Airtel seems to be injecting iframes like MTNL to send bill reminders

manojrk said:
Looks like the script is being injected from 202.56.215.243. Can you null route the ip by adding it your hosts file and see if its blocked?
Click to expand...

As the iframe is loaded from an IP address directly (not using a hostname), not sure how adding the IP to the hosts file would help. To null route an IP address in windows, you'd need to do something like this I believe -- How to add a Null route in windows - Beaming
 
varkey said:
As the iframe is loaded from an IP address directly (not using a hostname), not sure how adding the IP to the hosts file would help. To null route an IP address in windows, you'd need to do something like this I believe -- How to add a Null route in windows - Beaming
Click to expand...
My bad! I really didn't think this through :p

Anyway reverse dns lookup reveals the hostname to:
Code: 
rasbtnldel-static-243.215.56.202.mantraonline.com

zpNRhkT.png


Edit: nslookup resolves it to nxdomain. need to block the ip is the only way i guess :rolleyes:
 
^ That wouldn't work either, cause the name doesn't come into the picture anywhere. The iframe loads a resource from that IP address, there is no DNS lookup involved.

To null route you would need to do something similar to what I linked earlier, nothing on the hosts file will help.
 

Back