FF 2.0.0.2 (linux) won't load hexadecimal url's (Mandrake 10.1)

Toadman · 03-17-2007, 12:54 PM

I've asked this question on the FireFox forums and it was suggested that I post the question on a forum for my distro. I'm running Mandrake 10.1 Official. The problem I'm having is that FireFox will not load hexadecimal url's. For instance the url (WARNING - THIS WILL TAKE YOU TO A PHISHING SITE)

http://0x3d.0x46.0xe0.0x10/www.paypa...rcmd_login.php

gives me an error of Firefox can't find the server at 0x3d.0x46.0xe0.0x10. Once I convert the hexadecimal to decimal http://61.70.224.16/www.paypal.com/c...rcmd_login.php
it loads with no problem. Is there somewhere in my setup that I need to change something, or is this an issue with running the linux version

pixellany · 03-17-2007, 02:56 PM

What is going on here???

61.70.224.16 shows up as something in Taiwan and does NOT appear to have any connection to Paypal.

And yet the address you give takes one to a page that LOOKS legitimate

Please tell us where you got this IP.....

Toadman · 03-17-2007, 04:41 PM

Its a phishing site. I validate various sites like that as phish links and report them to ebay, paypal and others. I just can't get FF to load the hexadecimal link without converting it to decimal and I'm wondering if Mandrake is the root cause. Other distros have no problems at all with these types of links.

pixellany · 03-17-2007, 04:49 PM

OK--so you are a good guy, then....

As for the IP in HEX, that's a new one on me.....

BTW, if that is a Phishing site, it is VERY well done--all of their links look real--I did not look at the source however.

I wonder if it is a good idea to post a real link like this???--I'd hate to see a visitor here get "Phished" in the course of you doing good deeds....

pixellany · 03-17-2007, 04:58 PM

I assume you already know all this, but here is a TOME--which includes hex IPs and much more.
http://www.pc-help.org/obscure.htm

Fascinating...

XavierP · 03-17-2007, 05:51 PM

It looks real until you remove the hex - https://www.paypal.com/cgi-bin/webscrcmd_login.php - at which point it's easy to see the difference.

Toadman - could you edit your post please to clearly warn people that those links go to phishing sites. Someone is bound to click them thinking they are real! Cheers

Toadman · 03-17-2007, 06:52 PM

My apologies, I thought once seeing the url everyone would know it was a phishing site. Warning added to initial post.

XavierP · 03-17-2007, 07:58 PM

Thanks - somebody will click it and will think you are mistaken because it looks sooo similar to the real site. And then will blame you when their account is ripped off.

CYA all the way!!

Toadman · 03-17-2007, 10:08 PM

You're right, I'll have to remember to do that from now on. I'll also have to remember that some aren't as deep into spam reporting as I am.

Chris

Toadman · 03-20-2007, 09:51 PM

Replying to my last post. I was really hoping someone would have an answer or at least a suggestion as to why they won't load. I guess I'll have to continue as I have been, pinging the hexadecimal ip and then pasting it into the phish url.

Chris