URI Obfuscation

How it was found

Summary:

Typically, when obfuscating a URL, you must trick someone into viewing a website they did not want to view by tempting them with something they are familiar with.

Products affected:

Latest Version of Brave in Windows

Steps To Reproduce:

We can trick someone into viewing it like this: http://[email protected] This will make the user think they are going to go to example.com, when really they are going to sample.com.

Live POC: https://[email protected]/

They thought they will be redirect to brave.com but the page displays secuna.ph

I attached a picture and make sure to focus your eyes in the URL Address.

Supporting Material/References:

{F127608}