Damon85
Premium
join:2004-12-25
Louisville, KY
1 edit | reply to eric726
Re: [Other] Insight is Injecting Pop Up Ads into customer web se
I can confirm that the two hosts in question (b. and c.casalemedia.com) do resolve to Insight-operated addresses when using their DNS servers, and resolve to different addresses when using a variety of other DNS servers located elsewhere...
With that being said, absent any evidence that the ads are actually being injected, I can't rule out the possibility that these addresses serve intentionally placed ads from Akamai's network to Insight customers locally, for purposes of loading faster (perhaps through contract with Akamai). That would likely explain the wide variety of addresses seen when resolving the two domain names on other ISP networks.
Do you have any page content you know to be ad-free that has had these advertisements injected on Insight's network?
I don't mean to discount your story -- it is possible that Insight is injecting ads into HTTP sessions, and on some level, it wouldn't surprise me... but sometimes things aren't always nefarious in nature.
Edit: Adding the results for the domain:
; > DiG 9.3.4-P1 > @cache1.insightbb.com b.casalemedia.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2345
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 9, ADDITIONAL: 4
;; QUESTION SECTION:
;b.casalemedia.com. IN A
;; ANSWER SECTION:
b.casalemedia.com. 1313 IN CNAME b.casalemedia.com.edgesuite.net.
b.casalemedia.com.edgesuite.net. 19313 IN CNAME a1083.g.akamai.net.
a1083.g.akamai.net. 20 IN A 74.128.17.201
a1083.g.akamai.net. 20 IN A 74.128.17.203
;; AUTHORITY SECTION:
g.akamai.net. 1313 IN NS n0g.akamai.net.
g.akamai.net. 1313 IN NS n1g.akamai.net.
g.akamai.net. 1313 IN NS n2g.akamai.net.
g.akamai.net. 1313 IN NS n3g.akamai.net.
g.akamai.net. 1313 IN NS n4g.akamai.net.
g.akamai.net. 1313 IN NS n5g.akamai.net.
g.akamai.net. 1313 IN NS n6g.akamai.net.
g.akamai.net. 1313 IN NS n7g.akamai.net.
g.akamai.net. 1313 IN NS n8g.akamai.net.
;; ADDITIONAL SECTION:
n0g.akamai.net. 105 IN A 63.227.135.25
n3g.akamai.net. 1785 IN A 74.128.17.206
n4g.akamai.net. 950 IN A 74.128.17.237
n7g.akamai.net. 805 IN A 74.128.17.196
;; Query time: 201 msec
;; SERVER: 74.128.17.114#53(74.128.17.114)
;; WHEN: Thu Apr 30 08:48:10 2009
;; MSG SIZE rcvd: 367 |
Damon85
Premium
join:2004-12-25
Louisville, KY
| What you posted doesn't necessarily prove that ads were injected into the pages, but maybe we can approach this another way:
Do you have any information on the frequency at which the ads are being inserted, and the source code that's causing them to be generated? I was unable to reproduce the pop-ups here after several tries. |
