oh, an attacker could do [https://nicely-looking-url.com](https://shady-site.com) https://nicely-looking-url.com](https://shady-site.com). I see your point. ho

oh, an attacker could do [https://nicely-looking-url.com](https://shady-site.com) https://nicely-looking-url.com](https://shady-site.com). I see your point. however, anybody with a bit of javascript knowledge can do it. I guess we need to keep educating people about the importance of checking urls?