DNS rebinding
A trick where a website briefly points its own address at your computer so your browser treats your local software as part of that site.
Your browser normally keeps websites apart: a page from one address cannot poke at a page or a server from another. DNS rebinding gets around that by cheating on the address itself. The attacker’s domain first resolves to their real server, then, seconds later, resolves to your own machine. As far as your browser is concerned it is still the same site, so it happily lets the attacker’s code talk to software running on your computer.
The technique is old, but it matters more now because AI tools routinely run small servers on your machine, for example a local model on port 11434. Anything listening on your computer without a password is reachable this way, which is why local AI software should bind to 127.0.0.1 and not to 0.0.0.0.