subdomain question - "www."

[phantazm]

"It's not very common for legit sites to do this,
but not uncommon for malicious sites to do such."

Indeed! There is such a difference,
and we ought to deal with it...

[YoKenny]

I don't get any alert from avast! on this topic so how can it be IE8's problem?

[c۞g]

[url=http://www.mywot.com/en/forum/3643-virus-detected-on-wot-forums t=_self]Subject[/url] is about Avira warning while using IE8, not Avira and using another browser, or using another AV with IE8.

[YoKenny]

Why don't I get an alert on this topic then?

[c۞g]

you are using avast not avira

[RonanKER]

I think :
99,9% of www.domain.tld are equals to domain.tld
99,0% of www666.domain.tld are equivalent to domain.tld
90% of www.sub-dom.domain.tld are equals to sub-dom.domain.tld
50% of www666.sub-dom.domain.tld are equivalent to sub-dom.domain.tld
and the 50% else are malicious
(50%+50% from the 0,1% case where www666. exists)

we can imagine that www666 here can be replaced by any www[0-9]*...

I think that we shouldn't simply consider these sub-domains like the parent domain, they can be different like any other sub-domain.