[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-disclosure] strange domain name in phishing email
- To: full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: [Full-disclosure] strange domain name in phishing email
- From: "Jianqiang Xin" <jqxin2006@xxxxxxxxx>
- Date: Sat, 11 Mar 2006 03:57:13 -0600
hi,
I received several phishing emails. One interesting thing is the link to
phishing website has the link:
http://1406379699/dbweb/ws/ebay/index.htm
If you click it, it goes to a fake ebay server. The DNS result shows:
> 1406379699
Server:
Address:
Name: ip-166-179.sn2.eutelia.it
Address: 83.211.166.179
I do not understand why 1406379699 equal to ip-166-179.sn2.eutelia.it?
Thanks for your help.
yours,
jqxin2006
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/