SANS ISC: Phishing URL Using Three Obfuscation Tricks to Bypass Controls

Thu, 24 Sep 2026 15:49:46 +0000

Engineer — Learn: Technique analysis of a crafted phishing URL designed to fool automated security controls; no patch or configuration change required, but useful context for tuning email gateway URL inspection policies.
SOC/IR — Plan: SANS ISC breaks down specific URL obfuscation methods used to evade scanners — review the full diary to extract patterns and consider adding corresponding URL-decoding or pattern-matching rules to your email security or SIEM pipeline.
Leader — Skip

Url-Obfuscation on CuraSec