This is according to #Proofpoint E-mail Protection. There are two very well known facts:

1. All PDFs are malicious if they contain web links inside the document. (All do)

2. All forwarded e-mails coming from SendGrid are phishing. (Never are)