CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer PIRT Squad

Fried Phish(TM)

Phishing Incident Reporting and Termination (PIRT) Squad(SM)

A global phishing termination and intelligence system operated by CastleCops. Become a PIRT Squad terminator by reporting phish today!

[ How-To / FAQ ]

Fried Phish -> Confirmed Phish | Terminated Phish


status: terminated

HTTP Response
22 Oct, 2008
14:20:02
HTTP/1.1 302 Found
HTTP/1.1 200 OK
ID985679 (termination link)
TitleCartaSi
Entry
PIRT Squad
Reporter
Submitted anonymously thru the web, or sent to pirt (at) castlecops (dot) com.
Timestamp06 Oct, 2008 @ 10:04:05
Topic ID227228 - Read/respond to PIRT commentary.
Handler Note:
07 Oct, 2008
13:18:48
moike: Phish was active at time of investigation as a fake CartaSi site.
Handler Note:
07 Oct, 2008
13:22:41
moike: View CIDR AS13301 Report: http://www.cidr-report.org/cgi-bin/as-report?as=13301

"13301 | DE | ripencc | 2002-10-22 | UNITEDCOLO-AS Autonomous System of unitedcolo.de"

Handler Note:
07 Oct, 2008
13:22:42
moike: Extended information for AS13301:
State/Province:
Country:
Responsible Domain: ngz-datacenter.net
Abuse Email: postmaster@ngz-datacenter.net
Handler Note:
07 Oct, 2008
13:25:45
moike: Registrar GoDaddy: The domain exp131.com is a fraud domain. Please reclaim the domain as soon as possible to prevent further fraud.
Handler Note:
07 Oct, 2008
13:27:38
moike: Generated and sent email phish alert to respective parties.
Handler Note:
25 Oct, 2008
10:57:41
moike: Phish does not resolve - Hosting terminated
Fetched URLs

Report for at 07 Oct, 2008 @ 13:18:48


fetched page

thumbnail
at 07 Oct, 2008 @ 13:18:52
MD5 Fingerprint: 40c43616b530e24f149f0f90c8f1d87d
SHA1 Fingerprint: b1106e892be2f8547909c5c58cf84cdb552e31ee

fetched page

thumbnail
at 07 Oct, 2008 @ 13:22:43
MD5 Fingerprint: aff0d63070e5dc9a37a63931e63d9595
SHA1 Fingerprint: 79f771b2d45214bad768eee41ed3831d415c60ef
Version 1.0
spacer spacer