Replying to
@0xabad1dea@infosec.exchange i’ve seen this before where it’s a (poor) attempt at preventing link previewers as well as trying to ensure it’s someone actually visiting the site rather than a crawler or bot.
background: I implemented something similar back in the day when the internet was a little simpler and you were really trying to track real clicks in email for marketing and such and to stop Gmail from grabbing private information. In the age of today’s internet I’m not sure it works as well