CTU researchers observed the first short links targeting hillaryclinton.com email addresses being created in midMarch 2016; the last link was created in mid-May. During this period, TG-4127 created 213 short links targeting 108