Other nomination

URL Hiding - new method of URL Spoofing attacks

Some sites are listed in Google results with no URL shown at all, spotted on a domain whose name begins with an underscore. Chained with the author's earlier URL-spoofing tricks, this hides a long or suspicious address from the user twice over - absent from the result page, then misread in the address bar - which helps phishing and malware delivery.

In the archive

• Nominated for the 2009 Top 10 Web Hacking Techniques

Tags

• url-parsing
• case-study
• url-spoofing
• phishing
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.