Groups > misc.phone.mobile.iphone > #92827

Re: How to check validity of suspicious looking SMS message text URL?

From	Snit <usenet@gallopinginsanity.com>
Newsgroups	misc.phone.mobile.iphone, alt.os.linux, comp.mobile.android
Subject	Re: How to check validity of suspicious looking SMS message text URL?
Date	2016-09-22 19:58 -0700
Message-ID	<D409E87F.7E1BB%usenet@gallopinginsanity.com> (permalink)
References	<ns2051$15hl$1@gioia.aioe.org> <D409E3CA.7E1AE%usenet@gallopinginsanity.com>

Cross-posted to 3 groups.

Show all headers | View raw

On 9/22/16, 7:38 PM, in article D409E3CA.7E1AE%usenet@gallopinginsanity.com,
"Snit" <usenet@gallopinginsanity.com> wrote:

> On 9/22/16, 6:22 PM, in article ns2051$15hl$1@gioia.aioe.org, "Horace
> Algiers" <horace@horacealgiers.com> wrote:
> 
>> Is there *anything* a user can do to check the URL without going to that
>> URL?
>> 
>> Just received this text on my cell phone:
>> http://i.cubeupload.com/k8CbNK.png
>> 
>> All I know is where it (says it) comes from:
>> http://i.cubeupload.com/QD1o9F.png
>> 
>> Of course, I could just delete it (and will); but my question here is how
>> can I find out *more information* about whether this is a phishing attempt
>> of some sort.
>> 
>> Of course, the text itself has to be ignored - and I'm pretty sure the
>> phone number itself can easily be spoofed (spoofcard, for example), so the
>> only real hint of the purpose is at the end of the URL.
>> 
>> The domain of the URL appears to be a redirector site (much like
>> tinyurl.com); so what matters most is the payload at the end of the URL.
>> 
>> Without actually going to that URL, is there a way to find out *more data*
>> about what this message is all about?
>> 
>> For example, is there a trusted aggregator where we can *forward* such
>> messages to?
>> 
>> Or is there a web site where we can paste in the URL to find out more data?
>> 
>> I googled the URL, but the result was "Your search - message
>> http://bit.do/cBuHr 681-207-8069 - did not match any documents".
>> 
>> Is there *anything* a user can do to check the URL without going to that
>> URL?
> 
> <http://bit.do/faq/#preview>
>     -----
>     How to preview shortened URLs?
>     You can find out what is the destination address (expand a short
>     link) and view to where the link will redirect without going to
>     the final destination. Just add "/expand/" to the short link
>     address. Example: http://bit.do/expand/shortlink
>     -----
>     
> So in the case of yours go to http://bit.do/expand/cBuHr
> 
> That will tell you:
>     -----
>     Short link: http://bit.do/[REDACTED]
>     Redirects to: http://www.rbusvv.com/
>     -----

And I goofed. Do not click on the link right about this one. Redacted one
and then did not the other. Um, oops.

> From there I went to: <http://whois.domaintools.com/rbusvv.com>
> 
> Gives you some info and a screen shot. There is also info on them online:
> 
> <http://www.scamadviser.com/is-rbusv.com-a-fake-site.html>
>     -----
>     Low Trust Rating. This Site May Not Be Safe to Use.
>     -----
> 
> I think I would avoid it. :)
> 



-- 
* OS X / Linux: What is a file?     <http://youtu.be/_dMbXGLW9PI>
* Mint MATE Trash, Panel, Menu:     <http://youtu.be/C0y74FIf7uE>
* Mint KDE working with folders:    <http://youtu.be/7C9nvniOoE0>
* Mint KDE creating files:          <http://youtu.be/N7-fZJaJUv8>
* Mint KDE help:                    <http://youtu.be/3ikizUd3sa8>
* Mint KDE general navigation:      <http://youtu.be/t9y14yZtQuI>
* Mint KDE bugs or Easter eggs?     <http://youtu.be/CU-whJQvtfA>
* Easy on OS X / Hard on Linux:     <http://youtu.be/D3BPWANQoIk>
* OS / Word Processor Comparison:   <http://youtu.be/w6Qcl-w7s5c>

Thread

csiph-web