tl;dr
Remember Google announcing first SHA1 collision.
https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html

Download colliding PDF files. They are shorter, so remembering that adding something at the end (the same bytestream to both) will give the same hash.