Full Disclosure mailing list archives

Re: strange domain name in phishing email


From: Michael Holstein <michael.holstein () csuohio edu>
Date: Tue, 14 Mar 2006 08:52:59 -0500

IIRC, Microsoft changed that as one of the security updates to IE. For a time, it was a popular phishing trick. I also remember there was a way to do that (or something similar) to bypass the security zones in IE and make it think it was a trusted site, but can't find that reference at hand.

The "rest" of windows will still do it though. Try "ping 2887060730" or "telnet 2887060730 80".

~Mike.

Alice Bryson wrote:
BTW, this kind of ip address would not always work. i try to use
http://2887060730/ to access an internal web server
http://172.21.12.250, but failed.
It said 400 bad request.
I use Windows XP IE 6, web server is Apache on Windows 2003, does
anyone know why?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: