Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Phishing detection from FQDN's as prefixes

100 views
Skip to first unread message

Adam Shannon

unread,
Aug 9, 2017, 6:05:15 PM8/9/17
to Mozilla dev.security.policy
Has anyone looked into what some use cases are for using a FQDN as a prefix
in a hostname? (Or even how common such names in use are?) I could imagine
setting up a proxy or archival service with such a scheme:

www.google.com.corp.com/search?q=flowers

www.myblog.net.proxy.com?rev=2017-08-09

If a large percentage of hostnames with a FQDN prefix are phishing related
it might be an initial pool for further research by agencies.
0 new messages