Rapidshare DNS Posioning
I have been trying to download file from Rapidshare to no prevail as it seems that some files work and others do not, here are the facts :
Sun Jan 25 16:47:09 2009 Connecting rapidshare.com [IP=195.122.131.13:80]
Sun Jan 25 16:47:09 2009 Connected.
Sun Jan 25 16:47:09 2009 GET /files/180337373/filename01.rar HTTP/1.1
Sun Jan 25 16:47:09 2009 Host: rapidshare.com
Sun Jan 25 16:47:09 2009 Accept: */*
Sun Jan 25 16:47:09 2009 Referer:
Sun Jan 25 16:47:09 2009 User-Agent: Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)
Sun Jan 25 16:47:09 2009 Pragma: no-cache
Sun Jan 25 16:47:09 2009 Cache-Control: no-cache
Sun Jan 25 16:47:09 2009 Authorization: Basic QXJ0aWM2OkZjb3QyNjAy
Sun Jan 25 16:47:09 2009 Connection: close
Sun Jan 25 16:47:10 2009 HTTP/1.1 302 Moved Temporarily
Sun Jan 25 16:47:10 2009 P3P: CP="ALL DSP COR CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa CONa TELa OUR STP UNI NAV STA PRE"
Sun Jan 25 16:47:10 2009 Date: Sun, 25 Jan 2009 16:46:52 GMT
Sun Jan 25 16:47:10 2009 Connection: close
Sun Jan 25 16:47:10 2009 Accept-Ranges: bytes
Sun Jan 25 16:47:10 2009 Location: http://rs421l33.rapidshare.com/files/180337373/file01.rar
Sun Jan 25 16:47:10 2009 Content-Length: 0
Sun Jan 25 16:47:10 2009 Redirect to http://rs421l33.rapidshare.com/files/180337373/file01.rar
Sun Jan 25 16:47:10 2009 Connecting rs421l33.rapidshare.com:80
Sun Jan 25 16:47:10 2009 Connecting rs421l33.rapidshare.com [IP=195.122.152.22:80]
Sun Jan 25 16:47:13 2009 Connected.
Sun Jan 25 16:47:13 2009 GET /files/180337373/file01.rar HTTP/1.1
Sun Jan 25 16:47:13 2009 Host: rs421l33.rapidshare.com
Sun Jan 25 16:47:13 2009 Accept: */*
Sun Jan 25 16:47:13 2009 Referer:
Sun Jan 25 16:47:13 2009 User-Agent: Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)
Sun Jan 25 16:47:13 2009 Pragma: no-cache
Sun Jan 25 16:47:13 2009 Cache-Control: no-cache
Sun Jan 25 16:47:13 2009 Authorization: Basic QXJ0aWM2OkZjb3QyNjAy
Sun Jan 25 16:47:13 2009 Connection: close
Sun Jan 25 16:47:24 2009 User Cancel at 0.
The questions is why is Rapidshare using P3P headers and why does the User-Agent come back as a Windows `98 machine on the Internet?
Sun Jan 25 16:47:09 2009 Connecting rapidshare.com [IP=195.122.131.13:80]
Sun Jan 25 16:47:09 2009 Connected.
Sun Jan 25 16:47:09 2009 GET /files/180337373/filename01.rar HTTP/1.1
Sun Jan 25 16:47:09 2009 Host: rapidshare.com
Sun Jan 25 16:47:09 2009 Accept: */*
Sun Jan 25 16:47:09 2009 Referer:
Sun Jan 25 16:47:09 2009 User-Agent: Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)
Sun Jan 25 16:47:09 2009 Pragma: no-cache
Sun Jan 25 16:47:09 2009 Cache-Control: no-cache
Sun Jan 25 16:47:09 2009 Authorization: Basic QXJ0aWM2OkZjb3QyNjAy
Sun Jan 25 16:47:09 2009 Connection: close
Sun Jan 25 16:47:10 2009 HTTP/1.1 302 Moved Temporarily
Sun Jan 25 16:47:10 2009 P3P: CP="ALL DSP COR CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa CONa TELa OUR STP UNI NAV STA PRE"
Sun Jan 25 16:47:10 2009 Date: Sun, 25 Jan 2009 16:46:52 GMT
Sun Jan 25 16:47:10 2009 Connection: close
Sun Jan 25 16:47:10 2009 Accept-Ranges: bytes
Sun Jan 25 16:47:10 2009 Location: http://rs421l33.rapidshare.com/files/180337373/file01.rar
Sun Jan 25 16:47:10 2009 Content-Length: 0
Sun Jan 25 16:47:10 2009 Redirect to http://rs421l33.rapidshare.com/files/180337373/file01.rar
Sun Jan 25 16:47:10 2009 Connecting rs421l33.rapidshare.com:80
Sun Jan 25 16:47:10 2009 Connecting rs421l33.rapidshare.com [IP=195.122.152.22:80]
Sun Jan 25 16:47:13 2009 Connected.
Sun Jan 25 16:47:13 2009 GET /files/180337373/file01.rar HTTP/1.1
Sun Jan 25 16:47:13 2009 Host: rs421l33.rapidshare.com
Sun Jan 25 16:47:13 2009 Accept: */*
Sun Jan 25 16:47:13 2009 Referer:
Sun Jan 25 16:47:13 2009 User-Agent: Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)
Sun Jan 25 16:47:13 2009 Pragma: no-cache
Sun Jan 25 16:47:13 2009 Cache-Control: no-cache
Sun Jan 25 16:47:13 2009 Authorization: Basic QXJ0aWM2OkZjb3QyNjAy
Sun Jan 25 16:47:13 2009 Connection: close
Sun Jan 25 16:47:24 2009 User Cancel at 0.
The questions is why is Rapidshare using P3P headers and why does the User-Agent come back as a Windows `98 machine on the Internet?