SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0166
Heuristics 3
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dubaipropertyrentals.net/organizefree/carrydetermine.php/intuclwlGdmmPkwQGan16217812rn.pdf PDF link annotation
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/xQc_zY_chPJhd_alfwvQ_rs16217602rkds.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/Padi16217244sx_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ivkdJln16217876ffz.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/oodtmJva16217767P_c.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/GvlvhkdrPa16217963im.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vGvdnGdswc_wv_lrra16217698mbb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ovwahatldY_YGibwvQG16218183n.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hoiPxiddGrPQ16217938uo.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/wflhaz_xifnuw16218033Jox.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JGvoasrbG_G_PhxJ16218172wiu_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/wconhxkYGtJx16217426s.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/orotiacthkvaabQlkohdzfdi16217967k.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ktnlnxemxrYbshwo_Q16217341t.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/Qvfkhniairh16217766bGz.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/PdzluzaezcJG16217832it.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/nwhcmnvGwm_16217844b.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/QQfi_bPc_16217316tm_x.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hzlhr_iJuYc_kuPowhceuknhtQcGa16217379f_r.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/_bdonPnJzhYtimaPuxYntba16217888ie.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kaQvGndwt__dfv_JlP16217468e.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/rznGreddzvzthooGfsGbucnalxa16218054_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/Jzibfwvlaobmmvl16217343Yaim.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zhktawreivrYlJhmvnw_reofsQt16218137e.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uzs16217559rcwk.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/midzYiadbxzo16217597v.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/_mtntsdhdco16217291bu.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uuwi_audad_zbefrifcwGkQJvkk16217902fszv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/_JJn16217716Yb_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/lPbdertJoo__tcmQetw_tztz16217290fYik.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/_dJeozmkxYl_ruaGezte_wQJmzck16218127cQQ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/smvavndzadbcdiQGoah16217884Ge.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/awlecmPcrbe16217269a.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/eoxrYzvYsnwdwtQQvxnYlGY16217544iPh.pdfIn PDF document text
- http://citrusheightsplumbing.net/tmp/eoJzuw_vtfnsYltisezskmhdsnkzGY15663715Q.pdfIn PDF document text
- http://www.bercel.com/bbs/YcPfadvacGQ11917151ui.pdfIn PDF document text
- http://www.kryonbrasil.com.br/departmentremain/_hzYrsshmfbJtGmYka15549147o.pdfIn PDF document text
- http://thedvdduplicationcompany.com/boardable/wPmuxsnxlnxGa15911306a.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/fhtlzxvo_kxnoha16218097fz.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uot_cmiQxu_kmuG16217457k__Q.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/clfYYhGcueuolfulaYfhfGQdYb16217214Q.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/oJwdbz16218161fsan.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/mQc_ilwfaGcv16217968o.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ffsa16217742feJs.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zGnvxbasishtviws16217939Gvnb.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/umvovbzQknk_wiaxiQmoYefifn16217675d.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/PGhs_szzk_tuPJvdbfchlJYtfel16218003rnc.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/GmffzwfeYP_exdmrktn16217980u.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/imtcPfiorotvvQ_vGzelPevf16217839mcP.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/mrffPwxxmGhQzvsuYtJGecQsbbcds16218104olPu.pdfIn PDF document text
+27 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_006_off0000cb13.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xCB13 | 19856 bytes |
SHA-256: a930245e90be17a336a7679d31e9d416ddec66c65020bec75b59b2e2bfc19120 |
|||
font_01_sfnt_off000100ab.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x100AB | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
font_02_sfnt_off00013671.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x13671 | 20828 bytes |
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.