[tag=□] □
[tag=WDT] □
[tag=VBZ] □
When users click on a URL within an e-mail , the correct URL of the malicious Web site briefly appears in their browser ’ s address bar and is then replaced by whichever URL the phisher designates .