18 ms·
phishing site? edit: apparently not: http://staff.tumblr.com/post/45588160/tumblr-4-beta http://staff.tumblr.com/post/45588160/tumblr-4-beta
by joshwa 18y ago
phishing site?
edit: apparently not: http://staff.tumblr.com/post/45588160/tumblr-4-beta http://staff.tumblr.com/post/45588160/tumblr-4-beta
- d0mine 18y agohttp://whois.domaintools.com/tumblr-beta.com http://whois.domaintools.com/tumblr-beta.com
- anotherjesse 18y agophishing was the first thing I thought of. I understand if you need to run the site on another domain (because of cookies) but please don't train your users to be phished. The login page should have been on tumblr.com/beta (or beta.tumblr.com) that posts to the other site (or if you have an authenticity token to protect against CSRF posts to the login path, you could iframe the login page from tumblr-beta.com/login inside a tumblr.com domain).