--- title: "What Is URL Manipulation and URL Rewriting? A Complete Guide | DuoCircle" description: "Learn how URL manipulation and URL rewriting work, their key differences, common techniques, security risks, and best practices for managing URLs effectively." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/what-is-url-manipulation-and-url-rewriting-a-complete-guide/" --- Quick Answer URL manipulation changes parts of a URL, such as query parameters, while URL rewriting transforms URLs into cleaner, user-friendly formats. Both help improve website navigation, SEO, and URL management when implemented securely. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fwhat-is-url-manipulation-and-url-rewriting-a-complete-guide%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=What%20Is%20URL%20Manipulation%20and%20URL%20Rewriting%3F%20A%20Complete%20Guide&url=undefined%2Fblog%2Fwhat-is-url-manipulation-and-url-rewriting-a-complete-guide%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fwhat-is-url-manipulation-and-url-rewriting-a-complete-guide%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fwhat-is-url-manipulation-and-url-rewriting-a-complete-guide%2F&title=What%20Is%20URL%20Manipulation%20and%20URL%20Rewriting%3F%20A%20Complete%20Guide "Share on Reddit") [ ](mailto:?subject=What%20Is%20URL%20Manipulation%20and%20URL%20Rewriting%3F%20A%20Complete%20Guide&body=Check out this article: undefined%2Fblog%2Fwhat-is-url-manipulation-and-url-rewriting-a-complete-guide%2F "Share via Email") ![URL Manipulation](https://media.mailhop.org/duocircle/spf-record-tester-1211-1792058538072.jpg) Every website, online document, image, and digital service has a web address known as a [Uniform Resource Locator (URL)](https://www.techtarget.com/it-infrastructure/definition/What-is-a-URL-Uniform-Resource-Locator). These addresses help browsers locate and retrieve online resources. However, URLs can be changed for legitimate website management purposes or manipulated by cybercriminals attempting to exploit security weaknesses. Understanding URL manipulation and URL rewriting is important for website owners, developers, digital marketers, and [cybersecurity professionals](https://www.duocircle.com/blog/email-security/9-strategies-to-enhance-cybersecurity-for-the-remote-workforce/). Although both techniques involve changing **URL structures or behavior**, their purposes and potential consequences can vary significantly. _This guide explains how URLs work, how rewriting functions, why attackers manipulate web addresses, and what organizations can do to protect their websites and users_. ## What Is a URL? A URL, or Uniform Resource Locator, is the address used to **identify and access a resource** on the internet. It can direct users to a website, a specific webpage, a downloadable file, an image, or another online resource. For example: `https://example.com/blog/email-security` _This address contains several components that work together to identify the requested resource_. ![Key Components of a URL](https://media.mailhop.org/duocircle/spf-permerror-1223-1792059060367.jpg) ### Key Components of a URL **1\. Scheme or Protocol** The scheme identifies how the browser should communicate with the destination. Common examples include HTTPS and HTTP. HTTPS encrypts the connection between the browser and the website, helping **protect information exchanged** during communication. **2\. Domain Name** The domain identifies the website being accessed. In the example above, `example.com` is the domain name. **3\. Port Number** A port identifies a communication endpoint on the destination server. Standard HTTP and [HTTPS connections](https://http.dev/http-connection) commonly **use ports 80 and 443, respectively**. These numbers are often omitted from ordinary URLs because browsers use the default ports automatically. **4\. Path** The path identifies a particular resource or location within a website. In the example, `/blog/email-security` represents the requested path. **5\. Query Parameters** [Query parameters](https://locationiq.com/glossary/query-parameters) carry additional information to the server. They begin after a question mark and commonly contain values used for searching, filtering, tracking, or retrieving specific content. **6\. Fragment Identifier** A fragment appears after a hash symbol (#) and can direct the browser to a particular section of a webpage or identify a location within a document. _Not every URL contains all these components. Their presence depends on the website’s design and the purpose of the address_. ![What Is URL Manipulation?](https://media.mailhop.org/duocircle/smtp-service-1236-1792058683313.jpg) ## What Is URL Manipulation? URL manipulation refers to changing some part of a web address to influence how a website or application processes a request. This may involve modifying a path, parameter, domain, or other **URL component**. URL manipulation is not [inherently harmful](https://www.bbc.com/news/articles/cm4gjjlgzdjgo). Developers and website administrators may adjust URLs to improve navigation, maintain compatibility, or organize website resources. However, attackers can also manipulate URLs to test security weaknesses, bypass authorization checks, or direct visitors toward fraudulent destinations. The consequences depend on how the website handles the modified request and whether appropriate security controls are in place. ### Common Reasons for URL Manipulation URL manipulation can serve several purposes, including: - **Website customization:** Adjusting addresses to make pages easier to understand and navigate. - **Application testing:** Checking whether a website correctly validates incoming requests. - **Content management:** Changing **URL parameters** to retrieve specific records or resources. - **Security testing:** Identifying weaknesses in access controls and input validation. - **Malicious activity:** Attempting to reach restricted resources, expose sensitive information, or deceive website visitors. The important distinction is whether the changes are authorized and whether the website processes them securely. ## What Is URL Rewriting? URL rewriting is a technique that changes how a URL is interpreted or mapped to a resource. _A web server or application follows predefined rules to process an incoming request and determine which internal resource should handle it_. **One common purpose** is to replace a complicated address with a cleaner, more readable version. For example, a website might internally retrieve an article using a URL containing a script name and several query parameters. A rewriting rule can allow visitors to access the same article through a shorter path, such as: `https://example.com/articles/email-security` The browser can continue displaying the clean address while the server processes the request using its internal routing rules. [URL rewriting](https://www.zoho.com/eprotect/articles/url-rewriting.html) is commonly used in content management systems, online stores, web applications, and websites that generate pages dynamically. ![How URL Rewriting Works](https://media.mailhop.org/duocircle/spf-flattening-1235-1792058834834.jpg) ### How URL Rewriting Works URL rewriting generally follows a series of steps: 1. **A user requests a webpage:** The browser sends a request containing the URL. 2. **The server examines the request:** The web server or application checks the requested path and relevant conditions. 3. **A rewriting rule is applied:** If the request matches a configured rule, the server maps it to another internal path or resource. 4. **The application processes the request:** The appropriate content or functionality is selected. 5. **The response is returned:** _The server sends the requested content to the browser_. In a typical internal rewrite, the address displayed in the browser does not change. This differs from a redirect, which instructs the browser to request another URL. ## URL Rewriting vs. URL Redirection URL rewriting and URL redirection are related but perform different functions. | Feature | URL Rewriting | URL Redirection | | -------------------------- | -------------------------------------------------------- | -------------------------------------------- | | Main function | Maps a request to another resource internally | Sends the browser to another address | | Browser address bar | Usually remains unchanged | Usually displays the destination URL | | Additional browser request | Typically unnecessary for the internal mapping | Normally required to request the destination | | Common purpose | Clean URLs and internal routing | Moving visitors to a different address | | Typical example | Mapping a readable path to an internal application route | Sending an old page URL to its replacement | A permanent redirect commonly uses [HTTP status code 301](https://en.wikipedia.org/wiki/HTTP%5F301), while a temporary redirect may use 302 or another appropriate redirect status. The correct choice depends on the intended behavior. **Understanding this distinction** helps website owners manage page migrations, maintain links, and configure their applications correctly. ![How Cybercriminals Abuse URL Manipulation](https://media.mailhop.org/duocircle/spf-validator-1222-1792059240213.jpg) ## How Cybercriminals Abuse URL Manipulation Although URL rewriting has many legitimate uses, weaknesses in URL handling can expose websites and their visitors to [security threats](https://thehackernews.com/2026/09/threatsday-200-android-flaws-browser.html). Attackers may modify addresses to investigate how an application responds to unexpected requests. _If the application relies on untrusted URL values without adequate validation or authorization, the result can be unauthorized access or information disclosure_. ### 1\. Unauthorized Resource Access Some applications use URL parameters to identify records, documents, or user accounts. If the server does not verify whether the requester has permission to access the selected resource, a modified URL may expose information that should remain private. Web applications should enforce **authorization on the server** rather than assuming that a user is permitted to access a resource simply because its identifier appears in a request. ### 2\. Directory Traversal Vulnerabilities [Directory traversal](https://www.f5.com/glossary/directory-traversal) occurs when an application incorrectly handles file paths supplied through requests. _Under vulnerable conditions, an attacker may attempt to access files outside the directory intended for the application_. Secure file-handling practices, strict path validation, and restricted file permissions can reduce this risk. ### 3\. Exposure of Sensitive Information Poorly designed applications may reveal internal filenames, configuration details, or other information through error messages and improperly protected endpoints. Developers should limit access to **sensitive resources and ensure** that application responses do not disclose unnecessary internal details. ### 4\. Malicious Redirects _An application that accepts untrusted destination URLs without proper validation may redirect visitors to fraudulent websites_. Attackers can exploit this weakness in [phishing campaigns](https://www.bleepingcomputer.com/news/security/global-takedown-hits-network-behind-1-billion-phishing-messages/) to make deceptive links appear connected to a legitimate service. Applications should validate redirect destinations against trusted rules and avoid accepting arbitrary external destinations. ### 5\. Phishing Through Rewritten Links [Email security](https://www.duocircle.com/) systems sometimes rewrite links so that they can inspect destinations when a user clicks them. This can provide an **additional layer of protection** against malicious websites. However, criminals may also disguise destinations, abuse redirect chains, or take advantage of users who **trust a familiar-looking link**. A rewritten link is not automatically safe simply because it contains the name of a recognized service. Users should verify the actual destination and exercise caution with unexpected requests for passwords, payment information, or account verification. ![Best Practices for Preventing URL Manipulation Attacks](https://media.mailhop.org/duocircle/smtp-relay-1237-1792059168946.jpg) ## Best Practices for Preventing URL Manipulation Attacks _Organizations should treat URL handling as an important part of their application security strategy. The following measures can help reduce common risks_. ### 1\. Keep Web Software Updated Apply security patches to [web servers](https://www.geeksforgeeks.org/node-js/web-server-and-its-type/), frameworks, content management systems, plugins, and other application components. Updates can address known vulnerabilities that attackers might otherwise exploit. ### 2\. Validate Incoming Requests Check URL parameters, paths, and other **user-controlled input** against clearly defined expectations. Reject invalid values instead of allowing the application to process them without appropriate checks. ### 3\. Enforce Access Controls Verify user permissions on the server for every protected resource. Do not rely on hidden links, difficult-to-guess identifiers, or [URL structure](https://rankmath.com/seo-glossary/url-structure/) as substitutes for authorization. ### 4\. Restrict File and Directory Access Configure the server so that **application processes** can access only the files and directories required for their functions. Disable unnecessary directory listings and remove unused files that could expose internal information. ### 5\. Configure Rewrite Rules Carefully _Review rewriting and routing rules for unexpected behavior, conflicting conditions, and unintended access paths_. Keep configurations straightforward and test changes before deploying them to production. ### 6\. Validate Redirect Destinations Allow redirects only to approved **destinations when external redirection** is not required. If external destinations are necessary, validate them using a carefully designed allowlist or equivalent security controls. ### 7\. Use HTTPS **HTTPS protects data** while it travels between a user’s browser and the website. It helps prevent network observers from reading or modifying traffic in transit, although it does not guarantee that a website itself is trustworthy. ### 8\. Monitor Website Activity Review server logs and security alerts for unusual requests, repeated access failures, unexpected redirects, and attempts to access restricted resources. Monitoring can help security teams identify [suspicious patterns](https://www.bloomberg.com/news/articles/2026-03-05/fbi-found-suspicious-activity-on-its-computer-networks) and investigate potential incidents. ### 9\. Test Application Security Regularly Perform authorized security assessments to check whether URL parameters, routing rules, and access controls behave as intended. _Fix identified weaknesses and retest the affected components after changes are made_. ![Securing Web Addresses Infographic](https://media.mailhop.org/duocircle/sendgrid-alternative-6223-1792059845563.jpg) ### 10\. Strengthen Email Security Organizations should also protect users against phishing links delivered through email. [SPF](https://www.duocircle.com/email/spf-management/), DKIM, and DMARC help authenticate email and reduce certain types of [domain spoofing](https://www.scworld.com/brief/massive-domain-spoofing-campaign-uncovered). Email filtering, link inspection, and user awareness training provide **additional layers of defense**. These email security controls do not directly prevent every URL manipulation vulnerability, so they should complement rather than replace **secure application development**. ## Final Thoughts _URL manipulation and URL rewriting are important concepts in website development and cybersecurity_. Rewriting allows applications to present cleaner addresses, simplify internal routing, and maintain stable links when their underlying structures change. URL manipulation can also be part of legitimate **testing and website administration**. Problems arise when applications process modified URLs without proper validation, authorization, or security controls. Such weaknesses may lead to unauthorized resource access, information exposure, or [harmful redirects](https://www.hstoday.us/subject-matter-areas/cybersecurity/fbi-warns-malicious-redirect-systems-are-sending-users-to-scam-and-malware-sites/). Website owners and developers should use carefully configured rewrite rules, maintain updated software, enforce server-side permissions, and monitor suspicious activity. Combining these practices with secure development processes and effective email protection can help organizations build safer, more **reliable online experiences**. ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fwhat-is-url-manipulation-and-url-rewriting-a-complete-guide%2F) [ ](https://twitter.com/intent/tweet?text=What%20Is%20URL%20Manipulation%20and%20URL%20Rewriting%3F%20A%20Complete%20Guide&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fwhat-is-url-manipulation-and-url-rewriting-a-complete-guide%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fwhat-is-url-manipulation-and-url-rewriting-a-complete-guide%2F) Copy Related Articles - [ ![Common Malware Types ](https://media.mailhop.org/duocircle/spf-record-tester-6189-1780645931491.jpg) 11 Common Malware Types and How to Spot Them Blog ](/blog/11-common-malware-types-and-how-to-spot-them/) - [ ![Sales Call](https://media.mailhop.org/duocircle/best-ai-note-takers-for-sales-calls-1782375564157.jpg) 5 Best AI Note Takers for Sales Calls in 2026 Blog ](/blog/5-best-ai-note-takers-for-sales-calls-in-2026/) - [ ![Sales Call](https://media.mailhop.org/duocircle/5-best-ai-note-takers-for-sales-calls-in-2026-duocircle-1788248285807.jpg) 6 Best AI Note Takers for Sales Calls in 2026 Blog ](/blog/6-best-ai-note-takers-for-sales-calls-in-2026/) - [ ![Effective Data Loss Prevention](https://media.mailhop.org/duocircle/email-sending-services-6788-1787910887799.jpg) 6 Effective Data Loss Prevention Strategies for Business Email Security Blog ](/blog/6-effective-data-loss-prevention-strategies-for-business-email-security/) ## Related Articles [ foundational 11 Common Malware Types and How to Spot Them May 15, 2026 ](/blog/11-common-malware-types-and-how-to-spot-them/)[ foundational 5 Best AI Note Takers for Sales Calls in 2026 Jun 25, 2026 ](/blog/5-best-ai-note-takers-for-sales-calls-in-2026/)[ foundational 6 Best AI Note Takers for Sales Calls in 2026 Jun 25, 2026 ](/blog/6-best-ai-note-takers-for-sales-calls-in-2026/)[ foundational 6 Effective Data Loss Prevention Strategies for Business Email Security Aug 28, 2026 ](/blog/6-effective-data-loss-prevention-strategies-for-business-email-security/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"What Is URL Manipulation and URL Rewriting? A Complete Guide","description":"Learn how URL manipulation and URL rewriting work, their key differences, common techniques, security risks, and best practices for managing URLs effectively.","url":"https://www.duocircle.com/blog/what-is-url-manipulation-and-url-rewriting-a-complete-guide/","datePublished":"2026-10-15T00:00:00.000Z","dateModified":"2026-10-15T00:00:00.000Z","dateCreated":"2026-10-15T00:00:00.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/what-is-url-manipulation-and-url-rewriting-a-complete-guide/"},"articleSection":"foundational","keywords":"","image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/spf-record-tester-1211-1792058538072.jpg","caption":"URL Manipulation"},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"foundational"},{"@type":"ListItem","position":3,"name":"What Is URL Manipulation and URL Rewriting? A Complete Guide","item":"https://www.duocircle.com/blog/what-is-url-manipulation-and-url-rewriting-a-complete-guide/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"foundational","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"What Is URL Manipulation and URL Rewriting? A Complete Guide","item":"https://www.duocircle.com/blog/what-is-url-manipulation-and-url-rewriting-a-complete-guide/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"What Is URL Manipulation and URL Rewriting? A Complete Guide","description":"Learn how URL manipulation and URL rewriting work, their key differences, common techniques, security risks, and best practices for managing URLs effectively.","url":"https://www.duocircle.com/blog/what-is-url-manipulation-and-url-rewriting-a-complete-guide/","datePublished":"2026-10-15T00:00:00.000Z","dateModified":"2026-10-15T00:00:00.000Z","dateCreated":"2026-10-15T00:00:00.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/what-is-url-manipulation-and-url-rewriting-a-complete-guide/"},"articleSection":"foundational","keywords":"","image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/spf-record-tester-1211-1792058538072.jpg","caption":"URL Manipulation"},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```