I recall that subdomains are their own record inside a DNS, which would imply that anyone can claim that their server is a non-existent subdomain of the real domain
I recall that subdomains are their own record inside a DNS, which would imply that anyone can claim that their server is a non-existent subdomain of the real domain
Checks own servers…
Yeah, I’d like to see that…
http://web.archive.org/web/20230919001454if_/https://charleston.craigslist.org/avo/d/mount-pleasant-stealth-fighter/7667184419.html
Anything on the archive can be accessed via simple http, regardless of whether the original site was https or not.
Yeah, but now you’re talking about communicating with
web.archive.org
and notnonesense.reputable-bank.com
as in the original post. In this case you’re not even trying to hide the fact, that you aren’t affiliated withreputable-bank.com
and we’re back to square one and you could also just usereputable-bank.com.some.malicious-phishing.website
to host your page.Btw: all modern browsers will warn you when you access a non-encrypted website - some immediately, some only when you try to enter data into a login form.