Hackers are always looking for new and creative ways to disguise their malicious phishing links as something benign. This is both to better bypass spam filters as well as to better trick their victims. This session will cover several interesting and tough to detect link obfuscation techniques to include RFC1738 abuse, alternate IPv4 representation, homoglyphs, open redirects, and legitimate service abuse.