GIF_1x1 in syndication.twitter.com

On 2020-07-28T09:04:17.476436+00:00 we found pattern GIF_1x1, type: User tracking and fingerprinting, (1x1 transparent GIF is frequently used as user tracking mechanism) in the page https://syndication.twitter.com/i/jot/s… referenced from http://blog.twnic.tw/ .

Code sample:

b'GIF8' … b'\x01\x00\x01\x00'

This feature is experimental so please feel free to contact us if you feel any of the reported issues is a false positive or you want to suggest a pattern that should be detected (we are using Yara standard).

Fully automated RESTful API is now available. Subscribe for your free trial today!