Messaging Gateway

Hello,

Symantec Messaging Gateway has the "Redirect URL" feature.

In the administration guide 10.5, page 281, it says that the types of URL's which are handled by SMG are as follows:

1. Redirect URLs include free hosting sites.

2. URL shortening services.

3. URL redirecting services which can potentially be abused to deliver spam or malware payloads

The first two, I understand.

I don't really understand the 3rd one, how does Symantec knows which URL's can be potentially abused? Can someone explain how does it works?

Thanks.

This includes services such as Twitter and Tumblr who provide a shortened URL for posts. These posts could contain further redirects or malicious content that can infect the client.

We know about them becuase we heavily research them and know how each one works.

I had Similar situation, In some cases, SMG may perform real-time analysis of the linked content when users attempt to access the redirected URLs. This analysis may involve checking the linked content for malicious payloads, spam, or other threats.

Sometime i'm checking it manually to Use browser developer tools to inspect network requests and redirects or use this tool https://redirectchecker.com/ This can help you identify where the redirection is happening and potentially trace it back to the source to avoid spam or malware link