4 ms·
The site is already marketingreportoptout.visa.com. How would your random link add anything?
by iamtedd 6y ago
The site is already marketingreportoptout.visa.com. How would your random link add anything?
- wpietri 6y agoThe "random link" is on a domain that the Wayback machine has back to 2001. Whereas the marketingreportoptout subdomain doesn't appear to be there at all. I could certainly imagine a compromise where somebody who doesn't have access to the main sites still manages to sneak in a plausible-sounding subdomain.
- ianlevesque 6y agoThat's not how any of this works.
- wpietri 6y agoOh? https://www.hackerone.com/blog/Guide-Subdomain-Takeovers https://www.hackerone.com/blog/Guide-Subdomain-Takeovers
- foepys 6y agoPlus the site uses a certificate that is not only issued by but also owned by Cloudflare according to its metadata. It's undistinguishable from a free tier Cloudflare cert unless you know what exactly you need to look for.
- durpkingOP 6y agoThis is not realistic or even probable.
- stevehawk 6y agohttps://www.securitynewspaper.com/2018/05/04/make-subdomain-takeover-attack/ https://www.securitynewspaper.com/2018/05/04/make-subdomain-...
- miked85 6y agoDoes that mean that you don't trust subdomains by default? That seems a bit extreme/unnecessary.
- wpietri 6y agoI don't know that I trust anything by default. It's always a risk assessment. When I saw a kinda basic-looking site asking for my credit card number, I definitely looked at the domain, and alongcomplicatedthingineverheardof.visa.com was definitely more concerning than, say, www.visa.com.
- twosdai 6y agoCan't even trust myself these days, its really awful. /s