Resolve 3289355434

Peter Dambier peter at peter-dambier.de
Tue Mar 14 22:55:49 UTC 2006


tom wrote:
> I received a phishing scam email recently.  No news there, but one
> thing that caught me off guard was the URL given in the email:
> http://3289355434:82/webscr/index.php
> 
> I am not sure I understand how the domain 3289355434 can resolve to an
> IP, but it does.
> 
> There is no TLD in that domain - could someone explain to me how that
> works?
> 
> Thanks
> 
> -tom
> 
> 

 From the IASON tools:

http://iason.site.voila.fr/
http://www.kokoom.com/iason/

https://sourceforge.net/projects/iason/

use:

natnum 3289355434
host_look("196.15.148.170","3289355434","3289355434").
host_name("196.15.148.170","mail.lionshare.co.za").

3289355434      is a long integer. It is the same as
196.15.148.170  and the reverse lookup says it is
mail.lionshare.co.za

:82  means they have http not on port 80 but on port 82.

Regards
Peter and Karin Dambier


-- 
Peter and Karin Dambier
The Public-Root Consortium
Graeffstrasse 14
D-64646 Heppenheim
+49(6252)671-788 (Telekom)
+49(179)108-3978 (O2 Genion)
+49(6252)750-308 (VoIP: sipgate.de)
mail: peter at peter-dambier.de
mail: peter at echnaton.serveftp.com
http://iason.site.voila.fr/
https://sourceforge.net/projects/iason/



More information about the bind-users mailing list