Hackers are creative
One of these directs you to a hackers website!!! citibank . com citibɑnk . com Can you spot the difference? I had to look at these two URLs for...
www.wilderssecurity.com
One different character style (the same character) can lead to a phishing page
- Thread starter Parkinsond
- Start date
- Featured
www.wilderssecurity.com
Yeah, hackers sure know how to keep things interesting—and sneaky. That spoofed Citibank page looks way too convincing at first glance, right? The subtle URL tweak (like adding spaces or using lookalike domains) is a classic phishing move to bypass filters and trick folks into logging in.
Hackers are creative
One of these directs you to a hackers website!!! citibank . com citibɑnk . com Can you spot the difference? I had to look at these two URLs for...
If anyone's curious, always double-check the URL bar, look for HTTPS, and maybe hover over links before clicking. Tools like browser extensions (e.g., from Malwarebytes or uBlock Origin) can help flag these fakes too. Thanks for sharing the example, @Parkinsond—it's a good reminder to stay vigilant!
That Wilders thread you linked has some wild stories; definitely worth a read for more on this stuff.
Wasn't there a thread in the last year about or included 2 variations of, haveIbeenpwned, and haveibeenpwned sites that were functioning? Was it from a Bleeping Computer article or someone just mentioned it in a thread? There seemed to be some concern about it, IIRC.
Last edited:
Have I Been Pwned: Check if your email address has been exposed in a data breach
Have I Been Pwned allows you to check whether your email address has been exposed in a data breach.haveibeenpwned.com
Have I Been Pwned: Check if your email has been compromised in a data breach
Have I Been Pwned allows you to search across multiple data breaches to see if your email address has been compromised.havelbeenpwnd.com
The answer from the thread author himselfHave I Been Pwned: Check if your email address has been exposed in a data breach
Have I Been Pwned allows you to check whether your email address has been exposed in a data breach.
Have I Been Pwned: Check if your email has been compromised in a data breach
Have I Been Pwned allows you to search across multiple data breaches to see if your email address has been compromised.
Thank you, Parkinsond 
You're welcome, @Jonny QuestThe answer from the thread author himself
But the in previous thread, the difference was more noticeable; extra "e" and capital "I" instead of small one.
Yep, but with your other one, it could be typed in the address bar and for a while both pages would load. This citibank one must be a search result that someone would click on with the different a, than is what is on a normal keyboard, at least mine? Or if it was in a email link, or a text etc., could be a hard one to spotYou're welcome, @Jonny Quest
But the in previous thread, the difference was more noticeable; extra "e" and capital "I" instead of small one.
That is why I open websites requiring credentials from bookmarks or password manager, and never from search results or posted links.Yep, but with your other one, it could be typed in the address bar and for a while both pages would load. This citibank one must be a search result that someone would click on with the different a, than is what is on a normal keyboard, at least mine? Or if it was in a email link, or a text etc., could be a hard one to spot
This kind of tactics has been around for ages; just like the ping-pong in the other "Thread".
Jokes aside, if the AV suite can't block the URL on time, it's up for us to be cautious,spot the obvious using our naked eyes.
"If something does not look and feel right, Don't click it"
Jokes aside, if the AV suite can't block the URL on time, it's up for us to be cautious,spot the obvious using our naked eyes.
"If something does not look and feel right, Don't click it"
I've felt that bookmarked verified sites can be a defence layer, of course there is the possibility that a site can be taken over by the evil ones but bookmarks overall are still a very good idea.
F
ForgottenSeer 123960
If there’s any uncertainty, I recommend verifying through a trusted domain reputation checker.
An example URLVoid
An example URLVoid
Last edited by a moderator:
We have to be; I tried several security extensions (Symantec, McAfee, B); all could not detect.
Redirect is a potential bypass, that is why I have a look on address field before entering credentials.
They did not work for me, one extension installed each time.
We have to be; I tried several security extensions (Symantec, McAfee, B); all could not detect.
- Apr 28, 2015
- 9,483
- 1
- 85,628
- 8,389
You may also like...
-
Instagram impersonation scams: Fake brands, businesses and support accounts- Started by Brownie2019
- Replies: 1
-
ConsentFix debrief: Insights from the new OAuth phishing attack- Started by Parkinsond
- Replies: 3
-
Expired Franzis BLACK & WHITE Video #1 - lifetime license
- Started by Brownie2019
- Replies: 0
-
New TokenBreak Attack Bypasses AI Moderation with Single-Character Text Changes
- Started by Parkinsond
- Replies: 0
-
Expired Kaizen Speech Studio Pro v1.0.0 - 1 year for free
- Started by Brownie2019
- Replies: 0