<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Blob URLs | He (Shawn) Shuang's Personal Site</title><link>https://8759s.github.io/tags/blob-urls/</link><atom:link href="https://8759s.github.io/tags/blob-urls/index.xml" rel="self" type="application/rss+xml"/><description>Blob URLs</description><generator>Hugo Blox Builder (https://hugoblox.com)</generator><language>en-us</language><lastBuildDate>Thu, 02 Oct 2025 00:00:00 +0000</lastBuildDate><image><url>https://8759s.github.io/media/icon_hu_1035bcf07d2ae8d9.png</url><title>Blob URLs</title><link>https://8759s.github.io/tags/blob-urls/</link></image><item><title>IOCs for phishing pages using blob URLs</title><link>https://8759s.github.io/news/iocs-for-phishing-pages-using-blob-urls/</link><pubDate>Thu, 02 Oct 2025 00:00:00 +0000</pubDate><guid>https://8759s.github.io/news/iocs-for-phishing-pages-using-blob-urls/</guid><description>&lt;p>Several active phishing campaigns use blob URLs to deliver their final pages. Rather than loading all malicious content over the network, the pages construct it dynamically in browser memory at runtime.&lt;/p>
&lt;p>This delivery method can reduce the visibility available to network-based analyzers and complicate conventional URL inspection.&lt;/p>
&lt;p>
&lt;/p></description></item></channel></rss>