PDF static analysis report

Heuristics 3

• PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARM
  PDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
• Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
  Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://uncpbisdegree.com/download3.php?q=toro-sr4-parts-diagram.pdf In PDF document text

  • http://uncpbisdegree.com/download4.php?q=toro-sr4-parts-diagram.pdfIn PDF document text
  • https://weingartz.com/model/toro-lawn-mower-parts/In PDF document text
  • http://www.freebase.com/In PDF document text
  • http://riverside-resort.net/1/uptu-paper-high-voltage.pdfIn PDF document text
  • http://uncpbisdegree.com/1/tgb-gunner-550-automatik-r-15-kw-test.pdfIn PDF document text
  • http://uncpbisdegree.com/1/super-sundash-tanning-bed-manual.pdfIn PDF document text
  • http://uncpbisdegree.com/1/skin-immune-system.pdfIn PDF document text
  • http://uncpbisdegree.com/1/the-book-of-margery-kempe-summary-and-analysis.pdfIn PDF document text
  • http://riverside-resort.net/1/user-guide-for-ipad-mini.pdfIn PDF document text
  • http://uncpbisdegree.com/1/singapore-international-graduate-award-singa.pdfIn PDF document text
  • http://uncpbisdegree.com/1/st-patricks-day-celebration.pdfIn PDF document text
  • http://uncpbisdegree.com/1/the-dangerous-summer.pdfIn PDF document text
  • http://riverside-resort.net/1/wallace-gromit-plots-in-space-wallace-and-gromit.pdfIn PDF document text
  • https://weingartz.com/model/toro-lawn-mower-partsIn PDF document text
  • http://www.ascendercorp.com/In PDF document text
  • http://www.ascendercorp.com/typedesigners.htmlIn PDF document text
  • https://0.r.bat.bing.com/?ld=d3CKW0Z4gWAsv5r7U4AOGrvjVUCUxlkFXDDMC2VmngVT7FIowl0AoBb-LdgKwL8-_k_BkEoAZjKMXvbW-Ztzme1jsSeG1STfBaKee-ynCgy1BdpjCOh2rarKQu-uAkqmMEHGr3Q7IAhq4WfXa8PUf4TreGGZuhdeI5WawIdMwigeOp9u7O&u=www.partstree.com%2fparts%2ftoro%3fmsclkid%3d%7bmsclkid%7dIn PDF document text
  • https://31003068.r.bat.bing.com/?ld=d3RiZVkCwU_Wd6MmUyreYKzDVUCUzMB_nN0xey7jtqSaGAdEGo7wuED_GWEN0MsWH0O-8QnizzEmiCyfAR_kijZXjloRJLr9hx_WGkhy9zqX_ERWl5D_J5kvgsMPVwQtnTa94tGd0kS6a4c9-6DVhpQ1hJ4RWV0tPHFjyq8dlcBvRrLho3&u=http%3a%2f%2fclickserve.dartsearch.net%2flink%2fclick%3flid%3d43700033102225776%26ds_s_kwgid%3d58700004051285452%26%26ds_e_adid%3d81776206714412%26%26ds_url_v%3d2%26ds_dest_url%3dhttps%3a%2f%2fwww.toro.com%2ftorodealer-general%26msclkid%3d%7bmsclkid%7dIn PDF document text
  • http://www.toro.com/In PDF document text
  • https://www.facebook.com/toro.companyIn PDF document text
  • https://lookup3.toro.com/partdex/default.cfmIn PDF document text
  • http://www.partstree.com/parts/toro/mowers-walk-behind-lawn-mower/In PDF document text
  • http://www.partstree.com/parts/toro/mowers-walk-behind-lawn-mower/?pageNumber=2In PDF document text
  • http://www.partstree.com/parts/toro/mowers-walk-behind-lawn-mower/?pageNumber=1In PDF document text
  • https://www.toro.com/en/partsIn PDF document text
  • http://www.partstree.com/parts/toroIn PDF document text
  • https://www.ereplacementparts.com/toro-parts-c-121776.htmlIn PDF document text
  • https://www.ereplacementparts.com/lawn-equipment-parts.htmlIn PDF document text
  • https://19394.r.bat.bing.com/?ld=d3oK7HH7pdr8ppNlYE7mxtwjVUCUxaqcdF6EPO7F0hmfAOOEHTaRWDXaPN_qvta9sY1uEluN1WUw1T1LrpJjXMhFU3anemEiipCEH9ApyCWIDINBRdkyCroSLgShlQoZTWTnro7Xlx-6IT_Ecx-rVFO8iW0GLBY_gGcQHLr2dvXnIQHdM4&u=http%3a%2f%2fwww.ereplacementparts.com%2ftoro-parts-c-121776.html%3futm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3d%2btoro%2bmbm%26msclkid%3d%7bmsclkid%7dIn PDF document text
  • https://157104623.r.bat.bing.com/?ld=d3GT7skEBvHSs1vEcGwOAFEDVUCUxZGWGo_CM_ZCNWO4K1O6uipT7ovtCWhM06LAcnEoyTQZppXcauRidFRavBuQEz-_KjTo3_U_1wjlMi42oNE-RfiqOluSDomR4TrE49uGOPqdorWkiLl7fL_sS4QxmfOOZXiXiEhvp861YmZ7TuDfJN&u=https%3a%2f%2fwww.guardengine.com%2fge11%2fsearch%2fweb%3ffcoid%3d417%26fcop%3dtopnav%26fpid%3d27%26q%3dToro%2520Sr4%2520Super%2520Recycler%2520Parts%26msclkid%3d%7bmsclkid%7dIn PDF document text
  • https://174104319.r.bat.bing.com/?ld=d3qqsDg_JsT4xtfh_6Sab_4TVUCUyVSJm9JUdPBJ2V3TOeHAt0b8PcvbcNJmoMPNUHVPo-6nbLPBKHxWJwLMX4oRxeUpFipH5oSSORfLqz9aAk7gcCA9Dd1HqskSkO1uHh9dan7yilGBne9-hgsOPHTeGhpjImMYMEky5Ckt4zJ1cJZi41&u=http%3a%2f%2fwww.info.com%2fToro%2520Sr4%2520Super%2520Recycler%2520Parts%3fsegment%3dinfo.0377%26msclkid%3d%7bmsclkid%7dIn PDF document text
  • http://go.microsoft.com/fwlink/?LinkID=617350In PDF document text
  • http://creativecommons.org/licenses/by-sa/3.0/In PDF document text
  • http://go.microsoft.com/fwlink/?LinkId=521839&CLCID=0409In PDF document text
  • http://go.microsoft.com/fwlink/?LinkID=246338&CLCID=0409In PDF document text
  • https://go.microsoft.com/fwlink/?linkid=868922In PDF document text
  • http://go.microsoft.com/fwlink/?LinkID=286759&CLCID=409In PDF document text
  • http://go.microsoft.com/fwlink/?LinkID=617297In PDF document text
  • http://en.wikipedia.org/wiki/Toro_In PDF document text
  • https://fedoraproject.org/wiki/Licensing/LiberationFontLicenseIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.