URL or location poisoning tracks user behavior on the Internet. This type of malware is deployed on a web server. When a user visits the website, an identification number is added to the URL. As the user clicks around the website, that identification number is used to track the links clicked on and the pages that the user visits. This information is used to determine how visitors use the website. The website’s company may then change the layout of their website based on the information gathered.

Unlike cookies, users cannot opt out of URL poisoning when they visit a website. If a user does not want to be tracked on a particular website, the user should simply not visit that website.