Open Redirect Used in Phishing

An attacker can abuse a web application's user-controlled redirect destination so a phishing URL begins on a legitimate site's domain and then sends the recipient to an external attacker-controlled page. This can make the initial link appear more trustworthy; whether it evades email or web controls depends on whether those controls resolve and inspect the redirect destination.