Menu
Reply
Highlighted
  • 5
  • 0
  • 1
lab_42
Tuning in
495 Views
Message 1 of 8
Flag for a moderator

Online banking - virgin media IP address listed under NoScript on FF

Hi

I will be asking questions with my bank obviously.

I use Firefox with the NoScript extension.  It can be a bit of a nuisance but also useful.  I tried online banking today and two IP addresses listed under the NoScript results.
These are both mighty peculiar for a bank to produce - given we'd all expect them to be utterly secure.  One is the localhost and one is a virgin broadband IP address *****************. 

It only appears at the log in page and thereafter.  So can anyone here account for this?  Does this mean online banking is unsafe with Virgin?

I can provide a screenshot should anyone want proof but please note I am unwilling to provide that in public forums.

I look forward to hearing an explanation.

Kind regards

Lesley

 

 

[MOD EDIT: Personal and private information has been removed from this post. Please do not post personal or private information in your public posts. Please review the Forum Guidelines]

0 Kudos
Reply

Helpful Answers
  • 13.65K
  • 720
  • 4.73K
Superuser
Superuser
834 Views
Message 4 of 8
Flag for a moderator
Helpful Answer

Re: Online banking - virgin media IP address listed under NoScript on FF

Can you PM me both IP addresses that were listed under No-Script?

Tim

Edit - I'm a Natwest customer myself.  I'll see if I can replicate this BTW

________________________________________


Only use Helpful answer if your problems been solved.

0 Kudos
Reply

All Replies
  • 13.65K
  • 720
  • 4.73K
Superuser
Superuser
490 Views
Message 2 of 8
Flag for a moderator

Re: Online banking - virgin media IP address listed under NoScript on FF

Can you do the following - in a command window type

nslookup <banking url>

Replace banking URL with the url you use for online banking.

Post the results.

Tim

________________________________________


Only use Helpful answer if your problems been solved.

0 Kudos
Reply
  • 5
  • 0
  • 1
lab_42
Tuning in
425 Views
Message 3 of 8
Flag for a moderator

Re: Online banking - virgin media IP address listed under NoScript on FF

Hi Tim

Thank you for your reply.

The nslookup for the login domain is as expected:

Server:         127.0.0.1
Address:        127.0.0.1#53

Non-authoritative answer:
Name:  <bank url>
Address: 155.136.22.4

The IP address is an RBOS address, not a Virgin address

 

 

0 Kudos
Reply
  • 13.65K
  • 720
  • 4.73K
Superuser
Superuser
835 Views
Message 4 of 8
Flag for a moderator
Helpful Answer

Re: Online banking - virgin media IP address listed under NoScript on FF

Can you PM me both IP addresses that were listed under No-Script?

Tim

Edit - I'm a Natwest customer myself.  I'll see if I can replicate this BTW

________________________________________


Only use Helpful answer if your problems been solved.

0 Kudos
Reply
  • 13.65K
  • 720
  • 4.73K
Superuser
Superuser
404 Views
Message 5 of 8
Flag for a moderator

Re: Online banking - virgin media IP address listed under NoScript on FF

Ok

I've installed Firefox and No-Script.

Like the OP I get the following when going to nwolb.com (Nat West online banking)

Scripts blocked from nwolb.com - fine I enable these.
Scripts blocked from 127.0.0.1 - I leave these disabled.
Scripts blocked from 80.193.xxx.xxx - I leave these disabled
Scripts blocked from adobetm.com - I leave these disabled also.

The last is a little troubling, not least as I can't find any reference to it online.  The domain appears to be registered in Czechoslovakia

However the third address which I've deliberately cut the last 2 octets off is my own IP address.

@lab_42 I'm betting that if you type IP into Google search you'll see the same 77.xxx.xxx.xxx address come up for you as is in the no-script report.

Tim 

________________________________________


Only use Helpful answer if your problems been solved.

0 Kudos
Reply
  • 1.43K
  • 154
  • 458
Superuser
Superuser
396 Views
Message 6 of 8
Flag for a moderator

Re: Online banking - virgin media IP address listed under NoScript on FF


ravenstar68 wrote:

Scripts blocked from adobetm.com - I leave these disabled also.

The last is a little troubling, not least as I can't find any reference to it online.  The domain appears to be registered in Czechoslovakia

 

Did you mean adobedtm.com?

Integrating Adobe Experience Manager with Adobe Analytics and Target using DTM

  • 13.65K
  • 720
  • 4.73K
Superuser
Superuser
395 Views
Message 7 of 8
Flag for a moderator

Re: Online banking - virgin media IP address listed under NoScript on FF

@lab_42

I have Linux installed on a hard drive so to rule out a Windows issue I rebooted into Linux.  Set firefox back to it's default state and then re-installed No-Script

I got precisely the same results as in Windows.

To be more precise - in both operating systems I see the following.

First run.

Scripts reported from the following two sources.

  1. nwolb.com
  2. adobedtm.com

If you leave the ones for nwolb.com disabled, then the cursor doesn't automatically move to the next box after you key in the required numbers and letters from your pin or security code.  Leaving adobedtm.com scripts disabled doesn't cause issues with the login.

Second run

Scripts reported from the following sources.

  1. 127.0.0.1 (localhost)
  2. <My public IP address>
  3. nwolb.com
  4. adobedtm.com

In both cases, I enabled the nwolb.com scripts and left the others disabled.

Tim

Edit @用心棒 - You are correct.  I think it was a case of my eyes only picking up what they expected to see.  Thank you for the correction.  It was indeed adobedtm.com

I can breathe a little easier now.  Although as it's evidently used for analytics I'll still leave it disabled Smiley Happy

________________________________________


Only use Helpful answer if your problems been solved.

  • 48
  • 0
  • 6
siskorhodes2016
Dialled in
347 Views
Message 8 of 8
Flag for a moderator

Re: Online banking - virgin media IP address listed under NoScript on FF

get the f secure app it has online payment protection in built and activates the second it detects any kind of payment pay pal banks all of them i think its the one feature that is decent regarding f secure lol, as for the ip scripts be very careful as recent malware has used those exact ones to forward all net connections via an external server and copies data 

0 Kudos
Reply