Author Topic: What has been hiding behind this link?  (Read 3508 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
What has been hiding behind this link?
« on: March 10, 2010, 02:17:28 AM »
Hi malware fighters,

Someone asked what was behind this link: hxtp://iohjk2h4jkdsdfs/yutube/
It opens up for a blackholed 0.0.0.0.
Is this malcious. Can anyone comment on this?

polonus

Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89117
  • No support PMs thanks
Re: What has been hiding behind this link?
« Reply #1 on: March 10, 2010, 02:30:51 AM »
Since the link has no domain type, .com, .net, etc. etc. how can an IP be retrieved from a DNS lookup, so that may well be why you get the blackhole 0.0.0.0. no IP exists presumably.

If I try to connect OpenDNS would cover non-existent domains by redirecting to its page not found, etc. See image where RequestPolicy intercepts the redirect.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Re: What has been hiding behind this link?
« Reply #2 on: March 10, 2010, 11:11:31 PM »
Hi DavidR,

Thanks for the reply, I already found this a weird question on the InformAction forums, gonna comment there following your reaction. Again thanks for clarifying this,

Damian
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89117
  • No support PMs thanks
Re: What has been hiding behind this link?
« Reply #3 on: March 10, 2010, 11:45:17 PM »
No problem.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security