How links with an @ in the URL becomes insecure, because they can redirect to a .zip domain simulating a file