Comment by gavinray

The described "attack" would not work, due to not triggering an HTTP request.

When an LLM generates text, it does not send requests to URL-looking strings it generates to validate they are real/live.

You'd never get your "ping" request.