services.msn.com.nsatc.net
Steve
I've noticed the following address being accessed by my PC:
It doesn't seem legit. Any ideas ?
PaulR. Sadowski [MVP]
On Sat, 18 Jun 2005 19:55:40 +0900: you wrote...
S> Hi,
S>
S> I've noticed the following address being accessed by my PC:
S>
S> services.msn.com.nsatc.net
S>
S> It doesn't seem legit. Any ideas ?
Run a spyware scan. Use one of the online scanners and download Microsoft's
anti-spyware beta,
--08:40:50-- http://services.msn.com.nsatc.net/
=> `index.html.10'
Resolving services.msn.com.nsatc.net... 207.68.173.243, 207.68.172.249
Connecting to services.msn.com.nsatc.net[207.68.173.243]:80... connected.
HTTP request sent, awaiting response...
1 HTTP/1.1 302 Object moved
2 Server: Microsoft-IIS/5.0
3 Date: Sat, 18 Jun 2005 12:40:51 GMT
4 P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
5 S: go18
6 Location: http://www.msn.com
7 Connection: Keep-Alive
8 Content-Length: 121
9 Content-Type: text/html
10 Cache-control: private
Checking server [whois.register.com]
Results:
The data in Register.com's WHOIS database is provided to you by
Register.com for information purposes only, that is, to assist you in
obtaining information about or related to a domain name registration
record. Register.com makes this information available "as is," and
does not guarantee its accuracy. By submitting a WHOIS query, you
agree that you will use this data only for lawful purposes and that,
under no circumstances will you use this data to: (1) allow, enable,
or otherwise support the transmission of mass unsolicited, commercial
advertising or solicitations via direct mail, electronic mail, or by
telephone; or (2) enable high volume, automated, electronic processes
that apply to Register.com (or its systems). The compilation,
repackaging, dissemination or other use of this data is expressly
prohibited without the prior written consent of Register.com.
Register.com reserves the right to modify these terms at any time.
By submitting this query, you agree to abide by these terms.
Organization:
SAVVIS Communications
nsatc host
225 W Hillcrest Dr, Ste 250
Thousand Oaks, CA 91360
US
Phone: (805) 370 2100
Fax..: (805) 370 2101
Email: nsatc...@savvis.net
Registrar Name....: Register.com
Registrar Whois...: whois.register.com
Registrar Homepage: http://www.register.com
Domain Name: NSATC.NET
Created on..............: Wed, Sep 26, 2001
Expires on..............: Wed, Sep 26, 2007
Record last updated on..: Thu, Jun 09, 2005
Administrative Contact:
SAVVIS Communications
nsatc host
225 W Hillcrest Dr, Ste 250
Thousand Oaks, CA 91360
US
Phone: (805) 370 2100
Fax..: (805) 370 2101
Email: nsatc...@savvis.net
Technical Contact:
SAVVIS Communications
nsatc host
225 W Hillcrest Dr, Ste 250
Thousand Oaks, CA 91360
US
Phone: (805) 370 2100
Fax..: (805) 370 2101
Email: nsatc...@savvis.net
Zone Contact:
SAVVIS Communications
nsatc host
225 W Hillcrest Dr, Ste 250
Thousand Oaks, CA 91360
US
Phone: (805) 370 2100
Fax..: (805) 370 2101
Email: nsatc...@savvis.net
Domain servers in listed order:
K.NS.NSATC.NET 165.193.72.169
E.NS.NSATC.NET 212.187.253.69
J.NS.NSATC.NET 210.184.108.131
L.NS.NSATC.NET 216.206.179.6
B.NS.NSATC.NET 208.173.208.133
C.NS.NSATC.NET 64.240.90.167
D.NS.NSATC.NET 63.208.106.70
Register your domain name at http://www.register.com
Results brought to you by the GeekTools WHOIS Proxy
Server results may be copyrighted and are used with permission.
Regards, PaulR. Sadowski [MVP].
Jonathan Kay [MVP]
I'm not sure exactly what off hand is being hosted there but this -is- a Microsoft site. The
IP belongs to Microsoft, it's completely legitimate.
____________________________________________
Jonathan Kay
Microsoft MVP - MSN Messenger/Windows Messenger
Associate Expert
http://www.microsoft.com/windowsxp/expertzone/
Messenger Resources - http://messenger.jonathankay.com
All posts unless otherwise specified are (c) 2005 Jonathan Kay.
You *must* contact me for redistribution rights.
"Steve" <news_svaardt@hotmail_NOSPAM_.com> wrote in message
news:eQdxER$cFHA...@TK2MSFTNGP09.phx.gbl...
PaulR. Sadowski [MVP]
On Sat, 18 Jun 2005 09:11:44 -0400: you wrote...
JKM> Greetings Steve,
JKM>
JKM> I'm not sure exactly what off hand is being hosted there but this -is-
JKM> a Microsoft site. The IP belongs to Microsoft, it's completely
JKM> legitimate.
No, it's not. The server is just redirecting it back to msn.com.
Jonathan Kay [MVP]
> No, it's not. The server is just redirecting it back to msn.com.
The name and what it does doesn't matter. It is a Microsoft IP; did you even look up the IP?
* Dns resolved services.msn.com.nsatc.net to 207.68.172.249
That -is- a Microsoft IP, as proven here:
http://ws.arin.net/whois/?queryinput=207.68.172.249
Steve
If this is a Microsoft IP, then why has it a .net address... that's
registered to a non-Microsoft entity ?
Something is very fishy here... please explain:
Using "samspade"
services.msn.com.nsatc.net = [ 207.68.173.243 ]
Organization:
SAVVIS Communications
nsatc host
225 W Hillcrest Dr Ste 250
Thousand Oaks CA 91360
US
Phone: (805) 370 2100
Fax..: (805) 370 2101
Email: nsatc...@savvis.net
Registrar Name....: Register.com
Registrar Whois...: whois.register.com
Registrar Homepage: http://www.register.com
Domain Name: NSATC.NET
Created on..............: Wed Sep 26 2001
Expires on..............: Wed Sep 26 2007
Record last updated on..: Thu Jun 09 2005
Administrative Contact:
SAVVIS Communications
nsatc host
225 W Hillcrest Dr Ste 250
Thousand Oaks CA 91360
US
Phone: (805) 370 2100
Fax..: (805) 370 2101
Email: nsatc...@savvis.net
Technical Contact:
SAVVIS Communications
nsatc host
225 W Hillcrest Dr Ste 250
Thousand Oaks CA 91360
US
Phone: (805) 370 2100
Fax..: (805) 370 2101
Email: nsatc...@savvis.net
Zone Contact:
SAVVIS Communications
nsatc host
225 W Hillcrest Dr Ste 250
Thousand Oaks CA 91360
US
Phone: (805) 370 2100
Fax..: (805) 370 2101
Email: nsatc...@savvis.net
Domain servers in listed order:
K.NS.NSATC.NET 165.193.72.169
E.NS.NSATC.NET 212.187.253.69
J.NS.NSATC.NET 210.184.108.131
L.NS.NSATC.NET 216.206.179.6
B.NS.NSATC.NET 208.173.208.133
C.NS.NSATC.NET 64.240.90.167
D.NS.NSATC.NET 63.208.106.70
"Jonathan Kay [MVP]" <msnews...@jonathankay.com> wrote in message
news:eRANUeAd...@TK2MSFTNGP15.phx.gbl...
Jonathan Kay [MVP]
You're looking up the domain, not the IP.
I could make msn.jonathankay.com and point it to 207.68.173.243. Your domain lookup would
say it's me, but the IP -is- Microsoft as an ARIN search will tell you. Again, the
name -doesn't matter-
Let's try another like Apple.com. If you ping Apple's server you're find that their reversed
real FQDN (Fully Qualified Domain Name) is www.apple.com.akadns.net. Whois that domain,
you'll see it belongs to Akamai, but the real IP is 17.112.152.32. If you do an ARIN lookup
for this IP (http://ws.arin.net/whois/?queryinput=17.112.152.32), you'll find it -does-
belong to Apple.
So again, a domain name means very little, it's like the From field in an e-mail, it's only
there to make things more friendly to humans and can not be relied on for ownership.
____________________________________________
Jonathan Kay
Microsoft MVP - MSN Messenger/Windows Messenger
Associate Expert
http://www.microsoft.com/windowsxp/expertzone/
Messenger Resources - http://messenger.jonathankay.com
All posts unless otherwise specified are (c) 2005 Jonathan Kay.
You *must* contact me for redistribution rights.
"Steve" <news_svaardt@hotmail_NOSPAM_.com> wrote in message
news:OuczB1Hd...@TK2MSFTNGP09.phx.gbl...