With a little trickery with URL's you could construct something like: https://github.com/example/project/releases/@example-project-v1.zip https://github.com/ex

With a little trickery with URL's you could construct something like: https://github.com/example/project/releases/@example-project-v1.zip https://github.com/example/project/releases/@example-project... Due to everything in a URL before the @ being interpreted as a username for basic authentication, this would result in the user navigating to https://example-project-v1.zip https://example-project-v1.zip instead of to github. Edit: Fortunately it seems like browsers have caught on to this trick