History DB: /tmp/chrome-poc-profile/Default/History

=== urls table (url, visit_count, typed_count, hidden) ===
  http://127.0.0.1:8080/ok                           visit=10 typed=0 hidden=0
  http://attacker-page.com:8080/poc.html             visit=1 typed=0 hidden=0
  http://goog1e-login.com:8080/r                     visit=10 typed=10 hidden=0

=== segments / segment_usage ===
  segment=http://goog1e-login.com/r                usage=10

=== visits for goog1e-login (transition decoded) ===
  http://goog1e-login.com:8080/r                0x10000001 TYPED|CHAIN_START typed_inc=1
  http://127.0.0.1:8080/ok                      0xa0000001 TYPED|CHAIN_END|SERVER_REDIRECT typed_inc=0
  http://goog1e-login.com:8080/r                0x10000001 TYPED|CHAIN_START typed_inc=1
  http://127.0.0.1:8080/ok                      0xa0000001 TYPED|CHAIN_END|SERVER_REDIRECT typed_inc=0
  http://goog1e-login.com:8080/r                0x10000001 TYPED|CHAIN_START typed_inc=1
  http://127.0.0.1:8080/ok                      0xa0000001 TYPED|CHAIN_END|SERVER_REDIRECT typed_inc=0
  http://goog1e-login.com:8080/r                0x10000001 TYPED|CHAIN_START typed_inc=1
  http://127.0.0.1:8080/ok                      0xa0000001 TYPED|CHAIN_END|SERVER_REDIRECT typed_inc=0
  http://goog1e-login.com:8080/r                0x10000001 TYPED|CHAIN_START typed_inc=1
  http://127.0.0.1:8080/ok                      0xa0000001 TYPED|CHAIN_END|SERVER_REDIRECT typed_inc=0
  http://goog1e-login.com:8080/r                0x10000001 TYPED|CHAIN_START typed_inc=1
  http://127.0.0.1:8080/ok                      0xa0000001 TYPED|CHAIN_END|SERVER_REDIRECT typed_inc=0
  http://goog1e-login.com:8080/r                0x10000001 TYPED|CHAIN_START typed_inc=1
  http://127.0.0.1:8080/ok                      0xa0000001 TYPED|CHAIN_END|SERVER_REDIRECT typed_inc=0
  http://goog1e-login.com:8080/r                0x10000001 TYPED|CHAIN_START typed_inc=1
  http://127.0.0.1:8080/ok                      0xa0000001 TYPED|CHAIN_END|SERVER_REDIRECT typed_inc=0
  http://goog1e-login.com:8080/r                0x10000001 TYPED|CHAIN_START typed_inc=1
  http://127.0.0.1:8080/ok                      0xa0000001 TYPED|CHAIN_END|SERVER_REDIRECT typed_inc=0
  http://goog1e-login.com:8080/r                0x10000001 TYPED|CHAIN_START typed_inc=1
  http://127.0.0.1:8080/ok                      0xa0000001 TYPED|CHAIN_END|SERVER_REDIRECT typed_inc=0

=== VERDICT ===
  goog1e-login.com/r typed_count = 10
  127.0.0.1 (all)    typed_count = 0
  >>> BUG CONFIRMED: web-driven LINK navigations forged typed_count on the phishing domain via IP-literal redirect tail.