Resolve 3289355434
Peter Dambier
peter at peter-dambier.de
Tue Mar 14 22:55:49 UTC 2006
tom wrote:
> I received a phishing scam email recently. No news there, but one
> thing that caught me off guard was the URL given in the email:
> http://3289355434:82/webscr/index.php
>
> I am not sure I understand how the domain 3289355434 can resolve to an
> IP, but it does.
>
> There is no TLD in that domain - could someone explain to me how that
> works?
>
> Thanks
>
> -tom
>
>
From the IASON tools:
http://iason.site.voila.fr/
http://www.kokoom.com/iason/
https://sourceforge.net/projects/iason/
use:
natnum 3289355434
host_look("196.15.148.170","3289355434","3289355434").
host_name("196.15.148.170","mail.lionshare.co.za").
3289355434 is a long integer. It is the same as
196.15.148.170 and the reverse lookup says it is
mail.lionshare.co.za
:82 means they have http not on port 80 but on port 82.
Regards
Peter and Karin Dambier
--
Peter and Karin Dambier
The Public-Root Consortium
Graeffstrasse 14
D-64646 Heppenheim
+49(6252)671-788 (Telekom)
+49(179)108-3978 (O2 Genion)
+49(6252)750-308 (VoIP: sipgate.de)
mail: peter at peter-dambier.de
mail: peter at echnaton.serveftp.com
http://iason.site.voila.fr/
https://sourceforge.net/projects/iason/
More information about the bind-users
mailing list