A common attack chain:
Some attacks trick users into believing windows.txt contains their own Windows license key or Wi-Fi password. The file is actually a honeypot: when the user opens it, their system executes hidden macros (if opened in Word) or triggers a download of additional malware. windows.txt bit.ly
Most URL shorteners allow you to see where the link goes before you commit. A common attack chain: