CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
Donations. Become Premium Today! Premium Icon
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 937
Comments: 25
block bottom
spacer spacer PIRT Squad

Fried Phish(TM)

Phishing Incident Reporting and Termination (PIRT) Squad(SM)

A global phishing termination and intelligence system operated by CastleCops. Become a PIRT Squad terminator by reporting phish today!

[ How-To / FAQ ]

Fried Phish -> Confirmed Phish | Terminated Phish


status: terminated

HTTP Response
28 May, 2008
19:05:42		HTTP/1.1 404 Not Found
ID823089 (termination link)
TitleBank of America
Entry
PIRT Squad
Reporter		84580
Timestamp10 May, 2008 @ 18:54:17
Topic ID221549 - Read/respond to PIRT commentary.
Handler Note:
11 May, 2008
00:26:50		downie: Consumed following related reports:

[823017] http://rubycon.ch/cgi-bin/www.bankofamerica.com/login-secure/do.php?cmd=3DValidate
[823018] http://rubycon.ch/cgi-bin/www.bankofamerica.com/login-secure/do.php?cmd
Handler Note:
11 May, 2008
00:30:18		downie: The URL accesses a Bank of America phishing site, active at the time of investigation.
A page fetch was successful.
Handler Note:
11 May, 2008
00:32:22		downie: View CIDR AS29691 Report: http://www.cidr-report.org/cgi-bin/as-report?as=29691

"29691 | CH | ripencc | 2003-11-13 | NINE Nine Internet Solutions AG"

Handler Note:
11 May, 2008
00:32:23		downie: Extended information for AS29691:
State/Province:
Country: ch
Responsible Domain: nine.ch
Abuse Email: noc@nine.ch
Handler Note:
11 May, 2008
00:54:03		downie: Generated and sent email phish alert to respective parties.
Handler Note:
29 May, 2008
00:19:21		downie: Cannot connect
Fetched URLs
Slaves823017, 823018,

Report for at 10 May, 2008 @ 18:55:38

fetched page

at 10 May, 2008 @ 18:55:43
MD5 Fingerprint: b099467ad9263bbec217591af057b0d1
SHA1 Fingerprint: 1599c067c54b6c0859cad215420160ad0971ac8b

fetched page

at 11 May, 2008 @ 00:30:20
MD5 Fingerprint: 9db8101fd515f4d157a60bdc5bb7803b
SHA1 Fingerprint: fd6c33e260dc0bae2a8106dc8bf13d9f1a8c606e
Version 1.0
2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
Acceptable Use Policy. Use signifies your agreement.
113ppm 0.254s (0.125s)
Making cybercriminals unhappy since 2002*
In Memory of Trpm
spacer spacer