CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 949
Comments: 28
block bottom
spacer spacer PIRT Squad

Fried Phish(TM)

Phishing Incident Reporting and Termination (PIRT) Squad(SM)

A global phishing termination and intelligence system operated by CastleCops. Become a PIRT Squad terminator by reporting phish today!

[ How-To / FAQ ]

Fried Phish -> Confirmed Phish | Terminated Phish


status: terminated

HTTP Response
10 May, 2008
14:40:38
HTTP/1.1 200 OK
ID822839 (termination link)
TitleeBay
Entry
PIRT Squad
Reporter
Submitted anonymously thru the web, or sent to pirt (at) castlecops (dot) com.
Timestamp10 May, 2008 @ 14:39:11
Topic ID221520 - Read/respond to PIRT commentary.
Handler Note:
10 May, 2008
17:30:02
s0tet: Consumed following related reports:

[822945] http://signin.ebay.com.ws.ebayisapi.dll.signin.usingssl.yes.pagetype.siteid.copartnerid.jkhasduiqeywsmnncbiutrasddghrywa sddpoiw.sid.kywonderful.com/~braitfe/webs/components/com_fireboard/db/index.php?SignIn=1&co_partnerId=2&siteid=0 &ru=&pp=pass&customerid=&pageType=708XeMWZllWXS3AlBXVShqAhQRfhgTDrf=https://signin.ebay.com/ws/eBayISAPI .dll?SignIn&UsingSSL=1&pUserId=&co_partnerId=2&siteid=0&ru=&pp=&pageType=708&MfcISAPICom mand=ConfirmRegistration
Handler Note:
10 May, 2008
17:36:36
s0tet: View CIDR AS174 Report: http://www.cidr-report.org/cgi-bin/as-report?as=174

"174 | US | arin | 1996-05-16 | COGENT Cogent/PSI"

Handler Note:
10 May, 2008
17:36:39
s0tet: Extended information for AS174:
State/Province: dc
Country: us
Responsible Domain: cogentco.com
Abuse Email: abuse@cogentco.com
Handler Note:
10 May, 2008
17:53:41
s0tet: Domain: kywonderful.com appears to be purchased fraudulently through Spot Domain (domainsite.com) for eBay phishing purposes.
Handler Note:
10 May, 2008
17:57:47
s0tet: Generated and sent email phish alert to respective parties.
Handler Note:
13 May, 2008
01:40:00
s0tet: domain quickly disabled.
Fetched URLs
Slaves822945,

Report for at 10 May, 2008 @ 14:40:38


fetched page

at 10 May, 2008 @ 14:41:05
MD5 Fingerprint: 60b014b30f087b6488dae7a2694077b2
SHA1 Fingerprint: 503a4b37bfb06f0ce28f32ea54a44bdf7ee90abf

fetched page

at 10 May, 2008 @ 17:38:41
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709
Version 1.0
spacer spacer