| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <6.0.1.1.2.20060311054952.0412d8f0@mail.mindtheater.net> Date: Sat Mar 11 10:09:02 2006 From: nekramer at mindtheater.net (Nancy Kramer) Subject: strange domain name in phishing email Could it be a 301 permanent redirect? Regards, Nancy Kramer Webmaster http://www.americandreamcars.com Free Color Picture Ads for Collector Cars One of the Ten Best Places To Buy or Sell a Collector Car on the Web At 04:57 AM 3/11/2006, Jianqiang Xin wrote: >hi, >I received several phishing emails. One interesting thing is the link to >phishing website has the link: ><http://1406379699/dbweb/ws/ebay/index.htm>http://1406379699/dbweb/ws/ebay/index.htm > >If you click it, it goes to a fake ebay server. The DNS result shows: > > > 1406379699 >Server: >Address: > >Name: <http://ip-166-179.sn2.eutelia.it>ip-166-179.sn2.eutelia.it >Address: <http://83.211.166.179>83.211.166.179 > >I do not understand why 1406379699 equal to ><http://ip-166-179.sn2.eutelia.it>ip-166-179.sn2.eutelia.it? Thanks for >your help. > > >yours, >jqxin2006 >_______________________________________________ >Full-Disclosure - We believe in it. >Charter: http://lists.grok.org.uk/full-disclosure-charter.html >Hosted and sponsored by Secunia - http://secunia.com/ > >No virus found in this incoming message. >Checked by AVG Anti-Virus. >Version: 7.1.375 / Virus Database: 268.2.1/278 - Release Date: 3/9/2006 -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.1.375 / Virus Database: 268.2.1/278 - Release Date: 3/9/2006
Powered by blists - more mailing lists