logoalt Hacker News

cfnlast Tuesday at 2:52 PM2 repliesview on HN

And when I click them I get a page with "Did you mean netflix.com? The site you just tried to visit looks fake. Attackers sometimes mimic sites by making small, hard-to-see changes to the URL." which then sends me to the Netfçix home page. Chrome on MacOS.


Replies

bstsblast Tuesday at 3:37 PM

it's because their s3 bucket is called "download.opencontent.netflix.com.s3.amazonaws.com". the subdomain makes chrome think it's pretending to be "netflix.com"

show 1 reply
giancarlostorolast Tuesday at 3:15 PM

...how is that even possible?