CLEAN MX realtime database    
public access query for phishing URL Top 50 stats
Totally watched: 94, to down: 0, to up: 0, changed ip: 0
As of 2013-05-22 11:57:05 CEST
Subscribe to the PhishWatch Mailing list, updated hourly
This database consists of Phishing URI, collected and verified since Oct 2006 some of them may be already closed, but are still recognized as fraud by firefox and opera also offending domain names are honored by SURBL.
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

Attention: all URI'S are manually verified, but not cross-checked for real phishing function in this moment you make this query.(Sites may have been closed already..)
Our automatic Phishwalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

to look at some nice charts her are complete statistics for this database
and for our german friends some minutes on Symantec Phishing report

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.7524 Seconds
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(3309853) 3309853 Report false positive Report closed case make a suggestion 2013-05-22 02:40:20      1855571  PayPal  up  alive SenderBaselookup 69.65.40.230 at virustotallookup 69.65.40.230 at Rus CERT university stuttgart germanylookup 69.65.40.230 at ARIN 69.65.40.230  AS32181 SenderBaselookup 69.65.40.230 at virustotallookup 69.65.40.230 at Rus CERT university stuttgart germanylookup 69.65.40.230 at ARIN 69.65.40.230  chok24.com lookup in virustotal http://paypal.com.index.html.bin.webcscr ...  US  ARIN  abuse@gigenet.com  69.65.0.0 - 69.65.63.255  IPNAP  GigeNET DMPL 545 E Algonquin Rd Suite D Arlington Heights IL 60005  ns1.sempihost2.com.br  ns2.sempihost2.com.br  ns3.sempihost2.com.br  ns4.sempihost2.com.br   lookup in virustotal http://paypal.com.index.html.bin.webcscr ...
2 follow up this item(3309855) 3309855 Report false positive Report closed case make a suggestion 2013-05-22 02:40:20      1855573  PayPal  up  alive SenderBaselookup 69.65.40.230 at virustotallookup 69.65.40.230 at Rus CERT university stuttgart germanylookup 69.65.40.230 at ARIN 69.65.40.230  AS32181 SenderBaselookup 69.65.40.230 at virustotallookup 69.65.40.230 at Rus CERT university stuttgart germanylookup 69.65.40.230 at ARIN 69.65.40.230  chok24.com lookup in virustotal http://paypal.com.index.html.bin.webcscr ...  US  ARIN  abuse@gigenet.com  69.65.0.0 - 69.65.63.255  IPNAP  GigeNET DMPL 545 E Algonquin Rd Suite D Arlington Heights IL 60005  ns1.sempihost2.com.br  ns2.sempihost2.com.br  ns4.sempihost2.com.br  ns3.sempihost2.com.br   lookup in virustotal http://paypal.com.index.html.bin.webcscr ...
3 follow up this item(3295581) 3295581 Report false positive Report closed case make a suggestion 2013-05-17 15:14:03 OVERDUE! 117.1  1848713  Other  up  alive SenderBaselookup 69.65.40.230 at virustotallookup 69.65.40.230 at Rus CERT university stuttgart germanylookup 69.65.40.230 at ARIN 69.65.40.230  AS32181 SenderBaselookup 69.65.40.230 at virustotallookup 69.65.40.230 at Rus CERT university stuttgart germanylookup 69.65.40.230 at ARIN 69.65.40.230  depjk.com.br lookup in virustotal http://iproperty.depjk.com.br/iproperty/ ...  US  ARIN  abuse@gigenet.com  69.65.0.0 - 69.65.63.255  IPNAP  GigeNET DMPL 545 E Algonquin Rd Suite D Arlington Heights IL 60005  ns1.sempihost2.com.br.  ns3.sempihost2.com.br.  ns4.sempihost2.com.br.  ns2.sempihost2.com.br.   lookup in virustotal http://iproperty.depjk.com.br/iproperty/ ...
4 follow up this item(3218711) 3218711 Report false positive Report closed case make a suggestion 2013-04-24 21:25:50 OVERDUE! 662.9  1798775  AOL  up  alive SenderBaselookup 69.65.24.141 at virustotallookup 69.65.24.141 at Rus CERT university stuttgart germanylookup 69.65.24.141 at ARIN 69.65.24.141  AS32181 SenderBaselookup 69.65.24.141 at virustotallookup 69.65.24.141 at Rus CERT university stuttgart germanylookup 69.65.24.141 at ARIN 69.65.24.141  taql.net lookup in virustotal http://www.taql.net/ladocs/google/index. ...  US  ARIN  abuse@gigenet.com  69.65.0.0 - 69.65.63.255  IPNAP  GigeNET DMPL 545 E Algonquin Rd Suite D Arlington Heights IL 60005  ns0.mysteriousdns.net  ns3.mysteriousdns.net  ns2.mysteriousdns.net  ns1.mysteriousdns.net   lookup in virustotal http://www.taql.net/ladocs/google/index. ...
5 follow up this item(3103947) 3103947 Report false positive Report closed case make a suggestion 2013-01-15 14:03:34 OVERDUE! 3045.2  1694904  PayPal  up  alive SenderBaselookup 69.65.0.134 at virustotallookup 69.65.0.134 at Rus CERT university stuttgart germanylookup 69.65.0.134 at ARIN 69.65.0.134  AS32181 SenderBaselookup 69.65.0.134 at virustotallookup 69.65.0.134 at Rus CERT university stuttgart germanylookup 69.65.0.134 at ARIN 69.65.0.134  llames.com lookup in virustotal http://www.llames.com/html/  US  ARIN  abuse@gigenet.com  69.65.0.0 - 69.65.63.255  IPNAP  GigeNET DMPL 545 E Algonquin Rd Suite D Arlington Heights IL 60005  ns82.worldnic.com  ns81.worldnic.com       lookup in virustotal http://www.llames.com/html/
6 follow up this item(1278065) 1278065 Report false positive Report closed case make a suggestion 2012-11-09 17:34:49 OVERDUE! 4649.7  1614639  Other  up  alive  AS32181 SenderBaselookup 69.65.3.144 at virustotallookup 69.65.3.144 at Rus CERT university stuttgart germanylookup 69.65.3.144 at ARIN 69.65.3.144   lookup in virustotal http://www.paypal.com.cgibin.webcs.login ...  US  ARIN  abuse@gigenet.com  69.65.0.0 - 69.65.63.255  IPNAP  GigeNET DMPL 545 E Algonquin Rd Suite D Arlington Heights IL 60005           lookup in virustotal http://www.paypal.com.cgibin.webcs.login ...
Click here for other vital incidents


Protected by clean MX
Access is provided for free and subject to these Terms and Conditions.