Phishing Redirect Abuse
Redirect Abuse in 2026: What Still Works
Most trusted-domain redirect tricks are dead in 2026. We tested every major platform — Google, YouTube, LinkedIn, Microsoft, …
Phishing Redirect Abuse
The Twitter Open Redirect Nobody Patched
We hunted 80 trusted-domain endpoints for unauthenticated open redirects. One is still live in 2026 — twitter.com/logout?redirect_after_logout= — …