Summary by Renwa Custom URI scheme combined with a file download freeze the url which allowed full address bar spoof