CLEAN MX realtime database    
public access query for phishing URL Top 50 stats
Totally watched: 77, to down: 0, to up: 0, changed ip: 0
As of 2013-05-24 11:56:02 CEST
Subscribe to the PhishWatch Mailing list, updated hourly
This database consists of Phishing URI, collected and verified since Oct 2006 some of them may be already closed, but are still recognized as fraud by firefox and opera also offending domain names are honored by SURBL.
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

Attention: all URI'S are manually verified, but not cross-checked for real phishing function in this moment you make this query.(Sites may have been closed already..)
Our automatic Phishwalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

to look at some nice charts her are complete statistics for this database
and for our german friends some minutes on Symantec Phishing report

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0104 Seconds
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(1010455) 1010455  2012-01-10 14:10:25 2012-02-05 03:11:59 613  1338707  Bank of the West  up No evidence recorded dead SenderBaselookup 178.170.147.20 at virustotallookup 178.170.147.20 at Rus CERT university stuttgart germanylookup 178.170.147.20 at Ripe 178.170.147.20  AS6830 SenderBaselookup 78.102.78.132 at virustotallookup 78.102.78.132 at Rus CERT university stuttgart germanylookup 78.102.78.132 at Ripe 78.102.78.132  businessjournal7.net lookup in virustotal http://businessjournal7.net/finance-jour ...  CZ  RIPE   abuse@mistral.cz  78.102.0.0 - 78.102.127.255  UPC-BROADBAND-XXXI  UPC Broadband Internet Services  ns3.businessjournal7.net  ns1.businessjournal7.net  ns2.businessjournal7.net     lookup in virustotal http://businessjournal7.net/finance-jour ...
2 follow up this item(539998) 539998  2009-07-08 12:41:00 2009-07-08 14:07:51 1.4  749022    down No evidence recorded dead SenderBaselookup 94.112.24.230 at virustotallookup 94.112.24.230 at Rus CERT university stuttgart germanylookup 94.112.24.230 at Ripe 94.112.24.230  AS6830 SenderBaselookup 94.112.24.230 at virustotallookup 94.112.24.230 at Rus CERT university stuttgart germanylookup 94.112.24.230 at Ripe 94.112.24.230  hylki.com.mx lookup in virustotal http://www.natwest.com.hylki.com.mx/cust ...  CZ  RIPE   abuse@mistral.cz  94.112.0.0 - 94.112.255.255  UPC-BROADBAND-XXXVI  UPC Broadband Internet ServicesCZ-DATTELKABEL-20080709 #1CZ-DATTELKABEL-20080709 #2  ns2.mail-tr.com  ns1.mail-tr.com  ns1.long-storyclous.com  ns2.long-storyclous.com   lookup in virustotal http://www.natwest.com.hylki.com.mx/cust ...
3 follow up this item(538162) 538162  2009-07-05 23:21:00 2009-07-06 18:57:04 19.6  747133    down No evidence recorded dead SenderBaselookup 190.191.146.141 at virustotallookup 190.191.146.141 at Rus CERT university stuttgart germanylookup 190.191.146.141 at Ripe 190.191.146.141  AS6830 SenderBaselookup 190.191.146.141 at virustotallookup 190.191.146.141 at Rus CERT university stuttgart germanylookup 190.191.146.141 at Ripe 190.191.146.141  iljihli.com.mx lookup in virustotal http://www.usaa.com.iljihli.com.mx/inet/ ...  CZ  RIPE   abuse@mistral.cz  94.112.0.0 - 94.112.255.255  UPC-BROADBAND-XXXVI  UPC Broadband Internet ServicesCZ-DATTELKABEL-20080709 #1CZ-DATTELKABEL-20080709 #2  ns2.vine-prad.com  ns1.vine-prad.com  ns2.high-daily.com  ns1.high-daily.com   lookup in virustotal http://www.usaa.com.iljihli.com.mx/inet/ ...
4 follow up this item(393623) 393623  2008-11-15 20:37:00 2008-11-18 09:33:12 60.9  560320  PayPal  up No evidence recorded dead SenderBaselookup 94.112.69.81 at virustotallookup 94.112.69.81 at Rus CERT university stuttgart germanylookup 94.112.69.81 at Ripe 94.112.69.81  AS6830 SenderBaselookup 94.112.69.81 at virustotallookup 94.112.69.81 at Rus CERT university stuttgart germanylookup 94.112.69.81 at Ripe 94.112.69.81  94.112.69.81 lookup in virustotal http://94.112.69.81/Thanks.php  CZ  RIPE   abuse@mistral.cz  94.112.0.0 - 94.112.255.255  UPC-BROADBAND-XXXVI  UPC Broadband Internet ServicesCZ-DATTELKABEL-20080709 #1CZ-DATTELKABEL-20080709 #2           lookup in virustotal http://94.112.69.81/Thanks.php
5 follow up this item(557139) 557139  2009-08-03 16:07:00 2009-08-03 16:07:15 0  766892     No evidence recorded dead SenderBaselookup 212.40.65.69 at virustotallookup 212.40.65.69 at Rus CERT university stuttgart germanylookup 212.40.65.69 at Ripe 212.40.65.69  AS21229 SenderBaselookup 212.40.65.69 at virustotallookup 212.40.65.69 at Rus CERT university stuttgart germanylookup 212.40.65.69 at Ripe 212.40.65.69  volvontruck.hu lookup in virustotal http://www.volvontruck.hu/administrator/ ...  HU  RIPE  z_gorfol@dravanet.hu  212.40.64.0 - 212.40.78.255  HU-DRAVANET  Dravanet ISP Plc.  ns2.dravanet.hu  drava.dravanet.hu       lookup in virustotal http://www.volvontruck.hu/administrator/ ...
6 follow up this item(3067387) 3067387  2012-12-17 14:16:47 2012-12-17 16:20:23 2.1  1665772  Other  up No evidence recorded dead SenderBaselookup 212.58.116.73 at virustotallookup 212.58.116.73 at Rus CERT university stuttgart germanylookup 212.58.116.73 at Ripe 212.58.116.73  AS20771 SenderBaselookup 212.58.116.73 at virustotallookup 212.58.116.73 at Rus CERT university stuttgart germanylookup 212.58.116.73 at Ripe 212.58.116.73  build.ge lookup in virustotal http://build.ge/e107_admin/includes/logi ...  GE  RIPE  zzurashvili@ibasis.net  212.58.116.64 - 212.58.116.79  GE-BOOM  boomgeGE-IBERIAPAC-19990831GE-IBERIAPAC-19990831Optic Local Clients212.58.112.0/20  ns2.proservice.ge  ns1.proservice.ge       lookup in virustotal http://build.ge/e107_admin/includes/logi ...
7 follow up this item(3025852) 3025852  2012-11-21 19:20:10 2012-11-21 20:00:35 0.7  1621847  Itau  up No evidence recorded dead SenderBaselookup 212.58.116.73 at virustotallookup 212.58.116.73 at Rus CERT university stuttgart germanylookup 212.58.116.73 at Ripe 212.58.116.73  AS20771 SenderBaselookup 212.58.116.73 at virustotallookup 212.58.116.73 at Rus CERT university stuttgart germanylookup 212.58.116.73 at Ripe 212.58.116.73  dens.ge lookup in virustotal http://dens.ge/main/wp-content/plugins/p ...  GE  RIPE  zzurashvili@ibasis.net  212.58.116.64 - 212.58.116.79  GE-BOOM  boomgeGE-IBERIAPAC-19990831GE-IBERIAPAC-19990831Optic Local Clients212.58.112.0/20  ns2.proservice.ge.  ns1.proservice.ge.       lookup in virustotal http://dens.ge/main/wp-content/plugins/p ...
8 follow up this item(1170338) 1170338  2012-07-25 16:20:36 2012-07-26 03:04:11 10.7  1505356  Northern Rock  up No evidence recorded dead SenderBaselookup 212.58.116.73 at virustotallookup 212.58.116.73 at Rus CERT university stuttgart germanylookup 212.58.116.73 at Ripe 212.58.116.73  AS20771 SenderBaselookup 212.58.116.73 at virustotallookup 212.58.116.73 at Rus CERT university stuttgart germanylookup 212.58.116.73 at Ripe 212.58.116.73  jvarosnebi.ge lookup in virustotal http://jvarosnebi.ge/wp-content/themes/s ...  GE  RIPE  zzurashvili@ibasis.net  212.58.116.64 - 212.58.116.79  GE-BOOM  boomgeGE-IBERIAPAC-19990831GE-IBERIAPAC-19990831Optic Local Clients212.58.112.0/20  ns2.proservice.ge  ns1.proservice.ge       lookup in virustotal http://jvarosnebi.ge/wp-content/themes/s ...
9 follow up this item(969324) 969324  2011-09-13 22:22:43 2011-09-13 22:51:56 0.5  1274207  PayPal  up No evidence recorded dead SenderBaselookup 212.58.116.69 at virustotallookup 212.58.116.69 at Rus CERT university stuttgart germanylookup 212.58.116.69 at Ripe 212.58.116.69  AS20771 SenderBaselookup 212.58.116.69 at virustotallookup 212.58.116.69 at Rus CERT university stuttgart germanylookup 212.58.116.69 at Ripe 212.58.116.69  modernroofing.ge lookup in virustotal http://modernroofing.ge/imgs/eBayISAPI.d ...  GE  RIPE  zzurashvili@ibasis.net  212.58.116.64 - 212.58.116.79  GE-BOOM  boomgeGE-IBERIAPAC-19990831GE-IBERIAPAC-19990831Optic Local Clients212.58.112.0/20  ns2.proservice.ge  ns1.proservice.ge       lookup in virustotal http://modernroofing.ge/imgs/eBayISAPI.d ...
10 follow up this item(41377) 41377  2007-03-15 06:17:00 2008-04-28 23:49:39 9856.5  123336  phish  up No evidence recorded dead SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  AS41627 SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  89.251.32.104 lookup in virustotal http://89.251.32.104/chaseonline/  HU  RIPE  zzsolt@pickup.hu  89.251.32.0 - 89.251.39.255  PICKUPNET  Pick-Up Ltd.Pick-Up Ltd.           lookup in virustotal http://89.251.32.104/chaseonline/
11 follow up this item(41376) 41376  2007-03-15 06:18:00 2008-04-28 23:49:39 9856.5  123337  phish  up No evidence recorded dead SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  AS41627 SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  89.251.32.104 lookup in virustotal http://89.251.32.104/chaseonline/on_succ ...  HU  RIPE  zzsolt@pickup.hu  89.251.32.0 - 89.251.39.255  PICKUPNET  Pick-Up Ltd.Pick-Up Ltd.           lookup in virustotal http://89.251.32.104/chaseonline/on_succ ...
12 follow up this item(41345) 41345  2007-03-15 06:17:00 2008-04-28 23:49:38 9856.5  123335  phish  up No evidence recorded dead SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  AS41627 SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  89.251.32.104 lookup in virustotal http://89.251.32.104/chaseonline/index.h ...  HU  RIPE  zzsolt@pickup.hu  89.251.32.0 - 89.251.39.255  PICKUPNET  Pick-Up Ltd.Pick-Up Ltd.           lookup in virustotal http://89.251.32.104/chaseonline/index.h ...
13 follow up this item(41328) 41328  2007-03-15 05:40:00 2008-04-28 23:49:37 9857.2  123315  phish  up No evidence recorded dead SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  AS41627 SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  89.251.32.104 lookup in virustotal http://89.251.32.104/chaseonline/default ...  HU  RIPE  zzsolt@pickup.hu  89.251.32.0 - 89.251.39.255  PICKUPNET  Pick-Up Ltd.Pick-Up Ltd.           lookup in virustotal http://89.251.32.104/chaseonline/default ...
14 follow up this item(41291) 41291  2007-03-15 06:17:00 2008-04-28 23:49:36 9856.5  123334  phish  up No evidence recorded dead SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  AS41627 SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  89.251.32.104 lookup in virustotal http://89.251.32.104/chaseonline/sysdll. ...  HU  RIPE  zzsolt@pickup.hu  89.251.32.0 - 89.251.39.255  PICKUPNET  Pick-Up Ltd.Pick-Up Ltd.           lookup in virustotal http://89.251.32.104/chaseonline/sysdll. ...
15 follow up this item(40418) 40418  2007-03-13 06:59:00 2008-04-28 23:49:01 9903.8  122382  phish  up No evidence recorded dead SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  AS41627 SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  89.251.32.104 lookup in virustotal http://89.251.32.104/.cgi-bin/.www.banko ...  HU  RIPE  zzsolt@pickup.hu  89.251.32.0 - 89.251.39.255  PICKUPNET  Pick-Up Ltd.Pick-Up Ltd.           lookup in virustotal http://89.251.32.104/.cgi-bin/.www.banko ...
16 follow up this item(40417) 40417  2007-03-13 06:59:00 2008-04-28 23:49:01 9903.8  122383  phish  up No evidence recorded dead SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  AS41627 SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  89.251.32.104 lookup in virustotal http://89.251.32.104/.cgi-bin/.www.banko ...  HU  RIPE  zzsolt@pickup.hu  89.251.32.0 - 89.251.39.255  PICKUPNET  Pick-Up Ltd.Pick-Up Ltd.           lookup in virustotal http://89.251.32.104/.cgi-bin/.www.banko ...
17 follow up this item(40313) 40313  2007-03-13 03:27:00 2008-04-28 23:48:56 9907.4  122301  phish  up No evidence recorded dead SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  AS41627 SenderBaselookup 89.251.32.104 at virustotallookup 89.251.32.104 at Rus CERT university stuttgart germanylookup 89.251.32.104 at Ripe 89.251.32.104  89.251.32.104 lookup in virustotal http://89.251.32.104/.cgi-bin/.www.banko ...  HU  RIPE  zzsolt@pickup.hu  89.251.32.0 - 89.251.39.255  PICKUPNET  Pick-Up Ltd.Pick-Up Ltd.           lookup in virustotal http://89.251.32.104/.cgi-bin/.www.banko ...
18 follow up this item(3227634) 3227634  2013-04-29 04:10:20 2013-04-29 05:05:14 0.9    up No evidence recorded dead SenderBaselookup 123.58.180.5 at virustotallookup 123.58.180.5 at Rus CERT university stuttgart germanylookup 123.58.180.5 at apnic 123.58.180.5  AS45062 SenderBaselookup 123.58.180.6 at virustotallookup 123.58.180.6 at Rus CERT university stuttgart germanylookup 123.58.180.6 at apnic 123.58.180.6  lofter.com lookup in virustotal http://item-teiaiqbioacom.lofter.com/ghk ...  CN  APNIC  zyxu@corp.netease.com  123.58.160.0 - 123.58.191.255  Netease-Network  Guangzhou NetEase Computer System Co., Ltd.NetEase Building��No.16 Ke Yun Road, Zhong Shan Avenue,Guangzhou, P.R. China  ns1.nease.net.  ns2.nease.net.  ns3.nease.net.  ns4.nease.net.   lookup in virustotal http://item-teiaiqbioacom.lofter.com/ghk ...
19 follow up this item(33308) 33308  2007-02-08 21:42:00 2008-04-28 23:45:00 10681.1  98455  phish  up No evidence recorded dead SenderBaselookup 211.71.99.110 at virustotallookup 211.71.99.110 at Rus CERT university stuttgart germanylookup 211.71.99.110 at apnic 211.71.99.110  AS4538 SenderBaselookup 211.71.99.110 at virustotallookup 211.71.99.110 at Rus CERT university stuttgart germanylookup 211.71.99.110 at apnic 211.71.99.110  211.71.99.110 lookup in virustotal http://211.71.99.110:84/blackhillsfcu/pr ...  CN  APNIC  zyj@bict.edu.cn  211.71.96.0 - 211.71.111.255  BICT-CN  ~{11>)7~W0Q'TBeijing Institute of Clothing TechnologyBeijing 100029, China           lookup in virustotal http://211.71.99.110:84/blackhillsfcu/pr ...
20 follow up this item(33289) 33289  2007-02-09 04:34:00 2008-04-28 23:44:59 10674.2  98579  phish  up No evidence recorded dead SenderBaselookup 211.71.99.110 at virustotallookup 211.71.99.110 at Rus CERT university stuttgart germanylookup 211.71.99.110 at apnic 211.71.99.110  AS4538 SenderBaselookup 211.71.99.110 at virustotallookup 211.71.99.110 at Rus CERT university stuttgart germanylookup 211.71.99.110 at apnic 211.71.99.110  211.71.99.110 lookup in virustotal http://211.71.99.110:84/blackhillsfcu/lo ...  CN  APNIC  zyj@bict.edu.cn  211.71.96.0 - 211.71.111.255  BICT-CN  ~{11>)7~W0Q'TBeijing Institute of Clothing TechnologyBeijing 100029, China           lookup in virustotal http://211.71.99.110:84/blackhillsfcu/lo ...
21 follow up this item(914940) 914940  2011-04-29 15:13:22 2011-04-30 05:56:59 14.7  1184310    up No evidence recorded dead SenderBaselookup 211.67.128.136 at virustotallookup 211.67.128.136 at Rus CERT university stuttgart germanylookup 211.67.128.136 at apnic 211.67.128.136  AS4538 SenderBaselookup 211.67.128.136 at virustotallookup 211.67.128.136 at Rus CERT university stuttgart germanylookup 211.67.128.136 at apnic 211.67.128.136  211.67.128.136 lookup in virustotal http://211.67.128.136/discoo.html  CN  APNIC  zyadong@371.net  211.67.128.0 - 211.67.143.255  HNIFE-CN  ~{Henan Institute Of Finace & EconomicsZhengzhou, Henan 450002, China           lookup in virustotal http://211.67.128.136/discoo.html
22 follow up this item(441469) 441469  2009-02-07 18:46:00 2009-02-14 17:32:40 166.8  643542    up No evidence recorded dead SenderBaselookup 213.179.32.69 at virustotallookup 213.179.32.69 at Rus CERT university stuttgart germanylookup 213.179.32.69 at Ripe 213.179.32.69  AS16186 SenderBaselookup 213.179.32.69 at virustotallookup 213.179.32.69 at Rus CERT university stuttgart germanylookup 213.179.32.69 at Ripe 213.179.32.69  protechvideo.no lookup in virustotal http://protechvideo.no/www.paypal.fr/fr/ ...  NO  RIPE  zx3nsduqcd81@ssc.net  213.179.32.0 - 213.179.42.255  WEBONLINE-NET  Allocated to WebOnline anda lot of small allocationsSSC-INTERNET-ROUTE  ns2.nextra.no  ns1.nextra.no       lookup in virustotal http://protechvideo.no/www.paypal.fr/fr/ ...
23 follow up this item(438648) 438648  2009-01-30 12:32:00 2009-02-07 18:49:56 198.3  639892    up No evidence recorded dead SenderBaselookup 213.179.32.69 at virustotallookup 213.179.32.69 at Rus CERT university stuttgart germanylookup 213.179.32.69 at Ripe 213.179.32.69  AS16186 SenderBaselookup 213.179.32.69 at virustotallookup 213.179.32.69 at Rus CERT university stuttgart germanylookup 213.179.32.69 at Ripe 213.179.32.69  protechvideo.no lookup in virustotal http://protechvideo.no/www.paypal.fr/fr/ ...  NO  RIPE  zx3nsduqcd81@ssc.net  213.179.32.0 - 213.179.42.255  WEBONLINE-NET  Allocated to WebOnline anda lot of small allocationsSSC-INTERNET-ROUTE  ns2.nextra.no  ns1.nextra.no       lookup in virustotal http://protechvideo.no/www.paypal.fr/fr/ ...
24 follow up this item(436904) 436904  2009-01-28 14:34:00 2009-02-02 01:02:00 106.5  638350    up No evidence recorded dead SenderBaselookup 213.179.32.69 at virustotallookup 213.179.32.69 at Rus CERT university stuttgart germanylookup 213.179.32.69 at Ripe 213.179.32.69  AS16186 SenderBaselookup 213.179.32.69 at virustotallookup 213.179.32.69 at Rus CERT university stuttgart germanylookup 213.179.32.69 at Ripe 213.179.32.69  protechvideo.no lookup in virustotal http://protechvideo.no/All/www.paypal.co ...  NO  RIPE  zx3nsduqcd81@ssc.net  213.179.32.0 - 213.179.42.255  WEBONLINE-NET  Allocated to WebOnline anda lot of small allocationsSSC-INTERNET-ROUTE  ns2.nextra.no  ns1.nextra.no       lookup in virustotal http://protechvideo.no/All/www.paypal.co ...
25 follow up this item(436312) 436312  2009-01-28 14:55:00 2009-01-30 23:00:41 56.1  638373    up No evidence recorded dead SenderBaselookup 213.179.32.69 at virustotallookup 213.179.32.69 at Rus CERT university stuttgart germanylookup 213.179.32.69 at Ripe 213.179.32.69  AS16186 SenderBaselookup 213.179.32.69 at virustotallookup 213.179.32.69 at Rus CERT university stuttgart germanylookup 213.179.32.69 at Ripe 213.179.32.69  protechvideo.no lookup in virustotal http://protechvideo.no/All/www.paypal.co ...  NO  RIPE  zx3nsduqcd81@ssc.net  213.179.32.0 - 213.179.42.255  WEBONLINE-NET  Allocated to WebOnline anda lot of small allocationsSSC-INTERNET-ROUTE  ns1.nextra.no  ns2.nextra.no       lookup in virustotal http://protechvideo.no/All/www.paypal.co ...
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
26 follow up this item(436116) 436116  2009-01-29 18:53:00 2009-01-30 12:57:48 18.1  639330    up No evidence recorded dead SenderBaselookup 213.179.32.69 at virustotallookup 213.179.32.69 at Rus CERT university stuttgart germanylookup 213.179.32.69 at Ripe 213.179.32.69  AS16186 SenderBaselookup 213.179.32.69 at virustotallookup 213.179.32.69 at Rus CERT university stuttgart germanylookup 213.179.32.69 at Ripe 213.179.32.69  protechvideo.no lookup in virustotal http://www.protechvideo.no/www.paypal.co ...  NO  RIPE  zx3nsduqcd81@ssc.net  213.179.32.0 - 213.179.42.255  WEBONLINE-NET  Allocated to WebOnline anda lot of small allocationsSSC-INTERNET-ROUTE  ns2.nextra.no  ns1.nextra.no       lookup in virustotal http://www.protechvideo.no/www.paypal.co ...
27 follow up this item(1118958) 1118958  2012-05-29 11:19:44 2012-05-29 12:18:31 1  1449619  Other  up No evidence recorded dead SenderBaselookup 221.133.247.132 at virustotallookup 221.133.247.132 at Rus CERT university stuttgart germanylookup 221.133.247.132 at apnic 221.133.247.132  AS38363 SenderBaselookup 221.133.247.132 at virustotallookup 221.133.247.132 at Rus CERT university stuttgart germanylookup 221.133.247.132 at apnic 221.133.247.132  221.133.247.132 lookup in virustotal http://221.133.247.132/www.discovercard. ...  CN  APNIC  zwya@true-star.com  221.133.224.0 - 221.133.255.255  TrueStarNET  Shanghai OneTong Com. Ltd.No.777 West GuangZhong Road,Shanghai           lookup in virustotal http://221.133.247.132/www.discovercard. ...
28 follow up this item(830372) 830372  2010-12-12 19:10:00 2010-12-14 12:04:34 40.9  1088076  Wells Fargo  up No evidence recorded dead SenderBaselookup 203.189.16.140 at virustotallookup 203.189.16.140 at Rus CERT university stuttgart germanylookup 203.189.16.140 at apnic 203.189.16.140  AS38006 SenderBaselookup 203.189.16.140 at virustotallookup 203.189.16.140 at Rus CERT university stuttgart germanylookup 203.189.16.140 at apnic 203.189.16.140  203.189.16.140 lookup in virustotal http://203.189.16.140/j/js/  MY  APNIC  zuraini@tqt.com.my  203.189.16.0 - 203.189.23.255  TQT-MY  Time Quantum Technology Sdn. Bhd.Level 10, Wisma TIME,249 Jalan Tun Razak50400 Kuala Lumpur           lookup in virustotal http://203.189.16.140/j/js/
29 follow up this item(623522) 623522  2009-10-26 02:37:00 2009-10-27 02:37:00 24  847392    up No evidence recorded dead SenderBaselookup 212.58.98.206 at virustotallookup 212.58.98.206 at Rus CERT university stuttgart germanylookup 212.58.98.206 at Ripe 212.58.98.206  as28751 SenderBaselookup 212.58.98.206 at virustotallookup 212.58.98.206 at Rus CERT university stuttgart germanylookup 212.58.98.206 at Ripe 212.58.98.206  danishhouse.ge lookup in virustotal http://danishhouse.ge/photos/PayPal/conf ...  GE  RIPE  zura@telenet.ge  212.58.96.0 - 212.58.99.255  IBERIAPAC  Department of Packet transmission service  ns.iberiapac.ge.  ns1.iberiapac.ge.       lookup in virustotal http://danishhouse.ge/photos/PayPal/conf ...
30 follow up this item(541406) 541406  2009-07-10 15:46:00 2009-07-10 20:14:20 4.5  750414    up No evidence recorded dead SenderBaselookup 212.58.126.199 at virustotallookup 212.58.126.199 at Rus CERT university stuttgart germanylookup 212.58.126.199 at Ripe 212.58.126.199 SenderBaselookup 212.58.126.199 at virustotallookup 212.58.126.199 at Rus CERT university stuttgart germanylookup 212.58.126.199 at Ripe 212.58.126.199  aversi.ge lookup in virustotal http://www.aversi.ge/flash/Login.htm  GE  RIPE  zura@telenet.ge  212.58.126.128 - 212.58.126.255  GE-IBERIATEL  IBERIATEL Mobile OperatorGE-IBERIAPAC-19990831ROUTE FOR smsFiberLeasedLine's212.58.112.0/20  ns3.online.ge  ns.aversi.ge       lookup in virustotal http://www.aversi.ge/flash/Login.htm
31 follow up this item(533030) 533030  2009-06-30 17:22:00 2009-07-10 16:11:11 238.8  741813  Other  up No evidence recorded dead SenderBaselookup 212.58.126.199 at virustotallookup 212.58.126.199 at Rus CERT university stuttgart germanylookup 212.58.126.199 at Ripe 212.58.126.199 SenderBaselookup 212.58.126.199 at virustotallookup 212.58.126.199 at Rus CERT university stuttgart germanylookup 212.58.126.199 at Ripe 212.58.126.199  aversi.ge lookup in virustotal http://www.aversi.ge/flash/Controller.ht ...  GE  RIPE  zura@telenet.ge  212.58.126.128 - 212.58.126.255  GE-IBERIATEL  IBERIATEL Mobile OperatorGE-IBERIAPAC-19990831ROUTE FOR smsFiberLeasedLine's212.58.112.0/20  ns.aversi.ge  ns3.online.ge       lookup in virustotal http://www.aversi.ge/flash/Controller.ht ...
32 follow up this item(532843) 532843  2009-06-30 09:13:00 2009-07-06 14:36:42 149.4  741658    down No evidence recorded dead SenderBaselookup 212.58.126.199 at virustotallookup 212.58.126.199 at Rus CERT university stuttgart germanylookup 212.58.126.199 at Ripe 212.58.126.199 SenderBaselookup 212.58.126.199 at virustotallookup 212.58.126.199 at Rus CERT university stuttgart germanylookup 212.58.126.199 at Ripe 212.58.126.199  aversi.ge lookup in virustotal http://www.aversi.ge/flash/Controller.ht ...  GE  RIPE  zura@telenet.ge  212.58.126.128 - 212.58.126.255  GE-IBERIATEL  IBERIATEL Mobile OperatorGE-IBERIAPAC-19990831ROUTE FOR smsFiberLeasedLine's212.58.112.0/20  ns3.online.ge  ns.aversi.ge       lookup in virustotal http://www.aversi.ge/flash/Controller.ht ...
33 follow up this item(3089504) 3089504  2013-01-07 11:07:49 2013-01-07 15:53:03 4.8  1686294  PayPal  up No evidence recorded dead SenderBaselookup 87.250.74.67 at virustotallookup 87.250.74.67 at Rus CERT university stuttgart germanylookup 87.250.74.67 at Ripe 87.250.74.67  AS25488 SenderBaselookup 87.250.74.67 at virustotallookup 87.250.74.67 at Rus CERT university stuttgart germanylookup 87.250.74.67 at Ripe 87.250.74.67  novarasviluppo.it lookup in virustotal http://www.novarasviluppo.it/wp-content/ ...  IT  RIPE  zucca.marco@comune.novara.it  87.250.64.0 - 87.250.79.255  COMUNE-NOVARA-NET  Comune di NovaraComune di Novara  artemide.fauser.it  shark.fauser.it       lookup in virustotal http://www.novarasviluppo.it/wp-content/ ...
34 follow up this item(3089296) 3089296  2013-01-07 12:42:54 2013-01-10 15:26:20 74.7  1686486  PayPal  up No evidence recorded dead SenderBaselookup 87.250.74.67 at virustotallookup 87.250.74.67 at Rus CERT university stuttgart germanylookup 87.250.74.67 at Ripe 87.250.74.67  AS25488 SenderBaselookup 87.250.74.67 at virustotallookup 87.250.74.67 at Rus CERT university stuttgart germanylookup 87.250.74.67 at Ripe 87.250.74.67  novarasviluppo.it lookup in virustotal http://www.novarasviluppo.it/wp-content/ ...  IT  RIPE  zucca.marco@comune.novara.it  87.250.64.0 - 87.250.79.255  COMUNE-NOVARA-NET  Comune di NovaraComune di Novara  shark.fauser.it.  artemide.fauser.it.       lookup in virustotal http://www.novarasviluppo.it/wp-content/ ...
35 follow up this item(3089152) 3089152  2013-01-07 09:45:26 2013-01-10 15:21:27 77.6  1686037  PayPal  up No evidence recorded dead SenderBaselookup 87.250.74.67 at virustotallookup 87.250.74.67 at Rus CERT university stuttgart germanylookup 87.250.74.67 at Ripe 87.250.74.67  AS25488 SenderBaselookup 87.250.74.67 at virustotallookup 87.250.74.67 at Rus CERT university stuttgart germanylookup 87.250.74.67 at Ripe 87.250.74.67  novarasviluppo.it lookup in virustotal http://www.novarasviluppo.it/wp-content/ ...  IT  RIPE  zucca.marco@comune.novara.it  87.250.64.0 - 87.250.79.255  COMUNE-NOVARA-NET  Comune di NovaraComune di Novara  artemide.fauser.it.  shark.fauser.it.       lookup in virustotal http://www.novarasviluppo.it/wp-content/ ...
36 follow up this item(3089072) 3089072  2013-01-07 09:29:53 2013-01-10 15:19:44 77.8  1686031  PayPal  up No evidence recorded dead SenderBaselookup 87.250.74.67 at virustotallookup 87.250.74.67 at Rus CERT university stuttgart germanylookup 87.250.74.67 at Ripe 87.250.74.67  AS25488 SenderBaselookup 87.250.74.67 at virustotallookup 87.250.74.67 at Rus CERT university stuttgart germanylookup 87.250.74.67 at Ripe 87.250.74.67  novarasviluppo.it lookup in virustotal http://www.novarasviluppo.it/wp-content/ ...  IT  RIPE  zucca.marco@comune.novara.it  87.250.64.0 - 87.250.79.255  COMUNE-NOVARA-NET  Comune di NovaraComune di Novara  shark.fauser.it  artemide.fauser.it       lookup in virustotal http://www.novarasviluppo.it/wp-content/ ...
37 follow up this item(3089069) 3089069  2013-01-07 09:21:23 2013-01-10 15:19:42 78  1686025  PayPal  up No evidence recorded dead SenderBaselookup 87.250.74.67 at virustotallookup 87.250.74.67 at Rus CERT university stuttgart germanylookup 87.250.74.67 at Ripe 87.250.74.67  AS25488 SenderBaselookup 87.250.74.67 at virustotallookup 87.250.74.67 at Rus CERT university stuttgart germanylookup 87.250.74.67 at Ripe 87.250.74.67  novarasviluppo.it lookup in virustotal http://www.novarasviluppo.it/wp-content/ ...  IT  RIPE  zucca.marco@comune.novara.it  87.250.64.0 - 87.250.79.255  COMUNE-NOVARA-NET  Comune di NovaraComune di Novara  shark.fauser.it  artemide.fauser.it       lookup in virustotal http://www.novarasviluppo.it/wp-content/ ...
38 follow up this item(826821) 826821  2010-11-26 17:31:00 2010-11-30 04:12:40 82.7  1083948  Other  up No evidence recorded dead SenderBaselookup 211.69.198.139 at virustotallookup 211.69.198.139 at Rus CERT university stuttgart germanylookup 211.69.198.139 at apnic 211.69.198.139  AS4538 SenderBaselookup 211.69.198.139 at virustotallookup 211.69.198.139 at Rus CERT university stuttgart germanylookup 211.69.198.139 at apnic 211.69.198.139  211.69.198.139 lookup in virustotal http://211.69.198.139/capital.html  CN  APNIC  ztli@hustcc.whnet.edu.cn  211.69.192.0 - 211.69.207.255  HUSTB-CN  ~{;*VP@m9$4sQ'~}Huazhong University Of Science And TechnologyWuhan, Hubei 430074, China           lookup in virustotal http://211.69.198.139/capital.html
39 follow up this item(486975) 486975  2009-05-03 21:58:00 2009-05-04 03:25:05 5.5  694126    up No evidence recorded dead SenderBaselookup 211.69.198.248 at virustotallookup 211.69.198.248 at Rus CERT university stuttgart germanylookup 211.69.198.248 at apnic 211.69.198.248  AS4538 SenderBaselookup 211.69.198.248 at virustotallookup 211.69.198.248 at Rus CERT university stuttgart germanylookup 211.69.198.248 at apnic 211.69.198.248  211.69.198.248 lookup in virustotal http://211.69.198.248/www.discovercard.c ...  CN  APNIC  ztli@hustcc.whnet.edu.cn  211.69.192.0 - 211.69.207.255  HUSTB-CN  ~{;*VP@m9$4sQ'~}Huazhong University Of Science And TechnologyWuhan, Hubei 430074, China           lookup in virustotal http://211.69.198.248/www.discovercard.c ...
40 follow up this item(248961) 248961  2008-02-01 09:41:00 2008-04-28 22:57:47 2100.3  382917    up No evidence recorded dead SenderBaselookup 211.69.198.208 at virustotallookup 211.69.198.208 at Rus CERT university stuttgart germanylookup 211.69.198.208 at apnic 211.69.198.208  AS4538 SenderBaselookup 211.69.198.208 at virustotallookup 211.69.198.208 at Rus CERT university stuttgart germanylookup 211.69.198.208 at apnic 211.69.198.208  211.69.198.208 lookup in virustotal http://211.69.198.208/roma/Roma.php?appl ...  CN  APNIC  ztli@hustcc.whnet.edu.cn  211.69.192.0 - 211.69.207.255  HUSTB-CN  ~{;*VP@m9$4sQ'~}Huazhong University Of Science And TechnologyWuhan, Hubei 430074, China           lookup in virustotal http://211.69.198.208/roma/Roma.php?appl ...
41 follow up this item(225362) 225362  2007-12-05 02:40:00 2008-04-28 22:31:37 3498.9  354933    up No evidence recorded closed SenderBaselookup 211.69.198.208 at virustotallookup 211.69.198.208 at Rus CERT university stuttgart germanylookup 211.69.198.208 at apnic 211.69.198.208  AS4538 SenderBaselookup 211.69.198.208 at virustotallookup 211.69.198.208 at Rus CERT university stuttgart germanylookup 211.69.198.208 at apnic 211.69.198.208  211.69.198.208 lookup in virustotal http://211.69.198.208/www.bancaroma.it/s ...  CN  APNIC  ztli@hustcc.whnet.edu.cn  211.69.192.0 - 211.69.207.255  HUSTB-CN  ~{;*VP@m9$4sQ'~}Huazhong University Of Science And TechnologyWuhan, Hubei 430074, China           lookup in virustotal http://211.69.198.208/www.bancaroma.it/s ...
42 follow up this item(225361) 225361  2007-12-05 02:41:12 2008-04-28 22:31:36 3498.8  354934    up No evidence recorded closed SenderBaselookup 211.69.198.208 at virustotallookup 211.69.198.208 at Rus CERT university stuttgart germanylookup 211.69.198.208 at apnic 211.69.198.208  AS4538 SenderBaselookup 211.69.198.208 at virustotallookup 211.69.198.208 at Rus CERT university stuttgart germanylookup 211.69.198.208 at apnic 211.69.198.208  211.69.198.208 lookup in virustotal http://211.69.198.208/www.bancaroma.it/s ...  CN  APNIC  ztli@hustcc.whnet.edu.cn  211.69.192.0 - 211.69.207.255  HUSTB-CN  ~{;*VP@m9$4sQ'~}Huazhong University Of Science And TechnologyWuhan, Hubei 430074, China           lookup in virustotal http://211.69.198.208/www.bancaroma.it/s ...
43 follow up this item(157668) 157668  2007-05-31 18:59:00 2008-04-28 21:19:51 7994.3  268304    up No evidence recorded dead SenderBaselookup 211.69.193.133 at virustotallookup 211.69.193.133 at Rus CERT university stuttgart germanylookup 211.69.193.133 at apnic 211.69.193.133  AS4538 SenderBaselookup 211.69.193.133 at virustotallookup 211.69.193.133 at Rus CERT university stuttgart germanylookup 211.69.193.133 at apnic 211.69.193.133  211.69.193.133 lookup in virustotal http://211.69.193.133/ebayISAPI.dll/  CN  APNIC  ztli@hustcc.whnet.edu.cn  211.69.192.0 - 211.69.207.255  HUSTB-CN  ~{;*VP@m9$4sQ'~}Huazhong University Of Science And TechnologyWuhan, Hubei 430074, China           lookup in virustotal http://211.69.193.133/ebayISAPI.dll/
44 follow up this item(44161) 44161  2007-03-23 00:48:07 2008-04-28 23:51:32 9670.1  126408  phish  up No evidence recorded dead SenderBaselookup 211.69.206.45 at virustotallookup 211.69.206.45 at Rus CERT university stuttgart germanylookup 211.69.206.45 at apnic 211.69.206.45  AS4538 SenderBaselookup 211.69.207.11 at virustotallookup 211.69.207.11 at Rus CERT university stuttgart germanylookup 211.69.207.11 at apnic 211.69.207.11  edu.cn lookup in virustotal http://itec.hust.edu.cn/English/ /del ...  CN  APNIC  ztli@hustcc.whnet.edu.cn  211.69.192.0 - 211.69.207.255  HUSTB-CN  ~{;*VP@m9$4sQ'~}Huazhong University Of Science And TechnologyWuhan, Hubei 430074, China  ns2.cernet.net  dns2.edu.cn  deneb.dfn.de  dns.edu.cn  ns2.cuhk.hk lookup in virustotal http://itec.hust.edu.cn/English/ /del ...
45 follow up this item(44123) 44123  2007-03-22 22:27:00 2008-04-28 23:51:30 9672.4  126390  phish  up No evidence recorded dead SenderBaselookup 211.69.206.45 at virustotallookup 211.69.206.45 at Rus CERT university stuttgart germanylookup 211.69.206.45 at apnic 211.69.206.45  AS4538 SenderBaselookup 211.69.207.11 at virustotallookup 211.69.207.11 at Rus CERT university stuttgart germanylookup 211.69.207.11 at apnic 211.69.207.11  edu.cn lookup in virustotal http://itec.hust.edu.cn/English/%20%20%2 ...  CN  APNIC  ztli@hustcc.whnet.edu.cn  211.69.192.0 - 211.69.207.255  HUSTB-CN  ~{;*VP@m9$4sQ'~}Huazhong University Of Science And TechnologyWuhan, Hubei 430074, China  ns2.cernet.net  dns2.edu.cn  deneb.dfn.de  dns.edu.cn  ns2.cuhk.hk lookup in virustotal http://itec.hust.edu.cn/English/%20%20%2 ...
46 follow up this item(44053) 44053  2007-03-22 18:18:22 2008-04-28 23:51:27 9676.6  126351  phish  up No evidence recorded dead SenderBaselookup 211.69.206.45 at virustotallookup 211.69.206.45 at Rus CERT university stuttgart germanylookup 211.69.206.45 at apnic 211.69.206.45  AS4538 SenderBaselookup 211.69.207.11 at virustotallookup 211.69.207.11 at Rus CERT university stuttgart germanylookup 211.69.207.11 at apnic 211.69.207.11  edu.cn lookup in virustotal http://itec.hust.edu.cn/English/ /del ...  CN  APNIC  ztli@hustcc.whnet.edu.cn  211.69.192.0 - 211.69.207.255  HUSTB-CN  ~{;*VP@m9$4sQ'~}Huazhong University Of Science And TechnologyWuhan, Hubei 430074, China  ns2.cernet.net  dns2.edu.cn  deneb.dfn.de  dns.edu.cn  ns2.cuhk.hk lookup in virustotal http://itec.hust.edu.cn/English/ /del ...
47 follow up this item(44031) 44031  2007-03-22 21:05:00 2008-04-28 23:51:26 9673.8  126368  phish  up No evidence recorded dead SenderBaselookup 211.69.206.45 at virustotallookup 211.69.206.45 at Rus CERT university stuttgart germanylookup 211.69.206.45 at apnic 211.69.206.45  AS4538 SenderBaselookup 211.69.207.11 at virustotallookup 211.69.207.11 at Rus CERT university stuttgart germanylookup 211.69.207.11 at apnic 211.69.207.11  edu.cn lookup in virustotal http://itec.hust.edu.cn/English/%20%20%2 ...  CN  APNIC  ztli@hustcc.whnet.edu.cn  211.69.192.0 - 211.69.207.255  HUSTB-CN  ~{;*VP@m9$4sQ'~}Huazhong University Of Science And TechnologyWuhan, Hubei 430074, China  ns2.cernet.net  dns2.edu.cn  deneb.dfn.de  dns.edu.cn  ns2.cuhk.hk lookup in virustotal http://itec.hust.edu.cn/English/%20%20%2 ...
48 follow up this item(745366) 745366  2010-03-09 16:24:00 2010-03-16 20:35:34 172.2  941561    up No evidence recorded dead SenderBaselookup 193.224.223.11 at virustotallookup 193.224.223.11 at Rus CERT university stuttgart germanylookup 193.224.223.11 at Ripe 193.224.223.11 SenderBaselookup 193.224.223.11 at virustotallookup 193.224.223.11 at Rus CERT university stuttgart germanylookup 193.224.223.11 at Ripe 193.224.223.11  tsf.hu lookup in virustotal http://apollo1.szv.tsf.hu/grundtvig/file ...  HU  RIPE  zsu@wem.date.hu  193.224.223.0 - 193.224.223.255  BRUNSZNET  Brunszvik Terez Ovokepzo FoiskolaBrunszvik Terez Teacher Training College for KindergartenHBONE/HUNGARNET Block 02  ns2.iif.hu.  sphinx.tsf.hu.       lookup in virustotal http://apollo1.szv.tsf.hu/grundtvig/file ...
49 follow up this item(642968) 642968  2009-10-26 02:38:00 2009-10-26 11:03:27 8.4  847411    up No evidence recorded dead SenderBaselookup 193.224.223.11 at virustotallookup 193.224.223.11 at Rus CERT university stuttgart germanylookup 193.224.223.11 at Ripe 193.224.223.11 SenderBaselookup 193.224.223.11 at virustotallookup 193.224.223.11 at Rus CERT university stuttgart germanylookup 193.224.223.11 at Ripe 193.224.223.11  tsf.hu lookup in virustotal http://apollo1.szv.tsf.hu/grundtvig/file ...  HU  RIPE  zsu@wem.date.hu  193.224.223.0 - 193.224.223.255  BRUNSZNET  Brunszvik Terez Ovokepzo FoiskolaBrunszvik Terez Teacher Training College for KindergartenHBONE/HUNGARNET Block 02  ns2.iif.hu.  sphinx.tsf.hu.       lookup in virustotal http://apollo1.szv.tsf.hu/grundtvig/file ...
50 follow up this item(257413) 257413  2008-02-19 18:01:00 2008-04-28 23:06:23 1660.1  393285    up No evidence recorded dead SenderBaselookup 212.182.28.194 at virustotallookup 212.182.28.194 at Rus CERT university stuttgart germanylookup 212.182.28.194 at Ripe 212.182.28.194  AS12324 SenderBaselookup 212.182.28.194 at virustotallookup 212.182.28.194 at Rus CERT university stuttgart germanylookup 212.182.28.194 at Ripe 212.182.28.194  lublin.pl lookup in virustotal http://implant.am.lublin.pl/~galeria/alb ...  PL  RIPE  zsinf@eskulap.am.lublin.pl  212.182.28.0 - 212.182.28.255  PL-LUB-AM  Medical University, Lublin, Poland  bilbo.nask.org.pl  ns2.lublin.pl  ns1.lublin.pl     lookup in virustotal http://implant.am.lublin.pl/~galeria/alb ...
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
51 follow up this item(868766) 868766  2011-02-23 15:40:40 2011-02-24 02:06:15 10.4  1137915    up No evidence recorded dead SenderBaselookup 109.69.119.190 at virustotallookup 109.69.119.190 at Rus CERT university stuttgart germanylookup 109.69.119.190 at Ripe 109.69.119.190  AS50031 SenderBaselookup 109.69.119.190 at virustotallookup 109.69.119.190 at Rus CERT university stuttgart germanylookup 109.69.119.190 at Ripe 109.69.119.190  aceeeo.org lookup in virustotal http://www.aceeeo.org/includes/PEAR/HALI ...  HU  RIPE  zsg@zalaszam.hu  109.69.118.0 - 109.69.119.255  ZALASZAM-NET  Zalaszam Informatika Kft.Zalaszam InfrastructureZalaszam Kft.Hungary  ns1.zalaszam.hu  vhost.zalaszam.hu       lookup in virustotal http://www.aceeeo.org/includes/PEAR/HALI ...
52 follow up this item(868765) 868765  2011-02-23 15:40:40 2011-02-24 02:06:16 10.4  1136414    up No evidence recorded dead SenderBaselookup 109.69.119.190 at virustotallookup 109.69.119.190 at Rus CERT university stuttgart germanylookup 109.69.119.190 at Ripe 109.69.119.190  AS50031 SenderBaselookup 109.69.119.190 at virustotallookup 109.69.119.190 at Rus CERT university stuttgart germanylookup 109.69.119.190 at Ripe 109.69.119.190  aceeeo.org lookup in virustotal http://www.aceeeo.org/includes/Archive/F ...  HU  RIPE  zsg@zalaszam.hu  109.69.118.0 - 109.69.119.255  ZALASZAM-NET  Zalaszam Informatika Kft.Zalaszam InfrastructureZalaszam Kft.Hungary  ns1.zalaszam.hu  vhost.zalaszam.hu       lookup in virustotal http://www.aceeeo.org/includes/Archive/F ...
53 follow up this item(830897) 830897  2010-12-15 01:04:00 2010-12-15 13:51:18 12.8  1088640    up No evidence recorded dead SenderBaselookup 109.69.119.190 at virustotallookup 109.69.119.190 at Rus CERT university stuttgart germanylookup 109.69.119.190 at Ripe 109.69.119.190  AS50031 SenderBaselookup 109.69.119.190 at virustotallookup 109.69.119.190 at Rus CERT university stuttgart germanylookup 109.69.119.190 at Ripe 109.69.119.190  aceeeo.org lookup in virustotal http://www.aceeeo.org/components/com_zoo ...  HU  RIPE  zsg@zalaszam.hu  109.69.118.0 - 109.69.119.255  ZALASZAM-NET  Zalaszam Informatika Kft.Zalaszam InfrastructureZalaszam Kft.Hungary  ns1.zalaszam.hu  vhost.zalaszam.hu       lookup in virustotal http://www.aceeeo.org/components/com_zoo ...
54 follow up this item(1026969) 1026969  2012-02-05 12:36:27 2012-05-22 14:14:18 2568.6  1358201  Other  up No evidence recorded dead SenderBaselookup 116.213.114.98 at virustotallookup 116.213.114.98 at Rus CERT university stuttgart germanylookup 116.213.114.98 at apnic 116.213.114.98  AS24134 SenderBaselookup 116.213.114.98 at virustotallookup 116.213.114.98 at Rus CERT university stuttgart germanylookup 116.213.114.98 at apnic 116.213.114.98  chasedream.com lookup in virustotal http://www.chasedream.com/show.aspx?id=1 ...  CN  APNIC  zp@cn.cnlink.net  116.213.96.0 - 116.213.127.255  CNLINKNET  CNLink Network Technology Ltd.20/F,Rouy Chai internation Building, No.8 YongandongliJianguomen, BeijingRoute origin from CSTNET  ns15.dnsmadeeasy.com  ns13.dnsmadeeasy.com  ns14.dnsmadeeasy.com  ns10.dnsmadeeasy.com  ns11.dnsmadeeasy.com lookup in virustotal http://www.chasedream.com/show.aspx?id=1 ...
55 follow up this item(1026959) 1026959  2012-02-05 12:36:27 2012-02-05 13:02:41 0.4  1358100  Chase  up No evidence recorded dead SenderBaselookup 116.213.114.99 at virustotallookup 116.213.114.99 at Rus CERT university stuttgart germanylookup 116.213.114.99 at apnic 116.213.114.99  AS24134 SenderBaselookup 116.213.114.99 at virustotallookup 116.213.114.99 at Rus CERT university stuttgart germanylookup 116.213.114.99 at apnic 116.213.114.99  chasedream.com lookup in virustotal http://forum.chasedream.com/Master/threa ...  CN  APNIC  zp@cn.cnlink.net  116.213.96.0 - 116.213.127.255  CNLINKNET  CNLink Network Technology Ltd.20/F,Rouy Chai internation Building, No.8 YongandongliJianguomen, BeijingRoute origin from CSTNET  ns15.dnsmadeeasy.com  ns13.dnsmadeeasy.com  ns14.dnsmadeeasy.com  ns10.dnsmadeeasy.com  ns11.dnsmadeeasy.com lookup in virustotal http://forum.chasedream.com/Master/threa ...
56 follow up this item(980480) 980480  2011-10-18 18:21:51 2012-01-10 21:38:01 2020.3  1295006  PayPal  up No evidence recorded dead SenderBaselookup 116.213.249.92 at virustotallookup 116.213.249.92 at Rus CERT university stuttgart germanylookup 116.213.249.92 at apnic 116.213.249.92  AS4847 SenderBaselookup 116.213.249.92 at virustotallookup 116.213.249.92 at Rus CERT university stuttgart germanylookup 116.213.249.92 at apnic 116.213.249.92  116.213.249.92 lookup in virustotal http://116.213.249.92:8081/cmd=login/ind ...  CN  APNIC  zp@cn.cnlink.net  116.213.128.0 - 116.213.255.255  CNLINKNET  CNLink Network Technology Ltd.20/F,Rouy Chai internation Building, No.8 YongandongliJianguomen, Beijing           lookup in virustotal http://116.213.249.92:8081/cmd=login/ind ...
57 follow up this item(14808) 14808  2006-12-29 19:09:00 2008-04-28 21:08:38 11665  59553  phish  up No evidence recorded dead SenderBaselookup 81.180.173.96 at virustotallookup 81.180.173.96 at Rus CERT university stuttgart germanylookup 81.180.173.96 at Ripe 81.180.173.96  AS30976 SenderBaselookup 81.180.173.96 at virustotallookup 81.180.173.96 at Rus CERT university stuttgart germanylookup 81.180.173.96 at Ripe 81.180.173.96  81.180.173.96 lookup in virustotal http://81.180.173.96/cb  ro  RIPE  zozo@it4web.ro  81.180.172.0 - 81.180.173.255  SC-IT4WEB-SRL  S.C. IT4WEB S.R.L.Brancusi 184, Cluj-Napoca,3400 CJ, RomaniaIT4WEB SRL           lookup in virustotal http://81.180.173.96/cb
58 follow up this item(14787) 14787  2006-12-29 19:18:00 2008-04-28 21:08:23 11664.8  59636  phish  up No evidence recorded dead SenderBaselookup 81.180.173.96 at virustotallookup 81.180.173.96 at Rus CERT university stuttgart germanylookup 81.180.173.96 at Ripe 81.180.173.96  AS30976 SenderBaselookup 81.180.173.96 at virustotallookup 81.180.173.96 at Rus CERT university stuttgart germanylookup 81.180.173.96 at Ripe 81.180.173.96  81.180.173.96 lookup in virustotal http://81.180.173.96/confirm/online/cust ...  ro  RIPE  zozo@it4web.ro  81.180.172.0 - 81.180.173.255  SC-IT4WEB-SRL  S.C. IT4WEB S.R.L.Brancusi 184, Cluj-Napoca,3400 CJ, RomaniaIT4WEB SRL           lookup in virustotal http://81.180.173.96/confirm/online/cust ...
59 follow up this item(14768) 14768  2006-12-29 20:44:00 2008-04-28 21:08:09 11663.4  59730  phish  up No evidence recorded dead SenderBaselookup 81.180.173.96 at virustotallookup 81.180.173.96 at Rus CERT university stuttgart germanylookup 81.180.173.96 at Ripe 81.180.173.96  AS30976 SenderBaselookup 81.180.173.96 at virustotallookup 81.180.173.96 at Rus CERT university stuttgart germanylookup 81.180.173.96 at Ripe 81.180.173.96  81.180.173.96 lookup in virustotal http://81.180.173.96/r1/cb/  ro  RIPE  zozo@it4web.ro  81.180.172.0 - 81.180.173.255  SC-IT4WEB-SRL  S.C. IT4WEB S.R.L.Brancusi 184, Cluj-Napoca,3400 CJ, RomaniaIT4WEB SRL           lookup in virustotal http://81.180.173.96/r1/cb/
60 follow up this item(14767) 14767  2006-12-29 20:44:00 2008-04-28 21:08:08 11663.4  59729  phish  up No evidence recorded dead SenderBaselookup 81.180.173.96 at virustotallookup 81.180.173.96 at Rus CERT university stuttgart germanylookup 81.180.173.96 at Ripe 81.180.173.96  AS30976 SenderBaselookup 81.180.173.96 at virustotallookup 81.180.173.96 at Rus CERT university stuttgart germanylookup 81.180.173.96 at Ripe 81.180.173.96  81.180.173.96 lookup in virustotal http://81.180.173.96/r1/cb  ro  RIPE  zozo@it4web.ro  81.180.172.0 - 81.180.173.255  SC-IT4WEB-SRL  S.C. IT4WEB S.R.L.Brancusi 184, Cluj-Napoca,3400 CJ, RomaniaIT4WEB SRL           lookup in virustotal http://81.180.173.96/r1/cb
61 follow up this item(3232459) 3232459  2013-04-30 01:50:12 2013-05-08 13:55:12 204.1  1808314  Other  up No evidence recorded dead SenderBaselookup 199.193.70.149 at virustotallookup 199.193.70.149 at Rus CERT university stuttgart germanylookup 199.193.70.149 at ARIN 199.193.70.149  AS53935 SenderBaselookup 199.193.70.149 at virustotallookup 199.193.70.149 at Rus CERT university stuttgart germanylookup 199.193.70.149 at ARIN 199.193.70.149  f3322.org lookup in virustotal http://zhongkepc2000.f3322.org/  US  ARIN  zoujinhe@ehostingusa.com  199.193.64.0 - 199.193.71.255  VPS21004  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns1.3322.net  ns2.3322.net       lookup in virustotal http://zhongkepc2000.f3322.org/
62 follow up this item(3213921) 3213921  2013-04-19 13:40:28 2013-04-19 23:58:03 10.3  1794150  Blizzard  up No evidence recorded dead SenderBaselookup 199.114.244.139 at virustotallookup 199.114.244.139 at Rus CERT university stuttgart germanylookup 199.114.244.139 at ARIN 199.114.244.139  AS53935 SenderBaselookup 199.114.244.139 at virustotallookup 199.114.244.139 at Rus CERT university stuttgart germanylookup 199.114.244.139 at ARIN 199.114.244.139  helpusbattle.net lookup in virustotal http://helpusbattle.net  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns1.ndns.cn  ns2.ndns.cn       lookup in virustotal http://helpusbattle.net
63 follow up this item(3182385) 3182385  2013-03-18 01:29:50 2013-03-20 06:18:51 52.8  1764135  RuneScape  down No evidence recorded dead SenderBaselookup 199.36.73.110 at virustotallookup 199.36.73.110 at Rus CERT university stuttgart germanylookup 199.36.73.110 at ARIN 199.36.73.110  AS53935, AS6939 SenderBaselookup 199.36.73.110 at virustotallookup 199.36.73.110 at Rus CERT university stuttgart germanylookup 199.36.73.110 at ARIN 199.36.73.110  xzyart.com lookup in virustotal http://www.xzyart.com/css/?https://secur ...  US  ARIN  zoujinhe@ehostingusa.com  199.36.72.0 - 199.36.79.255  VPS21002  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns1.dnspod.net.  f1g1ns2.dnspod.net.       lookup in virustotal http://www.xzyart.com/css/?https://secur ...
64 follow up this item(3181757) 3181757  2013-03-18 01:40:19 2013-03-19 11:25:13 33.7  1764135  RuneScape  down No evidence recorded dead SenderBaselookup 199.36.73.110 at virustotallookup 199.36.73.110 at Rus CERT university stuttgart germanylookup 199.36.73.110 at ARIN 199.36.73.110  AS53935, AS6939 SenderBaselookup 199.36.73.110 at virustotallookup 199.36.73.110 at Rus CERT university stuttgart germanylookup 199.36.73.110 at ARIN 199.36.73.110  xzyart.com lookup in virustotal http://www.xzyart.com/css/?https://secur ...  US  ARIN  zoujinhe@ehostingusa.com  199.36.72.0 - 199.36.79.255  VPS21002  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns1.dnspod.net.  f1g1ns2.dnspod.net.       lookup in virustotal http://www.xzyart.com/css/?https://secur ...
65 follow up this item(3181755) 3181755  2013-03-18 01:31:07 2013-03-19 11:24:54 33.9  1764138  RuneScape  down No evidence recorded dead SenderBaselookup 199.36.73.110 at virustotallookup 199.36.73.110 at Rus CERT university stuttgart germanylookup 199.36.73.110 at ARIN 199.36.73.110  AS53935, AS6939 SenderBaselookup 199.36.73.110 at virustotallookup 199.36.73.110 at Rus CERT university stuttgart germanylookup 199.36.73.110 at ARIN 199.36.73.110  xzyart.com lookup in virustotal http://www.xzyart.com/css/index.htm  US  ARIN  zoujinhe@ehostingusa.com  199.36.72.0 - 199.36.79.255  VPS21002  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns2.dnspod.net.  f1g1ns1.dnspod.net.       lookup in virustotal http://www.xzyart.com/css/index.htm
66 follow up this item(3175398) 3175398  2013-03-11 14:25:17 2013-03-12 20:29:24 30.1  1757851  Other  down No evidence recorded dead SenderBaselookup 199.192.153.23 at virustotallookup 199.192.153.23 at Rus CERT university stuttgart germanylookup 199.192.153.23 at ARIN 199.192.153.23  AS53935, AS6939 SenderBaselookup 199.192.153.23 at virustotallookup 199.192.153.23 at Rus CERT university stuttgart germanylookup 199.192.153.23 at ARIN 199.192.153.23  yryfhrfr-uurhh22.tk lookup in virustotal http://yryfhrfr-uurhh22.tk/k1/a30/?id=ky ...  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  NS03.DOT.tk  NS04.DOT.tk  NS02.DOT.tk  NS01.DOT.tk   lookup in virustotal http://yryfhrfr-uurhh22.tk/k1/a30/?id=ky ...
67 follow up this item(3174721) 3174721  2013-03-06 14:54:27 2013-03-12 20:16:15 149.4  1754681  Other  down No evidence recorded dead SenderBaselookup 199.192.153.23 at virustotallookup 199.192.153.23 at Rus CERT university stuttgart germanylookup 199.192.153.23 at ARIN 199.192.153.23  AS53935, AS6939 SenderBaselookup 199.192.153.23 at virustotallookup 199.192.153.23 at Rus CERT university stuttgart germanylookup 199.192.153.23 at ARIN 199.192.153.23  goohhdnnmsyx-11.tk lookup in virustotal http://goohhdnnmsyx-11.tk/k1/a30/?id=vj1 ...  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  NS01.DOT.tk  NS04.DOT.tk  NS03.DOT.tk  NS02.DOT.tk   lookup in virustotal http://goohhdnnmsyx-11.tk/k1/a30/?id=vj1 ...
68 follow up this item(3147511) 3147511  2013-02-19 02:58:35 2013-02-20 23:10:19 44.2  1734210  Other  up No evidence recorded dead SenderBaselookup 199.193.64.82 at virustotallookup 199.193.64.82 at Rus CERT university stuttgart germanylookup 199.193.64.82 at ARIN 199.193.64.82  AS53935 SenderBaselookup 199.193.64.82 at virustotallookup 199.193.64.82 at Rus CERT university stuttgart germanylookup 199.193.64.82 at ARIN 199.193.64.82  fwiufhw-03.tk lookup in virustotal http://fwiufhw-03.tk/1/30/?id=ky008  US  ARIN  zoujinhe@ehostingusa.com  199.193.64.0 - 199.193.71.255  VPS21004  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  NS02.DOT.tk  NS03.DOT.tk  NS01.DOT.tk  NS04.DOT.tk   lookup in virustotal http://fwiufhw-03.tk/1/30/?id=ky008
69 follow up this item(3142105) 3142105  2013-02-14 19:55:26 2013-02-27 13:44:38 305.8  1729422  Scotiabank  up No evidence recorded dead SenderBaselookup 199.193.64.102 at virustotallookup 199.193.64.102 at Rus CERT university stuttgart germanylookup 199.193.64.102 at ARIN 199.193.64.102  AS53935 SenderBaselookup 199.193.64.102 at virustotallookup 199.193.64.102 at Rus CERT university stuttgart germanylookup 199.193.64.102 at ARIN 199.193.64.102  ybbxs.com lookup in virustotal http://www.ybbxs.com/fresno.html  US  ARIN  zoujinhe@ehostingusa.com  199.193.64.0 - 199.193.71.255  VPS21004  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns2.dnspod.net  f1g1ns1.dnspod.net       lookup in virustotal http://www.ybbxs.com/fresno.html
70 follow up this item(3136974) 3136974  2013-02-10 00:19:11 2013-02-10 00:58:30 0.7    up No evidence recorded dead SenderBaselookup 199.193.69.46 at virustotallookup 199.193.69.46 at Rus CERT university stuttgart germanylookup 199.193.69.46 at ARIN 199.193.69.46  AS53935 SenderBaselookup 199.193.69.46 at virustotallookup 199.193.69.46 at Rus CERT university stuttgart germanylookup 199.193.69.46 at ARIN 199.193.69.46  2288.org lookup in virustotal http://hwe2kl.suaom-12kggkkllesf.2288.or ...  US  ARIN  zoujinhe@ehostingusa.com  199.193.64.0 - 199.193.71.255  VPS21004  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns2.3322.net.  ns1.3322.net.       lookup in virustotal http://hwe2kl.suaom-12kggkkllesf.2288.or ...
71 follow up this item(3135867) 3135867  2013-02-08 20:19:08 2013-02-08 20:54:43 0.6    up No evidence recorded dead SenderBaselookup 199.193.69.46 at virustotallookup 199.193.69.46 at Rus CERT university stuttgart germanylookup 199.193.69.46 at ARIN 199.193.69.46  AS53935 SenderBaselookup 199.193.69.46 at virustotallookup 199.193.69.46 at Rus CERT university stuttgart germanylookup 199.193.69.46 at ARIN 199.193.69.46  2288.org lookup in virustotal http://ceubi3.suaom-12kggkkllesf.2288.or ...  US  ARIN  zoujinhe@ehostingusa.com  199.193.64.0 - 199.193.71.255  VPS21004  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns1.3322.net.  ns2.3322.net.       lookup in virustotal http://ceubi3.suaom-12kggkkllesf.2288.or ...
72 follow up this item(3134566) 3134566  2013-02-07 17:57:09 OVERDUE! 2537.6     No log recorded SenderBaselookup 199.193.69.46 at virustotallookup 199.193.69.46 at Rus CERT university stuttgart germanylookup 199.193.69.46 at ARIN 199.193.69.46  AS53935 SenderBaselookup 199.193.69.46 at virustotallookup 199.193.69.46 at Rus CERT university stuttgart germanylookup 199.193.69.46 at ARIN 199.193.69.46  2288.org lookup in virustotal http://53g894.suaom-12kggkkllesf.2288.or ...  US  ARIN  zoujinhe@ehostingusa.com  199.193.64.0 - 199.193.71.255  VPS21004  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns1.3322.net.  ns2.3322.net.       lookup in virustotal http://53g894.suaom-12kggkkllesf.2288.or ...
73 follow up this item(3125271) 3125271  2013-01-29 20:58:03 2013-01-30 16:20:32 19.4  1714823  Other  up No evidence recorded dead SenderBaselookup 199.193.68.42 at virustotallookup 199.193.68.42 at Rus CERT university stuttgart germanylookup 199.193.68.42 at ARIN 199.193.68.42  AS53935 SenderBaselookup 199.193.68.42 at virustotallookup 199.193.68.42 at Rus CERT university stuttgart germanylookup 199.193.68.42 at ARIN 199.193.68.42  sogou009.com lookup in virustotal http://www.sogou009.com/upfile/?https:// ...  US  ARIN  zoujinhe@ehostingusa.com  199.193.64.0 - 199.193.71.255  VPS21004  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns3.yovole.com  ns4.yovole.com       lookup in virustotal http://www.sogou009.com/upfile/?https:// ...
74 follow up this item(3125268) 3125268  2013-01-29 20:57:40 2013-01-30 16:20:05 19.4  1714817  Other  up No evidence recorded dead SenderBaselookup 199.193.68.42 at virustotallookup 199.193.68.42 at Rus CERT university stuttgart germanylookup 199.193.68.42 at ARIN 199.193.68.42  AS53935 SenderBaselookup 199.193.68.42 at virustotallookup 199.193.68.42 at Rus CERT university stuttgart germanylookup 199.193.68.42 at ARIN 199.193.68.42  sogou009.com lookup in virustotal http://www.sogou009.com/upfile/?https:// ...  US  ARIN  zoujinhe@ehostingusa.com  199.193.64.0 - 199.193.71.255  VPS21004  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns4.yovole.com  ns3.yovole.com       lookup in virustotal http://www.sogou009.com/upfile/?https:// ...
75 follow up this item(3114839) 3114839  2013-01-21 21:57:33 2013-01-22 21:06:42 23.2  1704687  Other  up No evidence recorded dead SenderBaselookup 199.114.243.17 at virustotallookup 199.114.243.17 at Rus CERT university stuttgart germanylookup 199.114.243.17 at ARIN 199.114.243.17  AS53935 SenderBaselookup 199.114.243.17 at virustotallookup 199.114.243.17 at Rus CERT university stuttgart germanylookup 199.114.243.17 at ARIN 199.114.243.17  htiit.tk lookup in virustotal http://htiit.tk/login.asp  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  NS01.DOT.tk.  NS04.DOT.tk.  NS02.DOT.tk.  NS03.DOT.tk.   lookup in virustotal http://htiit.tk/login.asp
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
76 follow up this item(3088703) 3088703  2013-01-07 11:30:14 2013-01-21 22:10:47 346.7  1686355  Other  up No evidence recorded dead SenderBaselookup 199.192.158.190 at virustotallookup 199.192.158.190 at Rus CERT university stuttgart germanylookup 199.192.158.190 at ARIN 199.192.158.190  AS53935, AS6939 SenderBaselookup 199.192.158.190 at virustotallookup 199.192.158.190 at Rus CERT university stuttgart germanylookup 199.192.158.190 at ARIN 199.192.158.190  purewatchstore.com lookup in virustotal http://purewatchstore.com/  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns71.domaincontrol.com.  ns72.domaincontrol.com.       lookup in virustotal http://purewatchstore.com/
77 follow up this item(3071318) 3071318  2012-12-17 14:56:37 2012-12-20 02:54:13 60  1665627  Other  up No evidence recorded dead SenderBaselookup 199.114.240.193 at virustotallookup 199.114.240.193 at Rus CERT university stuttgart germanylookup 199.114.240.193 at ARIN 199.114.240.193  AS53935 SenderBaselookup 199.114.240.193 at virustotallookup 199.114.240.193 at Rus CERT university stuttgart germanylookup 199.114.240.193 at ARIN 199.114.240.193  6600.org lookup in virustotal http://241.regrfgfd.6600.org/vp/18/?id=8 ...  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns1.3322.net  ns2.3322.net       lookup in virustotal http://241.regrfgfd.6600.org/vp/18/?id=8 ...
78 follow up this item(3070184) 3070184  2012-12-19 00:26:49 2013-01-23 09:40:31 849.2  1668328  Australia and Ne  up No evidence recorded dead SenderBaselookup 199.192.156.61 at virustotallookup 199.192.156.61 at Rus CERT university stuttgart germanylookup 199.192.156.61 at ARIN 199.192.156.61  AS53935, AS6939 SenderBaselookup 199.192.156.61 at virustotallookup 199.192.156.61 at Rus CERT university stuttgart germanylookup 199.192.156.61 at ARIN 199.192.156.61  25pl.com lookup in virustotal http://beibeibi.25pl.com/up.html  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://beibeibi.25pl.com/up.html
79 follow up this item(3067262) 3067262  2012-12-17 14:56:35 2013-01-13 13:57:35 647  1665626  Other  up No evidence recorded dead SenderBaselookup 199.114.240.193 at virustotallookup 199.114.240.193 at Rus CERT university stuttgart germanylookup 199.114.240.193 at ARIN 199.114.240.193  AS53935 SenderBaselookup 199.114.240.193 at virustotallookup 199.114.240.193 at Rus CERT university stuttgart germanylookup 199.114.240.193 at ARIN 199.114.240.193  6600.org lookup in virustotal http://241.regrfgfd.6600.org/vp/18?id=88 ...  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns2.3322.net  ns1.3322.net       lookup in virustotal http://241.regrfgfd.6600.org/vp/18?id=88 ...
80 follow up this item(3026297) 3026297  2012-11-22 09:05:24 2012-11-25 17:01:32 79.9  1622040  Western Union  up No evidence recorded dead SenderBaselookup 199.36.74.245 at virustotallookup 199.36.74.245 at Rus CERT university stuttgart germanylookup 199.36.74.245 at ARIN 199.36.74.245  AS53935, AS6939 SenderBaselookup 199.36.74.245 at virustotallookup 199.36.74.245 at Rus CERT university stuttgart germanylookup 199.36.74.245 at ARIN 199.36.74.245  ztwang.com lookup in virustotal http://ztwang.com/asto/wumt.html  US  ARIN  zoujinhe@ehostingusa.com  199.36.72.0 - 199.36.79.255  VPS21002  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns12.xincache.com  ns20.xincache.com  ns19.xincache.com  ns11.xincache.com   lookup in virustotal http://ztwang.com/asto/wumt.html
81 follow up this item(3026007) 3026007  2012-11-21 21:37:22 2012-11-23 13:42:52 40.1  1621923  Blizzard  up No evidence recorded dead SenderBaselookup 199.192.158.25 at virustotallookup 199.192.158.25 at Rus CERT university stuttgart germanylookup 199.192.158.25 at ARIN 199.192.158.25  AS53935, AS6939 SenderBaselookup 199.192.158.25 at virustotallookup 199.192.158.25 at Rus CERT university stuttgart germanylookup 199.192.158.25 at ARIN 199.192.158.25  ons560.com lookup in virustotal http://www.ons560.com/  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns1.dnspod.net  f1g1ns2.dnspod.net       lookup in virustotal http://www.ons560.com/
82 follow up this item(1260208) 1260208  2012-10-23 18:20:10 2012-10-23 19:03:04 0.7    up No evidence recorded dead SenderBaselookup 199.192.157.40 at virustotallookup 199.192.157.40 at Rus CERT university stuttgart germanylookup 199.192.157.40 at ARIN 199.192.157.40  AS53935, AS6939 SenderBaselookup 199.192.157.40 at virustotallookup 199.192.157.40 at Rus CERT university stuttgart germanylookup 199.192.157.40 at ARIN 199.192.157.40  855m.com lookup in virustotal http://www.855m.com/js/?ref=http://us.ba ...  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns1.dnspod.net.  f1g1ns2.dnspod.net.       lookup in virustotal http://www.855m.com/js/?ref=http://us.ba ...
83 follow up this item(1260207) 1260207  2012-10-23 18:20:10 2012-10-23 19:03:17 0.7    up No evidence recorded dead SenderBaselookup 199.192.157.40 at virustotallookup 199.192.157.40 at Rus CERT university stuttgart germanylookup 199.192.157.40 at ARIN 199.192.157.40  AS53935, AS6939 SenderBaselookup 199.192.157.40 at virustotallookup 199.192.157.40 at Rus CERT university stuttgart germanylookup 199.192.157.40 at ARIN 199.192.157.40  855m.com lookup in virustotal http://www.855m.com/js/?ref=http%3A%2F%2 ...  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns1.dnspod.net.  f1g1ns2.dnspod.net.       lookup in virustotal http://www.855m.com/js/?ref=http%3A%2F%2 ...
84 follow up this item(1259745) 1259745  2012-10-22 21:33:25 2012-10-23 03:02:30 5.5  1596975  Other  up No evidence recorded dead SenderBaselookup 199.192.157.40 at virustotallookup 199.192.157.40 at Rus CERT university stuttgart germanylookup 199.192.157.40 at ARIN 199.192.157.40  AS53935, AS6939 SenderBaselookup 199.192.157.40 at virustotallookup 199.192.157.40 at Rus CERT university stuttgart germanylookup 199.192.157.40 at ARIN 199.192.157.40  855m.com lookup in virustotal http://www.855m.com/js/?http://us.battle ...  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns1.dnspod.net  f1g1ns2.dnspod.net       lookup in virustotal http://www.855m.com/js/?http://us.battle ...
85 follow up this item(1259666) 1259666  2012-10-22 20:58:15 2012-10-24 19:53:43 46.9  1597301  Other  up No evidence recorded dead SenderBaselookup 199.192.157.40 at virustotallookup 199.192.157.40 at Rus CERT university stuttgart germanylookup 199.192.157.40 at ARIN 199.192.157.40  AS53935, AS6939 SenderBaselookup 199.192.157.40 at virustotallookup 199.192.157.40 at Rus CERT university stuttgart germanylookup 199.192.157.40 at ARIN 199.192.157.40  855m.com lookup in virustotal http://www.855m.com/js/?http://us.battle ...  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns1.dnspod.net  f1g1ns2.dnspod.net       lookup in virustotal http://www.855m.com/js/?http://us.battle ...
86 follow up this item(1259448) 1259448  2012-10-22 21:01:25 2012-10-24 20:00:22 47  1596922  Other  up No evidence recorded dead SenderBaselookup 199.192.157.40 at virustotallookup 199.192.157.40 at Rus CERT university stuttgart germanylookup 199.192.157.40 at ARIN 199.192.157.40  AS53935, AS6939 SenderBaselookup 199.192.157.40 at virustotallookup 199.192.157.40 at Rus CERT university stuttgart germanylookup 199.192.157.40 at ARIN 199.192.157.40  855m.com lookup in virustotal http://www.855m.com/js/?http://us.battle ...  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns1.dnspod.net.  f1g1ns2.dnspod.net.       lookup in virustotal http://www.855m.com/js/?http://us.battle ...
87 follow up this item(1259430) 1259430  2012-10-22 20:40:10 2012-10-24 20:01:07 47.3  1596975  Other  up No evidence recorded dead SenderBaselookup 199.192.157.40 at virustotallookup 199.192.157.40 at Rus CERT university stuttgart germanylookup 199.192.157.40 at ARIN 199.192.157.40  AS53935, AS6939 SenderBaselookup 199.192.157.40 at virustotallookup 199.192.157.40 at Rus CERT university stuttgart germanylookup 199.192.157.40 at ARIN 199.192.157.40  855m.com lookup in virustotal http://www.855m.com/js/?http://us.battle ...  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns1.dnspod.net  f1g1ns2.dnspod.net       lookup in virustotal http://www.855m.com/js/?http://us.battle ...
88 follow up this item(1237462) 1237462  2012-09-28 01:10:47 2012-09-29 05:26:54 28.3  1575545  Other  up No evidence recorded dead SenderBaselookup 199.192.158.239 at virustotallookup 199.192.158.239 at Rus CERT university stuttgart germanylookup 199.192.158.239 at ARIN 199.192.158.239  AS53935, AS6939 SenderBaselookup 199.192.158.239 at virustotallookup 199.192.158.239 at Rus CERT university stuttgart germanylookup 199.192.158.239 at ARIN 199.192.158.239  44bst.com lookup in virustotal http://www.44bst.com/source/include/post ...  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://www.44bst.com/source/include/post ...
89 follow up this item(1210872) 1210872  2012-09-03 01:14:47 2012-09-05 12:39:05 59.4  1548884  Other  up No evidence recorded dead SenderBaselookup 199.193.64.155 at virustotallookup 199.193.64.155 at Rus CERT university stuttgart germanylookup 199.193.64.155 at ARIN 199.193.64.155  AS53935 SenderBaselookup 199.193.64.155 at virustotallookup 199.193.64.155 at Rus CERT university stuttgart germanylookup 199.193.64.155 at ARIN 199.193.64.155  tzsec.net lookup in virustotal http://www.tzsec.net/wp-content/themes/t ...  US  ARIN  zoujinhe@ehostingusa.com  199.193.64.0 - 199.193.71.255  VPS21004  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  dns28.hichina.com  dns27.hichina.com       lookup in virustotal http://www.tzsec.net/wp-content/themes/t ...
90 follow up this item(1203583) 1203583  2012-08-25 11:17:47 2012-08-28 22:54:59 83.6  1541962  Other  down No evidence recorded dead SenderBaselookup 199.192.155.183 at virustotallookup 199.192.155.183 at Rus CERT university stuttgart germanylookup 199.192.155.183 at ARIN 199.192.155.183  AS53935, AS6939 SenderBaselookup 199.192.155.183 at virustotallookup 199.192.155.183 at Rus CERT university stuttgart germanylookup 199.192.155.183 at ARIN 199.192.155.183  usbattle.org lookup in virustotal http://usbattle.org/  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://usbattle.org/
91 follow up this item(1203425) 1203425  2012-08-24 21:00:04 2012-08-28 22:57:16 98  1541522  Blizzard  down No evidence recorded dead SenderBaselookup 199.192.155.183 at virustotallookup 199.192.155.183 at Rus CERT university stuttgart germanylookup 199.192.155.183 at ARIN 199.192.155.183  AS53935, AS6939 SenderBaselookup 199.192.155.183 at virustotallookup 199.192.155.183 at Rus CERT university stuttgart germanylookup 199.192.155.183 at ARIN 199.192.155.183  usbattle.org lookup in virustotal http://usbattle.org  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://usbattle.org
92 follow up this item(1197243) 1197243  2012-08-17 06:43:13 2012-08-28 23:29:53 280.8  1534710  PayPal  up No evidence recorded dead SenderBaselookup 199.114.244.169 at virustotallookup 199.114.244.169 at Rus CERT university stuttgart germanylookup 199.114.244.169 at ARIN 199.114.244.169  AS53935 SenderBaselookup 199.114.244.169 at virustotallookup 199.114.244.169 at Rus CERT university stuttgart germanylookup 199.114.244.169 at ARIN 199.114.244.169  chosunglobal.com lookup in virustotal http://www.chosunglobal.com/apps/pp.html ...  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns3.myhostadmin.net  ns4.myhostadmin.net  ns5.myhostadmin.net  ns6.myhostadmin.net  ns1.myhostadmin.net lookup in virustotal http://www.chosunglobal.com/apps/pp.html ...
93 follow up this item(1197040) 1197040  2012-08-17 04:25:44 2012-08-28 23:30:26 283.1  1534643  PayPal  up No evidence recorded dead SenderBaselookup 199.114.244.169 at virustotallookup 199.114.244.169 at Rus CERT university stuttgart germanylookup 199.114.244.169 at ARIN 199.114.244.169  AS53935 SenderBaselookup 199.114.244.169 at virustotallookup 199.114.244.169 at Rus CERT university stuttgart germanylookup 199.114.244.169 at ARIN 199.114.244.169  chosunglobal.com lookup in virustotal http://www.chosunglobal.com/pps/pp.html  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns6.myhostadmin.net  ns1.myhostadmin.net  ns2.myhostadmin.net  ns3.myhostadmin.net  ns4.myhostadmin.net lookup in virustotal http://www.chosunglobal.com/pps/pp.html
94 follow up this item(1173133) 1173133  2012-07-27 18:03:14 2012-07-27 18:59:18 0.9  1508593  Other  up No evidence recorded dead SenderBaselookup 199.114.242.11 at virustotallookup 199.114.242.11 at Rus CERT university stuttgart germanylookup 199.114.242.11 at ARIN 199.114.242.11  AS53935 SenderBaselookup 199.114.242.11 at virustotallookup 199.114.242.11 at Rus CERT university stuttgart germanylookup 199.114.242.11 at ARIN 199.114.242.11  battlenetplmnhiujtg.tk lookup in virustotal http://www.battlenetplmnhiujtg.tk/login/ ...  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  NS03.DOT.tk.  NS01.DOT.tk.  NS04.DOT.tk.  NS02.DOT.tk.   lookup in virustotal http://www.battlenetplmnhiujtg.tk/login/ ...
95 follow up this item(1173078) 1173078  2012-07-27 17:41:51 2012-07-27 17:58:57 0.3    up No evidence recorded dead SenderBaselookup 199.114.242.11 at virustotallookup 199.114.242.11 at Rus CERT university stuttgart germanylookup 199.114.242.11 at ARIN 199.114.242.11  AS53935 SenderBaselookup 199.114.242.11 at virustotallookup 199.114.242.11 at Rus CERT university stuttgart germanylookup 199.114.242.11 at ARIN 199.114.242.11  battlenetplmnhiujtg.tk lookup in virustotal http://www.battlenetplmnhiujtg.tk/login/ ...  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  NS01.DOT.tk  NS04.DOT.tk  NS03.DOT.tk  NS02.DOT.tk   lookup in virustotal http://www.battlenetplmnhiujtg.tk/login/ ...
96 follow up this item(1172426) 1172426  2012-07-27 08:11:12 2012-07-27 08:57:30 0.8    up No evidence recorded dead SenderBaselookup 199.36.72.208 at virustotallookup 199.36.72.208 at Rus CERT university stuttgart germanylookup 199.36.72.208 at ARIN 199.36.72.208  AS53935, AS6939 SenderBaselookup 199.36.72.208 at virustotallookup 199.36.72.208 at Rus CERT university stuttgart germanylookup 199.36.72.208 at ARIN 199.36.72.208  bbs0374.com lookup in virustotal http://a.bbs0374.com/a.php  US  ARIN  zoujinhe@ehostingusa.com  199.36.72.0 - 199.36.79.255  VPS21002  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns6.cnmsn.net.  ns5.cnmsn.net.       lookup in virustotal http://a.bbs0374.com/a.php
97 follow up this item(1169055) 1169055  2012-07-24 09:15:10 2012-07-26 03:57:52 42.7  1503908  Other  up No evidence recorded dead SenderBaselookup 199.192.155.164 at virustotallookup 199.192.155.164 at Rus CERT university stuttgart germanylookup 199.192.155.164 at ARIN 199.192.155.164  AS53935, AS6939 SenderBaselookup 199.192.155.164 at virustotallookup 199.192.155.164 at Rus CERT university stuttgart germanylookup 199.192.155.164 at ARIN 199.192.155.164  zh-gvk.in lookup in virustotal http://eu.battle.net.login.zh-gvk.in/log ...  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://eu.battle.net.login.zh-gvk.in/log ...
98 follow up this item(1168926) 1168926  2012-07-24 09:01:11 2012-07-26 04:00:47 43  1503908  Other  up No evidence recorded dead SenderBaselookup 199.192.155.164 at virustotallookup 199.192.155.164 at Rus CERT university stuttgart germanylookup 199.192.155.164 at ARIN 199.192.155.164  AS53935, AS6939 SenderBaselookup 199.192.155.164 at virustotallookup 199.192.155.164 at Rus CERT university stuttgart germanylookup 199.192.155.164 at ARIN 199.192.155.164  zh-gvk.in lookup in virustotal http://eu.battle.net.login.zh-gvk.in/log ...  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://eu.battle.net.login.zh-gvk.in/log ...
99 follow up this item(1168394) 1168394  2012-07-23 18:40:32 2012-07-23 18:55:40 0.3  1503377  Other  up No evidence recorded dead SenderBaselookup 199.193.64.167 at virustotallookup 199.193.64.167 at Rus CERT university stuttgart germanylookup 199.193.64.167 at ARIN 199.193.64.167  AS53935 SenderBaselookup 199.193.64.167 at virustotallookup 199.193.64.167 at Rus CERT university stuttgart germanylookup 199.193.64.167 at ARIN 199.193.64.167  7766.org lookup in virustotal http://fangqi.7766.org/  US  ARIN  zoujinhe@ehostingusa.com  199.193.64.0 - 199.193.71.255  VPS21004  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns1.3322.net  ns2.3322.net       lookup in virustotal http://fangqi.7766.org/
100 follow up this item(1161063) 1161063  2012-07-14 02:30:36 2012-07-14 20:06:18 17.6    up No evidence recorded dead SenderBaselookup 199.114.242.11 at virustotallookup 199.114.242.11 at Rus CERT university stuttgart germanylookup 199.114.242.11 at ARIN 199.114.242.11  AS53935 SenderBaselookup 199.114.242.11 at virustotallookup 199.114.242.11 at Rus CERT university stuttgart germanylookup 199.114.242.11 at ARIN 199.114.242.11  battlenetolikujmtgn.tk lookup in virustotal http://www.battlenetolikujmtgn.tk/login/ ...  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  NS04.DOT.tk.  NS03.DOT.tk.  NS02.DOT.tk.  NS01.DOT.tk.   lookup in virustotal http://www.battlenetolikujmtgn.tk/login/ ...
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
101 follow up this item(1160917) 1160917  2012-07-13 18:03:18 2012-07-14 20:10:56 26.1  1494678  Blizzard  up No evidence recorded dead SenderBaselookup 199.114.242.11 at virustotallookup 199.114.242.11 at Rus CERT university stuttgart germanylookup 199.114.242.11 at ARIN 199.114.242.11  AS53935 SenderBaselookup 199.114.242.11 at virustotallookup 199.114.242.11 at Rus CERT university stuttgart germanylookup 199.114.242.11 at ARIN 199.114.242.11  battlenetolikujmtgn.tk lookup in virustotal http://www.battlenetolikujmtgn.tk/login/ ...  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  NS01.DOT.tk  NS03.DOT.tk  NS04.DOT.tk  NS02.DOT.tk   lookup in virustotal http://www.battlenetolikujmtgn.tk/login/ ...
102 follow up this item(1156141) 1156141  2012-07-07 01:10:42 2012-07-07 05:54:53 4.7  1489057  Other  up No evidence recorded dead SenderBaselookup 199.192.153.57 at virustotallookup 199.192.153.57 at Rus CERT university stuttgart germanylookup 199.192.153.57 at ARIN 199.192.153.57  AS53935, AS6939 SenderBaselookup 199.192.153.57 at virustotallookup 199.192.153.57 at Rus CERT university stuttgart germanylookup 199.192.153.57 at ARIN 199.192.153.57  zs-login.in lookup in virustotal http://eu.battle.net.login.account.inspe ...  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://eu.battle.net.login.account.inspe ...
103 follow up this item(1156140) 1156140  2012-07-07 01:24:03 2012-07-07 05:54:54 4.5  1489060  World of Warcraf  up No evidence recorded dead SenderBaselookup 199.192.153.57 at virustotallookup 199.192.153.57 at Rus CERT university stuttgart germanylookup 199.192.153.57 at ARIN 199.192.153.57  AS53935, AS6939 SenderBaselookup 199.192.153.57 at virustotallookup 199.192.153.57 at Rus CERT university stuttgart germanylookup 199.192.153.57 at ARIN 199.192.153.57  sx-login.in lookup in virustotal http://eu.battle.net.login.account.inspe ...  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://eu.battle.net.login.account.inspe ...
104 follow up this item(1152066) 1152066  2012-07-04 03:10:39 2012-07-04 03:56:33 0.8    up No evidence recorded dead SenderBaselookup 199.114.242.11 at virustotallookup 199.114.242.11 at Rus CERT university stuttgart germanylookup 199.114.242.11 at ARIN 199.114.242.11  AS53935 SenderBaselookup 199.114.242.11 at virustotallookup 199.114.242.11 at Rus CERT university stuttgart germanylookup 199.114.242.11 at ARIN 199.114.242.11  igg.biz lookup in virustotal http://www.battlenetsfhmbzxacc.igg.biz/l ...  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://www.battlenetsfhmbzxacc.igg.biz/l ...
105 follow up this item(1151802) 1151802  2012-07-03 17:13:56 2012-07-06 01:54:48 56.7  1484170  Blizzard  up No evidence recorded dead SenderBaselookup 199.114.242.11 at virustotallookup 199.114.242.11 at Rus CERT university stuttgart germanylookup 199.114.242.11 at ARIN 199.114.242.11  AS53935 SenderBaselookup 199.114.242.11 at virustotallookup 199.114.242.11 at Rus CERT university stuttgart germanylookup 199.114.242.11 at ARIN 199.114.242.11  igg.biz lookup in virustotal http://www.battlenetsfhmbzxacc.igg.biz/l ...  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://www.battlenetsfhmbzxacc.igg.biz/l ...
106 follow up this item(1129321) 1129321  2012-06-13 19:28:45 2012-06-14 07:24:00 11.9  1460300  Blizzard  up No evidence recorded dead SenderBaselookup 199.192.153.242 at virustotallookup 199.192.153.242 at Rus CERT university stuttgart germanylookup 199.192.153.242 at ARIN 199.192.153.242  AS53935, AS6939 SenderBaselookup 199.192.153.242 at virustotallookup 199.192.153.242 at Rus CERT university stuttgart germanylookup 199.192.153.242 at ARIN 199.192.153.242  gen.in lookup in virustotal http://www.battle-loginen.gen.in/login/e ...  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  b1.in.afilias-nst.in  a2.in.afilias-nst.info  d0.cctld.afilias-nst.org  b0.cctld.afilias-nst.org  b2.in.afilias-nst.org lookup in virustotal http://www.battle-loginen.gen.in/login/e ...
107 follow up this item(1126527) 1126527  2012-06-10 08:20:22 2012-06-10 08:57:33 0.6    up No evidence recorded dead SenderBaselookup 199.36.78.10 at virustotallookup 199.36.78.10 at Rus CERT university stuttgart germanylookup 199.36.78.10 at ARIN 199.36.78.10  AS53935, AS6939 SenderBaselookup 199.36.78.10 at virustotallookup 199.36.78.10 at Rus CERT university stuttgart germanylookup 199.36.78.10 at ARIN 199.36.78.10  wowbattlefjhsdgxnet.tk lookup in virustotal http://www.wowbattlefjhsdgxnet.tk/login/ ...  US  ARIN  zoujinhe@ehostingusa.com  199.36.72.0 - 199.36.79.255  VPS21002  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  NS03.DOT.tk.  NS01.DOT.tk.  NS02.DOT.tk.  NS04.DOT.tk.   lookup in virustotal http://www.wowbattlefjhsdgxnet.tk/login/ ...
108 follow up this item(1126438) 1126438  2012-06-09 23:04:48 2012-06-12 05:45:50 54.7  1457292  Blizzard  up No evidence recorded dead SenderBaselookup 199.36.78.10 at virustotallookup 199.36.78.10 at Rus CERT university stuttgart germanylookup 199.36.78.10 at ARIN 199.36.78.10  AS53935, AS6939 SenderBaselookup 199.36.78.10 at virustotallookup 199.36.78.10 at Rus CERT university stuttgart germanylookup 199.36.78.10 at ARIN 199.36.78.10  wowbattlefjhsdgxnet.tk lookup in virustotal http://www.wowbattlefjhsdgxnet.tk/login/ ...  US  ARIN  zoujinhe@ehostingusa.com  199.36.72.0 - 199.36.79.255  VPS21002  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  NS04.DOT.tk  NS03.DOT.tk  NS02.DOT.tk  NS01.DOT.tk   lookup in virustotal http://www.wowbattlefjhsdgxnet.tk/login/ ...
109 follow up this item(1123904) 1123904  2012-06-06 04:40:31 2012-06-06 04:59:46 0.3    up No evidence recorded dead SenderBaselookup 199.114.247.166 at virustotallookup 199.114.247.166 at Rus CERT university stuttgart germanylookup 199.114.247.166 at ARIN 199.114.247.166  AS53935 SenderBaselookup 199.114.247.166 at virustotallookup 199.114.247.166 at Rus CERT university stuttgart germanylookup 199.114.247.166 at ARIN 199.114.247.166  login-net.net lookup in virustotal http://us.battle.net-blizzard.login-net. ...  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns2.dnspod.net.  f1g1ns1.dnspod.net.       lookup in virustotal http://us.battle.net-blizzard.login-net. ...
110 follow up this item(1123685) 1123685  2012-06-06 00:21:15 2012-06-07 23:40:40 47.3    up No evidence recorded dead SenderBaselookup 199.114.247.166 at virustotallookup 199.114.247.166 at Rus CERT university stuttgart germanylookup 199.114.247.166 at ARIN 199.114.247.166  AS53935 SenderBaselookup 199.114.247.166 at virustotallookup 199.114.247.166 at Rus CERT university stuttgart germanylookup 199.114.247.166 at ARIN 199.114.247.166  login-net.net lookup in virustotal http://us.battle.net-blizzard.login-net. ...  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns2.dnspod.net.  f1g1ns1.dnspod.net.       lookup in virustotal http://us.battle.net-blizzard.login-net. ...
111 follow up this item(1123579) 1123579  2012-06-05 16:14:16 2012-06-07 23:43:06 55.5  1454142  Blizzard  up No evidence recorded dead SenderBaselookup 199.114.247.166 at virustotallookup 199.114.247.166 at Rus CERT university stuttgart germanylookup 199.114.247.166 at ARIN 199.114.247.166  AS53935 SenderBaselookup 199.114.247.166 at virustotallookup 199.114.247.166 at Rus CERT university stuttgart germanylookup 199.114.247.166 at ARIN 199.114.247.166  login-net.net lookup in virustotal http://us.battle.net-blizzard.login-net. ...  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns1.dnspod.net.  f1g1ns2.dnspod.net.       lookup in virustotal http://us.battle.net-blizzard.login-net. ...
112 follow up this item(1123538) 1123538  2012-06-05 17:33:30 2012-06-07 23:44:57 54.2  1454208  Blizzard  up No evidence recorded dead SenderBaselookup 199.114.247.166 at virustotallookup 199.114.247.166 at Rus CERT university stuttgart germanylookup 199.114.247.166 at ARIN 199.114.247.166  AS53935 SenderBaselookup 199.114.247.166 at virustotallookup 199.114.247.166 at Rus CERT university stuttgart germanylookup 199.114.247.166 at ARIN 199.114.247.166  login-net.net lookup in virustotal http://us.battle.net-bizzarrd.login-net. ...  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns1.dnspod.net  f1g1ns2.dnspod.net       lookup in virustotal http://us.battle.net-bizzarrd.login-net. ...
113 follow up this item(1123377) 1123377  2012-06-05 16:13:02 2012-06-07 23:48:42 55.6  1454141  Blizzard  up No evidence recorded dead SenderBaselookup 199.114.247.166 at virustotallookup 199.114.247.166 at Rus CERT university stuttgart germanylookup 199.114.247.166 at ARIN 199.114.247.166  AS53935 SenderBaselookup 199.114.247.166 at virustotallookup 199.114.247.166 at Rus CERT university stuttgart germanylookup 199.114.247.166 at ARIN 199.114.247.166  login-net.net lookup in virustotal http://us.battle.net-blizzard.login-net. ...  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns1.dnspod.net  f1g1ns2.dnspod.net       lookup in virustotal http://us.battle.net-blizzard.login-net. ...
114 follow up this item(1123160) 1123160  2012-06-05 05:15:45 2012-06-07 23:53:12 66.6  1453823  Other  up No evidence recorded dead SenderBaselookup 199.114.247.166 at virustotallookup 199.114.247.166 at Rus CERT university stuttgart germanylookup 199.114.247.166 at ARIN 199.114.247.166  AS53935 SenderBaselookup 199.114.247.166 at virustotallookup 199.114.247.166 at Rus CERT university stuttgart germanylookup 199.114.247.166 at ARIN 199.114.247.166  login-net.net lookup in virustotal http://us.battle.net-blizzard.login-net. ...  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255