Phish Alert
 
 Full Report: /eBay_phish822839.html
 
 Consumed following related reports:

[822945] http://signin.ebay.com.ws.ebayisapi.dll.signin.usingssl.yes.pagetype.siteid.copartnerid.jkhasduiqeywsmnncbiutrasddghrywasddpoiw.sid.kywonderful.com/~braitfe/webs/components/com_fireboard/db/index.php?SignIn=1&co_partnerId=2&siteid=0&ru=&pp=pass&customerid=&pageType=708XeMWZllWXS3AlBXVShqAhQRfhgTDrf=https://signin.ebay.com/ws/eBayISAPI.dll?SignIn&UsingSSL=1&pUserId=&co_partnerId=2&siteid=0&ru=&pp=&pageType=708&MfcISAPICommand=ConfirmRegistration
Changed status to confirmed phish.IP Converted: 66.71.188.5

dword = 1111997445
hex1 = 0x4247bc05
hex2 = 0x42.0x47.0xbc.0x5
oct = 0102.0107.0274.05
View CIDR AS31034 Report: http://www.cidr-report.org/cgi-bin/as-report?as=31034

"31034 | IT | ripencc | 2004-02-12 | ARUBA-ASN Aruba.it Network"<br />
Extended information for AS31034:
State/Province:
Country:
Responsible Domain: technorail.com
Domain: kywonderful.com appears to be purchased fraudulently through Spot Domain (domainsite.com) for eBay phishing purposes.

All times are GMT