Sidenote since this is getting so much attention: How does the website control the URL of an external tab? Is this effectively tabnabbing?