[dns-operations] [Security] Lying resolver + XSS vulnerability = ?

[Stephane Bortzmeyer]

http://blog.wired.com/27bstroke6/2008/04/isps-error-page.html

Summary: using lying DNS resolvers, which modify NXDOMAIN responses
and do not obey zone cuts, plus vulnerable Web servers, you can
improve your phishing karma.