Detects messages with PDF attachments linking directly to suspicious filetypes on hosts with low reputation from unsolicited senders.