[Spetz]

I found a simple way recently to spoof URLs and decided to share the method.
I'm not good at explaining, but I'll try with the help of examples.

If you enter the URL below in your browser, you will go to "example.com" instead of "google.com"

Code

https://[email protected]

On Firefox there will be a confirmation message box asking if you are sure you want to enter "example.com" however this isn't really a problem because most users will press yes.
On Chrome there aren't any confirmation message boxes and takes the user straight to "example.com" (which is good, ~64% of people use this browser which makes this spoofing method really effective).

So you can basically make a URL similar to this:

Code

https://[email protected]

with "security-information-page.com" being your website.

I hope this information is helpful 👍

[Luc4s]

Thanks for it! Firefox is the 3th browser most used

[roleeswagger]

That's cool.. if you have a long url (for example a long google search: google(dot)ru/webhp?&q=f+hgfhfghfghfghfghfghfghfghfghfghfghfghfghfghfgfghfghfghfghfghfghrtgcfhgfh) people get redirect and they won't see nothing :)

[jatoch]

Better use a url shortner, on safari it would give a phishing warning