PDF static analysis report

Heuristics 3

• PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARM
  PDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
• Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
  Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://uncpbisdegree.com/download3.php?q=surgical-critical-care-board-review-questions.pdf In PDF document text

  • http://uncpbisdegree.com/download4.php?q=surgical-critical-care-board-review-questions.pdfIn PDF document text
  • https://www.osler.org/surgical-critical-care/In PDF document text
  • https://www.boardvitals.com/pulmonary-disease-critical-care-medicine-board-reviewIn PDF document text
  • http://megama.de/surgical/critical/surgical_critical_care_board_review_questions.pdfIn PDF document text
  • http://absurgery.org/default.jsp?certsccceIn PDF document text
  • http://isodat.de/surgical/critical/surgical_critical_care_board_review_questions.pdfIn PDF document text
  • http://www.aast.org/asset.axd?id=6e4d2e90-d44f-4a49-88ee-df966775d8ce&t=635060255408700000In PDF document text
  • http://riverside-resort.net/1/widest-river-on-earth.pdfIn PDF document text
  • http://riverside-resort.net/1/what-kind-of-cancer-does-roundup-cause.pdfIn PDF document text
  • http://uncpbisdegree.com/1/springboard-algebra-2-unit-1-answers-key.pdfIn PDF document text
  • http://uncpbisdegree.com/1/the-glass-word.pdfIn PDF document text
  • http://uncpbisdegree.com/1/the-book-of-more-fun-facts.pdfIn PDF document text
  • http://uncpbisdegree.com/1/selamat-hari-raya-card-design.pdfIn PDF document text
  • http://uncpbisdegree.com/1/the-half-brother-lars-saabye-christensen.pdfIn PDF document text
  • http://uncpbisdegree.com/1/test-prep-cell-structure-answers.pdfIn PDF document text
  • http://riverside-resort.net/1/user-guide-nokia-n79.pdfIn PDF document text
  • http://riverside-resort.net/1/visual-art-waec-june-2017-answers.pdfIn PDF document text
  • https://www.osler.org/surgical-critical-careIn PDF document text
  • https://www.boardvitals.com/pulmonary-disease-critical-careIn PDF document text
  • http://www.ascendercorp.com/In PDF document text
  • http://www.ascendercorp.com/typedesigners.htmlIn PDF document text
  • https://0.r.bat.bing.com/?ld=d3N3sivQ0aMTC265MUaCLGPDVUCUzJ3CdF5EYorpSCuMfjx62c3acNg1Cr9I_8QRBxCVml2ICKVmd-ay7lC79pJzfH7KeZxrCFvLzR8B6dZheONMZV8uVokDOLaPn_LIgqTsAYIboMfWuvqRHPbl3PHZkkrOHUgr1LDnajZ9tnWtZeEkBp&u=http%3a%2f%2fwww.boardvitals.com%2fsurgery-board-review%3fmsclkid%3d%7bmsclkid%7d%26utm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3dSurgery%26utm_term%3d%252Bsurgery%2520%252Bboard%2520%252Bquestions%26utm_content%3dSurgery%2520Board%2520ReviewIn PDF document text
  • https://1254677.r.bat.bing.com/?ld=d3npKnZ9LmDZRjb3knYlYRhjVUCUy9Op6NF1g78jAEfGjJISVq4WCU4MmwBhJYvb9JsYEvApJiEDbKAtu7FGF4uKimK7dsB0Xaa-Io0Jzr-DNsgimdQcHFtaq_193FAWf1g4ILl4-5RlgKLi2U3ZA8mxRlbeJD4GoIAk9j4Pzjtnwye3ME&u=https%3a%2f%2fwww.oakstone.com%2f%3ftrackcode%3dbingpd18000%26utm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3dwbngxa1%26msclkid%3d%7bmsclkid%7dIn PDF document text
  • https://147003368.r.bat.bing.com/?ld=d36HTps_UG0MvTw2bIMge62jVUCUwiAbreuu7YvVgC0WSYI5aDP7YPMrDo8n015Hu4zfdmGsR7CTK-iYE1rEWVlzQaHJi1ZS5FT4iHkaFlI4GXn_6uN5f7bo0R4M8cVLl3xw6Vok0iSTNqMZq0mZg4QBqCuE4gmQXMfMRh9CQKi6Rn49ny&u=https%3a%2f%2fwww.smarter.com%2far%3fq%3dsurgical%2520critical%2520care%2520board%2520review%26o%3d759034%26rch%3dau237%26ct%3d%26msclkid%3d%7bmsclkid%7dIn PDF document text
  • https://54004862.r.bat.bing.com/?ld=d3X-gdHgwq8LoUgdhs0r36MjVUCUyqM7nzc0xMoS3_GSoU2yYJ5ARDrJ15rXOHMvSTOhQnAAzjEGn5hZTC8kfKu5yppTkH8jnDV2iayUeI8CTYFiHVEMivnNZXC-yVjO8eeyHfXLnyWaO2Sc-78Cgx6u5h_okFmOKT3prT91AKxnKrZgl1&u=http%3a%2f%2fwww.amazon.com%2fs%2f%3fie%3dUTF8%26keywords%3dsurgical%2bcritical%2bcare%2bboard%2breview%26tag%3dmh0b-20%26index%3daps%26hvadid%3d77653062906996%26hvqmt%3dp%26hvbmt%3dbp%26hvdev%3dc%26ref%3dpd_sl_890tafl9fb_pIn PDF document text
  • http://go.microsoft.com/fwlink/?LinkID=617350In PDF document text
  • http://go.microsoft.com/fwlink/?LinkId=521839&CLCID=0409In PDF document text
  • http://go.microsoft.com/fwlink/?LinkID=246338&CLCID=0409In PDF document text
  • https://go.microsoft.com/fwlink/?linkid=868922In PDF document text
  • http://go.microsoft.com/fwlink/?LinkID=286759&CLCID=409In PDF document text
  • http://go.microsoft.com/fwlink/?LinkID=617297In PDF document text
  • https://1020866.r.bat.bing.com/?ld=d3zXuByphPRJw8x5MwMO6ACDVUCUzDtCHGrjrVCrpH9ZjxZ0-nzIO25p3tdzU_Bptqgg9tnS1-idqDYy-JVcgDQWZdFxOAR9QISQfytil9Tufw-yLz1bxURZGYEzIgTxCAW3GD4h7kurrKtSN4e8RlO4WjnnoSDguqgf9XrfxI4rGbarHv&u=https%3a%2f%2fwww.thepassmachine.com%2fcritical-care-medicine-board-review%2f%3fmsclkid%3d%7bmsclkid%7d%26utm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3dCritical%2520Care%26utm_term%3d%252Bcritical%2520%252Bcare%2520%252Bboard%2520%252Bquestions%26utm_content%3dCritical%2520Care%2520QuestionsIn PDF document text
  • https://0.r.bat.bing.com/?ld=d3hPsFUgNlB66KUNdCsyWezjVUCUw7SRcv24WIkl2i_nMAnMp8xRadVe87zf1-hqbo--ffV5y2-YM4eXNwuLApI-x_if7t5GmNyfFMfwsNRRaXwU01gU-hCscZvXyPLuJOU9q51zAhuBdTqSQUo9QUTVh2DRa9v9Ym5t3cEMx5wWYYmmhe&u=http%3a%2f%2ftracker.marinsm.com%2frd%3fcid%3dvkkb7e0xh0%26mkwid%3dgDtcfV4Z%26pcrid%3d73392450956934%26pdv%3dc%26lp%3dhttps%3a%2f%2fwww.abebooks.com%2fSurgical-Critical-Care-Emergency-Surgery-Clinical%2f22618176844%2fbd%3fcm_mmc%3dmsn-_-used-_-PLA-_-v01%2526cm_mmc%253Dmsn-_-Bing%252BUS%252BShopping-_-Ad%252Bgroup%252B%2525231-_-%7bproduct_groups%7dIn PDF document text
  • https://152021708.r.bat.bing.com/?ld=d3YTtkcsKG1WAjrwueL97XEzVUCUw33qmNxHSgJb9uZC7SABsKm-7xHVUcnHKy8wDdRoYx5F0lPH9x0RUj0aTIwY03x7wmr7dnzAmzoSCOt1CvdCXi9J23jeNRtBpcVUmtP-e-JFegyMGM0mSJC53tKu4hG4zMRL1zfrX2PvY5cHuRTT7J&u=http%3a%2f%2f9.xg4ken.com%2ftrk%2fv1%3fprof%3d691%26camp%3d62049%26affcode%3dpg958%26kct%3dmsn%26kchid%3d152021708%26cid%3d77927903958191%26kdv%3dc%26kpid%3d9780470654613%26criteriaid%3dpla-4581527514496082%26queryStr%3dsurgical%2520critical%2520care%2520board%2520review%2520questions%26adgroupid%3d1246846257539428%26campaignid%3d283174809%26url%3dhttps%3a%2f%2fwww.betterworldbooks.com%2fproduct%2fdetail%2fsurgical-critical-care-and-emergency-surgery-0470654619%3futm_medium%3donr_paidshopping%26utm_source%3dgoogleIn PDF document text
  • https://138002606.r.bat.bing.com/?ld=d3PBpzoF_UgeAvPGrr6jzwdjVUCUweFHx045rcOUCa5irEe0hrNHTPxVAsVkbSjau5nT4PYytCZ5ffNE59gYu2UX6oaJ1fgWproWY4ZFd2qwKvJIAxz9sFD7M5G9QSWX9u7QHtBi9M39ATXO3MS2dLKEY9ACPbINzidFMzliNV0ZxFmUpo&u=https%3a%2f%2fwww.walmart.com%2fip%2fSurgical-Critical-Care-and-Emergency-Surgery-Clinical-Questions-and-Answers%2f672278767%3fwmlspartner%3dwlpa%26selectedSellerId%3d0%26adid%3d22222222222156954092%26wmlspartner%3dwmtlabs%26wl0%3de%26wl1%3do%26wl2%3dc%26wl3%3d74904300386538%26wl4%3dpla-4578503869995397%26wl5%3d%26wl6%3d%26wl7%3d%26+wl10%3dWalmart%26wl12%3d672278767_0%26wl14%3dsurgical%2520critical%2520care%2520board%2520review%2520questions%26veh%3dsemIn PDF document text
  • https://165000794.r.bat.bing.com/?ld=d3VVtsRrKqC663mgQ54iGPSzVUCUz7t7tD7Qp1n_J-95R7Vycx2g6ee5iHkQcXYYQXg6IjNq7BQv72oY5tS9mesbfjirZDIDFBqOPGwX3yvlHjnyMYurfB1dHy3H1QMrbbel5m1x-NKQ--olhS-eMkdXoVEuGbJQRuGfJ-fbVlnSC618ys&u=https%3a%2f%2fdownloadsearch.cnet.com%2fs%3fq%3dsurgical%2bcritical%2bcare%2bboards%26qsrc%3d0%26src%3djo%26gch%3dAdNetB_CNET_19%26au%3d11652601%26tt%3dT0000148%26clickid%3d%7bmsclkid%7d%26utm_medium%3dcpc%26utm_source%3dbing%26utm_campaign%3dUSA_EN_00_P_Health_TPSG00_oo_oo_S_A%2523148%26ct%3d%26mkt%3dUSA%26ts%3db%26msclkid%3d%7bmsclkid%7dIn PDF document text
  • https://fedoraproject.org/wiki/Licensing/LiberationFontLicenseIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.