Spam campaigns use random-looking strings to evade filters or to test if a domain is being monitored.
The query specifically mentions "new." Here is what is currently relevant regarding new developments:
A genuine HTTPS link has a specific structure:
So a real link to a new page looks like: https://example.com/new
What's wrong with httpsmlhbdcom new?
This format is invalid syntax. Browsers will not load it as written. If clicking it does something (like open a pop-up or download a file), it may be exploiting a redirect or a scripted trap.
