HTPBE_
HTPBE_PAGE_REGION_SUBSTITUTED appears on <0.1% of modified results in our corpus. A marker is evidence about the file, not a judgement about the person who sent it.
Back to all checksMarker profileContent Stream Analysis
Signs that part of a page was replaced after creation.
Marker profile
What HTPBE_PAGE_REGION_SUBSTITUTED tells you
HTPBE_PAGE_REGION_SUBSTITUTED is one of the named findings returned in modification_markers when a PDF is reported as modified. It belongs to the Content Stream Analysis group of checks. These checks look at the content of the pages themselves for signs of edits made after the document was authored.
On 0% of the modified results that carry HTPBE_PAGE_REGION_SUBSTITUTED it is the only marker. A result with this marker carries 2.0 markers on average.
Example API response
How it appears in a result
When a PDF is reported as modified, HTPBE_PAGE_REGION_SUBSTITUTED is listed in modification_markers next to the verdict and its confidence. Each marker is a named, actionable finding – not a score.
{
"id": "9f3a2c1d-8b47-4e6f-a012-3d5e7f890123",
"status": "modified",
"modification_confidence": "high",
"modification_markers": [
"HTPBE_PAGE_REGION_SUBSTITUTED"
],
"creator": "Adobe Acrobat Pro DC",
"has_incremental_updates": true,
"page_count": 3
}Full schema in the API reference →
Distributions
What ships alongside HTPBE_PAGE_REGION_SUBSTITUTED
The tools, formats and document traits that appear on the modified results carrying this marker. Shares are of those results.
Confidence of the verdict
When these results were checked
Document length
File size
Long tail
Notable observations
Smaller cuts of the results carrying HTPBE_PAGE_REGION_SUBSTITUTED – useful context, but treat each row as a single data point rather than a strong signal.
Of files carry at least one digital signature
Of files contain earlier saved revisions
Of files contain JavaScript code
Of files have attachments inside
Average number of markers on these results
Related checks
Other Content Stream Analysis checks
Checks from the same group. Each card links to its own reference page.
HTPBE_CONTENT_STREAM_EDITING_MARKERSEditing traces within the document’s pagesHTPBE_DRAWING_OPS_INCONSISTENTPage drawing evidence consistent with editingHTPBE_PRINTED_OUT_OF_PDF_READERDocument printed to a new PDF after its original creationHTPBE_TEXT_OVERLAY_ON_SCANSigns of text added over existing page contentHTPBE_INVISIBLE_DUPLICATE_TEXTHidden text on the page that does not add upHTPBE_CHARACTER_OVERLAY_EDITLocalised edits placed over the original page textHTPBE_GLYPH_LEVEL_EDITIndividual characters that appear replaced after authoringHTPBE_MIXED_FONT_EMBEDDINGFont usage on a page that points to text added after authoringHTPBE_PARTIAL_FONT_REPLACEMENTOriginal fonts that appear partly replaced after authoringHTPBE_BURNED_IN_ANNOTATIONSAnnotations that appear merged into the page contentHTPBE_WIDGET_APPEARANCE_MISMATCHA form field showing signs of alterationHTPBE_INCOMPLETE_REDACTIONA redaction that did not fully conceal its contentFAQ
HTPBE_PAGE_REGION_SUBSTITUTED: common questions
What does HTPBE_PAGE_REGION_SUBSTITUTED mean?
Does HTPBE_PAGE_REGION_SUBSTITUTED mean the document is fake?
What should I do when a result contains HTPBE_PAGE_REGION_SUBSTITUTED?
How common is HTPBE_PAGE_REGION_SUBSTITUTED?
Where do I see HTPBE_PAGE_REGION_SUBSTITUTED?
Secure your workflow
Create your account – check PDFs on the web or with an API key, both ready on signup.
No sales call. Cancel any time.