News for hackers. Stuff that matters.

A comment on I just clicked on an api.equifax.com link in a text message.

Re:I just clicked on an api.equifax.com link in a text message by anomaloustho on Sunday July 17, 2022 @05:51AM (#32125558)
On-Site.com is a legitimate company (used to work there). They use a lot of integrations and third party services for credit/background checks. AFAIK, they were even using a vendor that would try to get court documents if records couldn’t be found for an individual.

It was subsequently acquired by Realpage. (also a legitimate company) Surprised to hear anything is still running at the On-Site domain name, but checking the WHOIS shows that the domain is pointing at RealPage servers, so it seemingly hasn’t been squatted on.

If it was legitimately the On-Site.com domain I think you’re fine. More likely just a kludgy bug.

If you have a link to the form, I can pass it along to the On-Site folks to verify.

[ Parent | on HN ]
Re:I just clicked on an api.equifax.com link in a text message by barnabees on Sunday July 17, 2022 @02:15PM (#32129448)
I don't have a link to the form, but it would be good to verify that this is legit (if that's something you would be able to do). It's an unusual workflow imo so I just wanted to double check
[ Parent | on HN ]