3 ms·
I haven’t seen this combination of Unicode forward slashes and http auth before. I would have fallen for it. Does anyone maintain a kind of “phishing URL menage
by GloomyBoots 3y ago
I haven’t seen this combination of Unicode forward slashes and http auth before. I would have fallen for it. Does anyone maintain a kind of “phishing URL menagerie” of interesting cases like this?
- Arnt 3y agoSort of. The browser vendors work hard to keep deceptive links and sites from fooling users. In this case, the browsers I use don't fall for it. Hovering over the link shows the real domain. The browser I use on my work iphone also does something sensible, but I can't remember what. Obviously I can't hover on that device.
- fragmede 3y agoclick and hold brings up a user-initiated popup that shows the full url, though it may not sufficiently deobfuscate it.