I recall that subdomains are their own record inside a DNS, which would imply that anyone can claim that their server is a non-existent subdomain of the real domain
I recall that subdomains are their own record inside a DNS, which would imply that anyone can claim that their server is a non-existent subdomain of the real domain
Yeah, but now you’re talking about communicating with
web.archive.org
and notnonesense.reputable-bank.com
as in the original post. In this case you’re not even trying to hide the fact, that you aren’t affiliated withreputable-bank.com
and we’re back to square one and you could also just usereputable-bank.com.some.malicious-phishing.website
to host your page.Btw: all modern browsers will warn you when you access a non-encrypted website - some immediately, some only when you try to enter data into a login form.