CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer PIRT Squad

Fried Phish(TM)

Phishing Incident Reporting and Termination (PIRT) Squad(SM)

A global phishing termination and intelligence system operated by CastleCops. Become a PIRT Squad terminator by reporting phish today!

[ How-To / FAQ ]

Fried Phish -> Confirmed Phish | Terminated Phish


status: terminated

ID939270 (termination link)
TitleAmazon, Bank for International Settlements, Bank of America
Entry
PIRT Squad
Reporter
Submitted anonymously thru the web, or sent to pirt (at) castlecops (dot) com.
Timestamp23 Aug, 2008 @ 10:27:50
Topic ID - Read/respond to PIRT commentary.
Handler Note:
24 Aug, 2008
01:37:23
downie: The URL accesses a Bank of America phishing site, active at the time of investigation.
A page fetch was successful.
Handler Note:
24 Aug, 2008
01:41:09
downie: View CIDR AS15055 Report: http://www.cidr-report.org/cgi-bin/as-report?as=15055

"15055 | US | arin | 2007-07-05 | YOURCOLO-AS-1 - FastPC Inc."

Handler Note:
24 Aug, 2008
01:41:19
downie: Extended information for AS15055:
State/Province: ny
Country: us
Responsible Domain: worldnet.att.net
Abuse Email: security@worldnet.att.net
Handler Note:
24 Aug, 2008
02:17:13
downie: There is an Amazon phish at
http://thejewelrygarden.com/cgi-pin/gb/billingdepartment/ref=pd_irl_gw_r/onlineservice/ref=pd_irl_gw105-6730107-0483665i e=UTF8&update=1/
Handler Note:
24 Aug, 2008
03:10:46
downie: There are fake Bank for International Settlements sites at
http://thejewelrygarden.com/kirksfolly/images/microsoft/
http://thejewelrygarden.com/store/includes/functions/extra_functions/
Handler Note:
24 Aug, 2008
03:26:45
downie: Generated and sent email phish alert to respective parties.
Handler Note:
26 Aug, 2008
23:54:33
downie: 404
Fetched URLs

Report for at 24 Aug, 2008 @ 01:37:23


fetched page

at 24 Aug, 2008 @ 01:37:28
MD5 Fingerprint: 056b9028d0ddd158f51f46e0af5d2ee6
SHA1 Fingerprint: 05261505f5848f0959b7f34c2d0941c1b408b076

fetched page

at 24 Aug, 2008 @ 01:38:41
MD5 Fingerprint: 376477ed904da2c61fa24ccee86a6e5c
SHA1 Fingerprint: f1a5d1c4bc3ee3b6df1eeb4f2ee9fbfa232d1f17

fetched page

at 24 Aug, 2008 @ 02:17:15
MD5 Fingerprint: be4e4d2db76e189dcdc6668302265724
SHA1 Fingerprint: e06493c1215474ee92d786cff6e9faab77b96a0d