Donation/Premium
Survey
Fried Phish(TM)
Phishing Incident Reporting and Termination (PIRT) Squad(SM)
A global phishing termination and intelligence system operated by CastleCops.
Become a PIRT Squad terminator by reporting phish today!
[ How-To / FAQ ]
Fried Phish -> Confirmed Phish |
Terminated Phish
Select Report Range -------------------- 0-49 50-99 100-149 150-199 200-249 250-299 300-349 350-399 400-449 450-499 500-549 550-599 600-649 650-699 700-749 750-799 800-849 850-899 900-949
status: terminated HTTP Response 08 Jul, 2008 06:23:16 HTTP/1.1 200 OK
ID 887149 (termination link) Title Bank of Montreal, Lloyds TSB, Regions Bank, Royal Bank of Scotland, Scotia Bank, Wachovia, Wells Fargo, Yorkshire Bank Entry PIRT Squad Reporter Submitted anonymously thru the web, or sent to pirt (at) castlecops (dot) com. Timestamp 05 Jul, 2008 @ 06:00:24 Topic ID 224684 - Read/respond to PIRT commentary.Handler Note: 06 Jul, 2008 00:34:17 downie : Consumed following related reports:
[886330] http://www.infofiesta.com/web/administrator/includes/pcl/update.htm
[887360] http://infofiesta.com/web/components/com_magazine/bmo.php
[887383] http://infofiesta.com/web/html/components/com_poll/index.htm
Handler Note: 06 Jul, 2008 00:37:06 downie : The URL accesses a Lloyds TSB phishing site, active at the time of investigation.
A page fetch was successful.
There is a WAchovia phish at
http://infofiesta.com/web/html/components/com_poll/index.htm
There is a BMO phish at
http://infofiesta.com/web/components/com_magazine/bmo.php
There is a Wells Fargo phish at
http://www.infofiesta.com/web/administrator/includes/pcl/update.htmHandler Note: 06 Jul, 2008 00:39:30 downie : View CIDR AS27823 Report: http://www.cidr-report.org/cgi-bin/as-report?as=27823
"27823 | AR | lacnic | 2006-05-12 | Dattatec.com"
Handler Note: 06 Jul, 2008 00:39:31 downie : Extended information for AS27823:
State/Province:
Country: ar
Responsible Domain: dattatec.com
Abuse Email: marketing@dattatec.com
Handler Note: 06 Jul, 2008 02:04:43 downie : Yorkshire Bank phish at
http://infofiesta.com/portal/components/com_zoom/lib/home.ybonline.co.uk/index.htmlHandler Note: 06 Jul, 2008 02:12:28 downie : Regions Bank phish at
http://infofiesta.com/web/editor/Login.htmHandler Note: 06 Jul, 2008 02:32:45 downie : Generated and sent email phish alert to respective parties.Handler Note: 06 Jul, 2008 15:49:33 downie : Royal Bank of Scotland phish at
http://infofiesta.com/web/language/cgi.phpHandler Note: 06 Jul, 2008 19:05:31 downie : Scotiabank phish at
http://infofiesta.com/portal/images/scotiaenliea.htmlHandler Note: 09 Jul, 2008 00:04:49 downie : Site offlineFetched URLs Slaves 886330 , 887360 , 887383 ,
Report for at 05 Jul, 2008 @ 06:23:10
whois at 05 Jul, 2008 @ 06:23:19whois at 06 Jul, 2008 @ 00:37:08
dig any at 05 Jul, 2008 @ 06:23:17
host at 05 Jul, 2008 @ 06:23:19host at 06 Jul, 2008 @ 00:37:08fetched page at 05 Jul, 2008 @ 06:23:14
MD5 Fingerprint : d94d874e8f5c655d795fe431d7944693
SHA1 Fingerprint : 6fc4106b0ff7f753a95f1e7477a6eaaa6cdd284c
fetched page at 06 Jul, 2008 @ 00:39:34
MD5 Fingerprint : d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint : da39a3ee5e6b4b0d3255bfef95601890afd80709
fetched page at 06 Jul, 2008 @ 00:42:18
MD5 Fingerprint : 6e404c7d6f9f1d30d0916ede4470166e
SHA1 Fingerprint : 6e6a9d66314e2051fe86c0aa1bcdc1d3961f3613
fetched page at 06 Jul, 2008 @ 00:43:40
MD5 Fingerprint : 8b02a06b2f1204311d13d6d30ae1dd40
SHA1 Fingerprint : 469a65869989227c57c19c0ceb179b190b56753d