3 ms·

Nice details, thanks.

Natsu 10y ago
Speaking of details, I neglected to cite the bit.ly link. Stats for that can be obtained simply by adding a + sign to the end, as you can see here: https://bitly.com/1PibSU0+ https://bitly.com/1PibSU0+ It resolves to this clearly-fake URL: http://myaccount.google.com-securitysettingpage.tk/security/signinoptions/password?e=am9obi5wb2Rlc3RhQGdtYWlsLmNvbQ%3D%3D&fn=Sm9obiBQb2Rlc3Rh&n=Sm9obg%3D%3D&img=Ly9saDQuZ29vZ2xldXNlcmNvbnRlbnQuY29tLy1RZVlPbHJkVGp2WS9BQUFBQUFBQUFBSS9BQUFBQUFBQUFCTS9CQldVOVQ0bUZUWS9waG90by5qcGc%3D&id=1sutlodlwe And regarding the DKIM keys, for anyone here who doesn't know, you take the selector from the DKIM header (view source to get this), which is this part: d=1e100.net; s=20130820; Then you can plug it into tools like this to actually dump the key: http://mxtoolbox.com/dkim.aspx http://mxtoolbox.com/dkim.aspx It's simply a TEXT record on the relevant DNS server which results in something like this: http://mxtoolbox.com/SuperTool.aspx?action=dkim%3a1e100.net%3a20130820&run=toolpage http://mxtoolbox.com/SuperTool.aspx?action=dkim%3a1e100.net%... k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOv6+Txyz+SEc7mT719QQtOj6g2MjpErYUGVrRGGc7f5rmE1cRP1lhwx8PVoHOiuRzyok7IqjvAub9kk9fBoE9uXJB1QaRdMnKz7W/UhWemK5TEUgW1xT5qtBfUIpFRL34h6FbHbeysb4szi7aTgerxI15o73cP5BoPVkQj4BQKkfTQYGNH03J5Db9uMqW/NNJ8fKCLKWO5C1e+NQ1lD6uwFCjJ6PWFmAIeUu9+LfYW89Tz1NnwtSkFC96Oky1cmnlBf4dhZ/Up/FMZmB9l7TA6gLEu6JijlDrNmx1o50WADPjjN4rGELLt3VuXn09y2piBPlZPU2SIiDQC0qX0JWQIDAQAB http://mxtoolbox.com/SuperTool.aspx?action=dkim%3ahillaryclinton.com%3agoogle&run=toolpage http://mxtoolbox.com/SuperTool.aspx?action=dkim%3ahillarycli... v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCJdAYdE2z61YpUMFqFTFJqlFomm7C4Kk97nzJmR4YZuJ8SUy9CF35UVPQzh3EMLhP+yOqEl29Ax2hA/h7vayr/f/a19x2jrFCwxVry+nACH1FVmIwV3b5FCNEkNeAIqjbY8K9PeTmpqNhWDbvXeKgFbIDwhWq0HP2PbySkOe4tTQIDAQAB It is, of course, important to archive these because you never know when DNS records might go missing, leaving future people unable to validate them unless someone happens to have posted a comment with a copy thereof somewhere.

Natsu 10y ago

Speaking of details, I neglected to cite the bit.ly link. Stats for that can be obtained simply by adding a + sign to the end, as you can see here: https://bitly.com/1PibSU0+ https://bitly.com/1PibSU0+ It resolves to this clearly-fake URL: http://myaccount.google.com-securitysettingpage.tk/security/signinoptions/password?e=am9obi5wb2Rlc3RhQGdtYWlsLmNvbQ%3D%3D&fn=Sm9obiBQb2Rlc3Rh&n=Sm9obg%3D%3D&img=Ly9saDQuZ29vZ2xldXNlcmNvbnRlbnQuY29tLy1RZVlPbHJkVGp2WS9BQUFBQUFBQUFBSS9BQUFBQUFBQUFCTS9CQldVOVQ0bUZUWS9waG90by5qcGc%3D&id=1sutlodlwe And regarding the DKIM keys, for anyone here who doesn't know, you take the selector from the DKIM header (view source to get this), which is this part: d=1e100.net; s=20130820; Then you can plug it into tools like this to actually dump the key: http://mxtoolbox.com/dkim.aspx http://mxtoolbox.com/dkim.aspx It's simply a TEXT record on the relevant DNS server which results in something like this: http://mxtoolbox.com/SuperTool.aspx?action=dkim%3a1e100.net%3a20130820&run=toolpage http://mxtoolbox.com/SuperTool.aspx?action=dkim%3a1e100.net%... k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOv6+Txyz+SEc7mT719QQtOj6g2MjpErYUGVrRGGc7f5rmE1cRP1lhwx8PVoHOiuRzyok7IqjvAub9kk9fBoE9uXJB1QaRdMnKz7W/UhWemK5TEUgW1xT5qtBfUIpFRL34h6FbHbeysb4szi7aTgerxI15o73cP5BoPVkQj4BQKkfTQYGNH03J5Db9uMqW/NNJ8fKCLKWO5C1e+NQ1lD6uwFCjJ6PWFmAIeUu9+LfYW89Tz1NnwtSkFC96Oky1cmnlBf4dhZ/Up/FMZmB9l7TA6gLEu6JijlDrNmx1o50WADPjjN4rGELLt3VuXn09y2piBPlZPU2SIiDQC0qX0JWQIDAQAB http://mxtoolbox.com/SuperTool.aspx?action=dkim%3ahillaryclinton.com%3agoogle&run=toolpage http://mxtoolbox.com/SuperTool.aspx?action=dkim%3ahillarycli... v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCJdAYdE2z61YpUMFqFTFJqlFomm7C4Kk97nzJmR4YZuJ8SUy9CF35UVPQzh3EMLhP+yOqEl29Ax2hA/h7vayr/f/a19x2jrFCwxVry+nACH1FVmIwV3b5FCNEkNeAIqjbY8K9PeTmpqNhWDbvXeKgFbIDwhWq0HP2PbySkOe4tTQIDAQAB It is, of course, important to archive these because you never know when DNS records might go missing, leaving future people unable to validate them unless someone happens to have posted a comment with a copy thereof somewhere.