Fed this URL into VirusTotal. Clean. BUT then I fed the domain that it's contacting, anedot dot come, and there's a PDF file hosted entitled "2026 WINTER 30TH DIST FLYER" that has some interesting behaviors.
There's also another file they distribute entitled "2.06.24_Boebert Invite_Speaker Johnson Event" that ALSO has some interesting behaviors.
So,
@JohnFetterman @laurenboebert @MikeJohnson do any of y'all want to chime in on why these files on Anedot hosting are using MITRE attacks against people who view these PDFs?
Note: I am NOT making any accusations. I just took the URL texted to
@LibertarianG0th and fed it into a public malware database and came up with this.
Everyone else: DO NOT TRUST ANY LINKS, EVEN IF YOU LIKE THE POLITICIANS THEY ARE COMING FROM