CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer PIRT Squad

Fried Phish(TM)

Phishing Incident Reporting and Termination (PIRT) Squad(SM)

A global phishing termination and intelligence system operated by CastleCops. Become a PIRT Squad terminator by reporting phish today!

[ How-To / FAQ ]

Fried Phish -> Confirmed Phish | Terminated Phish


status: confirmed phish

HTTP Response
03 Dec, 2008
08:20:26
HTTP/1.1 502 Bad Gateway
ID986103 (termination link)
TitleScotia Bank
Entry
PIRT Squad
Reporter
Submitted anonymously thru the web, or sent to pirt (at) castlecops (dot) com.
Timestamp06 Oct, 2008 @ 16:02:46
Topic ID227187 - Read/respond to PIRT commentary.
Handler Note:
06 Oct, 2008
16:17:25
LoPhatPhuud:
This Phish was active at the time of this report.
Handler Note:
06 Oct, 2008
16:17:44
LoPhatPhuud: View CIDR AS31100 Report: http://www.cidr-report.org/cgi-bin/as-report?as=31100

"31100 | DE | ripencc | 2004-02-26 | SYNNET-WE synergetic AG"

Handler Note:
06 Oct, 2008
16:17:54
LoPhatPhuud: Extended information for AS31100:
State/Province:
Country: de
Responsible Domain: synergetic.de
Abuse Email: aygan@synergetic.de
Handler Note:
06 Oct, 2008
16:42:00
LoPhatPhuud: URL http://scotlabank.tk/
redirects to
URL http://www.ipzp.net/.www.scotiabank.com/
Handler Note:
06 Oct, 2008
16:43:13
LoPhatPhuud: Source for URL http://scotlabank.tk/


<html>
<head>
<title>scotlabank.tk</title>
<meta name="description" content="scotlabank.tk">
<meta name="keywords" content="scotlabank.tk">
</head>
<frameset rows="*,0" framespacing="0" border="0" frameborder="NO">
<frame src="http://www.ipzp.net/.www.scotiabank.com/" name="dot_tk_frame_content" scrolling="auto" noresize>
</frameset>
<noframes>
<body>
</body>
</noframes>

</html>
Handler Note:
06 Oct, 2008
16:43:14
LoPhatPhuud: View CIDR AS34248 Report: http://www.cidr-report.org/cgi-bin/as-report?as=34248

"34248 | UA | ripencc | 2004-11-26 | VELTON-TC-AS Company group _Velton.Telecom_"

Handler Note:
06 Oct, 2008
16:43:24
LoPhatPhuud: Extended information for AS34248:
State/Province:
Country: ua
Responsible Domain: rocket.kharkov.ua
Abuse Email: rvv@rocket.kharkov.ua
Handler Note:
06 Oct, 2008
16:45:02
LoPhatPhuud: Generated and sent email phish alert to respective parties.
Fetched URLs

Report for at 06 Oct, 2008 @ 16:17:25


fetched page

thumbnail
at 06 Oct, 2008 @ 16:30:21
MD5 Fingerprint: 3b06ed07d9c753bd364114db74d74833
SHA1 Fingerprint: 19144e09e9f1499e533846034be4cef27fa66b2a

fetched page

thumbnail
at 06 Oct, 2008 @ 16:39:24
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709
Version 1.0
spacer spacer