CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 917
Comments: 22
block bottom
spacer spacer PIRT Squad

Fried Phish(TM)

Phishing Incident Reporting and Termination (PIRT) Squad(SM)

A global phishing termination and intelligence system operated by CastleCops. Become a PIRT Squad terminator by reporting phish today!

[ How-To / FAQ ]

Fried Phish -> Confirmed Phish | Terminated Phish


status: confirmed phish

HTTP Response
10 May, 2008
14:39:12
HTTP/1.1 404 Not Found
ID774609 (termination link)
TitleNorth Island Credit Union
Entry
PIRT Squad
Reporter
2
Timestamp27 Mar, 2008 @ 19:37:33
Topic ID218362 - Read/respond to PIRT commentary.
Handler Note:
27 Mar, 2008
19:45:29
Paul: View CIDR AS8065 Report: http://www.cidr-report.org/cgi-bin/as-report?as=8065

"8065 | CO | lacnic | 1997-03-31 | EPM Telecomunicaciones S.A. E.S.P."

Handler Note:
27 Mar, 2008
19:45:32
Paul: Extended information for AS8065:
State/Province:
Country: co
Responsible Domain: epm.net.co
Abuse Email: adminternet@epm.net.co
Handler Note:
27 Mar, 2008
19:49:50
Paul: Generated and sent email phish alert to respective parties.
Handler Note:
01 Apr, 2008
13:57:11
Paul: This phish is still active. It is now SBL'd in Spamhaus:

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL64089
Handler Note:
01 Apr, 2008
14:00:52
Paul: Generated and sent email phish alert to respective parties.
Handler Note:
01 Apr, 2008
14:02:33
Paul: Argentina and Brazil CERTs are included as they are assisting in this investigation.
Handler Note:
01 Apr, 2008
14:02:47
Paul: Generated and sent email phish alert to respective parties.
Fetched URLs

Report for at 27 Mar, 2008 @ 19:42:50


fetched page

thumbnail
at 27 Mar, 2008 @ 19:43:02
MD5 Fingerprint: 3949beecff22d83df00b587285b44bf0
SHA1 Fingerprint: e9715bbe50d1736ce545a49ce0d098b636fac877

fetched page

thumbnail
at 27 Mar, 2008 @ 19:43:37
MD5 Fingerprint: 3949beecff22d83df00b587285b44bf0
SHA1 Fingerprint: e9715bbe50d1736ce545a49ce0d098b636fac877

fetched page

thumbnail
at 28 Mar, 2008 @ 01:52:11
MD5 Fingerprint: 40e5f9a1f6a2c449f15b2c6f660e5e5c
SHA1 Fingerprint: 73e5ab773338db70ca824a0d27f71b392596f034
Version 1.0
spacer spacer