CLEAN MX realtime database    
public access query for phishing URL Top 50 stats
Totally watched: 29, to down: 0, to up: 0, changed ip: 0
As of 2013-05-21 19:06:31 CEST
Subscribe to the PhishWatch Mailing list, updated hourly
This database consists of Phishing URI, collected and verified since Oct 2006 some of them may be already closed, but are still recognized as fraud by firefox and opera also offending domain names are honored by SURBL.
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

Attention: all URI'S are manually verified, but not cross-checked for real phishing function in this moment you make this query.(Sites may have been closed already..)
Our automatic Phishwalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

to look at some nice charts her are complete statistics for this database
and for our german friends some minutes on Symantec Phishing report

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.9057 Seconds
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(3224832) 3224832 Report false positive Report closed case make a suggestion 2013-04-28 07:31:25 OVERDUE! 564.1  1803507  Other  up  alive SenderBaselookup 93.188.160.30 at virustotallookup 93.188.160.30 at Rus CERT university stuttgart germanylookup 93.188.160.30 at Ripe 93.188.160.30  AS47583 SenderBaselookup 93.188.160.30 at virustotallookup 93.188.160.30 at Rus CERT university stuttgart germanylookup 93.188.160.30 at Ripe 93.188.160.30  3owl.com lookup in virustotal http://www.cvzcxvxzvcxvcxvxcvcxvvzcx.3ow ...  LT  RIPE    93.188.160.0 - 93.188.167.255      ns4.main-hosting.com  ns3.main-hosting.com  ns2.main-hosting.com  ns1.main-hosting.com   lookup in virustotal http://www.cvzcxvxzvcxvcxvxcvcxvvzcx.3ow ...
2 follow up this item(3294976) 3294976 Report false positive Report closed case make a suggestion 2013-05-17 10:20:59 OVERDUE! 105.3  1848379  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
3 follow up this item(3102208) 3102208 Report false positive Report closed case make a suggestion 2013-01-11 14:12:16 OVERDUE! 3124.4  1692241  Poste Italiane  up  alive SenderBaselookup 146.255.171.15 at virustotallookup 146.255.171.15 at Rus CERT university stuttgart germanylookup 146.255.171.15 at Ripe 146.255.171.15  AS43858 SenderBaselookup 146.255.171.15 at virustotallookup 146.255.171.15 at Rus CERT university stuttgart germanylookup 146.255.171.15 at Ripe 146.255.171.15  email-direct-nephro.com lookup in virustotal http://www.email-direct-nephro.com/wp-co ...  FR  RIPE    146.255.168.0 - 146.255.175.255      ns16.ovh.net  dns16.ovh.net       lookup in virustotal http://www.email-direct-nephro.com/wp-co ...
4 follow up this item(3285249) 3285249 Report false positive Report closed case make a suggestion 2013-05-14 09:54:17 OVERDUE! 177.7  1843461  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
5 follow up this item(3285761) 3285761 Report false positive Report closed case make a suggestion 2013-05-14 11:19:29 OVERDUE! 176.3  1844454  Other  up  alive SenderBaselookup 112.175.184.44 at virustotallookup 112.175.184.44 at Rus CERT university stuttgart germanylookup 112.175.184.44 at apnic 112.175.184.44  AS132524 SenderBaselookup 112.175.184.44 at virustotallookup 112.175.184.44 at Rus CERT university stuttgart germanylookup 112.175.184.44 at apnic 112.175.184.44  health-mart.co.kr lookup in virustotal http://www.health-mart.co.kr/page/help/d ...  KR  APNIC    112.160.0.0 - 112.175.255.255      ns2.dothome.co.kr  ns1.dothome.co.kr       lookup in virustotal http://www.health-mart.co.kr/page/help/d ...
6 follow up this item(3294977) 3294977 Report false positive Report closed case make a suggestion 2013-05-17 10:21:06 OVERDUE! 105.3  1848380  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
7 follow up this item(3035649) 3035649 Report false positive Report closed case make a suggestion 2012-11-29 13:10:37 OVERDUE! 4157.4  1648901  paypal-58  up  alive SenderBaselookup 210.193.6.38 at virustotallookup 210.193.6.38 at Rus CERT university stuttgart germanylookup 210.193.6.38 at apnic 210.193.6.38  AS132524 SenderBaselookup 210.193.6.38 at virustotallookup 210.193.6.38 at Rus CERT university stuttgart germanylookup 210.193.6.38 at apnic 210.193.6.38  blackdogtv.biz lookup in virustotal http://www.blackdogtv.biz/templates/rhuk ...  SG  APNIC    210.193.0.0 - 210.193.15.255      ns1.ipmirror.com.  ns2.ipmirror.com.  ns3.ipmirror.com.     lookup in virustotal http://www.blackdogtv.biz/templates/rhuk ...
8 follow up this item(3284482) 3284482 Report false positive Report closed case make a suggestion 2013-05-14 10:58:45 OVERDUE! 176.6  1843853  Other  up  alive SenderBaselookup 93.188.160.87 at virustotallookup 93.188.160.87 at Rus CERT university stuttgart germanylookup 93.188.160.87 at Ripe 93.188.160.87  AS47583 SenderBaselookup 93.188.160.87 at virustotallookup 93.188.160.87 at Rus CERT university stuttgart germanylookup 93.188.160.87 at Ripe 93.188.160.87  nokly.com lookup in virustotal http://uhsade.nokly.com/yahoo.html  LT  RIPE    93.188.160.0 - 93.188.167.255      ns1.main-hosting.com  ns4.main-hosting.com  ns3.main-hosting.com  ns2.main-hosting.com   lookup in virustotal http://uhsade.nokly.com/yahoo.html
9 follow up this item(3285762) 3285762 Report false positive Report closed case make a suggestion 2013-05-14 10:42:28 OVERDUE! 176.9  1844465  Other  up  alive SenderBaselookup 112.175.184.44 at virustotallookup 112.175.184.44 at Rus CERT university stuttgart germanylookup 112.175.184.44 at apnic 112.175.184.44  AS132524 SenderBaselookup 112.175.184.44 at virustotallookup 112.175.184.44 at Rus CERT university stuttgart germanylookup 112.175.184.44 at apnic 112.175.184.44  health-mart.co.kr lookup in virustotal http://www.health-mart.co.kr/page/help/k ...  KR  APNIC    112.160.0.0 - 112.175.255.255      ns2.dothome.co.kr  ns1.dothome.co.kr       lookup in virustotal http://www.health-mart.co.kr/page/help/k ...
10 follow up this item(3223042) 3223042 Report false positive Report closed case make a suggestion 2013-04-28 04:59:13 OVERDUE! 566.6  1802152  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...
11 follow up this item(3294978) 3294978 Report false positive Report closed case make a suggestion 2013-05-17 10:21:13 OVERDUE! 105.3  1848381  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
12 follow up this item(3223043) 3223043 Report false positive Report closed case make a suggestion 2013-04-28 04:59:44 OVERDUE! 566.6  1802172  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...
13 follow up this item(1128451) 1128451 Report false positive Report closed case make a suggestion 2012-06-12 14:06:43 OVERDUE! 8237.5  1459184  Rabobank  up  alive SenderBaselookup 217.170.3.94 at virustotallookup 217.170.3.94 at Rus CERT university stuttgart germanylookup 217.170.3.94 at Ripe 217.170.3.94  AS25151 SenderBaselookup 5.157.84.19 at virustotallookup 5.157.84.19 at Rus CERT university stuttgart germanylookup 5.157.84.19 at Ripe 5.157.84.19  firstfind.nl lookup in virustotal http://rabobank-bankieren.nl.php5.server ...  NL  RIPE    5.157.80.0 - 5.157.87.255      ns2.cyso.eu  ns3.cyso.net  ns1.cyso.nl     lookup in virustotal http://rabobank-bankieren.nl.php5.server ...
14 follow up this item(3294979) 3294979 Report false positive Report closed case make a suggestion 2013-05-17 10:21:20 OVERDUE! 105.3  1848382  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
15 follow up this item(3223044) 3223044 Report false positive Report closed case make a suggestion 2013-04-28 04:59:55 OVERDUE! 566.6  1802177  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...
16 follow up this item(3294980) 3294980 Report false positive Report closed case make a suggestion 2013-05-17 10:21:28 OVERDUE! 105.3  1848383  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
17 follow up this item(3223045) 3223045 Report false positive Report closed case make a suggestion 2013-04-28 05:01:00 OVERDUE! 566.6  1802210  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...
18 follow up this item(3223301) 3223301 Report false positive Report closed case make a suggestion 2013-04-28 04:30:44 OVERDUE! 567.1  1802714  Other  toggle  alive SenderBaselookup 141.101.116.21 at virustotallookup 141.101.116.21 at Rus CERT university stuttgart germanylookup 141.101.116.21 at Ripe 141.101.116.21  AS13335 SenderBaselookup 141.101.117.21 at virustotallookup 141.101.117.21 at Rus CERT university stuttgart germanylookup 141.101.117.21 at Ripe 141.101.117.21  greatdividecalvary.com lookup in virustotal http://www.greatdividecalvary.com/gdc/wp ...  EU  RIPE    141.101.64.0 - 141.101.127.255      ns2.dreamhost.com  ns3.dreamhost.com  ns1.dreamhost.com     lookup in virustotal http://www.greatdividecalvary.com/gdc/wp ...
19 follow up this item(3294981) 3294981 Report false positive Report closed case make a suggestion 2013-05-17 10:21:35 OVERDUE! 105.3  1848384  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
20 follow up this item(3166469) 3166469 Report false positive Report closed case make a suggestion 2013-02-27 00:57:18 OVERDUE! 2009.7  1748059  Hotmail  up  alive SenderBaselookup 5.144.160.150 at virustotallookup 5.144.160.150 at Rus CERT university stuttgart germanylookup 5.144.160.150 at Ripe 5.144.160.150  AS12637 SenderBaselookup 5.144.160.150 at virustotallookup 5.144.160.150 at Rus CERT university stuttgart germanylookup 5.144.160.150 at Ripe 5.144.160.150  bullvit.it lookup in virustotal http://www.bullvit.it/up.php  IT  RIPE    5.144.160.0 - 5.144.175.255      dnsslave.welcomeitalia.it  dns.welcomeitalia.it       lookup in virustotal http://www.bullvit.it/up.php
21 follow up this item(3126277) 3126277 Report false positive Report closed case make a suggestion 2013-01-30 09:20:45 OVERDUE! 2673.3  1715705  Other  up  alive SenderBaselookup 202.102.83.20 at virustotallookup 202.102.83.20 at Rus CERT university stuttgart germanylookup 202.102.83.20 at apnic 202.102.83.20  AS132524 SenderBaselookup 202.102.83.20 at virustotallookup 202.102.83.20 at Rus CERT university stuttgart germanylookup 202.102.83.20 at apnic 202.102.83.20  gkjx168.com lookup in virustotal http://gkjx168.com/images/?hxxp:/us.batt ...  CN  APNIC    202.102.64.0 - 202.102.127.255      dns27.hichina.com.  dns28.hichina.com.       lookup in virustotal http://gkjx168.com/images/?hxxp:/us.batt ...
22 follow up this item(3223046) 3223046 Report false positive Report closed case make a suggestion 2013-04-28 05:08:39 OVERDUE! 566.5  1802469  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...
23 follow up this item(3223302) 3223302 Report false positive Report closed case make a suggestion 2013-04-28 04:30:44 OVERDUE! 567.1  1802846  Other  up  alive SenderBaselookup 141.101.117.21 at virustotallookup 141.101.117.21 at Rus CERT university stuttgart germanylookup 141.101.117.21 at Ripe 141.101.117.21  AS13335 SenderBaselookup 141.101.117.21 at virustotallookup 141.101.117.21 at Rus CERT university stuttgart germanylookup 141.101.117.21 at Ripe 141.101.117.21  greatdividecalvary.com lookup in virustotal http://www.greatdividecalvary.com/gdc/wp ...  EU  RIPE    141.101.64.0 - 141.101.127.255      ns2.dreamhost.com  ns3.dreamhost.com  ns1.dreamhost.com     lookup in virustotal http://www.greatdividecalvary.com/gdc/wp ...
24 follow up this item(3294982) 3294982 Report false positive Report closed case make a suggestion 2013-05-17 10:21:41 OVERDUE! 105.3  1848385  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
25 follow up this item(3081991) 3081991 Report false positive Report closed case make a suggestion 2012-12-31 03:00:42 OVERDUE! 3399.6  1679421  Other  up  alive SenderBaselookup 61.183.35.159 at virustotallookup 61.183.35.159 at Rus CERT university stuttgart germanylookup 61.183.35.159 at apnic 61.183.35.159  AS132524 SenderBaselookup 61.183.35.159 at virustotallookup 61.183.35.159 at Rus CERT university stuttgart germanylookup 61.183.35.159 at apnic 61.183.35.159  sywgy.com lookup in virustotal http://www.sywgy.com/templets/images/ind ...  CN  APNIC    61.183.0.0 - 61.183.255.255      ns18.xincache.com.  ns17.xincache.com.       lookup in virustotal http://www.sywgy.com/templets/images/ind ...
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
26 follow up this item(3223047) 3223047 Report false positive Report closed case make a suggestion 2013-04-28 05:06:30 OVERDUE! 566.5  1802392  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...
27 follow up this item(3294983) 3294983 Report false positive Report closed case make a suggestion 2013-05-17 10:21:49 OVERDUE! 105.3  1848386  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
28 follow up this item(3300615) 3300615 Report false positive Report closed case make a suggestion 2013-05-19 11:25:45      1851005  Other  up  alive SenderBaselookup 212.74.55.204 at virustotallookup 212.74.55.204 at Rus CERT university stuttgart germanylookup 212.74.55.204 at Ripe 212.74.55.204  AS47622 SenderBaselookup 212.74.55.204 at virustotallookup 212.74.55.204 at Rus CERT university stuttgart germanylookup 212.74.55.204 at Ripe 212.74.55.204  the-royal-coaching.com lookup in virustotal http://www.the-royal-coaching.com/doc2/g ...  GB  RIPE    212.74.32.0 - 212.74.63.255      cpcl3.nibsdns.com  cpcl4.nibsdns.com  cloud1.nibsdns.com  cloud2.nibsdns.com   lookup in virustotal http://www.the-royal-coaching.com/doc2/g ...
29 follow up this item(1118216) 1118216 Report false positive Report closed case make a suggestion 2012-05-27 23:21:53 OVERDUE! 8612.3    up  alive SenderBaselookup 146.176.166.62 at virustotallookup 146.176.166.62 at Rus CERT university stuttgart germanylookup 146.176.166.62 at Ripe 146.176.166.62  AS786 SenderBaselookup 146.176.166.62 at virustotallookup 146.176.166.62 at Rus CERT university stuttgart germanylookup 146.176.166.62 at Ripe 146.176.166.62  napier.ac.uk lookup in virustotal http://www.soc.napier.ac.uk/~andrew/knot ...  GB  RIPE    146.176.0.0 - 146.176.255.255      ns3.napier.ac.uk.  ns4.napier.ac.uk.       lookup in virustotal http://www.soc.napier.ac.uk/~andrew/knot ...
30 follow up this item(3218696) 3218696 Report false positive Report closed case make a suggestion 2013-04-24 22:11:00 OVERDUE! 645.4  1798855  Yahoo  up  alive SenderBaselookup 93.188.160.35 at virustotallookup 93.188.160.35 at Rus CERT university stuttgart germanylookup 93.188.160.35 at Ripe 93.188.160.35  AS47583 SenderBaselookup 93.188.160.35 at virustotallookup 93.188.160.35 at Rus CERT university stuttgart germanylookup 93.188.160.35 at Ripe 93.188.160.35  nazuka.net lookup in virustotal http://profilesdomains.nazuka.net/  LT  RIPE    93.188.160.0 - 93.188.167.255      ns4.main-hosting.com  ns1.main-hosting.com  ns3.main-hosting.com  ns2.main-hosting.com   lookup in virustotal http://profilesdomains.nazuka.net/
31 follow up this item(3223048) 3223048 Report false positive Report closed case make a suggestion 2013-04-28 04:30:31 OVERDUE! 567.1  1802789  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...
32 follow up this item(3228680) 3228680 Report false positive Report closed case make a suggestion 2013-04-29 17:56:23 OVERDUE! 529.7  1806138  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;di ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;di ...
33 follow up this item(3294984) 3294984 Report false positive Report closed case make a suggestion 2013-05-17 10:21:56 OVERDUE! 105.3  1848387  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
34 follow up this item(3238920) 3238920 Report false positive Report closed case make a suggestion 2013-05-01 11:22:43 OVERDUE! 488.2  1813117  Other  up  alive SenderBaselookup 112.175.184.100 at virustotallookup 112.175.184.100 at Rus CERT university stuttgart germanylookup 112.175.184.100 at apnic 112.175.184.100  AS132524 SenderBaselookup 112.175.184.100 at virustotallookup 112.175.184.100 at Rus CERT university stuttgart germanylookup 112.175.184.100 at apnic 112.175.184.100  dothome.co.kr lookup in virustotal http://dothome.co.kr/pageControl/file_di ...  KR  APNIC    112.160.0.0 - 112.175.255.255      ns2.dothome.co.kr  ns1.dothome.co.kr       lookup in virustotal http://dothome.co.kr/pageControl/file_di ...
35 follow up this item(3174664) 3174664 Report false positive Report closed case make a suggestion 2013-03-07 03:15:22 OVERDUE! 1815.4  1755093  Other  up  alive SenderBaselookup 93.119.227.54 at virustotallookup 93.119.227.54 at Rus CERT university stuttgart germanylookup 93.119.227.54 at Ripe 93.119.227.54  AS39743 SenderBaselookup 93.119.227.54 at virustotallookup 93.119.227.54 at Rus CERT university stuttgart germanylookup 93.119.227.54 at Ripe 93.119.227.54  stofesiperdele.ro lookup in virustotal http://www.stofesiperdele.ro/productspec ...  ro  RIPE    93.119.227.0 - 93.119.227.255  STERPU-VICTOR-C-EMANUEL-PFA  Sterpu Victor C. Emanuel P.F.A.Bld. George Enescu nr. 19 Bl. G34, sc. B, ap. 3Suceava Romania 720231voxility.net  ns1.de8martie.ro  ns2.de8martie.ro       lookup in virustotal http://www.stofesiperdele.ro/productspec ...
36 follow up this item(3242248) 3242248 Report false positive Report closed case make a suggestion 2013-05-02 13:23:34 OVERDUE! 462.2  1815392  Other  up  alive SenderBaselookup 194.79.17.75 at virustotallookup 194.79.17.75 at Rus CERT university stuttgart germanylookup 194.79.17.75 at Ripe 194.79.17.75  AS31211 SenderBaselookup 194.79.17.75 at virustotallookup 194.79.17.75 at Rus CERT university stuttgart germanylookup 194.79.17.75 at Ripe 194.79.17.75  elinarisku.fi lookup in virustotal http://www.elinarisku.fi/wp-content/uplo ...  FI  RIPE    194.79.16.0 - 194.79.19.255  SIGMATIC-NET-PI  Sigmatic OySIGMATIC-NET-PI  dns5.name-services.com  dns3.name-services.com  dns2.name-services.com  dns1.name-services.com  dns4.name-services.com lookup in virustotal http://www.elinarisku.fi/wp-content/uplo ...
37 follow up this item(3223049) 3223049 Report false positive Report closed case make a suggestion 2013-04-28 05:03:07 OVERDUE! 566.6  1802273  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...
38 follow up this item(3228681) 3228681 Report false positive Report closed case make a suggestion 2013-04-29 16:51:26 OVERDUE! 530.8  1806243  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;di ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;di ...
39 follow up this item(3294985) 3294985 Report false positive Report closed case make a suggestion 2013-05-17 10:22:05 OVERDUE! 105.3  1848388  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
40 follow up this item(3223050) 3223050 Report false positive Report closed case make a suggestion 2013-04-28 04:30:31 OVERDUE! 567.1  1802791  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...
41 follow up this item(3228682) 3228682 Report false positive Report closed case make a suggestion 2013-04-29 16:51:26 OVERDUE! 530.8  1806164  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;di ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;di ...
42 follow up this item(3294730) 3294730 Report false positive Report closed case make a suggestion 2013-05-17 01:52:57 OVERDUE! 113.7  1848159  Australia and Ne  up  alive SenderBaselookup 202.29.236.145 at virustotallookup 202.29.236.145 at Rus CERT university stuttgart germanylookup 202.29.236.145 at apnic 202.29.236.145  AS132524 SenderBaselookup 202.29.236.145 at virustotallookup 202.29.236.145 at Rus CERT university stuttgart germanylookup 202.29.236.145 at apnic 202.29.236.145  202.29.236.145 lookup in virustotal http://202.29.236.145/vec/dms/anz/  TH  APNIC    202.29.128.0 - 202.29.255.255               lookup in virustotal http://202.29.236.145/vec/dms/anz/
43 follow up this item(3294986) 3294986 Report false positive Report closed case make a suggestion 2013-05-17 10:22:16 OVERDUE! 105.3  1848389  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
44 follow up this item(3305738) 3305738 Report false positive Report closed case make a suggestion 2013-05-20 20:25:35      1853230  Other  up  alive SenderBaselookup 93.188.160.117 at virustotallookup 93.188.160.117 at Rus CERT university stuttgart germanylookup 93.188.160.117 at Ripe 93.188.160.117  AS47583 SenderBaselookup 93.188.160.117 at virustotallookup 93.188.160.117 at Rus CERT university stuttgart germanylookup 93.188.160.117 at Ripe 93.188.160.117  3eeweb.com lookup in virustotal http://yah0000oo00000.3eeweb.com/  LT  RIPE    93.188.160.0 - 93.188.167.255      ns3.2freehosting.com  ns1.2freehosting.com  ns4.2freehosting.com  ns2.2freehosting.com   lookup in virustotal http://yah0000oo00000.3eeweb.com/
45 follow up this item(3223051) 3223051 Report false positive Report closed case make a suggestion 2013-04-28 05:02:28 OVERDUE! 566.6  1802249  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?cmd=_l ...
46 follow up this item(3228683) 3228683 Report false positive Report closed case make a suggestion 2013-04-29 17:54:51 OVERDUE! 529.7  1806065  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;di ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;di ...
47 follow up this item(3294987) 3294987 Report false positive Report closed case make a suggestion 2013-05-17 10:22:23 OVERDUE! 105.3  1848390  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
48 follow up this item(3168267) 3168267 Report false positive Report closed case make a suggestion 2013-02-28 22:24:59 OVERDUE! 1964.2  1749804  AOL  toggle  alive SenderBaselookup 86.122.112.30 at virustotallookup 86.122.112.30 at Rus CERT university stuttgart germanylookup 86.122.112.30 at Ripe 86.122.112.30  AS46652 SenderBaselookup 82.196.1.132 at virustotallookup 82.196.1.132 at Rus CERT university stuttgart germanylookup 82.196.1.132 at Ripe 82.196.1.132  mediator-mures.ro lookup in virustotal http://www.mediator-mures.ro/wp-includes ...  FR  RIPE    82.196.0.0 - 82.196.15.255      nameone.vfs.ro  franky.papercraft.ro       lookup in virustotal http://www.mediator-mures.ro/wp-includes ...
49 follow up this item(3248395) 3248395 Report false positive Report closed case make a suggestion 2013-05-03 23:55:52 OVERDUE! 427.7  1819197  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;cm ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;cm ...
50 follow up this item(3215884) 3215884 Report false positive Report closed case make a suggestion 2013-04-22 17:18:25 OVERDUE! 698.3  1796282  PayPal  up  alive SenderBaselookup 149.255.60.164 at virustotallookup 149.255.60.164 at Rus CERT university stuttgart germanylookup 149.255.60.164 at Ripe 149.255.60.164  AS39451 SenderBaselookup 149.255.60.164 at virustotallookup 149.255.60.164 at Rus CERT university stuttgart germanylookup 149.255.60.164 at Ripe 149.255.60.164  ramtohul.co.uk lookup in virustotal http://ramtohul.co.uk/Aaron/pp/qazxsw/we ...  GB  RIPE    149.255.56.0 - 149.255.63.255      ns1.unlimited.net.uk  ns0.unlimited.net.uk       lookup in virustotal http://ramtohul.co.uk/Aaron/pp/qazxsw/we ...
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
51 follow up this item(3228684) 3228684 Report false positive Report closed case make a suggestion 2013-04-29 17:58:27 OVERDUE! 529.7  1806206  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;di ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;di ...
52 follow up this item(3294988) 3294988 Report false positive Report closed case make a suggestion 2013-05-17 10:22:30 OVERDUE! 105.3  1848391  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
53 follow up this item(3248396) 3248396 Report false positive Report closed case make a suggestion 2013-05-03 23:55:26 OVERDUE! 427.7  1819194  Other  up  alive SenderBaselookup 112.218.71.47 at virustotallookup 112.218.71.47 at Rus CERT university stuttgart germanylookup 112.218.71.47 at apnic 112.218.71.47  AS3786 SenderBaselookup 112.218.71.47 at virustotallookup 112.218.71.47 at Rus CERT university stuttgart germanylookup 112.218.71.47 at apnic 112.218.71.47  loginforn.com lookup in virustotal http://sacure.runescape.com.d.weblagon.l ...  KR  APNIC    112.216.0.0 - 112.223.255.255  BORANET-KR  LG DACOM Corporation  ns.dnsfamily.com  ns.cdnhost.cn       lookup in virustotal http://sacure.runescape.com.d.weblagon.l ...
54 follow up this item(3256844) 3256844 Report false positive Report closed case make a suggestion 2013-05-07 17:05:46 OVERDUE! 338.5  1826298  Other  up  alive SenderBaselookup 93.188.160.97 at virustotallookup 93.188.160.97 at Rus CERT university stuttgart germanylookup 93.188.160.97 at Ripe 93.188.160.97  AS47583 SenderBaselookup 93.188.160.97 at virustotallookup 93.188.160.97 at Rus CERT university stuttgart germanylookup 93.188.160.97 at Ripe 93.188.160.97  3eeweb.com lookup in virustotal http://heehehehkeejhkekek.3eeweb.com/  LT  RIPE    93.188.160.0 - 93.188.167.255      ns1.2freehosting.com  ns2.2freehosting.com  ns4.2freehosting.com  ns3.2freehosting.com   lookup in virustotal http://heehehehkeejhkekek.3eeweb.com/
55 follow up this item(3294989) 3294989 Report false positive Report closed case make a suggestion 2013-05-17 10:22:37 OVERDUE! 105.2  1848392  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
56 follow up this item(3044365) 3044365 Report false positive Report closed case make a suggestion 2012-12-02 18:13:14 OVERDUE! 4080.4  1640982  Other  up  alive SenderBaselookup 5.28.58.11 at virustotallookup 5.28.58.11 at Rus CERT university stuttgart germanylookup 5.28.58.11 at Ripe 5.28.58.11  AS58117 SenderBaselookup 185.9.48.102 at virustotallookup 185.9.48.102 at Rus CERT university stuttgart germanylookup 185.9.48.102 at Ripe 185.9.48.102  pointwell.co.uk lookup in virustotal http://pointwell.co.uk/paypal  EU  RIPE    185.9.48.0 - 185.9.51.255      ns1.studyhost.co.uk.  ns2.studyhost.co.uk.       lookup in virustotal http://pointwell.co.uk/paypal
57 follow up this item(3110925) 3110925 Report false positive Report closed case make a suggestion 2013-01-19 20:54:13 OVERDUE! 2925.7  1701484  Other  up  alive SenderBaselookup 202.102.83.20 at virustotallookup 202.102.83.20 at Rus CERT university stuttgart germanylookup 202.102.83.20 at apnic 202.102.83.20  AS132524 SenderBaselookup 202.102.83.20 at virustotallookup 202.102.83.20 at Rus CERT university stuttgart germanylookup 202.102.83.20 at apnic 202.102.83.20  gkjx168.com lookup in virustotal http://gkjx168.com/images?http://us.batt ...  CN  APNIC    202.102.64.0 - 202.102.127.255      dns27.hichina.com  dns28.hichina.com       lookup in virustotal http://gkjx168.com/images?http://us.batt ...
58 follow up this item(3264781) 3264781 Report false positive Report closed case make a suggestion 2013-05-09 09:53:20 OVERDUE! 297.7  1831141  Other  up  alive SenderBaselookup 81.93.152.94 at virustotallookup 81.93.152.94 at Rus CERT university stuttgart germanylookup 81.93.152.94 at Ripe 81.93.152.94  AS29468 SenderBaselookup 81.93.152.94 at virustotallookup 81.93.152.94 at Rus CERT university stuttgart germanylookup 81.93.152.94 at Ripe 81.93.152.94  umeacykelservice.se lookup in virustotal http://umeacykelservice.se/Outl00kweb.ht ...  SE  RIPE    81.93.144.0 - 81.93.159.255      ns2.hielo.se  ns1.hielo.se       lookup in virustotal http://umeacykelservice.se/Outl00kweb.ht ...
59 follow up this item(3213070) 3213070 Report false positive Report closed case make a suggestion 2013-04-19 04:14:18 OVERDUE! 783.4  1793928  Other  up  alive SenderBaselookup 112.218.71.47 at virustotallookup 112.218.71.47 at Rus CERT university stuttgart germanylookup 112.218.71.47 at apnic 112.218.71.47  AS3786 SenderBaselookup 112.218.71.47 at virustotallookup 112.218.71.47 at Rus CERT university stuttgart germanylookup 112.218.71.47 at apnic 112.218.71.47  loginforn.com lookup in virustotal http://sacure.runescape.com.d.weblagon.l ...  KR  APNIC    112.216.0.0 - 112.223.255.255  BORANET-KR  LG DACOM Corporation  ns.dnsfamily.com  ns.cdnhost.cn       lookup in virustotal http://sacure.runescape.com.d.weblagon.l ...
60 follow up this item(3293710) 3293710 Report false positive Report closed case make a suggestion 2013-05-16 18:47:02 OVERDUE! 120.8  1847813  Other  up  alive SenderBaselookup 93.188.160.106 at virustotallookup 93.188.160.106 at Rus CERT university stuttgart germanylookup 93.188.160.106 at Ripe 93.188.160.106  AS47583 SenderBaselookup 93.188.160.106 at virustotallookup 93.188.160.106 at Rus CERT university stuttgart germanylookup 93.188.160.106 at Ripe 93.188.160.106  cixx6.com lookup in virustotal http://www.wwwbtrog.cixx6.com/btroger/Ya ...  LT  RIPE    93.188.160.0 - 93.188.167.255      ns1.main-hosting.com.  ns2.main-hosting.com.  ns4.main-hosting.com.  ns3.main-hosting.com.   lookup in virustotal http://www.wwwbtrog.cixx6.com/btroger/Ya ...
61 follow up this item(3294990) 3294990 Report false positive Report closed case make a suggestion 2013-05-17 10:22:46 OVERDUE! 105.2  1848393  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
62 follow up this item(3256846) 3256846 Report false positive Report closed case make a suggestion 2013-05-07 16:41:23 OVERDUE! 338.9  1826049  Other  up  alive SenderBaselookup 93.188.160.57 at virustotallookup 93.188.160.57 at Rus CERT university stuttgart germanylookup 93.188.160.57 at Ripe 93.188.160.57  AS47583 SenderBaselookup 93.188.160.57 at virustotallookup 93.188.160.57 at Rus CERT university stuttgart germanylookup 93.188.160.57 at Ripe 93.188.160.57  3owl.com lookup in virustotal http://heepppppe.3owl.com  LT  RIPE    93.188.160.0 - 93.188.167.255      ns1.main-hosting.com  ns2.main-hosting.com  ns4.main-hosting.com  ns3.main-hosting.com   lookup in virustotal http://heepppppe.3owl.com
63 follow up this item(3272462) 3272462 Report false positive Report closed case make a suggestion 2013-05-11 17:21:36 OVERDUE! 242.3  1837024  Other  toggle  alive SenderBaselookup 27.124.119.225 at virustotallookup 27.124.119.225 at Rus CERT university stuttgart germanylookup 27.124.119.225 at apnic 27.124.119.225  AS132524 SenderBaselookup 27.54.88.98 at virustotallookup 27.54.88.98 at Rus CERT university stuttgart germanylookup 27.54.88.98 at apnic 27.54.88.98  897fm.com.au lookup in virustotal http://memberforum.897fm.com.au/Themes/M ...  AU  APNIC    27.54.88.0 - 27.54.95.255      ns2.syrahost.com.  ns1.syrahost.com.       lookup in virustotal http://memberforum.897fm.com.au/Themes/M ...
64 follow up this item(1159951) 1159951 Report false positive Report closed case make a suggestion 2012-07-12 13:01:42 OVERDUE! 7518.6  1493549  Other  up  alive SenderBaselookup 202.172.54.141 at virustotallookup 202.172.54.141 at Rus CERT university stuttgart germanylookup 202.172.54.141 at apnic 202.172.54.141  AS132524 SenderBaselookup 202.172.54.141 at virustotallookup 202.172.54.141 at Rus CERT university stuttgart germanylookup 202.172.54.141 at apnic 202.172.54.141  apng.sg lookup in virustotal http://apng.sg/src/login.php  SG  APNIC    202.172.48.0 - 202.172.63.255      pridns.iwi.com.sg  secdns.iwi.com.sg       lookup in virustotal http://apng.sg/src/login.php
65 follow up this item(3193359) 3193359 Report false positive Report closed case make a suggestion 2013-03-28 14:33:01 OVERDUE! 1300.1  1775183  Other  up  alive SenderBaselookup 91.232.148.5 at virustotallookup 91.232.148.5 at Rus CERT university stuttgart germanylookup 91.232.148.5 at Ripe 91.232.148.5  AS57168 SenderBaselookup 91.232.148.5 at virustotallookup 91.232.148.5 at Rus CERT university stuttgart germanylookup 91.232.148.5 at Ripe 91.232.148.5  worrall.uk.com lookup in virustotal http://www.worrall.uk.com/tmp/  GB  RIPE    91.232.148.0 - 91.232.149.255      dns0.xhosttellnet.co.uk.  dns1.xhosttellnet.co.uk.       lookup in virustotal http://www.worrall.uk.com/tmp/
66 follow up this item(3130639) 3130639 Report false positive Report closed case make a suggestion 2013-02-04 00:12:15 OVERDUE! 2562.4  1719780  PayPal  up  alive SenderBaselookup 192.121.107.33 at virustotallookup 192.121.107.33 at Rus CERT university stuttgart germanylookup 192.121.107.33 at Ripe 192.121.107.33  AS35041 SenderBaselookup 192.121.107.33 at virustotallookup 192.121.107.33 at Rus CERT university stuttgart germanylookup 192.121.107.33 at Ripe 192.121.107.33  adremweb.com lookup in virustotal http://www.adremweb.com/indexas.html  SE  RIPE    192.121.0.0 - 192.121.255.255               lookup in virustotal http://www.adremweb.com/indexas.html
67 follow up this item(3123216) 3123216 Report false positive Report closed case make a suggestion 2013-01-28 06:00:54 OVERDUE! 2724.6  1712755  Other  up  alive SenderBaselookup 130.193.8.53 at virustotallookup 130.193.8.53 at Rus CERT university stuttgart germanylookup 130.193.8.53 at Ripe 130.193.8.53  AS198171 SenderBaselookup 130.193.8.53 at virustotallookup 130.193.8.53 at Rus CERT university stuttgart germanylookup 130.193.8.53 at Ripe 130.193.8.53  valexo.cz lookup in virustotal http://valexo.cz/wp-admin/maint/remax/re ...  CZ  RIPE    130.193.8.0 - 130.193.15.255      ns2.hostingzdarma.cz.  ns4.hosting-zdarma.net.  ns1.hostingzdarma.cz.  ns3.hosting-zdarma.net.   lookup in virustotal http://valexo.cz/wp-admin/maint/remax/re ...
68 follow up this item(3236369) 3236369 Report false positive Report closed case make a suggestion 2013-04-30 21:50:15 OVERDUE! 501.8  1811164  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;cm ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;cm ...
69 follow up this item(3305745) 3305745 Report false positive Report closed case make a suggestion 2013-05-20 19:40:42      1853176  Other  up  alive SenderBaselookup 93.188.160.70 at virustotallookup 93.188.160.70 at Rus CERT university stuttgart germanylookup 93.188.160.70 at Ripe 93.188.160.70  AS47583 SenderBaselookup 93.188.160.70 at virustotallookup 93.188.160.70 at Rus CERT university stuttgart germanylookup 93.188.160.70 at Ripe 93.188.160.70  ias3.com lookup in virustotal http://wertyuklsdfghjk.ias3.com/  LT  RIPE    93.188.160.0 - 93.188.167.255      ns1.main-hosting.com  ns2.main-hosting.com  ns3.main-hosting.com  ns4.main-hosting.com   lookup in virustotal http://wertyuklsdfghjk.ias3.com/
70 follow up this item(3077393) 3077393 Report false positive Report closed case make a suggestion 2012-12-25 14:12:11 OVERDUE! 3532.4  1675222  Other  up  alive SenderBaselookup 61.183.35.159 at virustotallookup 61.183.35.159 at Rus CERT university stuttgart germanylookup 61.183.35.159 at apnic 61.183.35.159  AS132524 SenderBaselookup 61.183.35.159 at virustotallookup 61.183.35.159 at Rus CERT university stuttgart germanylookup 61.183.35.159 at apnic 61.183.35.159  sywgy.com lookup in virustotal http://www.sywgy.com/templets/images/ind ...  CN  APNIC    61.183.0.0 - 61.183.255.255      ns18.xincache.com.  ns17.xincache.com.       lookup in virustotal http://www.sywgy.com/templets/images/ind ...
71 follow up this item(3305746) 3305746 Report false positive Report closed case make a suggestion 2013-05-20 19:40:11      1853174  Other  up  alive SenderBaselookup 93.188.160.66 at virustotallookup 93.188.160.66 at Rus CERT university stuttgart germanylookup 93.188.160.66 at Ripe 93.188.160.66  AS47583 SenderBaselookup 93.188.160.66 at virustotallookup 93.188.160.66 at Rus CERT university stuttgart germanylookup 93.188.160.66 at Ripe 93.188.160.66  x11s.org lookup in virustotal http://upgradeservice2013.x11s.org/  LT  RIPE    93.188.160.0 - 93.188.167.255      ns2.main-hosting.com  ns4.main-hosting.com  ns3.main-hosting.com  ns1.main-hosting.com   lookup in virustotal http://upgradeservice2013.x11s.org/
72 follow up this item(3261202) 3261202 Report false positive Report closed case make a suggestion 2013-05-09 09:54:22 OVERDUE! 297.7  1831144  Other  up  alive SenderBaselookup 93.188.160.67 at virustotallookup 93.188.160.67 at Rus CERT university stuttgart germanylookup 93.188.160.67 at Ripe 93.188.160.67  AS47583 SenderBaselookup 93.188.160.67 at virustotallookup 93.188.160.67 at Rus CERT university stuttgart germanylookup 93.188.160.67 at Ripe 93.188.160.67  usr.me lookup in virustotal http://cieloparavoce.usr.me/8/CieloPromo ...  LT  RIPE    93.188.160.0 - 93.188.167.255      ns3.main-hosting.com  ns4.main-hosting.com  ns2.main-hosting.com  ns1.main-hosting.com   lookup in virustotal http://cieloparavoce.usr.me/8/CieloPromo ...
73 follow up this item(3282451) 3282451 Report false positive Report closed case make a suggestion 2013-05-14 01:00:22 OVERDUE! 186.6  1842978  Other  up  alive SenderBaselookup 62.76.1.125 at virustotallookup 62.76.1.125 at Rus CERT university stuttgart germanylookup 62.76.1.125 at Ripe 62.76.1.125 SenderBaselookup 62.76.1.125 at virustotallookup 62.76.1.125 at Rus CERT university stuttgart germanylookup 62.76.1.125 at Ripe 62.76.1.125  npbelgorod.ru lookup in virustotal http://www.npbelgorod.ru/2010/07/08/post ...  RU  RIPE    62.76.1.0 - 62.76.1.255  RU-M-PLUS  M-PLUS LLCM-PLUS LLC route  ns2.nameself.com.  ns1.nameself.com.       lookup in virustotal http://www.npbelgorod.ru/2010/07/08/post ...
74 follow up this item(3053331) 3053331 Report false positive Report closed case make a suggestion 2012-12-13 03:18:54 OVERDUE! 3831.3  1649740  Other  up  alive SenderBaselookup 31.193.237.168 at virustotallookup 31.193.237.168 at Rus CERT university stuttgart germanylookup 31.193.237.168 at Ripe 31.193.237.168  AS8273 SenderBaselookup 31.193.237.168 at virustotallookup 31.193.237.168 at Rus CERT university stuttgart germanylookup 31.193.237.168 at Ripe 31.193.237.168  berethe.dk lookup in virustotal http://berethe.dk/Secure/Microsoft/  DK  RIPE    31.193.237.128 - 31.193.237.255  DK_DANHOST_5_20120615  Firma DanhostVERDO Tele  ns1.dns-services.org  ns0.dns-services.org       lookup in virustotal http://berethe.dk/Secure/Microsoft/
75 follow up this item(3282452) 3282452 Report false positive Report closed case make a suggestion 2013-05-14 01:00:23 OVERDUE! 186.6  1842979  Other  up  alive SenderBaselookup 62.76.1.125 at virustotallookup 62.76.1.125 at Rus CERT university stuttgart germanylookup 62.76.1.125 at Ripe 62.76.1.125 SenderBaselookup 62.76.1.125 at virustotallookup 62.76.1.125 at Rus CERT university stuttgart germanylookup 62.76.1.125 at Ripe 62.76.1.125  npbelgorod.ru lookup in virustotal http://www.npbelgorod.ru/page/12/engine/ ...  RU  RIPE    62.76.1.0 - 62.76.1.255  RU-M-PLUS  M-PLUS LLCM-PLUS LLC route  ns2.nameself.com.  ns1.nameself.com.       lookup in virustotal http://www.npbelgorod.ru/page/12/engine/ ...
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
76 follow up this item(3294740) 3294740 Report false positive Report closed case make a suggestion 2013-05-13 15:51:08 OVERDUE! 195.8  1841880  Other  up  alive SenderBaselookup 217.146.78.110 at virustotallookup 217.146.78.110 at Rus CERT university stuttgart germanylookup 217.146.78.110 at Ripe 217.146.78.110  AS49604 SenderBaselookup 217.146.78.110 at virustotallookup 217.146.78.110 at Rus CERT university stuttgart germanylookup 217.146.78.110 at Ripe 217.146.78.110  iworkinhotels.com lookup in virustotal http://www.iworkinhotels.com/filemanager ...  EE  RIPE    217.146.64.0 - 217.146.79.255      ns3.zonedata.net  ns.zone.eu  ns2.zone.ee     lookup in virustotal http://www.iworkinhotels.com/filemanager ...
77 follow up this item(3194132) 3194132 Report false positive Report closed case make a suggestion 2013-03-28 20:38:06 OVERDUE! 1294  1775542  JPMorgan Chase a  up  alive SenderBaselookup 80.73.3.33 at virustotallookup 80.73.3.33 at Rus CERT university stuttgart germanylookup 80.73.3.33 at Ripe 80.73.3.33  AS13188 SenderBaselookup 80.73.3.33 at virustotallookup 80.73.3.33 at Rus CERT university stuttgart germanylookup 80.73.3.33 at Ripe 80.73.3.33  80.73.3.33 lookup in virustotal http://80.73.3.33/JsdyerDeAx67/  UA  RIPE    80.73.0.0 - 80.73.15.255               lookup in virustotal http://80.73.3.33/JsdyerDeAx67/
78 follow up this item(3129876) 3129876 Report false positive Report closed case make a suggestion 2013-02-02 12:20:53 OVERDUE! 2598.3  1718918  Other  up  alive SenderBaselookup 59.57.4.217 at virustotallookup 59.57.4.217 at Rus CERT university stuttgart germanylookup 59.57.4.217 at apnic 59.57.4.217  AS132524 SenderBaselookup 59.57.4.217 at virustotallookup 59.57.4.217 at Rus CERT university stuttgart germanylookup 59.57.4.217 at apnic 59.57.4.217  889qz.com lookup in virustotal http://www.889qz.com/img/?https://secure ...  CN  APNIC    59.56.0.0 - 59.59.255.255      dns25.hichina.com  dns26.hichina.com       lookup in virustotal http://www.889qz.com/img/?https://secure ...
79 follow up this item(3291157) 3291157 Report false positive Report closed case make a suggestion 2013-05-15 19:44:46 OVERDUE! 143.9  1846831  Cielo  up  alive SenderBaselookup 93.188.160.104 at virustotallookup 93.188.160.104 at Rus CERT university stuttgart germanylookup 93.188.160.104 at Ripe 93.188.160.104  AS47583 SenderBaselookup 93.188.160.104 at virustotallookup 93.188.160.104 at Rus CERT university stuttgart germanylookup 93.188.160.104 at Ripe 93.188.160.104  twomini.com lookup in virustotal http://c-cielo-cliente.twomini.com/  LT  RIPE    93.188.160.0 - 93.188.167.255      ns3.2freehosting.com  ns1.2freehosting.com  ns2.2freehosting.com  ns4.2freehosting.com   lookup in virustotal http://c-cielo-cliente.twomini.com/
80 follow up this item(3309077) 3309077 Report false positive Report closed case make a suggestion 2013-05-21 17:44:20      1854923  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se.  dns1.celab.se.       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
81 follow up this item(3129877) 3129877 Report false positive Report closed case make a suggestion 2013-02-02 12:20:44 OVERDUE! 2598.3  1718917  Other  up  alive SenderBaselookup 59.57.4.217 at virustotallookup 59.57.4.217 at Rus CERT university stuttgart germanylookup 59.57.4.217 at apnic 59.57.4.217  AS132524 SenderBaselookup 59.57.4.217 at virustotallookup 59.57.4.217 at Rus CERT university stuttgart germanylookup 59.57.4.217 at apnic 59.57.4.217  889qz.com lookup in virustotal http://www.889qz.com/img/?https://secure ...  CN  APNIC    59.56.0.0 - 59.59.255.255      dns25.hichina.com  dns26.hichina.com       lookup in virustotal http://www.889qz.com/img/?https://secure ...
82 follow up this item(3073301) 3073301 Report false positive Report closed case make a suggestion 2012-12-21 18:42:15 OVERDUE! 3623.9  1671449  Blizzard  up  alive SenderBaselookup 61.183.35.159 at virustotallookup 61.183.35.159 at Rus CERT university stuttgart germanylookup 61.183.35.159 at apnic 61.183.35.159  AS132524 SenderBaselookup 61.183.35.159 at virustotallookup 61.183.35.159 at Rus CERT university stuttgart germanylookup 61.183.35.159 at apnic 61.183.35.159  sywgy.com lookup in virustotal http://www.sywgy.com/Templets/images/ind ...  CN  APNIC    61.183.0.0 - 61.183.255.255      ns18.xincache.com.  ns17.xincache.com.       lookup in virustotal http://www.sywgy.com/Templets/images/ind ...
83 follow up this item(3309078) 3309078 Report false positive Report closed case make a suggestion 2013-05-21 17:44:20      1854921  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se.  dns1.celab.se.       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
84 follow up this item(3309079) 3309079 Report false positive Report closed case make a suggestion 2013-05-21 17:44:20      1854919  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se.  dns1.celab.se.       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
85 follow up this item(3223576) 3223576 Report false positive Report closed case make a suggestion 2013-04-28 05:09:14 OVERDUE! 566.5  1802489  Other  up  alive SenderBaselookup 84.51.33.92 at virustotallookup 84.51.33.92 at Rus CERT university stuttgart germanylookup 84.51.33.92 at Ripe 84.51.33.92  AS34104 SenderBaselookup 84.51.33.92 at virustotallookup 84.51.33.92 at Rus CERT university stuttgart germanylookup 84.51.33.92 at Ripe 84.51.33.92  havariler.com lookup in virustotal http://havariler.com/Remaxx/remax.html  TR  RIPE    84.51.33.0 - 84.51.33.255  MARKUM_BILISIM_3  Markum Bilisim Teknolojileri Tic.Ltd.Sti.Global Network-3  dns2.markum.net  dns1.markum.net       lookup in virustotal http://havariler.com/Remaxx/remax.html
86 follow up this item(3291160) 3291160 Report false positive Report closed case make a suggestion 2013-05-15 16:57:57 OVERDUE! 146.7  1846694  Other  up  alive SenderBaselookup 93.188.160.104 at virustotallookup 93.188.160.104 at Rus CERT university stuttgart germanylookup 93.188.160.104 at Ripe 93.188.160.104  AS47583 SenderBaselookup 93.188.160.104 at virustotallookup 93.188.160.104 at Rus CERT university stuttgart germanylookup 93.188.160.104 at Ripe 93.188.160.104  3owl.com lookup in virustotal http://con-fir-ma-tion-com-ple-ted.3owl. ...  LT  RIPE    93.188.160.0 - 93.188.167.255      ns1.main-hosting.com  ns3.main-hosting.com  ns2.main-hosting.com  ns4.main-hosting.com   lookup in virustotal http://con-fir-ma-tion-com-ple-ted.3owl. ...
87 follow up this item(3309080) 3309080 Report false positive Report closed case make a suggestion 2013-05-21 17:44:20      1854917  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se.  dns1.celab.se.       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
88 follow up this item(3248408) 3248408 Report false positive Report closed case make a suggestion 2013-05-03 22:05:39 OVERDUE! 429.5  1818995  Other  up  alive SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  AS3253 SenderBaselookup 194.226.158.1 at virustotallookup 194.226.158.1 at Rus CERT university stuttgart germanylookup 194.226.158.1 at Ripe 194.226.158.1  avers-66.ru lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;cm ...  RU  RIPE    194.226.144.0 - 194.226.159.255  MPLIK-2  OJSC "Vimpelcom"YekaterinburgVympelcom  ns.mplik.ru  ns1.mplik.ru       lookup in virustotal http://avers-66.ru/Pay/webscr.php?amp;cm ...
89 follow up this item(3309081) 3309081 Report false positive Report closed case make a suggestion 2013-05-21 17:44:20      1854915  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se.  dns1.celab.se.       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
90 follow up this item(3209753) 3209753 Report false positive Report closed case make a suggestion 2013-04-17 03:01:40 OVERDUE! 832.6  1791261  Other  up  alive SenderBaselookup 31.193.237.168 at virustotallookup 31.193.237.168 at Rus CERT university stuttgart germanylookup 31.193.237.168 at Ripe 31.193.237.168  AS8273 SenderBaselookup 31.193.237.168 at virustotallookup 31.193.237.168 at Rus CERT university stuttgart germanylookup 31.193.237.168 at Ripe 31.193.237.168  odensefyr.dk lookup in virustotal http://odensefyr.dk/html/k/pcin/Samples/ ...  DK  RIPE    31.193.237.128 - 31.193.237.255  DK_DANHOST_5_20120615  Firma DanhostVERDO Tele  ns1.dns-services.org  ns0.dns-services.org       lookup in virustotal http://odensefyr.dk/html/k/pcin/Samples/ ...
91 follow up this item(3296282) 3296282 Report false positive Report closed case make a suggestion 2013-05-15 16:10:10 OVERDUE! 147.5  1846661  Amazon.com  up  alive SenderBaselookup 77.74.51.75 at virustotallookup 77.74.51.75 at Rus CERT university stuttgart germanylookup 77.74.51.75 at Ripe 77.74.51.75  AS8312 SenderBaselookup 77.74.51.75 at virustotallookup 77.74.51.75 at Rus CERT university stuttgart germanylookup 77.74.51.75 at Ripe 77.74.51.75  reversed-trike.com lookup in virustotal http://reversed-trike.com/ordrdetls.html ...  NL  RIPE    77.74.48.0 - 77.74.55.255      ns1.spothost.nl  ns2.spothost.nl       lookup in virustotal http://reversed-trike.com/ordrdetls.html ...
92 follow up this item(3116316) 3116316 Report false positive Report closed case make a suggestion 2013-01-22 23:23:56 OVERDUE! 2851.2  1705999  Other  up  alive SenderBaselookup 125.141.234.106 at virustotallookup 125.141.234.106 at Rus CERT university stuttgart germanylookup 125.141.234.106 at apnic 125.141.234.106  AS132524 SenderBaselookup 125.141.234.106 at virustotallookup 125.141.234.106 at Rus CERT university stuttgart germanylookup 125.141.234.106 at apnic 125.141.234.106  jifb.or.kr lookup in virustotal http://home.jifb.or.kr/mail.htm  KR  APNIC    125.128.0.0 - 125.143.255.255      ns.kt-idc.com.  ns2.kt-idc.com.       lookup in virustotal http://home.jifb.or.kr/mail.htm
93 follow up this item(1232156) 1232156 Report false positive Report closed case make a suggestion 2012-09-23 03:25:08 OVERDUE! 5776.2  1570235  Other  up  alive SenderBaselookup 217.198.115.56 at virustotallookup 217.198.115.56 at Rus CERT university stuttgart germanylookup 217.198.115.56 at Ripe 217.198.115.56  AS34222 SenderBaselookup 217.198.115.56 at virustotallookup 217.198.115.56 at Rus CERT university stuttgart germanylookup 217.198.115.56 at Ripe 217.198.115.56  php5.cz lookup in virustotal http://updatelink.php5.cz/  CZ  RIPE    217.198.114.0 - 217.198.115.255  CZ-ZONER-NET  ZONER software, a.s.ZONER-NET  ns1.regzone.cz  ns1.regzone.info  ns1.regzone.de     lookup in virustotal http://updatelink.php5.cz/
94 follow up this item(3285277) 3285277 Report false positive Report closed case make a suggestion 2013-05-14 09:55:44 OVERDUE! 177.7  1843547  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
95 follow up this item(3204381) 3204381 Report false positive Report closed case make a suggestion 2013-04-09 23:25:42 OVERDUE! 1004.2  1785934  Google  up  alive SenderBaselookup 31.193.237.168 at virustotallookup 31.193.237.168 at Rus CERT university stuttgart germanylookup 31.193.237.168 at Ripe 31.193.237.168  AS8273 SenderBaselookup 31.193.237.168 at virustotallookup 31.193.237.168 at Rus CERT university stuttgart germanylookup 31.193.237.168 at Ripe 31.193.237.168  horsbear.dk lookup in virustotal http://www.horsbear.dk/google/index.php. ...  DK  RIPE    31.193.237.128 - 31.193.237.255  DK_DANHOST_5_20120615  Firma DanhostVERDO Tele  ns1.dns-services.org  ns0.dns-services.org       lookup in virustotal http://www.horsbear.dk/google/index.php. ...
96 follow up this item(3083806) 3083806 Report false positive Report closed case make a suggestion 2013-01-02 22:02:34 OVERDUE! 3332.6  1681089  Other  up  alive SenderBaselookup 218.207.196.84 at virustotallookup 218.207.196.84 at Rus CERT university stuttgart germanylookup 218.207.196.84 at apnic 218.207.196.84  AS132524 SenderBaselookup 218.207.196.84 at virustotallookup 218.207.196.84 at Rus CERT university stuttgart germanylookup 218.207.196.84 at apnic 218.207.196.84  fjqgx.com lookup in virustotal http://www.fjqgx.com/images/index.htm?am ...  CN  APNIC    218.206.0.0 - 218.207.255.255      ns6.cnmsn.net  ns5.cnmsn.net       lookup in virustotal http://www.fjqgx.com/images/index.htm?am ...
97 follow up this item(3222046) 3222046 Report false positive Report closed case make a suggestion 2013-04-27 09:00:22 OVERDUE! 586.6  1801485  Other  up  alive SenderBaselookup 112.218.71.47 at virustotallookup 112.218.71.47 at Rus CERT university stuttgart germanylookup 112.218.71.47 at apnic 112.218.71.47  AS3786 SenderBaselookup 112.218.71.47 at virustotallookup 112.218.71.47 at Rus CERT university stuttgart germanylookup 112.218.71.47 at apnic 112.218.71.47  loginforn.com lookup in virustotal http://sacure.runescape.com.d.weblagon.l ...  KR  APNIC    112.216.0.0 - 112.223.255.255  BORANET-KR  LG DACOM Corporation  ns.dnsfamily.com.  ns.cdnhost.cn.       lookup in virustotal http://sacure.runescape.com.d.weblagon.l ...
98 follow up this item(3240990) 3240990 Report false positive Report closed case make a suggestion 2013-05-02 06:58:16 OVERDUE! 468.7  1814612  Other  up  alive SenderBaselookup 202.88.238.251 at virustotallookup 202.88.238.251 at Rus CERT university stuttgart germanylookup 202.88.238.251 at apnic 202.88.238.251  AS132524 SenderBaselookup 202.88.238.251 at virustotallookup 202.88.238.251 at Rus CERT university stuttgart germanylookup 202.88.238.251 at apnic 202.88.238.251  standardcharteredholdings.com lookup in virustotal http://standardcharteredholdings.com/  IN  APNIC    202.88.224.0 - 202.88.239.255      ns.domainnetwork.se  ns2.domainnetwork.se  ns3.domainnetwork.com     lookup in virustotal http://standardcharteredholdings.com/
99 follow up this item(3308830) 3308830 Report false positive Report closed case make a suggestion 2013-05-21 15:22:04      1854999  Other  up  alive SenderBaselookup 217.70.207.34 at virustotallookup 217.70.207.34 at Rus CERT university stuttgart germanylookup 217.70.207.34 at Ripe 217.70.207.34  AS13101 SenderBaselookup 217.70.207.34 at virustotallookup 217.70.207.34 at Rus CERT university stuttgart germanylookup 217.70.207.34 at Ripe 217.70.207.34  impulse.de lookup in virustotal http://www.impulse.de/wp-content/uploads ...  DE  RIPE    217.70.192.0 - 217.70.207.255      ns.udagdns.de.  ns.udagdns.net.       lookup in virustotal http://www.impulse.de/wp-content/uploads ...
100 follow up this item(3222047) 3222047 Report false positive Report closed case make a suggestion 2013-04-27 09:00:22 OVERDUE! 586.6  1801486  Other  up  alive SenderBaselookup 112.218.71.47 at virustotallookup 112.218.71.47 at Rus CERT university stuttgart germanylookup 112.218.71.47 at apnic 112.218.71.47  AS3786 SenderBaselookup 112.218.71.47 at virustotallookup 112.218.71.47 at Rus CERT university stuttgart germanylookup 112.218.71.47 at apnic 112.218.71.47  loginforn.com lookup in virustotal http://sacure.runescape.com.d.weblagon.l ...  KR  APNIC    112.216.0.0 - 112.223.255.255  BORANET-KR  LG DACOM Corporation  ns.dnsfamily.com.  ns.cdnhost.cn.       lookup in virustotal http://sacure.runescape.com.d.weblagon.l ...
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
101 follow up this item(3288607) 3288607 Report false positive Report closed case make a suggestion 2013-05-15 12:41:19 OVERDUE! 150.9  1846427  Other  up  alive SenderBaselookup 158.255.96.200 at virustotallookup 158.255.96.200 at Rus CERT university stuttgart germanylookup 158.255.96.200 at Ripe 158.255.96.200  AS8218 SenderBaselookup 158.255.96.200 at virustotallookup 158.255.96.200 at Rus CERT university stuttgart germanylookup 158.255.96.200 at Ripe 158.255.96.200  habbo-alpha.fr lookup in virustotal http://habbo-alpha.fr/client_error.php  FR  RIPE    158.255.96.0 - 158.255.127.255      pf3.free-h.org  ns3.free-h.org  ns2.free-h.org     lookup in virustotal http://habbo-alpha.fr/client_error.php
102 follow up this item(3163167) 3163167 Report false positive Report closed case make a suggestion 2013-02-23 14:04:18 OVERDUE! 2092.6  1744442  Other  toggle  alive SenderBaselookup 176.9.24.198 at virustotallookup 176.9.24.198 at Rus CERT university stuttgart germanylookup 176.9.24.198 at Ripe 176.9.24.198  AS13335 SenderBaselookup 141.101.117.207 at virustotallookup 141.101.117.207 at Rus CERT university stuttgart germanylookup 141.101.117.207 at Ripe 141.101.117.207  altervista.org lookup in virustotal http://habbang.altervista.org/storia.php ...  EU  RIPE    141.101.64.0 - 141.101.127.255      ns1.altervista.org  ns2.altervista.org  ns3.altervista.org     lookup in virustotal http://habbang.altervista.org/storia.php ...
103 follow up this item(3285280) 3285280 Report false positive Report closed case make a suggestion 2013-05-14 09:55:53 OVERDUE! 177.7  1843551  Other  up  alive SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  AS12552 SenderBaselookup 194.1.154.35 at virustotallookup 194.1.154.35 at Rus CERT university stuttgart germanylookup 194.1.154.35 at Ripe 194.1.154.35  aromafrukt.se lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...  SE  RIPE    194.1.154.0 - 194.1.154.255  Celab-1  Celab communications ABIP-ONLY  dns2.celab.se  dns1.celab.se       lookup in virustotal http://aromafrukt.se/ppgb1/cycgi-bin/web ...
104