3.pdf have html stuff in front of the actual pdf file (firefox open it fine)
pdf file is same (removed html part and checked hash)

Hex View  00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F
 
00000000  3C 68 74 6D 6C 3E 3C 68  65 61 64 3E 3C 6D 65 74  <html><head><met
00000010  61 20 68 74 74 70 2D 65  71 75 69 76 3D 22 72 65  a http-equiv="re
00000020  66 72 65 73 68 22 20 63  6F 6E 74 65 6E 74 3D 22  fresh" content="
00000030  30 3B 75 72 6C 3D 68 74  74 70 3A 2F 2F 64 6E 73  0;url=http://dns
00000040  65 72 72 6F 72 61 73 73  69 73 74 2E 61 74 74 2E  errorassist.att.
00000050  6E 65 74 2F 73 65 61 72  63 68 2F 3F 71 3D 68 74  net/search/?q=ht
00000060  74 70 3A 2F 2F 62 75 6C  6B 25 32 46 25 32 36 73  tp://bulk%2F%26s
00000070  72 63 68 67 64 65 43 69  64 25 33 44 61 61 61 61  rchgdeCid%3Daaaa
00000080  61 61 61 61 25 32 36 74  25 33 44 30 25 32 36 62  aaaa%26t%3D0%26b
00000090  63 25 33 44 22 2F 3E 3C  2F 68 65 61 64 3E 3C 62  c%3D"/></head><b
000000A0  6F 64 79 3E 3C 73 63 72  69 70 74 20 74 79 70 65  ody><script type
000000B0  3D 22 74 65 78 74 2F 6A  61 76 61 73 63 72 69 70  ="text/javascrip
000000C0  74 22 3E 77 69 6E 64 6F  77 2E 6C 6F 63 61 74 69  t">window.locati
000000D0  6F 6E 3D 22 68 74 74 70  3A 2F 2F 64 6E 73 65 72  on="http://dnser
000000E0  72 6F 72 61 73 73 69 73  74 2E 61 74 74 2E 6E 65  rorassist.att.ne
000000F0  74 2F 73 65 61 72 63 68  2F 3F 71 3D 22 2B 65 73  t/search/?q="+es
00000100  63 61 70 65 28 77 69 6E  64 6F 77 2E 6C 6F 63 61  cape(window.loca
00000110  74 69 6F 6E 29 2B 22 26  72 3D 22 2B 65 73 63 61  tion)+"&r="+esca
00000120  70 65 28 64 6F 63 75 6D  65 6E 74 2E 72 65 66 65  pe(document.refe
00000130  72 72 65 72 29 2B 22 26  74 3D 30 26 73 72 63 68  rrer)+"&t=0&srch
00000140  67 64 65 43 69 64 3D 61  61 61 61 61 61 61 61 26  gdeCid=aaaaaaaa&
00000150  62 63 3D 22 3B 3C 2F 73  63 72 69 70 74 3E 3C 2F  bc=";</script></
00000160  62 6F 64 79 3E 3C 2F 68  74 6D 6C 3E 25 50 44 46  body></html>%PDF
00000170  2D 31 2E 34 0A 25 E2 E3  CF D3 0A 31 20 30 20 6F  -1.4.%.....1 0 o

<html>
<head>
    <meta http-equiv="refresh"
        content="0;url=http://dnserrorassist.att.net/search/?q=http://bulk%2F%26srchgdeCid%3Daaaaaaaa%26t%3D0%26bc%3D" />
</head>
<body>
    <script
        type="text/javascript">window.location = "http://dnserrorassist.att.net/search/?q=" + escape(window.location) + "&r=" + escape(document.referrer) + "&t=0&srchgdeCid=aaaaaaaa&bc=";</script>
</body>
</html>

False negative for a PDF? #192

Description

Metadata

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Issue actions