full-disclosure - strange domain name in phishing email

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue Mar 14 13:53:43 2006
From: michael.holstein at csuohio.edu (Michael Holstein)
Subject: strange domain name in phishing email

IIRC, Microsoft changed that as one of the security updates to IE. For a 
time, it was a popular phishing trick. I also remember there was a way 
to do that (or something similar) to bypass the security zones in IE and 
make it think it was a trusted site, but can't find that reference at hand.

The "rest" of windows will still do it though. Try "ping 2887060730" or 
"telnet 2887060730 80".

~Mike.

Alice Bryson wrote:
> BTW, this kind of ip address would not always work. i try to use
> http://2887060730/ to access an internal web server
> http://172.21.12.250, but failed.
> It said 400 bad request.
> I use Windows XP IE 6, web server is Apache on Windows 2003, does
> anyone know why?