CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 937
Comments: 25
block bottom
spacer spacer PIRT Squad

Fried Phish(TM)

Phishing Incident Reporting and Termination (PIRT) Squad(SM)

A global phishing termination and intelligence system operated by CastleCops. Become a PIRT Squad terminator by reporting phish today!

[ How-To / FAQ ]

Fried Phish -> Confirmed Phish | Terminated Phish


status: terminated

HTTP Response
14 May, 2008
18:01:32
HTTP/1.1 404 Not Found
ID823939 (termination link)
TitlePayPal
Entry
PIRT Squad
Reporter
Submitted anonymously thru the web, or sent to pirt (at) castlecops (dot) com.
Timestamp11 May, 2008 @ 17:37:34
Topic ID221610 - Read/respond to PIRT commentary.
Handler Note:
11 May, 2008
18:16:04
moike: Phish was active at time of investigation as a fake PayPal site
Handler Note:
11 May, 2008
18:19:11
moike: View CIDR AS6724 Report: http://www.cidr-report.org/cgi-bin/as-report?as=6724

"6724 | DE | ripencc | 2002-11-20 | STRATO Strato AG"

Handler Note:
11 May, 2008
18:19:12
moike: Extended information for AS6724:
State/Province:
Country: de
Responsible Domain: strato.de
Abuse Email: abuse@strato.de
Handler Note:
11 May, 2008
18:25:35
moike: View CIDR AS19318 Report: http://www.cidr-report.org/cgi-bin/as-report?as=19318

"19318 | US | arin | 2005-12-09 | NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC"

Handler Note:
11 May, 2008
18:25:42
moike: Extended information for AS19318:
State/Province: ny
Country: us
Responsible Domain: albint.com
Abuse Email: postmaster@albint.com
Handler Note:
11 May, 2008
18:27:13
moike: Host T35: The web site verifcationconfirm.t35.com is a fraud site. Please suspend this site to prevent further fraud.
Handler Note:
11 May, 2008
18:29:58
moike: Generated and sent email phish alert to respective parties.
Handler Note:
16 May, 2008
02:13:56
moike: Phish does not resolve - HTTP error 404 on 1st URL, 403 on 2nd URL
Fetched URLs

Report for at 11 May, 2008 @ 18:00:06


fetched page

at 11 May, 2008 @ 18:00:16
MD5 Fingerprint: f9fc629f660d27f994e02cde0b1ada04
SHA1 Fingerprint: beccf28b3f314f919f6d32eef6b7fd355306fbf4

fetched page

at 11 May, 2008 @ 18:18:42
MD5 Fingerprint: cc2d79df4bf2fe4ef1f3166127af3e7c
SHA1 Fingerprint: 9421e45381307e3178fffe1b67847f523cef2038

fetched page

at 11 May, 2008 @ 18:21:22
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709
Version 1.0
spacer spacer