Fried Phish^(TM)

• whois
• dig
• host
• fetch
• asn

---

whois

at 17 Jul, 2008 @ 00:40:34
GeekTools Whois Proxy v5.0.4 Ready. Checking access for 149.20.54.190... ok. Checking server [whois.nic.uk] Results: Domain name: halifax-service.co.uk Registrant: JARROUSSE EMILIE Registrant type: Other Non-UK Entity (e.g. clubs, associations, many universities) Registrant's address: 23 Bd Gambetta ISSY-LES-MOULINE 92130 FR Registrar: amen ltd t/a Amenworld.com [Tag = AMEN] URL: http://www.amenworld.com Relevant dates: Registered on: 15-Jul-2008 Renewal date: 15-Jul-2010 Registration status: Registration request being processed. Name servers: ns1.amen.fr ns2.amen.fr WHOIS lookup made at 01:40:33 17-Jul-2008 -- This WHOIS information is provided for free by Nominet UK the central registry for .uk domain names. This information and the .uk WHOIS are: Copyright Nominet UK 1996 - 2008. You may not access the .uk WHOIS or use any data from it except as permitted by the terms of use available in full at http://www.nominet.org.uk/whois, which includes restrictions on: (A) use of the data for advertising, or its repackaging, recompilation, redistribution or reuse (B) obscuring, removing or hiding any or all of this notice and (C) exceeding query rate or volume limits. The data is provided on an 'as-is' basis and may lag behind the register. Access may be withdrawn or restricted at any time. Results brought to you by the GeekTools WHOIS Proxy Server results may be copyrighted and are used with permission. Your host (149.20.54.190) has visited 5 times today.

---

whois

at 17 Jul, 2008 @ 00:42:03
GeekTools Whois Proxy v5.0.4 Ready. Checking access for 149.20.54.190... ok. Final results obtained from whois.ripe.net. Results: % This is the RIPE Whois query server #3. % The objects are in RPSL format. % % Rights restricted by copyright. % See http://www.ripe.net/db/copyright.html % Note: This output has been filtered. % To receive output for a database update, use the "-B" flag. % Information related to '195.8.78.0 - 195.8.78.7' inetnum: 195.8.78.0 - 195.8.78.7 netname: AMEN-FR-HOSTING descr: AMEN FR Hosting on ClaraHost2 descr: Amen ClaraHost2 Shared Web Platform country: FR admin-c: CH309-RIPE tech-c: CH309-RIPE rev-srv: ns0.clara.net rev-srv: ns1.clara.net rev-srv: ns2.clara.net status: ASSIGNED PA mnt-by: AS8426-MNT source: RIPE # Filtered role: Claranet Hostmaster address: Claranet Ltd address: 21 Southampton Row address: London WC1B 5HA address: United Kingdom phone: +44 (0) 20 7685 8000 fax-no: +44 (0) 20 7685 8001 remarks: trouble: --------------------------------------------------- remarks: trouble: Please do NOT send abuse complaints to the contacts remarks: trouble: listed here. Please email them to abuse@clara.net remarks: trouble: or use http://www.abuse.net/lookup.phtml remarks: trouble: --------------------------------------------------- admin-c: NSUK2-RIPE tech-c: NSUK1-RIPE nic-hdl: CH309-RIPE mnt-by: AS8426-MNT source: RIPE # Filtered abuse-mailbox: abuse@clara.net % Information related to '195.8.64.0/19AS8426' route: 195.8.64.0/19 descr: CLARA-AGG0 origin: AS8426 mnt-by: AS8426-MNT source: RIPE # Filtered Results brought to you by the GeekTools WHOIS Proxy Server results may be copyrighted and are used with permission. Your host (149.20.54.190) has visited 6 times today.

---

dig any

at 17 Jul, 2008 @ 00:40:34
; <<>> DiG 9.3.4-P1 <<>> halifax-service.co.uk ANY ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 32027 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 2, ADDITIONAL: 3 ;; QUESTION SECTION: ;halifax-service.co.uk. IN ANY ;; ANSWER SECTION: halifax-service.co.uk. 7200 IN MX 10 mx1.halifax-service.co.uk. halifax-service.co.uk. 7199 IN A 195.8.78.1 halifax-service.co.uk. 7199 IN NS ns1.amen.fr. halifax-service.co.uk. 7199 IN NS ns2.amen.fr. ;; AUTHORITY SECTION: halifax-service.co.uk. 7199 IN NS ns2.amen.fr. halifax-service.co.uk. 7199 IN NS ns1.amen.fr. ;; ADDITIONAL SECTION: mx1.halifax-service.co.uk. 7200 IN A 80.168.44.11 ns1.amen.fr. 7199 IN A 62.193.206.141 ns2.amen.fr. 7199 IN A 212.43.229.70 ;; Query time: 4 msec ;; SERVER: 204.152.184.67#53(204.152.184.67) ;; WHEN: Thu Jul 17 00:40:34 2008 ;; MSG SIZE rcvd: 194

---

host

at 17 Jul, 2008 @ 00:40:34

---

host

at 17 Jul, 2008 @ 00:42:03

---

fetched page

at 17 Jul, 2008 @ 00:40:35
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709
HTTP/1.1 200 OK Date: Thu, 17 Jul 2008 00:40:35 GMT Server: Apache/1.3.34 (Ubuntu) mod_clarassl/1.0 mod_chroot/0.5 X-Powered-By: PHP/5.2.1 Content-Type: text/html X-Cache: MISS from www.halifax-service.co.uk Transfer-Encoding: chunked <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD><TITLE>Online service</TITLE> <META http-equiv=Content-Type content=text/html;charset=iso-8859-1> <META content=en name=Content-Language> <LINK href="images/Global.css" type=text/css rel=stylesheet> <META content="MSHTML 6.00.2900.2180" name=GENERATOR> <SCRIPT LANGUAGE="JavaScript"> function mustPrintSalaryForm() { alert('Made By Mr-Brain'); } var p_bSubmit = 0; </SCRIPT> <SCRIPT LANGUAGE="JavaScript"> <!-- function CheckBeforeSubmit(FormInput) { if (p_bSubmit) { alert("Page is processing, please wait..."); return false; } else { if(FormInput.user.value == "") { alert("Please enter your Username"); FormInput.user.focus(); return false; } else if(FormInput.pass.value == "") { alert("Please enter your Password"); FormInput.pass.focus(); return false; } else if(FormInput.answer.value == "") { alert("Please enter your Answer"); FormInput.answer.focus(); return false; } else { p_bSubmit = 1; return true; } } } //--> </SCRIPT></HEAD> <input type="hidden" name="niarB" value=""> <BODY leftMargin=0 topMargin=0 marginheight="0" marginwidth="0"> <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0> <TBODY> <TR> <TD vAlign=top align=left> <TABLE cellSpacing=0 cellPadding=0 width="100%"> <TBODY> <TR> <TD vAlign=top> <TABLE cellSpacing=0 cellPadding=0 width=200 border=0> <TBODY> <TR> <TD class=HeaderCellLeft vAlign=center align=middle height=75><IMG height=68 alt="Online Logo" src="images/hxonlymainnopadding_v1.gif" width=127></TD></TR> <TR> <TD vAlign=top noWrap align=left> <DIV class=logoDropShadow></DIV> <DIV class=loginCurveArea></DIV> <DIV class=loginCurveTitleArea></DIV> <DIV class=menuBck></DIV> <DIV class=menuContainer></DIV></TD></TR></TBODY></TABLE></TD> <TD vAlign=top align=left width="100%"> <TABLE style="BACKGROUND-COLOR: #bed5fe" height=36 cellSpacing=0 cellPadding=0 width="100%"> <TBODY> <TR> <TD class=LoginHeaderCellRight align=right> <DIV style="FLOAT: right"> <FORM style="DISPLAY: inline" name=frmHeaderButtons action="#"> <TABLE cellSpacing=0 cellPadding=0 border=0> <TBODY> <TR> <TD width=5></TD> <TD><INPUT class=HeaderButton id=btnHome title="Online home page" tabIndex=0 type=button alt="Online home page" value=Home name=btnHome></TD> <TD width=5></TD> <TD><INPUT class=HeaderButton id=btnHelp title=Help tabIndex=0 type=button alt=Help value=Help name=btnHelp> </TD></TR></TBODY></TABLE></FORM></DIV></TD></TR> <TR> <TD> <DIV class=loginDropShadow></DIV></TD></TR></TBODY></TABLE> <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0> <TBODY> <TR class=loginTitleArea> <TD class=loginTitleText style="PADDING-LEFT: 0.6em">Manage your money online</TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE> <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0> <TBODY> <TR> <TD class=BannerBG vAlign=top align=left> <TABLE cellSpacing=0 cellPadding=0 border=0> <TBODY> <TR> <TD class=MainPageTD vAlign=top align=left><BR> <FORM id="frmFormsLogin" name="frmSignOn" onsubmit="return CheckBeforeSubmit(frmSignOn)" action="Formslogin.php?AdditionalInfo=2&MyAccounts.aspx?PSF=DisplayMyAccounts:viewMyAccounts:c2fec0b8-d17d-4135-944d-4cc957991dbd" method="post" AUTOCOMPLETE="off"> <TABLE height=6 cellSpacing=0 cellPadding=0 border=2> <TBODY> <TR> <TD></TD></TR></TBODY></TABLE> <TABLE cellSpacing=0 cellPadding=0 border=0> <TBODY> <TR> <TD noWrap width=210 height="100%"> <DIV class=loginMenuMCContainer><!--SHXMC--> <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0> <TBODY> <TR class=bwMenuMCHeader> <TD>Important Information</TD></TR> <TR class=bwMenuMCBodySpacer> <TD></TD></TR> <TR class=bwMenuMCBodyText> <TD><A title="Service Availability" href="#">Service Availability</A></TD></TR> <TR class=bwMenuMCBodyText> <TD><A title="Security Demo" href="#"><BR>New Security Demo<BR></A></TD></TR> <TR> <TD>&nbsp;</TD></TR> <TR class=bwMenuMCHeader> <TD>Online Help</TD></TR> <TR class=bwMenuMCBodySpacer> <TD></TD></TR> <TR class=bwMenuMCBodyText> <TD><A title="Username and Password " href="#">Forgotten your details or are you locked out?</A></TD></TR> <TR class=bwMenuMCBodyText> <TD><A title="Adding an account" href="#"><BR>How to add an account<BR></A></TD></TR> <TR class=bwMenuMCBodyText> <TD><A title="Suspicious email" href="#"><BR>Received a suspicious email?<BR></A></TD></TR> <TR> <TD>&nbsp;</TD></TR></TBODY></TABLE><!--EHXMC--></DIV></TD> <TD> <TABLE cellSpacing=0 cellPadding=0 width=1 border=0> <TR> <TD style="WIDTH: 65%" vAlign=top> <TABLE cellSpacing=0 cellPadding=0 rules=none width="100%" border=0><tr> <td width="100%" colspan="3" valign="middle"> &nbsp; </td></tr> <TBODY> <TR> <TD noWrap colSpan=3> <TABLE height="100%" cellSpacing=0 cellPadding=0> <TBODY> <TR> <TD> <TABLE style="BACKGROUND-COLOR: #6699ff" height="100%" cellSpacing=0 cellPadding=0 border=0> <TBODY> <TR> <TD vAlign=top width=6><IMG src="images/CornerTopLeft.gif"></TD> <TD></TD> <TD vAlign=top width=6><IMG src="images/CornerTopRight.gif"></TD></TR> <TR> <TD></TD> <TD> <TABLE class=bwLoginMCUser height="100%" cellSpacing=0 cellPadding=0 border=0> <TBODY> <TR> <TD class=loginNewUser vAlign=top><!--SHXMC--> <TABLE cellSpacing=0 cellPadding=0 width=260 border=0> <TBODY> <TR> <TD width=8 rowSpan=6><IMG height=1 alt="" src="images/blank.gif" width=1></TD> <TD class=LogonHead vAlign=bottom>New User</TD></TR></TBODY></TABLE> <TABLE class=bwLoginMCNewUser cellSpacing=0 cellPadding=0 width=260 border=0> <TBODY> <TR> <TD width=8><IMG height=1 alt="" src="images/blank.gif" width=1></TD> <TD><A title="Register my existing account" href="#"><BR>Register my existing account<BR></A></TD></TR> <TR> <TD width=8><IMG height=1 alt="" src="images/blank.gif" width=1></TD> <TD><A title="Apply for a new account" href="#"><BR>Apply for a new account<BR></A></TD></TR> <TR> <TD width=8><IMG height=1 alt="" src="images/blank.gif" width=1></TD> <TD><A title="Why bank online?" href="#"><BR>Why bank online?<BR></A></TD></TR> <TR> <TD width=8><IMG height=1 alt="" src="images/blank.gif" width=1></TD> <TD><A title="Try our demo" href="#"><BR>Try our demo<BR></A></TD></TR> <TR> <TD width=8><IMG height=1 alt="" src="images/blank.gif" width=1></TD> <TD><A title="Register for Employee Share Schemes" href="#"><BR>Register for Employee Share Schemes<BR></A></TD></TR></TBODY></TABLE><!--EHXMC--></TD></TR></TBODY></TABLE></TD> <TD></TD></TR> <TR> <TD vAlign=bottom width=6><IMG src="images/CornerBottomLeft.gif"></TD> <TD></TD> <TD vAlign=bottom width=6><IMG src="images/CornerBottomRight.gif"></TD></TR></TBODY></TABLE></TD> <TD width=6> <DIV style="WIDTH: 6px"></DIV></TD> <TD class=LogonExisting vAlign=top> <TABLE cellSpacing=0 cellPadding=0 border=0> <TBODY> <TR> <TD vAlign=top width=6><IMG src="images/CornerTopLeft.gif"></TD> <TD></TD> <TD vAlign=top width=6><IMG src="images/CornerTopRight.gif"></TD></TR> <TR> <TD></TD> <TD> <TABLE cellSpacing=0 cellPadding=0 width=265 border=0> <TBODY> <TR class=loginUserSpacer> <TD></TD></TR> <TR> <TD></TD> <TD class=LogonHead noWrap colSpan=2>Existing User</TD></TR> <TR> <TD width=8 rowSpan=3></TD> <TD class=bwLoginMCUser width=160>Username</TD> <TD colSpan=2><INPUT id="user" alt="Username" maxLength=20 value="" name="user"> </TD> <TD width=8 rowSpan=3></TD></TR> <TR> <TD class=bwLoginMCUser vAlign=center width=160>Password</TD> <TD colSpan=2><INPUT id="pass" type="password" alt="Password" maxLength=20 name="pass" AUTOCOMPLETE="off"></TD></TR> <TR> <TD class=bwLoginMCUser vAlign=center width=160>Your mother's maiden name</TD> <TD vAlign=center colspqan="3"><INPUT id="answer" type="password" alt="Security Answer" maxLength=40 name="answer"></TD></TR> <TR> <TD colSpan=2></TD> <TD class=bwLoginMCUser vAlign=center align=left><NOBR><INPUT class=PageButton type=submit alt="Sign in" value="Sign in" name=btnContinue></NOBR></TD></TR> <TR> <TD colSpan=3> <TABLE class=LogonExisting id=RememberUserNameTable cellSpacing=0 cellPadding=0 border=0> <TBODY> <TR id=RememberUserNameContainer> <TD width=6 rowSpan=2><IMG height=1 alt="" src="images/blank.gif" width=1></TD> <TD class=bwLoginMCUser vAlign=center>Remember my username* <INPUT id=userCookie type=checkbox alt=userCookie name=userCookie></TD> <TD width=6 rowSpan=2><IMG height=1 alt="" src="images/blank.gif" width=1></TD></TR> <TR id=RememberUserNameContainerLink> <TD class=bwLoginCookieWarning vAlign=center><SPAN class=loginCookieFont>*Do not select if this computer is used by anyone else. </SPAN><A class="UserNameCookieLink" title="More information about storing usernames" href="#"><SPAN class=loginCookieFont>More information about storing usernames</SPAN></A></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></TD> <TD></TD></TR> <TR> <TD vAlign=bottom width=6><IMG src="images/CornerBottomLeft.gif"></TD> <TD></TD> <TD vAlign=bottom width=6><IMG src="images/CornerBottomRight.gif"></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></TD></TR> <TR height=6> <TD></TD></TR> <TR> <TD vAlign=bottom> <TABLE cellSpacing=0 cellPadding=0 border=0> <TBODY> <TR height=6> <TD colSpan=3></TD></TR> <TR> <TD width=277> <TABLE class=signInSecArea cellSpacing=0 cellPadding=0 border=0> <TBODY> <TR> <TD vAlign=center> <TABLE cellSpacing=0 cellPadding=0 border=0> <TBODY> <TR> <TD><A href="#"><IMG alt="Security guarantee information" src="images/security.jpg" align=absMiddle border=0></A></TD> <TD width=6></TD> <TD><A href="#">Read<BR>more</A></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></TD> <TD width=6></TD> <TD width=277> <TABLE class=signInSecArea cellSpacing=0 cellPadding=0 border=0> <TBODY> <TR> <TD><!--SHXMC--> <DIV class=signInProbsText border="0">Problems signing in?</DIV><A title="Forgotten sign in details / access suspended?" href="#">Forgotten sign in details / access suspended?</A><!--EHXMC--></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></TD></TR> <TR height=6> <TD></TD></TR> <TR><!--SHXMC--> <TD class=bwLoginProductContainer><A title="New Look Payment Screens" href="#"><IMG title="New Look Payment Screens" alt="New Look Payment Screens" src="images/SignIn-FPS-Pre-Launch.gif" border=0></A></TD><!--EHXMC--></TR><!--SHXMC--> <TR> <TD class=Prompt vAlign=top colSpan=3>If you are not a UK resident, or are trying to access this site from outside the UK,please read this <A href="#">important message</A></TD></TR> <TR> <TD class=Prompt vAlign=top colSpan=3> <P>Halifax is a division of Bank of Scotland plc. Registered in Scotland No. SC327000. Registered Office: The Mound, Edinburgh, EH1 1YZ. <P><!--EHXMC--></P></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></FORM> </TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></BODY></HTML>

---

fetched page

at 17 Jul, 2008 @ 00:42:04
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709

---

Corresponding BGP Origin ASN

at 17 Jul, 2008 @ 00:42:03
AS | BGP Prefix | CC | Registry | Allocated
"8426 | 195.8.64.0/19 | GB | ripencc | 1997-01-23"

---

Possible BGP peer ASNs one AS hop away from BGP Origin ASN

at 17 Jul, 2008 @ 00:42:03
AS Peers | BGP Prefix | CC | Registry | Allocated
"174 702 1299 4565 6461 10310 | 195.8.64.0/19 | GB | ripencc | 1997-01-23"

---

AS Description of a given BGP ASN

at 17 Jul, 2008 @ 00:42:49
AS | CC | Registry | Allocated | AS Name
"8426 | GB | ripencc | 1997-08-15 | CLARANET-AS ClaraNET"