CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 937
Comments: 25
block bottom
spacer spacer PIRT Squad

Fried Phish(TM)

Phishing Incident Reporting and Termination (PIRT) Squad(SM)

A global phishing termination and intelligence system operated by CastleCops. Become a PIRT Squad terminator by reporting phish today!

[ How-To / FAQ ]

Fried Phish -> Confirmed Phish | Terminated Phish


status: terminated

ID901103 (termination link)
TitleAbbey Bank, NatWest
Entry
PIRT Squad
Reporter
Submitted anonymously thru the web, or sent to pirt (at) castlecops (dot) com.
Timestamp20 Jul, 2008 @ 11:14:50
Topic ID - Read/respond to PIRT commentary.
Handler Note:
24 Jul, 2008
22:54:38
downie: The URL accesses an Abbey Bank phishing site, active at the time of investigation.
A page fetch was successful.
Handler Note:
24 Jul, 2008
23:37:55
downie: The URL accesses an Abbey Bank phishing site, active at the time of investigation.
A page fetch was successful.
Handler Note:
24 Jul, 2008
23:43:43
downie: View CIDR AS31034 Report: http://www.cidr-report.org/cgi-bin/as-report?as=31034

"31034 | IT | ripencc | 2004-02-12 | ARUBA-ASN Aruba.it Network"

Handler Note:
24 Jul, 2008
23:43:43
downie: Extended information for AS31034:
State/Province:
Country:
Responsible Domain: technorail.com
Abuse Email: abuse@technorail.com
Handler Note:
24 Jul, 2008
23:51:10
downie: NatWest phish at
http://host26-242-149-62.serverdedicati.aruba.it/.ssl/default.php?refererident=27E4D2DD44B97D7476C2847A740BF1E157154161c ookieid61587noscr-falseCookieCheck
Handler Note:
24 Jul, 2008
23:56:31
downie: Generated and sent email phish alert to respective parties.
Handler Note:
27 Jul, 2008
18:14:36
downie: Cannot connect
Fetched URLs

Report for at 24 Jul, 2008 @ 22:54:38


fetched page

at 24 Jul, 2008 @ 22:54:43
MD5 Fingerprint: f4bb12cdbf8c4d88d3e07d8c2842fdbe
SHA1 Fingerprint: 91037a1ffa542df500d8a6c625c13b925d8116b0

fetched page

at 24 Jul, 2008 @ 23:41:13
MD5 Fingerprint: f347d6f3c6723aa2170798530944e408
SHA1 Fingerprint: b83bcc09a2880f06709c9c99baceb5c2ee1fe147

fetched page

at 24 Jul, 2008 @ 23:51:12
MD5 Fingerprint: 15d1fd8c081e838a413e6398c894067b
SHA1 Fingerprint: b9f2c17d7745e0ced70022be239adc2620ef8485

fetched page

at 25 Jul, 2008 @ 00:12:50
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709
Version 1.0
spacer spacer