Saturday, March 29, 2008

Bogus Domain URL

Though I'd take a second to show one of these Bogus URLs

The user will see:

https://www.bxs.com/inview/

but the HTML hides the actual URL. Which is:

http://www.bxs.inview.session04380.
certificate-logon2008.serial48992743-0009.csdv5.com/login.htm


What may not be apparent to the causal user is that the actual domain you are sent to is:

csdv5.com

For those making the realization a bit late, they might be subject to all the common Microsoft Internet Explorer Exploit. And while Microsoft does diligently turn out patches to deal with this issue, one can only wonder why they must continue to use tape and bubble gum to engineer their final products.




No comments: