CLEAN MX realtime database    
public access query for phishing URL Top 50 stats
Totally watched: 15, to down: 0, to up: 0, changed ip: 0
As of 2013-05-26 02:59:46 CEST
Subscribe to the PhishWatch Mailing list, updated hourly
This database consists of Phishing URI, collected and verified since Oct 2006 some of them may be already closed, but are still recognized as fraud by firefox and opera also offending domain names are honored by SURBL.
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

Attention: all URI'S are manually verified, but not cross-checked for real phishing function in this moment you make this query.(Sites may have been closed already..)
Our automatic Phishwalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

to look at some nice charts her are complete statistics for this database
and for our german friends some minutes on Symantec Phishing report

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0024 Seconds
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(1127289) 1127289  2012-06-11 14:01:31 2012-07-19 03:00:16 901  1458253  PayPal  up No evidence recorded dead SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  AS3595 SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  documentthetruth.com lookup in virustotal http://paypal.com.webscr.login.submit.ve ...  US  ARIN  engineering@gnax.net  205.251.128.0 - 205.251.159.255  GNAXNET  Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310  ns1.occupytraffic.com.  ns2.occupytraffic.com.       lookup in virustotal http://paypal.com.webscr.login.submit.ve ...
2 follow up this item(1046783) 1046783  2012-02-24 19:28:44 2012-02-25 04:10:25 8.7  1375906  PayPal  up  dead SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  AS3595 SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  dominiosaws.com lookup in virustotal http://paypal.com.cgi-bin.webscr.cmd-log ...  US  ARIN  abuse@gnax.net  205.251.128.0 - 205.251.159.255  GNAXNET  Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310  ns77.domaincontrol.com.  ns78.domaincontrol.com.       lookup in virustotal http://paypal.com.cgi-bin.webscr.cmd-log ...
3 follow up this item(1046321) 1046321  2012-02-23 20:01:34 2012-02-23 20:53:55 0.9  1375402  PayPal  up  dead SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  AS3595 SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  blogearningacademy.com lookup in virustotal http://paypal.com-us.cgi-bin-webscr-cmd. ...  US  ARIN  abuse@gnax.net  205.251.128.0 - 205.251.159.255  GNAXNET  Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310  dns3.name-services.com.  dns2.name-services.com.  dns1.name-services.com.  dns4.name-services.com.  dns5.name-services.com. lookup in virustotal http://paypal.com-us.cgi-bin-webscr-cmd. ...
4 follow up this item(1046145) 1046145  2012-02-23 15:17:33 2012-02-23 15:54:09 0.6  1375247  PayPal  up No evidence recorded dead SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  AS3595 SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  blogearningacademy.com lookup in virustotal http://paypal.com-us.cgi-bin-webscr-cmd. ...  US  ARIN  abuse@gnax.net  205.251.128.0 - 205.251.159.255  GNAXNET  Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310  dns1.name-services.com.  dns2.name-services.com.  dns3.name-services.com.  dns4.name-services.com.  dns5.name-services.com. lookup in virustotal http://paypal.com-us.cgi-bin-webscr-cmd. ...
5 follow up this item(1045826) 1045826  2012-02-23 01:40:28 2012-02-23 01:53:28 0.2  1374968  PayPal  up  dead SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  AS3595 SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  moreiyah.net lookup in virustotal http://paypal.com-us.cgi-bin-webscr-cmd. ...  US  ARIN  abuse@gnax.net  205.251.128.0 - 205.251.159.255  GNAXNET  Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310  rs105.registrar-servers.com  rs5.registrar-servers.com       lookup in virustotal http://paypal.com-us.cgi-bin-webscr-cmd. ...
6 follow up this item(1045812) 1045812  2012-02-23 01:26:43 2012-02-23 18:10:33 16.7  1374934  PayPal  up  dead SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  AS3595 SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  dominiosaws.com lookup in virustotal http://paypal.com-us.cgi-bin-webscr-cmd. ...  US  ARIN  abuse@gnax.net  205.251.128.0 - 205.251.159.255  GNAXNET  Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310  ns78.domaincontrol.com.  ns77.domaincontrol.com.       lookup in virustotal http://paypal.com-us.cgi-bin-webscr-cmd. ...
7 follow up this item(1045680) 1045680  2012-02-22 22:22:31 2012-02-22 23:55:40 1.6  1374705  PayPal  up No evidence recorded dead SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  AS3595 SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  moreiyah.net lookup in virustotal http://paypal.com-us.cgi-bin-webscr-cmd. ...  US  ARIN  abuse@gnax.net  205.251.128.0 - 205.251.159.255  GNAXNET  Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310  rs105.registrar-servers.com.  rs5.registrar-servers.com.       lookup in virustotal http://paypal.com-us.cgi-bin-webscr-cmd. ...
8 follow up this item(1026753) 1026753  2012-02-04 23:02:54 2012-02-05 02:03:43 3  1357855  Visa  up  dead SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  AS3595 SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  sonef.net lookup in virustotal http://www.sonef.net/11/www.visa.com.br/ ...  US  ARIN  abuse@gnax.net  205.251.128.0 - 205.251.159.255  GNAXNET  Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310  ns2.hostheber.com  ns1.hostheber.com       lookup in virustotal http://www.sonef.net/11/www.visa.com.br/ ...
9 follow up this item(1026555) 1026555  2012-02-04 16:50:15 2012-02-05 02:08:16 9.3  1357537  Visa  up  dead SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  AS3595 SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  sonef.net lookup in virustotal http://www.sonef.net/A/www.visa.com.br/  US  ARIN  abuse@gnax.net  205.251.128.0 - 205.251.159.255  GNAXNET  Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310  ns1.hostheber.com  ns2.hostheber.com       lookup in virustotal http://www.sonef.net/A/www.visa.com.br/
10 follow up this item(1026566) 1026566  2012-02-04 16:15:14 2012-02-04 18:55:41 2.7  1357514  Other  up No evidence recorded dead SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  AS3595 SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  sonef.net lookup in virustotal http://www.sonef.net/S/www.visa.com.br/? ...  US  ARIN  abuse@gnax.net  205.251.128.0 - 205.251.159.255  GNAXNET  Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310  ns1.hostheber.com  ns2.hostheber.com       lookup in virustotal http://www.sonef.net/S/www.visa.com.br/? ...
11 follow up this item(992694) 992694  2011-11-30 12:00:10 2011-12-08 19:20:06 199.3  1318727  Other  up  dead SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  AS3595 SenderBaselookup 205.251.133.251 at virustotallookup 205.251.133.251 at Rus CERT university stuttgart germanylookup 205.251.133.251 at ARIN 205.251.133.251  filtrazioneacqua.it lookup in virustotal http://www.filtrazioneacqua.it/anotlebe/ ...  US  ARIN  abuse@gnax.net  205.251.128.0 - 205.251.159.255  GNAXNET  Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310  ns2.datawell01.com  ns1.datawell01.com       lookup in virustotal http://www.filtrazioneacqua.it/anotlebe/ ...
Click here for other vital incidents


Protected by clean MX
Access is provided for free and subject to these Terms and Conditions.