Hackers Hide Phishing Behind Trusted Senders, Redirect Chains and URL Obfuscation