.gov Redirections Leading to Spam: How Did We Get There?

The report describes how open redirection and related XSS flaws on *.gov websites are being exploited by spammers to bypass URL/spam filters and redirect users to scam pages, outlines why these warning/redirect pages are abused, and recommends mitigations including referrer validation, allowlists, and signing redirect URLs with hashes to ensure only approved redirects are executed.