CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer PIRT Squad

Fried Phish(TM)

Phishing Incident Reporting and Termination (PIRT) Squad(SM)

A global phishing termination and intelligence system operated by CastleCops. Become a PIRT Squad terminator by reporting phish today!

[ How-To / FAQ ]

Fried Phish -> Confirmed Phish | Terminated Phish


status: terminated

HTTP Response
25 Oct, 2008
01:40:00
HTTP/1.1 404 Not Found
ID985618 (termination link)
TitleBank of America, HSBC
Entry
PIRT Squad
Reporter
Submitted anonymously thru the web, or sent to pirt (at) castlecops (dot) com.
Timestamp06 Oct, 2008 @ 07:20:10
Topic ID227211 - Read/respond to PIRT commentary.
Handler Note:
07 Oct, 2008
00:27:01
downie: Consumed following related reports:

[981709] http://mail.stephensonequipment.com/.www.bankofamerica.com/index.html
Handler Note:
07 Oct, 2008
00:31:10
downie: The URL accesses an HSBC phishing site, active at the time of investigation.
A page fetch was successful.
There is a Bank of America phish at
http://mail.stephensonequipment.com/.www.bankofamerica.com/index.html
Handler Note:
07 Oct, 2008
00:37:37
downie: View CIDR AS209 Report: http://www.cidr-report.org/cgi-bin/as-report?as=209

"209 | US | arin | 1998-11-13 | ASN-QWEST - Qwest Communications Corporation"

Handler Note:
07 Oct, 2008
00:37:38
downie: Extended information for AS209:
State/Province: va
Country: us
Responsible Domain: qwest.net
Abuse Email: abuse@qwest.net
Handler Note:
07 Oct, 2008
01:10:31
downie: Generated and sent email phish alert to respective parties.
Handler Note:
21 Oct, 2008
13:03:42
downie: Cannot connect
Fetched URLs
Slaves981709,

Report for at 07 Oct, 2008 @ 00:27:01


fetched page

thumbnail
at 07 Oct, 2008 @ 00:31:12
MD5 Fingerprint: c891a3280d47424ffeca937e4693cea7
SHA1 Fingerprint: 60db139ab092a850adcb6c3ff6509d82a56837c7

fetched page

thumbnail
at 07 Oct, 2008 @ 00:33:39
MD5 Fingerprint: b1c1baab7fabcffb9cd9a98e1d805b36
SHA1 Fingerprint: e404ec45a54bed81ba16ce18107b89b3ecc7fa72

fetched page

thumbnail
at 07 Oct, 2008 @ 00:39:49
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709

fetched page

thumbnail
at 07 Oct, 2008 @ 00:41:39
MD5 Fingerprint: 895fe8f2ba6db574a1786f69f34dd822
SHA1 Fingerprint: 3408a4d25021357363614cdc435b5a92ad069421

fetched page

thumbnail
at 07 Oct, 2008 @ 00:44:18
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709

fetched page

thumbnail
at 07 Oct, 2008 @ 00:45:12
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709

fetched page

thumbnail
at 07 Oct, 2008 @ 00:45:52
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709