Need Help Figuring Out This Fake eBay Site

Banana

Diamond Member
Jun 3, 2001
3,132
23
81
I received yet another fake eBay message today. Haven't had one in a long time. This one looked really slick, but the giveaway was how it asked for info such as checking account routing numbers, mother's maiden names, PayPal passwords, etc
rolleye.gif


Anyway, buried in the message source was this web site. I'm an idiot when it comes to figuring these things out, but how do you find out more about the perpetrator? I'm just being nosy. . .

BTW, here is the message header:

Received: from rwcrgxc53.comcast.net ([204.127.198.38])
by rwcrmxc14.comcast.net (rwcrmxc14) with ESMTP
id <20030918214009r1400qi3t8e>; Thu, 18 Sep 2003 21:40:09 +0000
Received: from linux2.cyberworldhost.com ([66.206.21.1])
by comcast.net (rwcrgxc53) with ESMTP
id <20030918214009e5300t7a14e>; Thu, 18 Sep 2003 21:40:09 +0000
Received: from nobody by linux2.cyberworldhost.com with local (Exim 4.20)
id 1A06Q3-0000fu-Ob
for @comcast.net; Thu, 18 Sep 2003 14:34:31 -0700
To: @comcast.net
Subject: eBay User Information Request
From: aw-confirm@ebay.com<aw-confirm@ebay.com>
Content-Type: multipart/related; boundary="----HTML--MAIL----"
Message-Id: <E1A06Q3-0000fu-Ob@linux2.cyberworldhost.com>
Date: Thu, 18 Sep 2003 14:34:31 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - linux2.cyberworldhost.com
X-AntiAbuse: Original Domain - comcast.net
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - linux2.cyberworldhost.com
 

her209

No Lifer
Oct 11, 2000
56,336
11
0
nslookup gave me this:

Name: pendent21.com
Address: 66.206.15.34

However, when I ping pendent, I get this:

Pinging pendent21.com [66.221.79.152] with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 66.221.79.152:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

A whois on this site turns this up:

LeMaze Studio Inc
207 Coachway Road SW
Calgary, Alberta T3H 1B2
CA

Domain Name: PENDENT21.COM

Administrative Contact -
Len Canning - candocdx@cqmail.net
LeMaze Studio Inc
240 Douglas Street, Suite 407
Victoria, BC V8V 2P3
CA
Phone - 250-477-8804
Fax - 775-258-3549
Technical Contact -
Len Canning - candocdx@cqmail.net
LeMaze Studio Inc
240 Douglas Street, Suite 407
Victoria, BC V8V 2P3
CA
Phone - 250-477-8804
Fax - 775-258-3549

Record updated date - 2003-06-06 11:36:25
Record created date - 2002-06-12
Record expiring on - 2005-06-12
Database last updated on - 2003-09-18 23:12:17 EST

Domain servers in listed order:

NS.CIHOST.COM 216.221.162.81
NS2.CIHOST.COM 216.221.162.111