ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Phony Government Websites

    IT Discussion
    security
    6
    18
    3.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • scottalanmillerS
      scottalanmiller
      last edited by

      How does one make a fake government site in the US where the government controls the TLD?

      ? gjacobseG 2 Replies Last reply Reply Quote 0
      • ?
        A Former User @gjacobse
        last edited by

        @g.jacobse said:

        Nor have I.. Makes me wonder if it itself is not one of the fake GOV site...

        It's real.

        1 Reply Last reply Reply Quote 0
        • ?
          A Former User @scottalanmiller
          last edited by

          @scottalanmiller said:

          How does one make a fake government site in the US where the government controls the TLD?

          Cause we all know government systems are the most secure..

          scottalanmillerS 1 Reply Last reply Reply Quote 0
          • scottalanmillerS
            scottalanmiller @A Former User
            last edited by

            @thecreativeone91 said:

            @scottalanmiller said:

            How does one make a fake government site in the US where the government controls the TLD?

            Cause we all know government systems are the most secure..

            Anything on there is as official as it gets. It means that the government authenticated it, in some manner. If it gets put up with a .gov, it means the government security has already failed and the issue is the sites being hacked not them being fake.

            ? 1 Reply Last reply Reply Quote 0
            • scottalanmillerS
              scottalanmiller
              last edited by

              The even say look for .gov instead of .com. Honestly, if someone falls for a .com site as a government web site, they deserve to be in trouble. You've got to be REALLY uncaring to be that ignorant.

              ? 1 Reply Last reply Reply Quote 1
              • ?
                A Former User @scottalanmiller
                last edited by

                @scottalanmiller said:

                @thecreativeone91 said:

                @scottalanmiller said:

                How does one make a fake government site in the US where the government controls the TLD?

                Cause we all know government systems are the most secure..

                Anything on there is as official as it gets. It means that the government authenticated it, in some manner. If it gets put up with a .gov, it means the government security has already failed and the issue is the sites being hacked not them being fake.

                The process of requesting a .gov domain is pretty simple if you have the credentials. I don't think they hardly even read the stuff, I wouldn't be surprised if it's automated or someone just clicks approve on each one without looking into it.

                1 Reply Last reply Reply Quote 0
                • ?
                  A Former User @scottalanmiller
                  last edited by

                  @scottalanmiller said:

                  The even say look for .gov instead of .com. Honestly, if someone falls for a .com site as a government web site, they deserve to be in trouble. You've got to be REALLY uncaring to be that ignorant.

                  Yeah. a lot of local gov's are using .org TLDs now for some reason.

                  1 Reply Last reply Reply Quote 0
                  • gjacobseG
                    gjacobse @scottalanmiller
                    last edited by

                    @scottalanmiller said:

                    How does one make a fake government site in the US where the government controls the TLD?

                    Generally most people would not give the .GOV a second thought. However, is it not possible to spoof about 80% of that to make it appear to come from a .GOV site and it not be?

                    ? scottalanmillerS 2 Replies Last reply Reply Quote 0
                    • ?
                      A Former User @gjacobse
                      last edited by

                      @g.jacobse said:

                      @scottalanmiller said:

                      How does one make a fake government site in the US where the government controls the TLD?

                      Generally most people would not give the .GOV a second thought. However, is it not possible to spoof about 80% of that to make it appear to come from a .GOV site and it not be?

                      Only with local DNS access.

                      1 Reply Last reply Reply Quote 0
                      • scottalanmillerS
                        scottalanmiller @gjacobse
                        last edited by

                        @g.jacobse said:

                        Generally most people would not give the .GOV a second thought. However, is it not possible to spoof about 80% of that to make it appear to come from a .GOV site and it not be?

                        Spoofing a TLD is a pretty difficult thing to do. You have to hijack DNS to do it. Easy to do internal in a business, hard to do to a person randomly on the Internet.

                        1 Reply Last reply Reply Quote 0
                        • gjacobseG
                          gjacobse
                          last edited by

                          Seems legit then
                          ransomware-demand.jpg

                          In the case of the OP - yes it is legitimate. But there are so many daily occurrences of those that are not.

                          "trust but verify"

                          ? LakshmanaL 2 Replies Last reply Reply Quote 1
                          • ?
                            A Former User @gjacobse
                            last edited by

                            @g.jacobse said:

                            In the case of the OP - yes it is legitimate. But there are so many daily occurrences of those that are not.

                            Daily occurrence of a .gov TLD that's fake? I've never actually seen it happen.

                            1 Reply Last reply Reply Quote 0
                            • LakshmanaL
                              Lakshmana @gjacobse
                              last edited by

                              @g.jacobse I have seen this issue at client place which was not so good

                              1 Reply Last reply Reply Quote 0
                              • DashrenderD
                                Dashrender
                                last edited by

                                Well that page is even telling people to go to [email protected] - problems abound!

                                1 Reply Last reply Reply Quote 0
                                • 1 / 1
                                • First post
                                  Last post