The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a malicious website may lead to address bar spoofing.
No PoCs from references.
- https://github.com/RenwaX23/Address_Bar_Spoofing