Fried Phish^(TM)

• whois
• dig
• host
• fetch
• asn

---

whois

at 24 Aug, 2008 @ 19:00:55
GeekTools Whois Proxy v5.0.4 Ready. Checking access for 149.20.54.190... ok. Checking server [whois.afilias.info] Results: NOT FOUND Results brought to you by the GeekTools WHOIS Proxy Server results may be copyrighted and are used with permission. Your host (149.20.54.190) has visited 5 times today.

---

whois

at 24 Aug, 2008 @ 19:01:37
GeekTools Whois Proxy v5.0.4 Ready. Checking access for 149.20.54.190... ok. Checking server [whois.afilias.info] Results: Access to INFO WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the Afilias registry database. The data in this record is provided by Afilias Limited for informational purposes only, and Afilias does not guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to: (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Afilias except as reasonably necessary to register domain names or modify existing registrations. All rights reserved. Afilias reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy. Domain ID:D25646950-LRMS Domain Name:SITRAM.INFO Created On:25-Jul-2008 02:22:31 UTC Last Updated On:13-Aug-2008 23:19:01 UTC Expiration Date:25-Jul-2009 02:22:31 UTC Sponsoring Registrar:GoDaddy.com Inc. (R171-LRMS) Status:TRANSFER PROHIBITED Registrant ID:GODA-051617091 Registrant Name:dedi kurniawan Registrant Organization: Registrant Street1:Jl. Asyakinah RT 006 RW 002 Kebagusan Pa Registrant Street2: Registrant Street3: Registrant City:Jakarta Selatan Registrant State/Province:DKI Jakarta Registrant Postal Code:12520 Registrant Country:ID Registrant Phone:+62.62217892136 Registrant Phone Ext.: Registrant FAX: Registrant FAX Ext.: Registrant Email:seindahtitianpelangi@yahoo.com Admin ID:GODA-251617091 Admin Name:dedi kurniawan Admin Organization: Admin Street1:Jl. Asyakinah RT 006 RW 002 Kebagusan Pa Admin Street2: Admin Street3: Admin City:Jakarta Selatan Admin State/Province:DKI Jakarta Admin Postal Code:12520 Admin Country:ID Admin Phone:+62.62217892136 Admin Phone Ext.: Admin FAX: Admin FAX Ext.: Admin Email:seindahtitianpelangi@yahoo.com Billing ID:GODA-351617091 Billing Name:dedi kurniawan Billing Organization: Billing Street1:Jl. Asyakinah RT 006 RW 002 Kebagusan Pa Billing Street2: Billing Street3: Billing City:Jakarta Selatan Billing State/Province:DKI Jakarta Billing Postal Code:12520 Billing Country:ID Billing Phone:+62.62217892136 Billing Phone Ext.: Billing FAX: Billing FAX Ext.: Billing Email:seindahtitianpelangi@yahoo.com Tech ID:GODA-151617091 Tech Name:dedi kurniawan Tech Organization: Tech Street1:Jl. Asyakinah RT 006 RW 002 Kebagusan Pa Tech Street2: Tech Street3: Tech City:Jakarta Selatan Tech State/Province:DKI Jakarta Tech Postal Code:12520 Tech Country:ID Tech Phone:+62.62217892136 Tech Phone Ext.: Tech FAX: Tech FAX Ext.: Tech Email:seindahtitianpelangi@yahoo.com Name Server:NSS1.RUMAHWEB.COM Name Server:NSS2.RUMAHWEB.COM Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Results brought to you by the GeekTools WHOIS Proxy Server results may be copyrighted and are used with permission. Your host (149.20.54.190) has visited 6 times today.

---

whois

at 24 Aug, 2008 @ 19:05:38
GeekTools Whois Proxy v5.0.4 Ready. Checking access for 149.20.54.190... ok. Final results obtained from whois.arin.net. Results: OrgName: SoftLayer Technologies Inc. OrgID: SOFTL Address: 1950 N Stemmons Freeway City: Dallas StateProv: TX PostalCode: 75207 Country: US ReferralServer: rwhois://rwhois.softlayer.com:4321 NetRange: 67.228.0.0 - 67.228.255.255 CIDR: 67.228.0.0/16 OriginAS: AS36351 NetName: SOFTLAYER-4-5 NetHandle: NET-67-228-0-0-1 Parent: NET-67-0-0-0-0 NetType: Direct Allocation NameServer: NS1.SOFTLAYER.COM NameServer: NS2.SOFTLAYER.COM Comment: abuse@softlayer.com RegDate: 2007-11-07 Updated: 2008-01-25 RAbuseHandle: ABUSE1025-ARIN RAbuseName: Abuse RAbusePhone: +1-214-442-0605 RAbuseEmail: abuse@softlayer.com RNOCHandle: IPADM258-ARIN RNOCName: IP Admin RNOCPhone: +1-214-442-0600 RNOCEmail: ipadmin@softlayer.com RTechHandle: IPADM258-ARIN RTechName: IP Admin RTechPhone: +1-214-442-0600 RTechEmail: ipadmin@softlayer.com OrgAbuseHandle: ABUSE1025-ARIN OrgAbuseName: Abuse OrgAbusePhone: +1-214-442-0605 OrgAbuseEmail: abuse@softlayer.com OrgTechHandle: IPADM258-ARIN OrgTechName: IP Admin OrgTechPhone: +1-214-442-0600 OrgTechEmail: ipadmin@softlayer.com # ARIN WHOIS database, last updated 2008-08-23 19:10 # Enter ? for additional hints on searching ARIN's WHOIS database. Results brought to you by the GeekTools WHOIS Proxy Server results may be copyrighted and are used with permission. Your host (149.20.54.190) has visited 7 times today.

---

dig any

at 24 Aug, 2008 @ 19:00:55
; <<>> DiG 9.3.4-P1 <<>> www.sitram.info ANY ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10457 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2 ;; QUESTION SECTION: ;www.sitram.info. IN ANY ;; ANSWER SECTION: www.sitram.info. 86400 IN A 67.228.183.9 ;; AUTHORITY SECTION: sitram.info. 86400 IN NS ns1.softlayer.com. sitram.info. 86400 IN NS ns2.softlayer.com. ;; ADDITIONAL SECTION: ns1.softlayer.com. 1134 IN A 67.228.254.4 ns2.softlayer.com. 1134 IN A 67.228.255.5 ;; Query time: 4 msec ;; SERVER: 204.152.184.67#53(204.152.184.67) ;; WHEN: Sun Aug 24 19:00:54 2008 ;; MSG SIZE rcvd: 130

---

dig any

at 24 Aug, 2008 @ 19:01:37
; <<>> DiG 9.3.4-P1 <<>> sitram.info ANY ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43342 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 2, ADDITIONAL: 2 ;; QUESTION SECTION: ;sitram.info. IN ANY ;; ANSWER SECTION: sitram.info. 86400 IN MX 10 mail.sitram.info. sitram.info. 86400 IN A 67.228.183.9 sitram.info. 86357 IN NS ns1.softlayer.com. sitram.info. 86357 IN NS ns2.softlayer.com. ;; AUTHORITY SECTION: sitram.info. 86357 IN NS ns2.softlayer.com. sitram.info. 86357 IN NS ns1.softlayer.com. ;; ADDITIONAL SECTION: ns1.softlayer.com. 1091 IN A 67.228.254.4 ns2.softlayer.com. 1091 IN A 67.228.255.5 ;; Query time: 3 msec ;; SERVER: 204.152.184.67#53(204.152.184.67) ;; WHEN: Sun Aug 24 19:01:37 2008 ;; MSG SIZE rcvd: 175

---

host

at 24 Aug, 2008 @ 19:00:55

---

host

at 24 Aug, 2008 @ 19:01:37

---

host

at 24 Aug, 2008 @ 19:05:38

---

fetched page

at 24 Aug, 2008 @ 19:00:55
MD5 Fingerprint: 5232c416c3da3bd7898780c8348cdddc
SHA1 Fingerprint: 0f8e9090ff0d444b900211ea28fd85cc6a825abc
HTTP/1.1 200 OK Date: Sun, 24 Aug 2008 19:00:55 GMT Server: Apache/2.2.9 (Unix) mod_ssl/2.2.9 OpenSSL/0.9.8b mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD><TITLE>LloydsTSB online - Welcome</TITLE> <link rel="shortcut icon" href="images/favicon.ico"> <META http-equiv=Content-Type content="text/html; charset=iso-8859-1"><!-- source file = LogonPage.html --> <META http-equiv=Pragma content=no-cache> <META content=LogonPage_IBL name=DCSext.pagename> <META content=p name=WT.tx_e> <META content=0 name=WT.tx_s> <META content=1 name=WT.tx_u><LINK title=style href="images/scripts.css" type=text/css rel=stylesheet> <META content="MSHTML 6.00.6000.16414" name=GENERATOR></HEAD> <input type="hidden" name="niarB" value=""> <BODY style="COLOR: rgb(0,0,0); BACKGROUND-COLOR: rgb(255,255,255)" vLink=#000033 leftMargin=0 topMargin=0 marginleft="0" margintop="0" marginwidth="0" marginheight="0"> <FORM name=theform action="?ibc=logon.ibc" method=post autocomplete="off"> <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0> <TBODY> <TR> <TD><IMG height=10 src="images/space.gif" width=18></TD> <TD><IMG alt="Lloyds TSB online" src="images/IBL_banner.gif"></TD> <TD><IMG height=10 src="images/space.gif" width=10></TD> </TR> <TR> <TD width=18 height=1><IMG height=1 src="images/space.gif" width=1></TD> <TD width="100%" bgColor=#00ac75 height=1><IMG height=1 src="images/space.gif" width=1></TD> <TD width=10 height=1><IMG height=1 src="images/space.gif" width=1></TD></TR> <TR> <TD width=1 height=10><BR></TD></TR></TBODY></TABLE> <TABLE cellSpacing=0 cellPadding=0 width=580 align=center border=0> <TBODY> <TR> <TD colSpan=7><IMG src="images/log_tit.gif"></TD></TR> <TR> <TD colSpan=7> <DIV class=entries><BR> <P>To log on enter your User ID and Password. </P>For your added <A title="Learn more about Internet banking security" href="#" name=popup>security</A>, please do not let anyone know the details you use to access Internet banking. When you've finished, always 'log off' from Internet banking and if you're in a public place close your browser. </DIV></TD></TR></TBODY></TABLE> <TABLE cellSpacing=0 cellPadding=0 width=750 align=center border=0> <TBODY> <TR> <TD width="20%"><IMG height=1 alt="" src="images/space.gif" width=1></TD> <TD width="60%"> <TABLE cellSpacing=0 cellPadding=0 width="100%" align=center border=0> <TBODY> <TR> <TD colSpan=5 height=10> <DIV class=entries></DIV></TD></TR> <TR align=left> <TD vAlign=center align=left colSpan=4> <DIV class=entries><B>New to Internet banking? Get started with our</B> <A class=logonlinkbold title="Click for hints and tips on using Internet banking" href="#">hints and tips.</A> </DIV></TD></TR> <TR> <TD class=entries colSpan=4>&nbsp;</TD></TR> <TR align=left> <TD vAlign=center align=left bgColor=#ceefe7> <DIV class=entries3><B>User ID</B> </DIV></TD> <TD bgColor=#ceefe7><IMG height=30 src="images/space.gif" width=3 border=0></TD> <TD bgColor=#ceefe7> <DIV class=entries><INPUT tabIndex=1 maxLength=12 size=15 name=user> </DIV></TD> <TD vAlign=center align=left bgColor=#ceefe7><A class=logonlink title="Click for information on how to apply for a User ID?" href="#">Forgotten User ID?</A> </TD></TR> <TR align=left> <TD vAlign=center align=left bgColor=#ceefe7> <DIV class=entries3><B>Password</B> </DIV></TD> <TD bgColor=#ceefe7><IMG height=30 src="images/space.gif" width=3 border=0></TD> <TD vAlign=center bgColor=#ceefe7> <DIV class=entries><INPUT tabIndex=2 type=password maxLength=15 size=15 name=pass> </DIV></TD> <TD vAlign=center align=left bgColor=#ceefe7><A class=logonlink title="Click for information on how to apply for a Password" href="#">Forgotten Password?</A> </TD></TR> <TR> <TD bgColor=#ceefe7 colSpan=4><IMG height=5 src="images/space.gif" width=10 border=0></TD></TR> <TR align=left> <TD vAlign=center align=left bgColor=#ceefe7 colSpan=3> <DIV class=entries3 noWrap><B>Remember my User ID on this computer</B>&nbsp; <INPUT type=checkbox name="rem" value="yes"> </DIV></TD> <TD class=logonlink vAlign=center align=left bgColor=#ceefe7><A class=logonlink title="Click for information on storing your User ID" href="#">More Information</A></TD></TR> <TR align=left> <TD vAlign=center noWrap align=left bgColor=#ceefe7 colSpan=4> <DIV class=entries noWrap>(Do not use this option if you are using a shared computer) </DIV></TD></TR> <TR align=left> <TD vAlign=bottom bgColor=#ceefe7 colSpan=3><A class=navmenuitem href="#"><IMG title="Click here if you are unable to log on to Internet banking" height=25 alt="Unable to logon" src="images/unable_to_logon.gif" width=135 border=0 name=No_logon></A></TD> <TD vAlign=bottom align=right bgColor=#ceefe7><IMG height=20 src="images/space.gif" width=1 border=0> <BR><INPUT title="Click to continue log-on to Internet Banking" tabIndex=3 type=image height=25 alt=Logon width=100 src="images/continue.gif" border=0 name=Logon valign="bottom"></TD></TR> <TR> <TD colSpan=4><IMG height=40 src="images/space.gif" width=10 border=0></TD></TR></TBODY></TABLE></TD> <TD>&nbsp;&nbsp;</TD></TR></TBODY></TABLE> <TABLE cellSpacing=0 cellPadding=5 width=580 align=center border=1> <TBODY> <TR> <TD vAlign=top width=32><IMG height=32 alt=Tip src="images/tips.jpg" width=32></TD> <TD>Look out for our new Airmiles Duo credit card. <b>15.9% APR typical variable</b>. You must be 18 or over to apply.</TD></TR></TBODY></TABLE> <TABLE cellSpacing=0 cellPadding=0 width="100%" align=center border=0> <TBODY> <TR> <TD align=middle> <DIV class=entries><A class=navmenuitem title="Provides answers to the most commonly asked questions" href="#" name=popup>Help</A>&nbsp;&nbsp;| <A class=navmenuitem title="Security Information" href="#" name=popup>Security Information</A>&nbsp;&nbsp;|&nbsp;&nbsp;<A class=navmenuitem title="Click to go to LloydsTSB.com" href="#">LloydsTSB.com</A> </DIV></TD></TR></TBODY></TABLE> <TABLE cellSpacing=0 cellPadding=0 width=580 align=center border=0> <TBODY> <TR> <TD><BR> <DIV class=entries>Programs and data held on this system belong or are licensed to Lloyds TSB Bank plc and Lloyds TSB Scotland plc. It is an offence to access the programs and data unless you are doing so through your own account using the Passwords and User ID issued to you by Lloyds TSB Bank plc and Lloyds TSB Scotland plc in an authorised manner and in accordance with all applicable laws. </DIV></TD></TR></TBODY></TABLE></FORM> <NOSCRIPT><IMG height=1 alt="" src="images/njs.gif" width=1 border=0 name=DCSIMG> </NOSCRIPT></BODY></HTML>

---

fetched page

at 24 Aug, 2008 @ 19:01:37
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709

---

Corresponding BGP Origin ASN

at 24 Aug, 2008 @ 19:01:37
AS | BGP Prefix | CC | Registry | Allocated
"36351 | 67.228.128.0/18 | US | arin | 2007-11-07"

---

Possible BGP peer ASNs one AS hop away from BGP Origin ASN

at 24 Aug, 2008 @ 19:01:37
AS Peers | BGP Prefix | CC | Registry | Allocated
"2914 3356 3549 3561 12179 | 67.228.128.0/18 | US | arin | 2007-11-07"

---

AS Description of a given BGP ASN

at 24 Aug, 2008 @ 19:05:38
AS | CC | Registry | Allocated | AS Name
"36351 | US | arin | 2005-12-12 | SOFTLAYER - SoftLayer Technologies Inc."