site Search:


 
    All Forums Hot Topics Gallery






how-to block ads


 
Search Topic:
Share Topic
Posting?
Post a:
Post a:
Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal
AuthorAll Replies

boywaja

join:2001-06-21
Clifton, VA

reply to Spanner intheWorks

Re: Webroot Hijacked

said by Spanner intheWorks:

Wonder if they forgot to renew the domain ?
why wonder if you can run whois and see?
»www.dnsstuff.com/tools/whois.ch?···root.com
webroot.com expires in 2009

I see a directnic.com generic page now found message when I go to www.webroot.com which resolves to 64.78.150.210 for me.

psloss
Premium
join:2002-02-24
Alpharetta, GA

said by boywaja:

I see a directnic.com generic page now found message when I go to www.webroot.com which resolves to 64.78.150.210 for me.
That's interesting -- I get different pages and responses. Here's what I'm seeing with WGET; first to the assumed hijack server:
F:\TEMP>wget --server-response --timestamping http://www.webroot.com/
--00:43:50-- http://www.webroot.com/
=> `index.html'
Resolving www.webroot.com... 204.251.15.207
Connecting to www.webroot.com[204.251.15.207]:80... connected.
HTTP request sent, awaiting response...
1 HTTP/1.1 200 OK
2 Date: Sat, 07 May 2005 00:45:05 GMT
3 Server: Apache/2.0.51 (Fedora)
4 X-Powered-By: PHP/4.3.9
5 Connection: close
6 Content-Type: text/html; charset=UTF-8
Last-modified header missing -- time-stamps turned off.
--00:43:50-- http://www.webroot.com/
=> `index.html'
Connecting to www.webroot.com[204.251.15.207]:80... connected.
HTTP request sent, awaiting response...
1 HTTP/1.1 200 OK
2 Date: Sat, 07 May 2005 00:45:05 GMT
3 Server: Apache/2.0.51 (Fedora)
4 X-Powered-By: PHP/4.3.9
5 Connection: close
6 Content-Type: text/html; charset=UTF-8

[ <=> ] 23,454 63.62K/s

00:43:51 (63.62 KB/s) - `index.html' saved [23454]

Then to Webroot's IP as resolved elsewhere:
F:\TEMP>wget --server-response --timestamping http://64.78.150.210/
--00:44:14-- http://64.78.150.210/
=> `index.html'
Connecting to 64.78.150.210:80... connected.
HTTP request sent, awaiting response...
1 HTTP/1.1 200 OK
2 Date: Sat, 07 May 2005 00:43:20 GMT
3 Server: Apache/1.3.33 (Unix) PHP/4.3.10 mod_ssl/2.8.22 OpenSSL/0.9.7e
4 X-Powered-By: PHP/4.3.10
5 Set-Cookie: WRSID=e899ee1ae9873069afdd22c4d5877b12; path=/
6 Expires: Thu, 19 Nov 1981 08:52:00 GMT
7 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
8 Pragma: no-cache
9 Keep-Alive: timeout=3, max=35
10 Connection: Keep-Alive
11 Content-Type: text/html
Last-modified header missing -- time-stamps turned off.
--00:44:14-- http://64.78.150.210/
=> `index.html'
Connecting to 64.78.150.210:80... connected.
HTTP request sent, awaiting response...
1 HTTP/1.1 200 OK
2 Date: Sat, 07 May 2005 00:43:21 GMT
3 Server: Apache/1.3.33 (Unix) PHP/4.3.10 mod_ssl/2.8.22 OpenSSL/0.9.7e
4 X-Powered-By: PHP/4.3.10
5 Expires: Thu, 19 Nov 1981 08:52:00 GMT
6 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
7 Pragma: no-cache
8 Connection: close
9 Content-Type: text/html

[ <=> ] 12,350 74.91K/s

00:44:14 (74.91 KB/s) - `index.html' saved [12350]

Philip Sloss

--
Feedback? e-mail: stuff@lupwa.org

Monday, 20-May 07:53:38 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 13.5 years online © 1999-2013 dslreports.com.
Most commented news this week
Hot Topics