CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 937
Comments: 25
block bottom
spacer spacer PIRT Squad

Fried Phish(TM)

Phishing Incident Reporting and Termination (PIRT) Squad(SM)

A global phishing termination and intelligence system operated by CastleCops. Become a PIRT Squad terminator by reporting phish today!

[ How-To / FAQ ]

Fried Phish -> Confirmed Phish | Terminated Phish


status: terminated

HTTP Response
30 May, 2008
17:57:16
HTTP/1.1 404 Not Found
ID828865 (termination link)
TitleNatWest
Entry
PIRT Squad
Reporter
Submitted anonymously thru the web, or sent to pirt (at) castlecops (dot) com.
Timestamp15 May, 2008 @ 17:22:55
Topic ID221813 - Read/respond to PIRT commentary.
Handler Note:
16 May, 2008
00:07:33
s0tet: Consumed following related reports:

[807871] http://cblmdm72-240-31-43.buckeyecom.net/web.da-us.citibank.com/cgi-bin/citifi/portal/l/l.do.htm+
[807872] http://cblmdm72-240-31-43.buckeyecom.net/web.da-us.citibank.com/cgi-bin/citifi/portal/l/l.do.htm
[828973] http://cblmdm72-240-124-45.buckeyecom.net/nwolb.com.default.aspxrefererident=442704088057210BE8FA3F06EBF408CF2F92B526&am p;amp;cookieid=106485&noscr=false&CookieCheck=2008/
Handler Note:
16 May, 2008
00:12:40
s0tet: View CIDR AS13490 Report: http://www.cidr-report.org/cgi-bin/as-report?as=13490

"13490 | US | arin | 1999-06-18 | BUCKEYECABLEVISION - Buckeye Cablevision, Inc."

Handler Note:
16 May, 2008
00:12:41
s0tet: Extended information for AS13490:
State/Province: oh
Country: us
Responsible Domain: accesstoledo.com
Abuse Email: abuse@accesstoledo.com
Handler Note:
16 May, 2008
00:15:03
s0tet: This host, cblmdm72-240-124-45.buckeyecom.net, is compromised. Please secure it or take it offline.
Handler Note:
16 May, 2008
00:31:40
s0tet: Generated and sent email phish alert to respective parties.
Handler Note:
31 May, 2008
14:56:49
s0tet: offline
Fetched URLs
Slaves807871, 807872, 828973,

Report for at 15 May, 2008 @ 17:52:51


fetched page

at 15 May, 2008 @ 17:53:21
MD5 Fingerprint: fba6a13d9287a0824dab8282b74aeb71
SHA1 Fingerprint: e8e2383b381c457f09b6834a348c98680b3efee9

fetched page

at 16 May, 2008 @ 00:08:56
MD5 Fingerprint: 12617bc6366c3c3b582ccf6b87a5645d
SHA1 Fingerprint: da42139f5f3b4d5e46ca0706926e7aea43329ce2

fetched page

at 16 May, 2008 @ 00:10:55
MD5 Fingerprint: 12617bc6366c3c3b582ccf6b87a5645d
SHA1 Fingerprint: da42139f5f3b4d5e46ca0706926e7aea43329ce2
Version 1.0
spacer spacer