CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer PIRT Squad

Fried Phish(TM)

Phishing Incident Reporting and Termination (PIRT) Squad(SM)

A global phishing termination and intelligence system operated by CastleCops. Become a PIRT Squad terminator by reporting phish today!

[ How-To / FAQ ]

Fried Phish -> Confirmed Phish | Terminated Phish


status: confirmed phish

HTTP Response
20 Nov, 2008
09:24:33
HTTP/1.1 200 OK
ID845515 (termination link)
TitlePayPal
Entry
PIRT Squad
Reporter
Submitted anonymously thru the web, or sent to pirt (at) castlecops (dot) com.
Timestamp28 May, 2008 @ 17:43:53
Topic ID222708 - Read/respond to PIRT commentary.
Handler Note:
28 May, 2008
21:53:59
LoPhatPhuud: Consumed following related reports:

[844693] http://www.eletrizando.com/services.paypal/
[844799] http://www.eletrizando.com/services.paypal/?cmd=3D_login-run
[844904] http://www.eletrizando.com/paypal.online/?cmd=_login-run
[845079] http://www.eletrizando.com/services.paypal/?cmd=_login-run
[845203] http://www.eletrizando.com/services.paypal/?cmd=3D_login-run=22
[845278] http://www.eletrizando.com/paypal.online/?cmd=3D_login-run
[845284] http://www.eletrizando.com/paypalservices/?cmd=3D_login-run
[845328] http://www.eletrizando.com/paypal.online/?cmd=3D_login-run=22
[845479] http://www.eletrizando.com/services.paypal/webscr.htm?cmd=_profile-update
[845480] http://www.eletrizando.com/paypalservices/
[845481] http://www.eletrizando.com/paypal.online/
[845514] http://eletrizando.com/eletrizando/services.paypal/
[845605] http://www.eletrizando.com/services.paypal/?cmd=3D_login-run=20
[845606] http://www.eletrizando.com/services.paypal/?cmd=3D_login-run)=20
[845607] http://www.eletrizando.com/services.paypal/?cmd=3D_login-run)
Handler Note:
28 May, 2008
21:54:59
LoPhatPhuud:
This Phish was active at the time of this report.
Handler Note:
28 May, 2008
21:57:59
LoPhatPhuud: View CIDR AS21844 Report: http://www.cidr-report.org/cgi-bin/as-report?as=21844

"21844 | US | arin | 2001-06-29 | THEPLANET-AS - ThePlanet.com Internet Services, Inc."

Handler Note:
28 May, 2008
21:57:59
LoPhatPhuud: Extended information for AS21844:
State/Province: tx
Country: us
Responsible Domain: theplanet.com
Abuse Email: abuse@theplanet.com
Handler Note:
28 May, 2008
22:00:17
LoPhatPhuud: Generated and sent email phish alert to respective parties.
Fetched URLs
Slaves844693, 844799, 844904, 845079, 845203, 845278, 845284, 845328, 845479, 845480, 845481, 845514, 845605, 845606, 845607,

Report for at 28 May, 2008 @ 18:46:25


fetched page

at 28 May, 2008 @ 18:46:30
MD5 Fingerprint: 7d747588868ada90d5438d68984af4e4
SHA1 Fingerprint: 0b859ebaec6999ae8fe59d32822bb7936810ff3a

fetched page

at 28 May, 2008 @ 21:55:19
MD5 Fingerprint: 7d747588868ada90d5438d68984af4e4
SHA1 Fingerprint: 0b859ebaec6999ae8fe59d32822bb7936810ff3a

fetched page

at 28 May, 2008 @ 21:57:59
MD5 Fingerprint: 7d747588868ada90d5438d68984af4e4
SHA1 Fingerprint: 0b859ebaec6999ae8fe59d32822bb7936810ff3a

fetched page

at 28 May, 2008 @ 21:58:32
MD5 Fingerprint: d732a34c59b1054899c92177ba8a8f16
SHA1 Fingerprint: 23fb3ee02c031766028c591c586c633835b1a839