USBank Scam

There are ways of faking the little lock icon, but they are about as well done as the address bar work on this site. They can't fool everyone and don't mimic all necessary functionality relating to the ssl certificates and your browser.

Also if you hit it just in time and search the bottom you'll see quite a few javascript bits (past the footer html comments) that pull other files from the goobs images directory. Looking inside those you'll see the actual code used to do his thing. He's sort of hiding them by using html and cold fusion file extensions.

example:

http://www.bis1bp.com/a12/images/js02183.htm



<SCRIPT language=javascript
src="images/js02183.htm"></SCRIPT>

<noscript><div> (demonstration requires scripting) </div></noscript>

<SCRIPT language=javascript
src="images/policy.htm"></SCRIPT>

<SCRIPT language=javascript
src="images/contact.cfm"></SCRIPT>

<SCRIPT language=javascript
src="images/return85259.cfm"></script>

Another good reason to use the google toolbar. :)

hjack

or to create your own web proxy for filtering out the retards.

There was supposed to be a picture attached to that post........

Just in case anyone is interested...

Attached is the source before and after the script has loaded.

I filled out some junk in it, but was not able to get it to submit...
Security settings are too high.