Bizarre URL in phishing email

Discussion in 'Cisco' started by tom, Mar 14, 2006.

  1. tom

    tom Guest

    I received a phishing scam email recently. No news there, but one
    thing that caught me off guard was the URL given in the email:
    http://3289355434:82/webscr/index.php

    I am not sure I understand how the domain 3289355434 can resolve to an
    IP, but it does.

    There is no TLD in that domain - could someone explain to me how that
    works?

    Thanks

    -tom
     
    tom, Mar 14, 2006
    #1
    1. Advertisements

  2. In article <>,
    tom <> wrote:
    >I received a phishing scam email recently. No news there, but one
    >thing that caught me off guard was the URL given in the email:
    >http://3289355434:82/webscr/index.php


    >I am not sure I understand how the domain 3289355434 can resolve to an
    >IP, but it does.


    >There is no TLD in that domain - could someone explain to me how that
    >works?


    This isn't anything to do with Cisco...

    To answer your question:

    3289355434 is an IP *address*. The valid IPv4 address formats
    include more than just the dotted-quad that you are accustomed to
    seeing. 3289355434 should be interpreted as a 32-bit integer whose
    bytes (most significant first) are the usual bytes you would see
    in the dotted quad.

    For example, 3289355434 is hex 0xC40F94AA which is
    0xC4 0x0F 0x94 0xAA which is 196 15 148 170 in decimal, which
    you would normally see as the dotted quad 196.15.148.170 .
     
    Walter Roberson, Mar 14, 2006
    #2
    1. Advertisements

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.
Similar Threads
  1. joevan

    Phishing email.

    joevan, Jun 10, 2005, in forum: Computer Support
    Replies:
    11
    Views:
    1,096
  2. Sigi Rindler

    Can't open URL in email reader

    Sigi Rindler, Mar 2, 2006, in forum: Computer Support
    Replies:
    3
    Views:
    1,766
    Sigi Rindler
    Mar 4, 2006
  3. email blocked as phishing by MS Mail

    , Mar 27, 2007, in forum: Computer Support
    Replies:
    4
    Views:
    1,072
  4. Replies:
    3
    Views:
    738
    Moe Trin
    Mar 28, 2007
  5. Bruce Simpson

    Westpac trojan phishing email

    Bruce Simpson, Jun 1, 2004, in forum: NZ Computing
    Replies:
    4
    Views:
    882
    spw2000
    Sep 6, 2011
  6. ~misfit~

    LOL, Orcon phishing email?

    ~misfit~, Nov 11, 2005, in forum: NZ Computing
    Replies:
    2
    Views:
    929
    ~misfit~
    Nov 11, 2005
  7. Mutlley
    Replies:
    9
    Views:
    907
    alastair.geek.nz
    Jun 10, 2006
  8. Replies:
    8
    Views:
    1,578
Loading...