Re: EBay Fraud Attempt

From: Stephen Friedl (steveat_private)
Date: Sun Dec 08 2002 - 20:15:40 PST

  • Next message: Julian Young: "Odd entries in my Security Router logs"

    > Finally, I checked the WHOIS database entry for "ebayupdates.com" and found that
    > the registrants were not eBay corporate but someone in Florida. Is it
    > possible that this is a farily large scale attempt at gathering eBay
    > users account and/or credit card information.
    
    	--> fwhois ebayupdates.comat_private
    
    	[whois.melbourneit.com.au]
    
    	Domain Name.......... ebayupdates.com
    	  Creation Date........ 2002-12-06
    	  Registration Date.... 2002-12-06
    	  Expiry Date.......... 2003-12-06
    	  Organisation Name.... Tred
    	  Organisation Address. 1742 BOLTON VILLAGE LANE
    	  Organisation Address.
    	  Organisation Address. NICEVILLE
    	  Organisation Address. 32578
    	  Organisation Address. FL
    	  Organisation Address. UNITED STATES
    
    	Admin Name........... Eulalia Bergenthal
    	  Admin Address........ 1742 BOLTON VILLAGE LANE
    	  Admin Address........
    	  Admin Address........ NICEVILLE
    	  Admin Address........ 32578
    	  Admin Address........ FL
    	  Admin Address........ UNITED STATES
    	  Admin Email.......... qspam52at_private
    	  Admin Phone.......... 713-552-6332
    	  Admin Fax............
    
    	Tech Name............ YahooDomains Techcontact
    	  Tech Address......... 701 First Ave.
    	  Tech Address.........
    	  Tech Address......... Sunnyvale
    	  Tech Address......... 94089
    	  Tech Address......... CA
    	  Tech Address......... UNITED STATES
    	  Tech Email........... domain.tech@YAHOO-INC.COM
    	  Tech Phone........... +1.6198813096
    	  Tech Fax.............
    	  Name Server.......... yns1.yahoo.com
    	  Name Server.......... yns2.yahoo.com
    
    This is currently hosted at Yahoo! Domains, and they've been notified
    on an urgent basis.
    
    Steve
    
    --- 
    Stephen J Friedl | Software Consultant | Tustin, CA |   +1 714 544-6561
    www.unixwiz.net  | I speak for me only |   KA8CMY   | steveat_private
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Mon Dec 09 2002 - 21:12:58 PST