CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
Donations. Become Premium Today! Premium Icon
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer PIRT Squad

Fried Phish(TM)

Phishing Incident Reporting and Termination (PIRT) Squad(SM)

A global phishing termination and intelligence system operated by CastleCops. Become a PIRT Squad terminator by reporting phish today!

[ How-To / FAQ ]

Fried Phish -> Confirmed Phish | Terminated Phish


status: terminated

ID930142 (termination link)
TitlePayPal, eBay
Entry
PIRT Squad
Reporter		Submitted anonymously thru the web, or sent to pirt (at) castlecops (dot) com.
Timestamp14 Aug, 2008 @ 22:45:27
Topic ID225662 - Read/respond to PIRT commentary.
Handler Note:
14 Aug, 2008
23:13:55		downie: The URL accesses a PayPal phishing site, active at the time of investigation.
A page fetch was successful.
Handler Note:
14 Aug, 2008
23:37:00		downie: View CIDR AS10076 Report: http://www.cidr-report.org/cgi-bin/as-report?as=10076

"10076 | MN | apnic | 2000-06-20 | ASN-ERDEMNET"

Handler Note:
14 Aug, 2008
23:37:01		downie: Extended information for AS10076:
State/Province:
Country: mn
Responsible Domain: csms.edu.mn
Abuse Email: postmaster@csms.edu.mn
Handler Note:
14 Aug, 2008
23:49:23		downie: eBay phish at
http://202.5.195.3/data/ws/eBayISAPI.php?SignIn&ru=http%3A%2F%2Fwww.ebay.com%2F&_trksid=m38
Handler Note:
15 Aug, 2008
00:42:12		downie: Generated and sent email phish alert to respective parties.
Handler Note:
26 Aug, 2008
21:29:45		downie: 404
Handler Note:
03 Sep, 2008
13:39:53		downie: Cannot connect
Fetched URLs

Report for at 14 Aug, 2008 @ 23:13:55

fetched page

at 14 Aug, 2008 @ 23:18:13
MD5 Fingerprint: 45bab7199bf34f005c3e3423a0387a20
SHA1 Fingerprint: ed1ee6779123b9bfade18b72739ae7048d5a4391

fetched page

at 14 Aug, 2008 @ 23:40:28
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709

fetched page

at 14 Aug, 2008 @ 23:50:49
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709

fetched page

at 15 Aug, 2008 @ 00:59:02
MD5 Fingerprint: 7957e7d3acea33720db5b56c87f4f3b8
SHA1 Fingerprint: b7b2c2b4ed1cd64883477358ddfd491a416adfb2

fetched page

at 15 Aug, 2008 @ 01:09:12
MD5 Fingerprint: f42f93443b383abd12c64d2ecc06b466
SHA1 Fingerprint: 597470987c5545ffb68b766f414c840a60da5927

fetched page

at 15 Aug, 2008 @ 01:10:56
MD5 Fingerprint: f42f93443b383abd12c64d2ecc06b466
SHA1 Fingerprint: 597470987c5545ffb68b766f414c840a60da5927

fetched page

at 15 Aug, 2008 @ 01:21:51
MD5 Fingerprint: fcb267560e31177b7296d7e5201198b3
SHA1 Fingerprint: 2f3ea940707d3415ca4c8d344550c540f5cfafb7
Version 1.0
2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
Acceptable Use Policy. Use signifies your agreement.
166ppm 0.351s (0.104s)
Making cybercriminals unhappy since 2002*
In Memory of Trpm
spacer spacer