From: Bogdan Sass (bogdan.sass@catc.ro)
Date: Sat Jan 17 2009 - 12:50:35 ARST
Henry Ugwuadu wrote:
> Hello Guys,
>
> This discussion started from this url: "ciscocert.custhelp.com"
>
> When you do nslookup for this url, you will get the following IP 
> Address for the url:
>
>
> Macintosh:~ henry$ nslookup ciscocert.custhelp.com
> Server:        172.30.0.40
> Address:    172.30.0.40#53
>
> Non-authoritative answer:
> Name:    ciscocert.custhelp.com
> Address: 216.136.168.73
>
> Next do nslookup for "www.cisco.com", you will get this IP Address for 
> the url..
>
>
> Macintosh:~ henry$ nslookup www.cisco.com
> Server:        172.30.0.40
> Address:    172.30.0.40#53
>
> Non-authoritative answer:
> Name:    www.cisco.com
> Address: 198.133.219.25
>
> Next go to "www.dnsstuff.com" and plug in the above IP Addresses, you 
> will discover that "ciscocert.custhelp.com" does not have any 
> connection with CISCO. You will see that it was registered by a HIDDEN 
> identity.  On the other hand, you will discover that www.cisco.com was 
> duly registered by Cisco.
>
    Welcome to the "wonderful" world of outsourcing...
    I've been having the same problem for quite a while - I teach my 
students about security, I tell them "don't give out personal 
information on sites with strange domain names", and then... I break 
that rule every time I need to contact Cisco.
    The certification tracker has moved to "xxxxx.integral7.com". And I 
have to provide my CSCO and password there.
    The certification support site is registered by an unknown entity. 
And yet, I have to provide another set of personal details there.
    Various surveys/newsletters are hosted on "jivesoftware.com" (see 
the thread about the new CCIE logos - the Cisco Learning Network is on 
jivesw). Yet another site I'm supposed to trust.
    Great job raising the security awareness, Cisco! :|
-- Bogdan Sass CCAI,CCSP,JNCIA-ER,CCIE #22221 (RS) Information Systems Security Professional "Curiosity was framed - ignorance killed the cat"Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:43:38 ARST