Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Has Anyone Seen Werid URLs?

I was doing a packet capture on my PC when I noticed a packet going to www.www.cisco.com.org and suddenly I was getting packets back from them! I know I typed in www.cisco.com. Then my browser stopped working for a few minutes. Has anyone seen this type of symptom before?

1 REPLY
Cisco Employee

Re: Has Anyone Seen Werid URLs?

You will certainly get packets from www.www.cisco.com.org, as you will from this.cannot.be.happening.com.org, as you will from whats.going.on.here.com.org. Whoever owns the com.org domain has set it up so that anything directed to any URL ending in com.org will take you to there specific web site, which surprise, surprise, has a lot of shopping links on it. This is easy to do with DNS server software, no big issue.

They've obviously done it so that any mistyped URL, where the user mistakenly appends a .org onto the end, will be directed to their shopping web site where they can earn money. Hackers have used this technique for quite some time to infect PC's (http://www.f-secure.com/v-descs/googkle.shtml), although this particular instance doesn't look like anything sinister (hope not anyway since I've browsed to it also :-) ) Plus there's the infamous White House URL that takes you to a porn site rather than to the US Government web site that you might expect.

As for why your PC went there when you typed www.cisco.com, I have no idea. It could be due to the DNS Suffix Search list you have specified. Open a DOS prompt and do "ipconfig /all" and see what the search list is. If you have something weird like .com.org, then your machine will try this when doing DNS searches, abd by the way the .com.org people have set up their DNS it will always respond with an answer.

99
Views
0
Helpful
1
Replies
CreatePlease to create content