CLEAN MX realtime database    
public access query for phishing URL Top 50 stats
Totally watched: Walker is running: 19(51) http://ailegro.pl.tf/?client_id=tb5SFf3cRxEyspDN&redirect_uri=https://ssl.allegro.pl/fnd/landing-page/&response_type=code&scope=user_data&state={
Subscribe to the PhishWatch Mailing list, updated hourly
This database consists of Phishing URI, collected and verified since Oct 2006 some of them may be already closed, but are still recognized as fraud by firefox and opera also offending domain names are honored by SURBL.
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

Attention: all URI'S are manually verified, but not cross-checked for real phishing function in this moment you make this query.(Sites may have been closed already..)
Our automatic Phishwalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

to look at some nice charts her are complete statistics for this database
and for our german friends some minutes on Symantec Phishing report

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0021 Seconds
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(3313933) 3313933  2013-05-22 16:08:22 2013-05-22 16:56:20 0.8    up  dead SenderBaselookup 184.170.131.98 at virustotallookup 184.170.131.98 at Rus CERT university stuttgart germanylookup 184.170.131.98 at ARIN 184.170.131.98  AS10929 SenderBaselookup 184.170.131.98 at virustotallookup 184.170.131.98 at Rus CERT university stuttgart germanylookup 184.170.131.98 at ARIN 184.170.131.98  pks-sidoarjo.org lookup in virustotal http://pks-sidoarjo.org/cgi-sys/suspende ...  CA  ARIN  abuse@netelligent.ca  184.170.128.0 - 184.170.143.255  NETEL-ARIN-BLK07  Netelligent Hosting Services Inc. NHS-31 1396 Franklin Drive Laval QC H7W-1K6  ns15.crocweb.com  ns16.crocweb.com       lookup in virustotal http://pks-sidoarjo.org/cgi-sys/suspende ...
2 follow up this item(1133149) 1133149  2012-06-18 16:35:10 2012-06-20 17:09:42 48.6  1464266  Other  up  dead SenderBaselookup 184.170.131.98 at virustotallookup 184.170.131.98 at Rus CERT university stuttgart germanylookup 184.170.131.98 at ARIN 184.170.131.98  AS10929 SenderBaselookup 184.170.131.98 at virustotallookup 184.170.131.98 at Rus CERT university stuttgart germanylookup 184.170.131.98 at ARIN 184.170.131.98  penghubung.com lookup in virustotal http://penghubung.com/form/use/serviceup ...  CA  ARIN  abuse@netelligent.ca  184.170.128.0 - 184.170.143.255  NETEL-ARIN-BLK07  Netelligent Hosting Services Inc. NHS-31 1396 Franklin Drive Laval QC H7W-1K6  ns15.crocweb.com  ns16.crocweb.com       lookup in virustotal http://penghubung.com/form/use/serviceup ...
3 follow up this item(1078183) 1078183  2012-04-10 20:52:01 2012-04-12 18:25:54 45.6  1407466  PayPal  up  dead SenderBaselookup 184.170.131.98 at virustotallookup 184.170.131.98 at Rus CERT university stuttgart germanylookup 184.170.131.98 at ARIN 184.170.131.98  AS10929 SenderBaselookup 184.170.131.98 at virustotallookup 184.170.131.98 at Rus CERT university stuttgart germanylookup 184.170.131.98 at ARIN 184.170.131.98  lebahmadu.com lookup in virustotal http://lebahmadu.com/images/index.htm  CA  ARIN  abuse@netelligent.ca  184.170.128.0 - 184.170.143.255  NETEL-ARIN-BLK07  Netelligent Hosting Services Inc. NHS-31 1396 Franklin Drive Laval QC H7W-1K6  ns15.crocweb.com.  ns16.crocweb.com.       lookup in virustotal http://lebahmadu.com/images/index.htm
Click here for other vital incidents


Protected by clean MX
Access is provided for free and subject to these Terms and Conditions.