PDF static analysis report

Heuristics 3

• PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARM
  PDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://dubaipropertyrentals.net/pasttax/strongdepartment.php/nxoxbixG16218611l.pdf PDF link annotation

  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/oePnlu_vvhlulbclvshxucP16218789lP.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/QGnaPzccehJwmYlzwvkuod16218876x.pdfIn PDF document text
  • http://new.k-trhy.cz/koYJsitQdoazJluk5299921di.pdfIn PDF document text
  • http://kbatory.bazafirm.pl/_rdtcmkmJ_ieQi5082217fkle.pdfIn PDF document text
  • http://www.toledano.fr/media/mYwPv15934205Yf.pdfIn PDF document text
  • http://www.stripvip.com/wp-content/ecoYtkGn11519742xvJs.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/oGhcJxvlonQtYhte_zaGdm16218509xeQ.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/hvlfGerdzro_GnPP16219287Qib.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/GYru_cxJotwnx16218547zre_.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/sGYmuY_rblPdf16218587o.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/QoiYbtza_vhef_wQxoaa16218688mwz.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/atzz__GYfitYQYmtPf_dGouwmxuh_f16219321s.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/YeahPhoxbo16218524xl.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/_wQrtatQmecrrQrhobtPkQhtwlc16218697eckw.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/xxuamcumQxY16218568eax.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/zPrnaleuxPkrlzfcwv_o16218674l_f.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/dnbrQnYQYvGbcztfbso16218578wz.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/bdalnhcll_16219344d.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/wGnPedusPkerQbxtxfofkvvbfhv16219399Y.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/kfGutvrlxJnki_awGhnhmotJiG_k16218730sblk.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/ohkGtailQeYflsodurcJoliGJcve16219258b.pdfIn PDF document text
  • http://www.partyservicedaro.nl/armboard/_niexfkxGi16199493xl.pdfIn PDF document text
  • http://www.partyservicedaro.nl/armboard/chGnlcbPPdi16181531lvcb.pdfIn PDF document text
  • http://www.partyservicedaro.nl/armboard/hwvzxdPv_16202954hh.pdfIn PDF document text
  • http://www.partyservicedaro.nl/armboard/hxfPPQQJlhribu16165764x.pdfIn PDF document text
  • http://www.partyservicedaro.nl/armboard/krlQJJPi16203092_.pdfIn PDF document text
  • http://www.partyservicedaro.nl/armboard/onmQhkYJnzxnb_fGfecfmnehtthkf16202918kaz.pdfIn PDF document text
  • http://www.partyservicedaro.nl/armboard/wPc_vrioihhbzlitwmuiGmrz16194503mkl.pdfIn PDF document text
  • http://permatatour.co.id/halfwhole/JxtnzbfGdYtirYJvJnvkd16188660bG.pdfIn PDF document text
  • http://permatatour.co.id/halfwhole/bmYts_bwwtQ16184467rGz.pdfIn PDF document text
  • http://permatatour.co.id/halfwhole/cxfeivanJtY16202527tad.pdfIn PDF document text
  • http://permatatour.co.id/halfwhole/hrm_QQa16202307k.pdfIn PDF document text
  • http://permatatour.co.id/halfwhole/rfxJmhxivtcosatuwmsk_doYPP16196487ieoz.pdfIn PDF document text
  • http://permatatour.co.id/halfwhole/vQkowsvGtar16200515Jnx.pdfIn PDF document text
  • http://permatatour.co.id/halfwhole/woniYehxGJvkYzowvhemtdaQGmc16188542ttG.pdfIn PDF document text
  • http://permatatour.co.id/halfwhole/zb_QadloJwQwhu_svkhfQ16202396diQ.pdfIn PDF document text
  • http://partyservicedaro.nl/viewsure/Yrxs_onzcPQG16198208Gvh.pdfIn PDF document text
  • http://partyservicedaro.nl/viewsure/fvhaJceflYrrudfu_Jacaf16198103rwt.pdfIn PDF document text
  • http://partyservicedaro.nl/viewsure/hdsPmlsfmllklf16183795bld.pdfIn PDF document text
  • http://partyservicedaro.nl/viewsure/iYorboohhz_ciocladwJY_bvdohca16200398eimY.pdfIn PDF document text
  • http://partyservicedaro.nl/viewsure/lh_lrmihsxfntwhh16193101s_.pdfIn PDF document text
  • http://dubaipropertyrentals.net/pasttax/strongdepartment.php/site_map.xmlIn PDF document text
  • http://dbeloshenko.myjino.ru/thusacross/eterdavQdG15683782Gd.pdfIn PDF document text
  • http://dejavu.sourceforge.netIn PDF document text
  • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.