Anyone using Firefox ? check this domain hijacking

[meannn]

It affects firefox browsers only. check here: https://www.xn--80ak6aa92e.com/ it hijacks the domain and shows it as apple.com however its not. So evilish, isnt it ?

Another one https://t.co/wYaW0ucpea same as paypal.com

 

[brazi]

Nice find! Tried it in my firefox and got apple.com

 

[Ecodor]

Holy shit this bug its not fixed 2 years??

 

[Boriss]

I don't think it's a bug...

 

[Gogol]

Woah, interesting!!
What's even more surprising is the green lock. I will do some digging on this.

 

[longhigy]

damn thats actually crazy

 

[Gogol]

Okay, so it's the weird characters (раураӏ) that exactly looks like "paypal". No special script or anything. Pretty convincing to be frank. Glad that chrome fixed this bug already.

 

[Ecodor]

lol i got around 12 ideas for this, but its freaking illegal if you get caught for this you are in trouble...

EDIT: Also It remembers the characters if you copy directly from the URL bar on the browser
EXAMPLE: https://www.аррӏе.com/
https://раураӏ.com/

 

[BuildMoreLinks]

wow and its still not fixed on latest version of firefox!
this is a nice read: https://news.ycombinator.com/item?id=14119713

 

[meannn]

I am not sure why firefox doesnt fix this as you can scam many people.

 

[moonshine7000]

That is very cool you can disguise an affiliate link very easily

 

[spazzumes]

Annnd that's how you get in big trouble haha. Pretty wild though

 

[yellowdot]

It's dope great for phasing but strange how this is not fixed in firefox yet.

Although you can see via SSL certificate that something is not right, as big companies have their name for PP is is PayPal, inc (US) written in the green area. And these websites have SSL from comodo.

Anyway ordinary user would not mind looking further to notice something is not right tbh

 

[LSP24]

When I connect to real PayPal site - there "PayPal, Inc.(US) before lock. Same with Apple.
There 2 sites only shows green lock.

 

[sheryna]

It affects firefox browsers only. check here: https://www.xn--80ak6aa92e.com/ it hijacks the domain and shows it as apple.com however its not. So evilish, isnt it ?

Another one https://t.co/wYaW0ucpea same as paypal.com

is this whats called by "phising" ? is there any guide to do it ?

 

[moonshine7000]

is this whats called by "phising" ? is there any guide to do it ?

This is not a hacking forum and its against the rules.

 

[sheryna]

This is not a hacking forum and its against the rules.

ah i c ... sorry for noob question before , thx for the heads up

 

[yellowdot]

is this whats called by "phising" ? is there any guide to do it ?

I don't think this is the right thing to do but phising is basically a fraudulent thing where you trick the users into thinking something is right but in fact you are obtaining an info about them. In the example provided here OP and article showed how others can trick you and me into believing we are at paypal or apple website but in fact we are taken to another website - the website of the attacker.

Anyways I would not recommend you to go further, because if you do you will have to keep your tracks clean because when cough, you can end up in jail etc. because you are stealing the info from people. Better find other way to make money, do you want somebody to use physing on you and to obtain your data? I guess you don't, so don't do that.

 

[Kenobii]

Dang this is so huge.

 

[Ecodor]

Dont do this unless you are sure you wont get caught