Collected research

CSS history hacking with evil marketing

Cgisecurity.com: Web security News - 10/04/06 More fun with CSS history

An expansion of the CSS visited-link history trick into commercial reconnaissance: probe a visitor for competitor URLs to learn which ads paid off, enumerate which product, contact and confirmation pages they saw, and price a discount from it. A 10/4 update extends it to phishing, profiling a victim's banks and generating the lure from sites they have actually visited.

Record

Document

Cgisecurity.com: Web security News - 10/04/06 More fun with CSS history

Published by

cgisecurity.com

Topic

Other

In the archive

• Collected in the 2006 research round

Tags

• css
• side-channel
• info-leak
• deanonymization
• phishing
• browser-fingerprinting
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of cgisecurity.com, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.