Re: strange domain name in phishing email

[Nancy Kramer <nekramer () mindtheater net>]

Could it be a 301 permanent redirect?

Regards,

Nancy Kramer
Webmaster http://www.americandreamcars.com
Free Color Picture Ads for Collector Cars
One of the Ten Best Places To Buy or Sell a Collector Car on the Web


At 04:57 AM 3/11/2006, Jianqiang Xin wrote:

> hi,
> I received several phishing emails. One interesting thing is the link to 
> phishing website has the link:
> <http://1406379699/dbweb/ws/ebay/index.htm>http://1406379699/dbweb/ws/ebay/index.htm
>
> If you click it, it goes to a fake ebay server. The DNS result shows:
>
> > 1406379699
> Server:
> Address:
>
> Name:    <http://ip-166-179.sn2.eutelia.it>ip-166-179.sn2.eutelia.it
> Address:  <http://83.211.166.179>83.211.166.179
>
> I do not understand why 1406379699 equal to 
> <http://ip-166-179.sn2.eutelia.it>ip-166-179.sn2.eutelia.it? Thanks for 
> your help.
>
>
> yours,
> jqxin2006
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
> No virus found in this incoming message.
> Checked by AVG Anti-Virus.
> Version: 7.1.375 / Virus Database: 268.2.1/278 - Release Date: 3/9/2006


--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.375 / Virus Database: 268.2.1/278 - Release Date: 3/9/2006


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/