On 25 Sep 2016 03:57:04 -0000 Chip M. wrote: > My post SA filter does HEAD lookups of URL shorteners, with > logging of the full headers.
> My first thought was network hiccup. Then it struck me that this > was not a random/system generated one, rather it was one of those > "custom"/vanity(?) shorteners that often appear in ESP/snow. > > I have no experience creating Shorteners. > *** Could someone who does, please weigh in on whether this may > be a new tactic? *** > > If it is, it's almost clever. > For years, I've been poison pill scoring stuff like that, and > letting Quarantine re-testing sort things out. :) If you mean you poison-pill anything with a redirect, then this doesn't seem all that clever because tinyurl is such a well known shortener. > * Does anyone have any idea of the significance of the "X-tiny" > header in the Windows vs Linux output? It's probably trivial. It seems to be a diagnostic header that's only added where the URL exits.
