CLEAN MX realtime database    
public access query for phishing URL Top 50 stats
Totally watched: 86, to down: 0, to up: 0, changed ip: 0
As of 2013-05-22 15:02:06 CEST
Subscribe to the PhishWatch Mailing list, updated hourly
This database consists of Phishing URI, collected and verified since Oct 2006 some of them may be already closed, but are still recognized as fraud by firefox and opera also offending domain names are honored by SURBL.
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

Attention: all URI'S are manually verified, but not cross-checked for real phishing function in this moment you make this query.(Sites may have been closed already..)
Our automatic Phishwalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

to look at some nice charts her are complete statistics for this database
and for our german friends some minutes on Symantec Phishing report

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0034 Seconds
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(1188531) 1188531  2012-08-10 12:20:15 2012-08-10 13:11:09 0.8  1525141  PayPal  up No evidence recorded dead SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  AS36351 SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  sharkia-ads.com lookup in virustotal http://sharkia-ads.com/webscr/cmd/login. ...  US  ARIN  abuse@softlayer.com  208.43.0.0 - 208.43.255.255  SOFTLAYER-4-6  SoftLayer Technologies Inc. SOFTL 1950 N Stemmons Freeway Dallas TX 75207           lookup in virustotal http://sharkia-ads.com/webscr/cmd/login. ...
2 follow up this item(1161908) 1161908  2012-07-15 20:15:22 2012-07-16 21:49:21 25.6  1495910  PayPal  up No evidence recorded dead SenderBaselookup 67.228.247.187 at virustotallookup 67.228.247.187 at Rus CERT university stuttgart germanylookup 67.228.247.187 at ARIN 67.228.247.187  AS36351 SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  secureservuk.com lookup in virustotal http://secureservuk.com/webscrcmd=_home- ...  US  ARIN  abuse@softlayer.com  67.228.0.0 - 67.228.255.255  SOFTLAYER-4-5  SoftLayer Technologies Inc. SOFTL 4849 Alpha Rd. Dallas TX 75244  ns3.name.com.  ns1.name.com.  ns2.name.com.  ns4.name.com.   lookup in virustotal http://secureservuk.com/webscrcmd=_home- ...
3 follow up this item(1161680) 1161680  2012-07-15 11:26:50 2012-07-16 22:00:33 34.6  1495654  PayPal  up No evidence recorded dead SenderBaselookup 67.228.247.187 at virustotallookup 67.228.247.187 at Rus CERT university stuttgart germanylookup 67.228.247.187 at ARIN 67.228.247.187  AS36351 SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  secureservuk.com lookup in virustotal http://secureservuk.com/webscrcmd=_home- ...  US  ARIN  abuse@softlayer.com  67.228.0.0 - 67.228.255.255  SOFTLAYER-4-5  SoftLayer Technologies Inc. SOFTL 4849 Alpha Rd. Dallas TX 75244  ns2.name.com.  ns1.name.com.  ns4.name.com.  ns3.name.com.   lookup in virustotal http://secureservuk.com/webscrcmd=_home- ...
4 follow up this item(1157116) 1157116  2012-07-08 20:19:06 2012-07-10 05:28:42 33.2  1490276  PayPal  up No evidence recorded dead SenderBaselookup 50.28.29.78 at virustotallookup 50.28.29.78 at Rus CERT university stuttgart germanylookup 50.28.29.78 at ARIN 50.28.29.78  AS36351 SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  norwichterrier.org lookup in virustotal http://norwichterrier.org/paypal.html  US  ARIN  abuse@softlayer.com  208.43.0.0 - 208.43.255.255  SOFTLAYER-4-6  SoftLayer Technologies Inc. SOFTL 1950 N Stemmons Freeway Dallas TX 75207  ns2.free.hostzilla.ws.  ns1.free.hostzilla.ws.       lookup in virustotal http://norwichterrier.org/paypal.html
5 follow up this item(1125686) 1125686  2012-06-08 06:29:45 2012-06-08 18:12:07 11.7  1456252  PayPal  up No evidence recorded dead SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  AS36351 SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  udpayrat.com lookup in virustotal http://udpayrat.com/paypal/cycgi-bin/web ...  US  ARIN  abuse@softlayer.com  208.43.0.0 - 208.43.255.255  SOFTLAYER-4-6  SoftLayer Technologies Inc. SOFTL 1950 N Stemmons Freeway Dallas TX 75207           lookup in virustotal http://udpayrat.com/paypal/cycgi-bin/web ...
6 follow up this item(1120725) 1120725  2012-05-31 12:53:16 2012-08-07 15:17:13 1634.4  1451244  Capitec Bank  up No evidence recorded dead SenderBaselookup 50.28.23.216 at virustotallookup 50.28.23.216 at Rus CERT university stuttgart germanylookup 50.28.23.216 at ARIN 50.28.23.216  AS32244 SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  cfatsarl.com lookup in virustotal http://cfatsarl.com/modules/mod_feed/pay ...  US  ARIN  abuse@liquidweb.com  50.28.0.0 - 50.28.127.255  LIQUIDWEB-10  Liquid Web, Inc. LQWB 4210 Creyts Rd. Lansing MI 48917  ns2.hostonik.com  ns1.hostonik.com       lookup in virustotal http://cfatsarl.com/modules/mod_feed/pay ...
7 follow up this item(1120604) 1120604  2012-05-31 11:15:33 2012-08-07 15:17:16 1636  1451216  Capitec Bank  up No evidence recorded dead SenderBaselookup 50.28.23.216 at virustotallookup 50.28.23.216 at Rus CERT university stuttgart germanylookup 50.28.23.216 at ARIN 50.28.23.216  AS32244 SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  cfatsarl.com lookup in virustotal http://cfatsarl.com/libraries/phpxmlrpc/ ...  US  ARIN  abuse@liquidweb.com  50.28.0.0 - 50.28.127.255  LIQUIDWEB-10  Liquid Web, Inc. LQWB 4210 Creyts Rd. Lansing MI 48917  ns1.hostonik.com.  ns2.hostonik.com.       lookup in virustotal http://cfatsarl.com/libraries/phpxmlrpc/ ...
8 follow up this item(1120603) 1120603  2012-05-31 09:30:04 2012-08-07 15:17:17 1637.8  1451190  Capitec Bank  up No evidence recorded dead SenderBaselookup 50.28.23.216 at virustotallookup 50.28.23.216 at Rus CERT university stuttgart germanylookup 50.28.23.216 at ARIN 50.28.23.216  AS32244 SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  cfatsarl.com lookup in virustotal http://cfatsarl.com/components/com_poll/ ...  US  ARIN  abuse@liquidweb.com  50.28.0.0 - 50.28.127.255  LIQUIDWEB-10  Liquid Web, Inc. LQWB 4210 Creyts Rd. Lansing MI 48917  ns1.hostonik.com.  ns2.hostonik.com.       lookup in virustotal http://cfatsarl.com/components/com_poll/ ...
9 follow up this item(1106865) 1106865  2012-05-12 01:00:18 2012-05-12 01:55:08 0.9  1437416  PayPal  down No evidence recorded dead SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  AS36351 SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  freyhfkhd.com lookup in virustotal http://freyhfkhd.com/paypal/paypal/cycgi ...  US  ARIN  abuse@softlayer.com  208.43.0.0 - 208.43.255.255  SOFTLAYER-4-6  SoftLayer Technologies Inc. SOFTL 4849 Alpha Rd. Dallas TX 75244           lookup in virustotal http://freyhfkhd.com/paypal/paypal/cycgi ...
10 follow up this item(1106866) 1106866  2012-05-12 01:00:18 2012-05-12 01:55:07 0.9  1437417  PayPal  down No evidence recorded dead SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  AS36351 SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  freyhfkhd.com lookup in virustotal http://freyhfkhd.com/paypal/paypal/cycgi ...  US  ARIN  abuse@softlayer.com  208.43.0.0 - 208.43.255.255  SOFTLAYER-4-6  SoftLayer Technologies Inc. SOFTL 4849 Alpha Rd. Dallas TX 75244           lookup in virustotal http://freyhfkhd.com/paypal/paypal/cycgi ...
11 follow up this item(1095919) 1095919  2012-05-02 00:40:11 2012-05-02 00:59:43 0.3  1426026  PayPal  up No evidence recorded dead SenderBaselookup 174.37.49.135 at virustotallookup 174.37.49.135 at Rus CERT university stuttgart germanylookup 174.37.49.135 at ARIN 174.37.49.135  AS36351 SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  jabdenc.com lookup in virustotal http://jabdenc.com/paypal.fr/Processing. ...  US  ARIN  abuse@softlayer.com  174.36.0.0 - 174.37.255.255  SOFTLAYER-4-7  SoftLayer Technologies Inc. SOFTL 4849 Alpha Rd. Dallas TX 75244  ns1.name.com.  ns4.name.com.  ns3.name.com.  ns2.name.com.   lookup in virustotal http://jabdenc.com/paypal.fr/Processing. ...
12 follow up this item(1095920) 1095920  2012-05-02 00:40:11 2012-05-02 00:59:41 0.3  1426027  PayPal  up No evidence recorded dead SenderBaselookup 174.37.49.135 at virustotallookup 174.37.49.135 at Rus CERT university stuttgart germanylookup 174.37.49.135 at ARIN 174.37.49.135  AS36351 SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  foilabay.com lookup in virustotal http://foilabay.com/paypal.fr/erreur.htm ...  US  ARIN  abuse@softlayer.com  174.36.0.0 - 174.37.255.255  SOFTLAYER-4-7  SoftLayer Technologies Inc. SOFTL 4849 Alpha Rd. Dallas TX 75244  ns2.name.com.  ns1.name.com.  ns3.name.com.  ns4.name.com.   lookup in virustotal http://foilabay.com/paypal.fr/erreur.htm ...
13 follow up this item(1091576) 1091576  2012-04-25 21:16:52 2012-04-26 03:08:57 5.9  1421398  PayPal  up No evidence recorded dead SenderBaselookup 67.228.247.186 at virustotallookup 67.228.247.186 at Rus CERT university stuttgart germanylookup 67.228.247.186 at ARIN 67.228.247.186  AS36351 SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  arwapay.com lookup in virustotal http://arwapay.com/payp/  US  ARIN  abuse@softlayer.com  67.228.0.0 - 67.228.255.255  SOFTLAYER-4-5  SoftLayer Technologies Inc. SOFTL 4849 Alpha Rd. Dallas TX 75244  ns2.name.com.  ns4.name.com.  ns3.name.com.  ns1.name.com.   lookup in virustotal http://arwapay.com/payp/
14 follow up this item(1083365) 1083365  2012-04-15 18:20:39 2012-04-24 02:36:44 200.3  1412576  Other  up  dead SenderBaselookup 178.239.50.151 at virustotallookup 178.239.50.151 at Rus CERT university stuttgart germanylookup 178.239.50.151 at ARIN 178.239.50.151  AS36351 SenderBaselookup 208.43.167.112 at virustotallookup 208.43.167.112 at Rus CERT university stuttgart germanylookup 208.43.167.112 at ARIN 208.43.167.112  dota2beta.net lookup in virustotal http://www.dota2beta.net/  US  ARIN  abuse@softlayer.com  208.43.0.0 - 208.43.255.255  SOFTLAYER-4-6  SoftLayer Technologies Inc. SOFTL 1950 N Stemmons Freeway Dallas TX 75207  dns55.meghewett.biz  dns56.meghewett.biz       lookup in virustotal http://www.dota2beta.net/
Click here for other vital incidents


Protected by clean MX
Access is provided for free and subject to these Terms and Conditions.