Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Cisco > Bizarre URL in phishing email

Reply
Thread Tools

Bizarre URL in phishing email

 
 
tom
Guest
Posts: n/a
 
      03-14-2006
I received a phishing scam email recently. No news there, but one
thing that caught me off guard was the URL given in the email:
http://3289355434:82/webscr/index.php

I am not sure I understand how the domain 3289355434 can resolve to an
IP, but it does.

There is no TLD in that domain - could someone explain to me how that
works?

Thanks

-tom

 
Reply With Quote
 
 
 
 
Walter Roberson
Guest
Posts: n/a
 
      03-14-2006
In article <(E-Mail Removed) .com>,
tom <(E-Mail Removed)> wrote:
>I received a phishing scam email recently. No news there, but one
>thing that caught me off guard was the URL given in the email:
>http://3289355434:82/webscr/index.php


>I am not sure I understand how the domain 3289355434 can resolve to an
>IP, but it does.


>There is no TLD in that domain - could someone explain to me how that
>works?


This isn't anything to do with Cisco...

To answer your question:

3289355434 is an IP *address*. The valid IPv4 address formats
include more than just the dotted-quad that you are accustomed to
seeing. 3289355434 should be interpreted as a 32-bit integer whose
bytes (most significant first) are the usual bytes you would see
in the dotted quad.

For example, 3289355434 is hex 0xC40F94AA which is
0xC4 0x0F 0x94 0xAA which is 196 15 148 170 in decimal, which
you would normally see as the dotted quad 196.15.148.170 .
 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Westpac trojan phishing email Bruce Simpson NZ Computing 8 09-06-2011 05:13 AM
email gets blocked as phishing by MS Mail joled@rcn.com Computer Security 3 03-28-2007 08:11 PM
email blocked as phishing by MS Mail joled@rcn.com Computer Support 4 03-27-2007 06:36 PM
LOL, Orcon phishing email? ~misfit~ NZ Computing 2 11-11-2005 10:50 AM
Phishing email. joevan Computer Support 11 06-12-2005 02:00 PM



Advertisments