Beware: http://citibank.in
Jan. 29th, 2008 01:49 pmHere is my email to Citibank:
So the site is owned by Citi after all, but sits on the standard domain parking server of an ISP not known for its technical savvy, and running a version of Apache with known vulnerabilities. Great going Citicorp.
from: me
to: India Service <indiaservice@citicorp.com>
date: Jan 29, 2008
subject: http://citibank.in/
Hi Citibank Support,
Are you aware that http://citibank.in/ exists and isn't owned by you? It's a small step away from http://citibank.co.in/ your original website. I feel unsafe that you would let http://citibank.in/ exist - I fear that it's trivially simple for someone to hijack the http://citibank.in/ server and create a phishing website even if the current domain squatter has no such intention. I urge you in the strongest possible terms to take action.
Thanks,
...
to: India Service <indiaservice@citicorp.com>
date: Jan 29, 2008
subject: http://citibank.in/
Hi Citibank Support,
Are you aware that http://citibank.in/ exists and isn't owned by you? It's a small step away from http://citibank.co.in/ your original website. I feel unsafe that you would let http://citibank.in/ exist - I fear that it's trivially simple for someone to hijack the http://citibank.in/ server and create a phishing website even if the current domain squatter has no such intention. I urge you in the strongest possible terms to take action.
Thanks,
...
So the site is owned by Citi after all, but sits on the standard domain parking server of an ISP not known for its technical savvy, and running a version of Apache with known vulnerabilities. Great going Citicorp.