GitHub is full of similar typos in documentation and code files (74.8k results). I am not sure if there's a way to do a web search based on code and find "live" examples but I can't imaging there'd be a shortage of those either.

https://github.com/search?q=%22https%2F%2F%22++&type=code

https://superuser.com/questions/888283/why-is-https-www-google-com-getting-redirected-to-http-www-https-com-www-goo

Scenario:

Copy-paste or type any URL beginning with `https//` (missing colon before `//).

Expected:

Invalid URL page (like Chrome does).

Actual:

It redirects to `https.com` which is a scam website that has random redirection based on the IP address to a variety of scam websites. When I tried it, my first few were to a tech support scam website, the others were all to similar exploiting ones (all from US IP address).

Tries from IP addresses of other countries also redirect to other random websites that are also of questionable nature.

Root Cause:

It seems like Safari always puts `.com` when URL does not have a TLD. e.g Typing `something//` automatically goes to `something.com` While most cases this seems like helpful behavior, in this particular case of `https//` only bad things are happening, and looks like scammers figured this out and are exploiting it in the wild.

I don't know when this started, but it seems like `https.com` has been owned by the same entity since 2008 at least.

`https://whois.domaintools.com/https.com`

Comments URL: https://news.ycombinator.com/item?id=40916743

Points: 17

# Comments: 5

Recall is a malware.

People had to deal with local language file names since Windows 3.1 at least and it became very common with Windows 95. Good luck if you wanted to deal with files named in more than 1 non-ASCII language (very common in Europe or the Middle East).