Hello
I've read these notes:- http://hosts-file.net/?s=Help#ipresolve
A. There are several messages that will be shown depending on conditions. These are;
WARNING: The IP PTR [ PTR ] does not resolve. This is considered very bad practice and contravines the RFC Standards. Most legit ISP's will have their PTR's resolve to an IP.
This message indicates that an IP addresses PTR (Pointer record) does not itself, resolve to an IP address. This is shown as a warning specifically because a PTR should resolve to an IP address itself, as per the RFC standards.
WARNING: The IP PTR associated with this record, does not resolve back to it's original IP address. This is very bad practice.
Original: IP
PTR IP: PTR
This message indicates that the IP PTR, resolves to an IP address that is NOT the original IP that actually pointed to this PTR. In laymans terms, an IP address should normally have a corresponding PTR (Pointer record), and this PTR should always resolve back
to the original IP address. For example;
BAD example.com > 1.2.3.4 > ptr.somedomain.com > 0.2.3.4
GOOD example.com > 1.2.3.4 > ptr.somedomain.com > 1.2.3.4
WARNING: The PTR associated with this record appears to be deliberately invalid (if no hostname is specified, it should fail resolution). Chances are high that this is a malicious IP.
This message indicates an IP address is resolving to a PTR record that is not actually a hostname (for example, some malicious IP's have had a pointer record that was simple a "." (period)). If an IP address does NOT have a corresponding PTR that
is a hostname, then it should fail resolution. I've never seen any legit ISP's use this behaviour.
**
THIS website does not appear to have a PTR record
http://vurldissect.co.uk/?url=3191203
(It takes a long time to load!)
I'd like to know if it is a bona fide website. Please advise.
=
I'm concerned because if one scrolls down at the 'dissect' information page, I see the following - which doesn't seem to have a rightful place there!
Can anyone explain to me why THIS detail appears at line 278?
=
</td><div style=" width: 31px; height: 87x; 2; id="layer3"><marquee scrollDelay="1044" align="middle" border="0"><a href="http://www.nikeairmaxsite.com/">nike
air max sneakers</a><a href="http
://www.toplacoste.com/">Lacoste Outlet</a><a href="http://www.nikedunksales.com/nikesbdunkhigh-c-7.html">nike dunk high</a><a href="http://www.frchristianlouboutin.com/">christian
louboutin sale</a><a href="http://www.nikedunksales.com/">nike dunk</a><a href="http://w
ww.nikedunksales.com/nikesbdunkmid-c-13.html">nike dunk mid</a><a href="http://www.frchristianlouboutin.com/christian-louboutin-shoes-c-5.html">christian
louboutin shoes</a><a href="http://www.lebronsky.com/kobebryant-c-21.html">kobe bryant shoes</a><a href="http://www.airforce1fashion.com/air-force-1-premium-mid-c-239.html&
quot;>air force one mid</a><a href="http://www.frchristianlouboutin.com/">christian louboutin discount</a><a href="http://www.lebronsky.com/kobebryantnikezoomkobev5-c-21_28.html">kobe
v</a></marquee></div>
=
It doesn't seem to be related to the subject matter of the website itself. Do you think it might in some way be connected with SPAM?
Thanks in advance for any insightful comment!