3 ms·

In that case why bother with using a data url at all? They could just use "www.paypal.com.cgi-bin.webscr.xxxxxxxxx.myevilsite.com"

• beefhash 9y ago
  That way, they don't have to bother with a domain registration, either. A domain registration is neither free of charge nor entirely free of risk.
  • code_duck 9y ago
    They could just create subdomains on a compromised domain they control belonging to someone else.