CastleCops® PayPal Phish

fetched page

at 07 Oct, 2008 @ 18:31:54
MD5 Fingerprint: 3101f480a699863f10173950acc89718
SHA1 Fingerprint: 0955ae8e9645a4217391ac6a1c083c63b2c84672

HTTP/1.1 200 OK
Content-Length: 22315
Content-Type: text/html
Content-Location: http://h1.ripway.com/anteds/index.htm
Last-Modified: Tue, 07 Oct 2008 13:45:31 GMT
Accept-Ranges: bytes
ETag: "869378f78228c91:6a9"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 07 Oct 2008 18:31:57 GMT
Connection: close

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">

<title>Online Payment, Merchant Account - PayPal</title>
<meta name="keywords" content="online payment, online payments, payment, payments, merchant account, online merchant account, credit card merchant account, merchant, merchants, merchant account service, merchant account services, internet merchant account">
<meta name="description" content="PayPal is the safer, easier way to make an online payment or set up a merchant account.">
<link media="screen" rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/WEBSCR-540-20081006-1/css/core/core.css">
<link media="print" rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/WEBSCR-540-20081006-1/css/core/print.css">
<link media="screen" rel="stylesheet" type="text/css" href="https://www.paypalobjects.com/WEBSCR-540-20081006-1/css/marketing/marketing.css">

<legend>Search PayPal</legend>
<label for="searchBox">Search </label><input type="text" id="searchBox" name="queryString" value=""> <input class="button" type="submit" id="search.x" name="search.x" value="Search">
</fieldset>
<input name="form_charset" type="hidden" value="UTF-8">
</form>
<div class="srd" id="navGlobal"><ul>
<li class="first signup"><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_registration-run">Sign Up</a></li>
<li class="login"><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_login-run">Log In</a></li>
<li><a href="https://www.paypal.com/us/cgi-bin/helpweb?cmd=_help">Help</a></li>
<li class="last"><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_security-center-outside">Security Center</a></li>

</ul></div>
<form class="rosetta" id="rosetta" method="post" action="https://www.paypal.com/cgi-bin/webscr?cmd=_home&amp;dispatch=5885d80a13c0db1f38432c9462fe7313791b4c12e1039370315b7fdd9f24e020">
<fieldset>
<legend><span class="accessAid">Change Your Language</span></legend>
<label for="rosetta_dropdown">Language Select</label><select id="rosetta_dropdown" name="locale.x"><option value="en_US" selected>U.S. English</option>
<option value="es_XC">Espa�ol</option>
<option value="fr_XC">Fran�ais</option>
<option value="zh_XC">??(??)</option></select><button type="submit" name="testName" value="testValue"><img src="https://www.paypalobjects.com/WEBSCR-540-20081006-1/en_US/i/btn/btn_circlewitharrow.gif" border="0" alt=""></button><input type="hidden" id="change_locale_x" name="change_locale.x" value="1">
</fieldset>
<input name="form_charset" type="hidden" value="UTF-8">
</form>

</div>
<div id="navPrimary" class="srd"><ul>
<li class="active"><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_home-general&amp;nav=0" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:L5');">Home</a></li>
<li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_home-customer&amp;nav=1" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:L8');">Personal</a></li>
<li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_home-merchant&amp;nav=2" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:O3');">Business</a></li>
<li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=xpt/Marketing/general/ProductsandServices-outside&amp;nav=3" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:S9');">Products &amp; Services</a></li>
</ul></div>
<hr>
<div id="content">
<div class="sidebar box login">
<div class="header"><h2>Account login</h2></div>

<div class="body"><form method="post" name="login_form" action="https://www.paypal.com/us/cgi-bin/webscr?cmd=_login-submit&amp;dispatch=5885d80a13c0db1f38432c9462fe7313791b4c12e1039370315b7fdd9f24e020">
<fieldset>
<legend>Member Log In</legend>
<p><label for="login_email">Email address</label><input type="text" id="login_email" name="login_email" value="ante_Edstrom@hotmail.com"></p>
<p><label for="login_password">PayPal password</label><input autocomplete="off" type="password" id="login_password" name="login_password" value=""><script type="text/javascript">

</script></p>
<input type="submit" name="submit.x" value="Log In" class="button primary">
</fieldset>
<p>Forgot your <a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_email-recovery">email address</a> or <a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_forgot-password&amp;from=PayPal">password</a>?</p>

<p>New to PayPal? <strong><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_registration-run">Sign up</a></strong>.</p>
<input name="form_charset" type="hidden" value="UTF-8">
</form></div>
</div>
<div class="main">
<div class="zone">
<div id="hero"><img src="https://www.paypalobjects.com/WEBSCR-540-20081006-1/en_US/i/header/hdr_home_560x228.jpg" border="0" alt=""></div>
<script type="text/javascript">PAYPAL.util.Flash.insertFlash("https://www.paypalobjects.com/WEBSCR-540-20081006-1/en_US/m/hero/hero.swf?XMLfile=heroHome.xml&imgBasePath=https://www.paypalobjects.com/WEBSCR-540-20081006-1/en_US/m/hero/&linkBasePath=https://www.paypal.com/", 560, 228, "hero", true, 7)</script>
</div>
<div class="subhead"><div>
<p>Pay With: </p>
<ul>

<li><img border="0" src="https://www.paypalobjects.com/WEBSCR-540-20081006-1/en_US/i/logo/logo_ccVisa.gif" alt="Visa"></li>
<li><img border="0" src="https://www.paypalobjects.com/WEBSCR-540-20081006-1/en_US/i/logo/logo_ccMC.gif" alt="Mastercard"></li>
<li><img border="0" src="https://www.paypalobjects.com/WEBSCR-540-20081006-1/en_US/i/logo/logo_ccAmex.gif" alt="American Express"></li>
<li><img border="0" src="https://www.paypalobjects.com/WEBSCR-540-20081006-1/en_US/i/logo/logo_ccDiscover.gif" alt="Discover"></li>
<li><img border="0" src="https://www.paypalobjects.com/WEBSCR-540-20081006-1/en_US/i/logo/logo_ccBank.gif" alt="Bank"></li>
</ul>
</div></div>
<div class="zone simpleList">
<div class="box">
<h3>Pay online</h3>
<ul>
<li>
<a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/cps/general/NewConsumerWorks-outside">Learn how</a> PayPal works.</li>

<li>
<a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/cps/securitycenter/buy/Privacy-outside">Shop without exposing</a> your financial information.</li>
<li>
<a href="https://www.paypal.com/sendmoney">Send money</a> to friends and family around the world.</li>
</ul>
<p><strong><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_registration-run">Sign up</a></strong></p>
</div>
<div class="box">
<h3>Get paid online</h3>

<ul>
<li>
<a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_auction-outside">Accept payments</a> for your eBay listings.</li>
<li>
<a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_wp-standard-overview-outside&amp;nav=2.0.0">Start accepting credit cards</a> on your website.</li>
<li>
<a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_home-merchant&amp;nav=2">See all the ways</a> to get paid online.</li>
</ul>

<p><strong><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_registration-run">Sign up</a></strong></p>
</div>
</div>
<div class="zone"><div class="box"><div class="MktMPI" id="mpi500021"><SCRIPT LANGUAGE="JavaScript">
ord=Math.random();
ord=ord*10000000000000000000;
document.write('<SCR' + 'IPT LANGUAGE="JavaScript" SRC="https://ad.doubleclick.net/adj/paypal.us/NewUserHome-outside;lang=en_us;tile=1;sz=520x70;ord='+ord+'?"><\/SCR' + 'IPT>');
</SCRIPT>
<NOSCRIPT>
<A HREF="https://ad.doubleclick.net/jump/paypal.us/NewUserHome-outside;lang=en_us;tile=1;sz=520x70;ord=123456789?" TARGET="_blank">
<IMG SRC="https://ad.doubleclick.net/ad/paypal.us/NewUserHome-outside;lang=en_us;tile=1;sz=520x70;ord=123456789?" WIDTH="520" HEIGHT="70" BORDER="0" ALT=""></A>
</NOSCRIPT>
<br></div></div></div>
</div>
<div class="sidebar box resources">
<div class="header"><h3>Top questions</h3></div>
<div class="body"><ul>
<li><a href="https://www.paypal.com/helpscr?cmd=_help&amp;locale=en_US&amp;countrycode=US&amp;_dyncharset=UTF-8&amp;t=solutionTab&amp;ps=solutionPanels&amp;solutionId=13136">Why use PayPal when I have credit cards?</a></li>
<li><a href="https://www.paypal.com/helpscr?cmd=_help&amp;locale=en_US&amp;countrycode=US&amp;_dyncharset=UTF-8&amp;t=solutionTab&amp;ps=solutionPanels&amp;solutionId=38429">What can I do with PayPal?</a></li>

<li><a href="https://www.paypal.com/helpscr?cmd=_help&amp;locale=en_US&amp;countrycode=US&amp;_dyncharset=UTF-8&amp;t=solutionTab&amp;ps=solutionPanels&amp;solutionId=13138">Is PayPal free to use?</a></li>
</ul></div>
</div>
</div>
<hr>
<div id="footer" class="srd">
<h5 class="accessAid">More Information</h5>
<ul>
<li><a href="http://www.paypal-media.com/aboutus.cfm">About</a></li>
<li><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/cps/general/PayPalAccountTypes-outside">Accounts</a></li>
<li><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=_display-fees-outside">Fees</a></li>
<li><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/ua/policy_privacy-outside">Privacy</a></li>

<li><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=_security-center-outside">Security Center</a></li>
<li><a href="http://www.paypal.com/us/cgi-bin/helpscr?cmd=_help&amp;t=escalateTab">Contact Us</a></li>
<li><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/ua/ua-outside">Legal Agreements</a></li>
<li><a href="/developer">Developers</a></li>
<li><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/jobs-outside">Jobs</a></li>
<li><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/cps/mobile/MobileOverview-outside">Mobile</a></li>
<li><a href="https://ad.doubleclick.net/clk;30045328;11466062;u?https://www.paypal.com/cgi-bin/webscr?cmd=xpt/cps/general/PPPlusCC-outside&amp;channel=1&amp;promo=500">Plus Card</a></li>
<li><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=_web-referrals-mrb-outside">Referrals</a></li>
<li><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=_shop-ext">Shops</a></li>

<li><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_batch-payment-overview-outside">Mass Pay</a></li>
<li class="last">

<script type="text/javascript" src="https://www.paypalobjects.com/WEBSCR-540-20081006-1/js/opinionlab/oo_engine.js"></script><script type="text/javascript">
			var feedback_link='Site Feedback';
            	O_GoT(feedback_link);
             	custom_var='Unknown|SRD: Main Home|US|en_US';var custom_var_temp=custom_var;// Paypal Custom URL class
			var PayPalURL = function(pagename) {
				this.language_country_code = "en_US";
				this.dd = "US";
				this.nn = "00";this.pagename = escape(pagename.replace(/\s|\//g, "_"));
				this.to_str = function() {
		
				return "https://"+this.dd+".paypal.com/"+this.language_country_code+"/"+this.nn+"/"+this.pagename+".page"
				}
				}
				var paypal_url = new PayPalURL("SRD: Main Home");
			// Below gives you the ability to change the other properties after the object is created
			//paypal_url.dd="ES";
			//paypal_url.nn="01";

_ht = paypal_url.to_str();
		var _ht_temp=_ht;
		var _hr_temp=_hr;
		</script>
</li>
</ul>
<h5 class="accessAid">PayPal Worldwide</h5>
<ul>
<li><a href="http://www.paypal.com.au/" title="PayPal Australia">Australia</a></li>
<li><a href="http://www.paypal.at/" title="PayPal Austria">Austria</a></li>
<li><a href="http://www.paypal.be/" title="PayPal Belgium">Belgium</a></li>

<li><a href="http://www.paypal.ca/" title="PayPal Canada">Canada</a></li>
<li><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/general/CNPayPalComparison-outside" title="PayPal China">China</a></li>
<li><a href="http://www.paypal.fr/" title="PayPal France">France</a></li>
<li><a href="http://www.paypal.de/" title="PayPal Germany">Germany</a></li>
<li><a href="http://www.paypal.it/" title="PayPal Italy">Italy</a></li>
<li><a href="http://www.paypal.nl/" title="PayPal Netherlands">Netherlands</a></li>
<li><a href="http://www.paypal.pl/" title="PayPal Poland">Poland</a></li>
<li><a href="http://www.paypal.es/" title="PayPal Spain">Spain</a></li>
<li><a href="http://www.paypal.ch/" title="PayPal Switzerland">Switzerland</a></li>

<li><a href="http://www.paypal.co.uk/" title="PayPal United Kingdom">United Kingdom</a></li>
<li class="last"><a href="https://www.paypal.com/us/cgi-bin/webscr?cmd=_display-country-functionality-outside" title="Learn more about PayPal Worldwide">More...</a></li>
</ul>
<h5 class="accessAid">More eBay Sites</h5>
<ul>
<li><a href="http://www.ebay.com">eBay</a></li>
<li><a href="http://www.half.com">Half.com</a></li>
<li><a href="http://www.craigslist.org">Craigslist</a></li>
<li><a href="http://www.kijiji.ca">Kijiji Canada</a></li>
<li><a href="http://www.prostores.com">ProStores</a></li>

<li><a href="http://www.rent.com">Rent.com</a></li>
<li><a href="http://www.shopping.com">Shopping.com</a></li>
<li class="last"><a href="http://www.skype.com">Skype</a></li>
</ul>
<p id="footerSecure"><a target="_blank" href="https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/User/popup/SecurityKeyVIP-outside" onClick="PAYPAL.core.openWindow(event, {width: 425, height: 350})"><img border="0" src="https://www.paypalobjects.com/WEBSCR-540-20081006-1/en_US/i/logo/logo_VIPwhite_66x27.gif" alt=""></a></p>
<p id="legal">Copyright � 1999-2008 PayPal. All rights reserved.<br><a href="http://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/UserAgreement/general/FDIC-outside">Information about FDIC pass-through insurance</a></p>
</div>
<div id="navFull"><ul>
<li class="active">
<a href="https://www.paypal.com/cgi-bin/webscr?cmd=_home-general&amp;nav=0" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:L5');">Home</a><ul>
<li class="active">

<a href="https://www.paypal.com/cgi-bin/webscr?cmd=_home-general&amp;nav=0.0" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:W8');">Get Started</a><ul>
<li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=p/auc/new_ebay_buyer_intro-outside&amp;nav=0.0.0" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:YX');">Why Use PayPal</a></li>
<li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=xpt/cps/general/NewConsumerWorks-outside&amp;nav=0.0.1" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:YY');">How It Works</a></li>
<li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=xpt/cps/general/NewConsumerSafe-outside&amp;nav=0.0.2" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:YZ');">Where to Shop With It</a></li>
</ul>
</li>
<li>
<a href="https://www.paypal.com/cgi-bin/webscr?cmd=_send-money&amp;nav=0.1" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:W2');">Send Money</a><ul>
<li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_send-money&amp;nav=0.1.0" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:Z0');">Send Money Online</a></li>
<li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_batch-payment-overview-outside&amp;nav=0.1.1" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:Z8');">Make a Mass Payment</a></li>

</ul>
</li>
<li>
<a href="https://www.paypal.com/cgi-bin/webscr?cmd=p/req/index-outside&amp;nav=0.2" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:W3');">Request Money</a><ul>
<li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=p/req/index-outside&amp;nav=0.2.0" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:Z2');">Request Money</a></li>
<li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=p/sell/invoicing_intro-outside&amp;nav=0.2.1" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:Z3');">Send an Invoice</a></li>
</ul>
</li>
<li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_auction-outside&amp;nav=0.3" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:W4');">Sell on eBay</a></li>
<li><a href="https://www.paypal.com/developer" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:L6');">Developers</a></li>
</ul>
</li>

<li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_home-customer&amp;nav=1" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:L8');">Personal</a></li>
<li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_home-merchant&amp;nav=2" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:O3');">Business</a></li>
<li><a href="https://www.paypal.com/cgi-bin/webscr?cmd=xpt/Marketing/general/ProductsandServices-outside&amp;nav=3" onClick="s=s_gi('paypalglobal'); s.tl(this,'o','SRD:Nav:S9');">Products &amp; Services</a></li>
</ul></div>
<script type="text/javascript">
							  // until there is a reliable ondomready function
							 if(typeof PAYPAL != 'undefined'){
								 PAYPAL.core.Navigation.init();
							}</script>
</div>
<script type="text/javascript" src="https://www.paypalobjects.com/WEBSCR-540-20081006-1/js/iconix.js"></script><script type="text/javascript" src="https://www.paypalobjects.com/WEBSCR-540-20081006-1/js/pageBlockingUnsafeBrowsers.js"></script><script type="text/javascript" src="https://www.paypalobjects.com/WEBSCR-540-20081006-1/js/pp_naturalsearch.js"></script><script type="text/javascript">

</script><div id="ppwebapi" class="advonqo.mha,hfb.lnb-k`ox`o-rdhsqdonqo"></div>

<script type="text/javascript" src="https://www.paypalobjects.com/WEBSCR-540-20081006-1/js/site_catalyst/pp_jscode_080706.js"></script>
<script type="text/javascript">
</script>
<script type="text/javascript">
</script><noscript><img
src="//paypal.112.2O7.net/b/ss/paypalglobal/1/H.6--NS/0?pageName=NonJavaScript"
height="1" width="1" border="0" alt="" /></noscript>

</body>
</html>

Fried Phish^(TM)

status: confirmed phish

Report for at 07 Oct, 2008 @ 18:31:51

whois

host

fetched page

Corresponding BGP Origin ASN

Possible BGP peer ASNs one AS hop away from BGP Origin ASN

AS Description of a given BGP ASN


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 150ppm 0.321s (0.195s) Making cybercriminals unhappy since 2002*

Fried Phish(TM)

status: confirmed phish

Report for at 07 Oct, 2008 @ 18:31:51

whois

host

fetched page

Corresponding BGP Origin ASN

Possible BGP peer ASNs one AS hop away from BGP Origin ASN

AS Description of a given BGP ASN

Fried Phish^(TM)