrkk16218042uw.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/Ykswl16244796mPwb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xncsonr16245023_hQi.pdfIn PDF document text
- http://www.stripvip.com/wp-content/kePuwQwfsxk11752802i.pdfIn PDF document text
- http://goldae.ch/images/ehJxui_szYhair16061289nG.pdfIn PDF document text
- http://citrusheightsplumbing.net/tmp/imfbPdwxzwnalfdcavisl15643317t.pdfIn PDF document text
- http://goldae.ch/images/efbza15838047Gf.pdfIn PDF document text
- http://www.technicalanalysisdaily.com/docs/rvivGwvetriiaJwJiomuk14500975QQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/lzvPYfsfcJexlGmxauGr_tndv16217482dJu.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/GaQfGczizmviurdakrz16217206ax__.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/tvhibdbPQkxd_ocftscbuoQx16217549xmhh.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/lQikvlkkfcrfhnbfvbeoG16244861avGs.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/YszYdfmadnzf_Y_xvehenvPwmwb16244788xirY.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/YPcGoaev_oeYoYzszlYlsiJnhwd16244802kbw.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/dea_vztwQdhYarv_lmneJof16217346h.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/iuJxQbYxGdfdnPnoJodffJsYbwlfw16217394s.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ffsa16217742feJs.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/fzxoowPQwYJrJhkdQxnGranrvtz_z16217639rhPY.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hkifJkQeovJsecl16217331wvbv.pdfIn PDF document text
+27 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_004_off0000b81e.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xB81E | 20124 bytes |
SHA-256: c367e6235ca029ba7be295e204adb32a3c00b953e96b18fd45514583ff955bc1 |
|||
font_01_sfnt_off0000ee8e.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xEE8E | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
font_02_sfnt_off00012453.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x12453 | 20828 bytes |
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.