Anyone ever hear of this top-level domain -> .sjdc ???

[Virus Guy]

Virus Guy wrote:

> > > If you do an rdns on 150.70.75.28, you'll see that it points to
> > > wtp-g3-maya2.sjdc.
> > >
> > > So my question is - what the heck is the .sjdc TLD?

So it's just a bull**** rDNS record.

> > > It looks like it's located in Japan.

Traceroute to 150.70.75.28 gives this IP as the last hop:

216.99.132.117

Guess who owns that ip. Yup - Trend Micro.

For some reason, Trend Micro likes to operate their web-proxy security
products (if that's what this is) on servers located in Japan...

[~BD~]

Virus Guy wrote:
> Virus Guy wrote:
>
>>>> If you do an rdns on 150.70.75.28, you'll see that it points to
>>>> wtp-g3-maya2.sjdc.
>>>>
>>>> So my question is - what the heck is the .sjdc TLD?
>
> So it's just a bull**** rDNS record.
>
>>>> It looks like it's located in Japan.
>
> Traceroute to 150.70.75.28 gives this IP as the last hop:
>
> 216.99.132.117
>
> Guess who owns that ip. Yup - Trend Micro.
>
> For some reason, Trend Micro likes to operate their web-proxy security
> products (if that's what this is) on servers located in Japan...

IIRC, Trend is a Japanese company. Perhaps *that* is the reason! ;-)

--
Dave - "It is much better to be hated for what you are, than to be loved
for what you definitely are not." "Do unto others as you would have them
do unto you."

[~BD~]

~BD~ wrote:
> Virus Guy wrote:
>> Virus Guy wrote:
>>
>>>>> If you do an rdns on 150.70.75.28, you'll see that it points to
>>>>> wtp-g3-maya2.sjdc.
>>>>>
>>>>> So my question is - what the heck is the .sjdc TLD?
>>
>> So it's just a bull**** rDNS record.
>>
>>>>> It looks like it's located in Japan.
>>
>> Traceroute to 150.70.75.28 gives this IP as the last hop:
>>
>> 216.99.132.117
>>
>> Guess who owns that ip. Yup - Trend Micro.
>>
>> For some reason, Trend Micro likes to operate their web-proxy security
>> products (if that's what this is) on servers located in Japan...
>
> IIRC, Trend is a Japanese company. Perhaps *that* is the reason! ;-)

This might help! http://en.wikipedia.org/wiki/Trend_Micro

--
Dave - "It is much better to be hated for what you are, than to be loved
for what you definitely are not." "Do unto others as you would have them
do unto you."

[Virus Guy]

~BD~ wrote:

>>> If you do an rdns on 150.70.75.28, you'll see that it points to
>>> wtp-g3-maya2.sjdc.
>>
>>> So my question is - what the heck is the .sjdc TLD?
>>
>> So it's just a bull**** rDNS record.
>>
>> It looks like it's located in Japan.
>>
>> Traceroute to 150.70.75.28 gives this IP as the last hop:
>>
>> 216.99.132.117
>>
>> Guess who owns that ip. Yup - Trend Micro.
>>
>> For some reason, Trend Micro likes to operate their web-proxy
>> security products (if that's what this is) on servers located
>> in Japan...

> IIRC, Trend is a Japanese company. Perhaps *that* is the reason! ;-)
>
> This might help! http://en.wikipedia.org/wiki/Trend_Micro

Huh.

And I thought Trend Micro was a US company.

It looks like I'm seeing the behavior of this product:

http://www.scmagazine.com/trend-micr...y/review/2672/

=======
1/7/2009

The InterScan Web Security Virtual Appliance (IWSVA) is a gateway
solution providing protection for web-based threats via HTTP and FTP.
The product is delivered as a CD, but installs as a purpose built
virtual appliance.

Price: $13,450 (1,000 users)
======

From your wikipedia entry:

======
Website administrators however report abusive behavior from the Trend
Micro Network that is displaying malware characteristics. Reported
behavior[7] indicates security risks for users of Trend Micro Internet
Security who access internet banking facilities.
======

[~BD~]

Virus Guy wrote:
> ~BD~ wrote:
>
>>>> If you do an rdns on 150.70.75.28, you'll see that it points to
>>>> wtp-g3-maya2.sjdc.
>>>
>>>> So my question is - what the heck is the .sjdc TLD?
>>>
>>> So it's just a bull**** rDNS record.
>>>
>>> It looks like it's located in Japan.
>>>
>>> Traceroute to 150.70.75.28 gives this IP as the last hop:
>>>
>>> 216.99.132.117
>>>
>>> Guess who owns that ip. Yup - Trend Micro.
>>>
>>> For some reason, Trend Micro likes to operate their web-proxy
>>> security products (if that's what this is) on servers located
>>> in Japan...
>
>> IIRC, Trend is a Japanese company. Perhaps *that* is the reason! ;-)
>>
>> This might help! http://en.wikipedia.org/wiki/Trend_Micro
>
> Huh.
>
> And I thought Trend Micro was a US company.

In reality, Trend is a global player now and well thought of too, I believe.

I hope your curiosity has now been satisfied to some extent. :-)

> It looks like I'm seeing the behavior of this product:
>
> http://www.scmagazine.com/trend-micr...y/review/2672/
>
> =======
> 1/7/2009
>
> The InterScan Web Security Virtual Appliance (IWSVA) is a gateway
> solution providing protection for web-based threats via HTTP and FTP.
> The product is delivered as a CD, but installs as a purpose built
> virtual appliance.
>
> Price: $13,450 (1,000 users)
> ======
>
> From your wikipedia entry:
>
> ======
> Website administrators however report abusive behavior from the Trend
> Micro Network that is displaying malware characteristics. Reported
> behavior[7] indicates security risks for users of Trend Micro Internet
> Security who access internet banking facilities.


I cannot possibly comment! ;-)

--
Dave - "It is much better to be hated for what you are, than to be loved
for what you definitely are not." "Do unto others as you would have them
do unto you."

[David H. Lipman]

From: "Virus Guy" <Virus@Guy.com>

> If you do an rdns on 150.70.75.28, you'll see that it points to
> wtp-g3-maya2.sjdc.
>
> So my question is - what the heck is the .sjdc TLD?
>
> It looks like it's located in Japan.
>
> Like my previous post regarding the sdi.trendnet.org web-proxy (which is
> also in Japan, and for which nobody here has indicated what sort of
> Trendnet product could be behind that proxy), the above IP address is
> also performing what looks like web-proxy services for what I think is
> an instutional entity.


Try this one on for size...

xn----jtbewcdgkdy.xn--p1ai --> 81.177.139.173

--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp

[Virus Guy]

"David H. Lipman" wrote:

> Try this one on for size...
>
> xn----jtbewcdgkdy.xn--p1ai --> 81.177.139.173

DNS xn----jtbewcdgkdy.xn--p1ai --> 81.177.139.173

rDNS 81.177.139.173 --> srv68-h-st.jino.ru

===================

The domain name ?? (romanized as rf [2]) is Cyrillic country code
top-level domain in the Domain Name System of the Internet for the
Russian Federation. In the Domain Name System it has the ASCII DNS name
xn--p1ai. The domain accepts only Cyrillic subdomain applications, and
is the first Cyrillic implementation of the Internationalizing Domain
Names in Applications (IDNA) system. The domain became operational on
May 13, 2010.[3]

The domain has an ascii representation of xn--p1ai derived as Punycode
for use in the Domain Name System.

[Li'l Abner]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in
news:ZqKdnZEwMYvhDhTSnZ2dnUVZ_s2dnZ2d@giganews.com :

> From: "Virus Guy" <Virus@Guy.com>
>
>> If you do an rdns on 150.70.75.28, you'll see that it points to
>> wtp-g3-maya2.sjdc.
>>
>> So my question is - what the heck is the .sjdc TLD?
>>
>> It looks like it's located in Japan.
>>
>> Like my previous post regarding the sdi.trendnet.org web-proxy (which is
>> also in Japan, and for which nobody here has indicated what sort of
>> Trendnet product could be behind that proxy), the above IP address is
>> also performing what looks like web-proxy services for what I think is
>> an instutional entity.
>
>
> Try this one on for size...
>
> ka----wgorjpqtxql.ka--c1nv --> 81.177.139.173

Now you're getting over my head.
81.177.139.173 = srv68-h-st.jino.ru


--
--- A dyslexic man walks into a bra ---

[David H. Lipman]

From: "Virus Guy" <Virus@Guy.com>

> "David H. Lipman" wrote:
>
>> Try this one on for size...
>>
>> xn----jtbewcdgkdy.xn--p1ai --> 81.177.139.173
>
> DNS xn----jtbewcdgkdy.xn--p1ai --> 81.177.139.173
>
> rDNS 81.177.139.173 --> srv68-h-st.jino.ru
>
> ===================
>
> The domain name ?? (romanized as rf [2]) is Cyrillic country code
> top-level domain in the Domain Name System of the Internet for the
> Russian Federation. In the Domain Name System it has the ASCII DNS name
> xn--p1ai. The domain accepts only Cyrillic subdomain applications, and
> is the first Cyrillic implementation of the Internationalizing Domain
> Names in Applications (IDNA) system. The domain became operational on
> May 13, 2010.[3]
>
> The domain has an ascii representation of xn--p1ai derived as Punycode
> for use in the Domain Name System.

Thanx!

--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp

[FromTheRafters]

~BD~ wrote:
> Virus Guy wrote:
>> ~BD~ wrote:
>>
>>>>> If you do an rdns on 150.70.75.28, you'll see that it points to
>>>>> wtp-g3-maya2.sjdc.
>>>>
>>>>> So my question is - what the heck is the .sjdc TLD?
>>>>
>>>> So it's just a bull**** rDNS record.
>>>>
>>>> It looks like it's located in Japan.
>>>>
>>>> Traceroute to 150.70.75.28 gives this IP as the last hop:
>>>>
>>>> 216.99.132.117
>>>>
>>>> Guess who owns that ip. Yup - Trend Micro.
>>>>
>>>> For some reason, Trend Micro likes to operate their web-proxy
>>>> security products (if that's what this is) on servers located
>>>> in Japan...

Because of the rich Mayan cultural background I suppose?