Fried Phish^(TM)

• whois
• dig
• host
• fetch
• asn

---

whois

at 10 May, 2008 @ 18:44:58
GeekTools Whois Proxy v5.0.4 Ready. Checking access for 149.20.54.191... ok. Checking server [whois.nic.it] Results: ********************************************************************* * Please note that the following result could be a subgroup of * * the data contained in the database. * * * * Additional information can be visualized at: * * http://www.nic.it/cgi-bin/Whois/whois.cgi * ********************************************************************* Domain: areaserver.it Status: GRACE-PERIOD Created: 2000-11-20 00:00:00 Last Update: 2008-05-03 00:31:14 Expire Date: 2008-05-02 Registrant Name: Energ.it Spa ContactID: ENER85-ITNIC Address: Via Efisio Melis 26 Cagliari 09134 CA IT Created: 2007-03-01 10:33:13 Last Update: 2007-08-21 12:34:15 Admin Contact Name: Registrazione Domini ContactID: RD6951-ITNIC Organization: Energ.it Spa Address: via E. Melis, 26 Cagliari 09134 CA IT Created: 2007-02-27 00:00:00 Last Update: 2007-03-09 09:24:17 Technical Contacts Name: Registrazione Domini ContactID: RD6951-ITNIC Organization: Energ.it Spa Address: via E. Melis, 26 Cagliari 09134 CA IT Created: 2007-02-27 00:00:00 Last Update: 2007-03-09 09:24:17 Registrar Organization: Energ.it s.p.a. Name: ENERGIT-MNT Nameservers ns2.areaserver.it ns4.areaserver.it Results brought to you by the GeekTools WHOIS Proxy Server results may be copyrighted and are used with permission. Your host (149.20.54.191) has visited 273 times today.

---

whois

at 11 May, 2008 @ 02:19:57
GeekTools Whois Proxy v5.0.4 Ready. Checking access for 149.20.54.190... ok. Final results obtained from whois.ripe.net. Results: % This is the RIPE Whois query server #3. % The objects are in RPSL format. % % Rights restricted by copyright. % See http://www.ripe.net/db/copyright.html % Note: This output has been filtered. % To receive output for a database update, use the "-B" flag. % Information related to '80.241.166.0 - 80.241.175.255' inetnum: 80.241.166.0 - 80.241.175.255 netname: ENERGIT descr: ISP country: IT admin-c: MS14048-RIPE tech-c: FDV11-RIPE status: ASSIGNED PA mnt-by: ENERGIT-MNT mnt-lower: ENERGIT-MNT mnt-routes: ENERGIT-MNT source: RIPE # Filtered person: Manuela Stochino address: Via Efisio Melis, 26 address: 09134 Cagliari (CA) address: IT phone: +39 070 7521 fax-no: +39 070 752151 nic-hdl: MS14048-RIPE e-mail: ripe-adm@energit.it source: RIPE # Filtered person: Francesco De Vita address: Energ.it Spa address: Via Efisio Melis, 26 address: 09134 Cagliari (CA) address: IT phone: +39 070 7521 fax-no: +39 070 7521 51 nic-hdl: FDV11-RIPE e-mail: ripe-tech@energit.it source: RIPE # Filtered % Information related to '80.241.160.0/20AS28937' route: 80.241.160.0/20 descr: Energ.it S.p.A. origin: AS28937 mnt-by: ENERGIT-MNT source: RIPE # Filtered Results brought to you by the GeekTools WHOIS Proxy Server results may be copyrighted and are used with permission. Your host (149.20.54.190) has visited 14 times today.

---

dig any

at 10 May, 2008 @ 18:44:57
;aster.areaserver.it. IN A aster.areaserver.it. 86400 IN A 80.241.169.86 ;areaserver.it. IN A areaserver.it. 86400 IN A 80.241.160.13 ;areaserver.it. IN MX areaserver.it. 86400 IN MX 10 mail.areaserver.it. areaserver.it. 86400 IN MX 100 mail2.areaserver.it. ;areaserver.it. IN NS areaserver.it. 86399 IN NS ns2.areaserver.it. areaserver.it. 86399 IN NS ns4.areaserver.it. ;areaserver.it. IN SOA areaserver.it. 86400 IN SOA ns2.energ.it. root.mail.energ.it. 2008043000 86400 10800 604800 86400 ;areaserver.it. IN TXT ;aster.areaserver.it. IN CNAME ;aster.areaserver.it. IN PTR ;areaserver.it. IN KEY ;aster.areaserver.it. IN HINFO ;aster.areaserver.it. IN AAAA ;; Query time: 207 msec ;; SERVER: 204.152.187.111#53(204.152.187.111) ;; WHEN: Sat May 10 18:44:57 2008 ;; MSG SIZE rcvd: 37

---

host

at 10 May, 2008 @ 18:44:58

---

host

at 11 May, 2008 @ 02:19:57

---

fetched page

at 10 May, 2008 @ 18:44:54
MD5 Fingerprint: c73f28333e92f26eb7e0445838d55df8
SHA1 Fingerprint: 018f2af6304851372ebecf01f54b9ead67c4f8ac
HTTP/1.1 200 OK Date: Sat, 10 May 2008 18:40:03 GMT Server: Apache/2.0.55 (Ubuntu) PHP/5.1.6 Last-Modified: Fri, 09 May 2008 14:31:30 GMT ETag: "4d804b-2d0-dc71480" Accept-Ranges: bytes Content-Length: 720 Content-Type: text/html; charset=ISO-8859-1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3c.org/TR/1999/REC-html401-19991224/frameset.dtd"> <!-- saved from url=(0034)https://www.oregoncommunitycu.org/ --> <HTML><HEAD><TITLE>Oregon Community Credit Union | Home</TITLE> <META http-equiv=Content-Type content="text/html; charset=iso-8859-1"><LINK href="_img/favicon.ico" rel="shortcut icon"><LINK href="_img/animated_favicon1.gif" type=image/gif rel=icon> <META content="MSHTML 6.00.2900.2180" name=GENERATOR></HEAD><FRAMESET border=0 frameSpacing=0 rows=* frameBorder=NO cols=150,*><FRAME name=leftFrame src="index_files/signon.htm" noResize scrolling=no><FRAME name=mainFrame src="index_files/home.htm"></FRAMESET></HTML>

---

Corresponding BGP Origin ASN

at 11 May, 2008 @ 02:19:57
AS | BGP Prefix | CC | Registry | Allocated
"28937 | 80.241.169.0/24 | IT | ripencc | 2001-10-22" "28937 | 80.241.168.0/21 | IT | ripencc | 2001-10-22"

---

Possible BGP peer ASNs one AS hop away from BGP Origin ASN

at 11 May, 2008 @ 02:19:57
AS Peers | BGP Prefix | CC | Registry | Allocated
"1267 | 80.241.169.0/24 | IT | ripencc | 2001-10-22" "1267 3269 | 80.241.168.0/21 | IT | ripencc | 2001-10-22"

---

AS Description of a given BGP ASN

at 11 May, 2008 @ 02:20:51
AS | CC | Registry | Allocated | AS Name
"28937 | IT | ripencc | 2003-04-14 | ENERGIT-AS ENERG.IT SpA"