Open Redirect Abuse in Spearphishing Links

In an authorized assessment, adversaries may abuse an application's open redirect (CWE-601) so a phishing URL begins on a trusted domain and then redirects to an external destination. The trusted first-hop host may make the link appear more legitimate to a recipient, but whether the redirect changes email or browser security outcomes depends on the environment. The redirect weakness and the spearphishing-link delivery behavior are related but distinct.