Playbook: warming a new redirect chain so it doesn't get torched day one
Fresh chains scream 'cloaked' to scanners. Ease them in:
— Days 1-2: route 100% to a clean, real lander. Let crawlers and AV sample it benign.
— Add the rule-based split only after the domain has organic-looking crawl hits.
— Keep the first hop on HTTPS with a valid cert age — a cert born yesterday is a flag.
— Never chain more than 2 redirects; every extra hop is another scanner checkpoint.
— Match referrer policy across hops; a stripped referrer mid-chain trips heuristics.
Developing... seeing scanners get faster at flagging same-day domains.
— confidence: medium
Pop Wire
@pop_wire