In Reply to: latest ebay phishing email looks very legit - be careful posted by mac   on June 30, 2006 at 22:14:31:
This one is coming from UK.Most other ones I have captured so far are mostly coming from South Korea, Taiwan, mainland China. Occasionally, I got one from Sri Lanka and also India.
Watch out for ePrey phishing and if you aren't sure, send the email to spoof@ebay.com for confirmation.
I recall eBay begins with 66.xx.xx.xx so caveat emptor.
Quest-TD
*********************************************************************
Using 0 day old cached answer (or, you can get fresh results).
Hiding E-mail address (you can get results with the E-mail address).% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% http://www.ripe.net/db/news/abuse-proposal-20050331.html
% for more details.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html% Information related to '88.208.195.0 - 88.208.195.255'
inetnum: 88.208.195.0 - 88.208.195.255
netname: FASTHOSTS-UK-NETWORK
descr: UK's largest web hosting company
country: GB
admin-c: MW8691-RIPE
tech-c: DS445-RIPE
status: ASSIGNED PA
mnt-by: AS15418-MNT
mnt-lower: AS15418-MNT
mnt-routes: AS15418-MNT
changed: *********@fasthosts.co.uk 20060113
source: RIPEperson: Mark Wood
address: Fasthosts Internet Limited
address: Suite 7, Discovery Court
address: 154 Southgate Street
address: Gloucester, GL1 2EX
phone: +44 1452 541251
fax-no: +44 1452 541633
nic-hdl: MW8691-RIPE
mnt-by: AS15418-MNT
changed: ***@fasthosts.co.uk 20021128
source: RIPEperson: Darren Sloper
address: Fasthosts Internet Limited
address: Suite 7, Discovery Court
address: 154 Southgate Street
address: Gloucester, GL1 2EX
phone: +44 1452 541251
fax-no: +44 1452 541633
nic-hdl: DS445-RIPE
mnt-by: AS15418-MNT
changed: ***@fasthosts.co.uk 20020724
source: RIPE% Information related to '88.208.192.0/18AS15418'
route: 88.208.192.0/18
descr: FasthostInternet Ltd
origin: AS15418
mnt-by: AS15418-MNT
changed: ***@fasthosts.co.uk 20051104
source: RIPE
[The following lines added by www.dnsstuff.com per requirement by RIPE]
This service is subject to the terms and conditions stated in the RIPE NCC Database Copyright Notice.
Contact dnsstuff.com's 'info@' address to report problems regarding the functionality of the service.
This post is made possible by the generous support of people like you and our sponsors:
Follow Ups
- Re: latest ebay phishing email looks very legit - be careful - Quest 23:46:00 06/30/06 (3)
- they can't spell "activity" at eBay? :-) (check out - Duilawyer 13:11:15 07/01/06 (1)
- also, inquiries is spelled wrong. nt - Duilawyer 19:35:25 07/15/06 (0)
- I submited my details - 2395 04:49:54 07/01/06 (0)