Friday, January 28, 2011

Strange redirect to localhost! http://dp.000.in/ ???

Hi All,

I just accidentally typed imadb.com and after 2 redirects (I think) I ended up at: http://dp.000.in/

You can imagine my surprise when I noticed I was seeing my webpages on my local host!

Can someone explain why dp.000.in points to the local host and what was the reasoning behind the redirects?

  • I believe it's called DNS rebinding attacks.

    zaf : Holy cow! Is this very serious or can I ignore it?
    weeheavy : No need to be afraid, apart from that: http://www.smallnetbuilder.com/security/security-features/31212-is-your-router-one-in-a-million . If you're using Firefox, install NoScript (see http://hackademix.net/2010/07/28/abe-patrols-the-routes-to-your-routers/)
    From weeheavy
  • Someone must have registered that in DNS with an A record of 127.0.0.1. I am seeing this too when I do an nslookup for dp.000.in.

    whois for 000.in doesn't reveal much. Poking around with some similar fqdns (do.000.in and dq.ooo.in) brings up the IP address 64.74.223.36, but there aren't any websites there.

    That doesn't really answer the question.

    From dunxd

0 comments:

Post a Comment