On Tue, 3 Oct 2023, Giovanni Bechis wrote:

Hi,
I've received an email with a link like

https://www.bing.com/ck/a?!&&p=XXX&ptn=3&hsh=3&fclid=XXX&u=XXX&ntb=1

that redirects to another bing.com url that finally redirects to a phishing url. As a workaround I've added "url_shortener bing.com" and it works (but it's not correct because Bing it's not a shortener), should we add search engines as well to url shortener configuration or should we implement something else ?

This should be "something else". Is the redirection part indicated by the /ck/a path or the query parameters?

Sadly this isn't like the Google redirector where the target URL is actually present and can be captured - or did you remove that part?

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org                         pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
 1,221 days since the first private commercial manned orbital mission (SpaceX)

Reply via email to