CLEAN MX realtime database    
public access query for phishing URL Top 50 stats
Totally watched: 391, to down: 0, to up: 0, changed ip: 0
As of 2013-05-21 12:06:35 CEST
Subscribe to the PhishWatch Mailing list, updated hourly
This database consists of Phishing URI, collected and verified since Oct 2006 some of them may be already closed, but are still recognized as fraud by firefox and opera also offending domain names are honored by SURBL.
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

Attention: all URI'S are manually verified, but not cross-checked for real phishing function in this moment you make this query.(Sites may have been closed already..)
Our automatic Phishwalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

to look at some nice charts her are complete statistics for this database
and for our german friends some minutes on Symantec Phishing report

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0035 Seconds
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(3280700) 3280700  2013-05-13 10:34:10 2013-05-13 13:15:50 2.7    up  dead SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  AS40793 SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  hotdateforme.com lookup in virustotal http://lakdjlaskjslkwje9q8723zmsaldalk-z ...  US  ARIN  abuse@internap.com  64.74.0.0 - 64.74.255.255  PNAP-SEA-BLOCK4  Internap Network Services Corporation PNAP 250 Williams Street Suite E100 Atlanta GA 30303  dns5.name-services.com  dns3.name-services.com  dns2.name-services.com  dns1.name-services.com  dns4.name-services.com lookup in virustotal http://lakdjlaskjslkwje9q8723zmsaldalk-z ...
2 follow up this item(3280688) 3280688  2013-05-13 10:33:37 2013-05-13 13:17:27 2.7    up  dead SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  AS40793 SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  hotdateforme.com lookup in virustotal http://hotdateforme.com/%7Eguntingk/mayb ...  US  ARIN  abuse@internap.com  64.74.0.0 - 64.74.255.255  PNAP-SEA-BLOCK4  Internap Network Services Corporation PNAP 250 Williams Street Suite E100 Atlanta GA 30303  dns5.name-services.com  dns4.name-services.com  dns2.name-services.com  dns1.name-services.com  dns3.name-services.com lookup in virustotal http://hotdateforme.com/%7Eguntingk/mayb ...
3 follow up this item(3268016) 3268016  2013-05-10 14:46:35 2013-05-10 15:02:18 0.3  1834852  Other  up  dead SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  AS40793 SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  hotdateforme.com lookup in virustotal http://lakdjlaskjslkwje9q8723zmsaldalk-z ...  US  ARIN  abuse@internap.com  64.74.0.0 - 64.74.255.255  PNAP-SEA-BLOCK4  Internap Network Services Corporation PNAP 250 Williams Street Suite E100 Atlanta GA 30303  dns2.name-services.com  dns1.name-services.com  dns4.name-services.com  dns3.name-services.com  dns5.name-services.com lookup in virustotal http://lakdjlaskjslkwje9q8723zmsaldalk-z ...
4 follow up this item(3268013) 3268013  2013-05-10 05:53:27 2013-05-10 15:02:20 9.1  1833685  Other  up  dead SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  AS40793 SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  hotdateforme.com lookup in virustotal http://hotdateforme.com/~guntingk/Mayban ...  US  ARIN  abuse@internap.com  64.74.0.0 - 64.74.255.255  PNAP-SEA-BLOCK4  Internap Network Services Corporation PNAP 250 Williams Street Suite E100 Atlanta GA 30303  dns3.name-services.com  dns4.name-services.com  dns2.name-services.com  dns1.name-services.com  dns5.name-services.com lookup in virustotal http://hotdateforme.com/~guntingk/Mayban ...
5 follow up this item(3240845) 3240845  2013-05-02 04:20:16 2013-05-02 05:40:25 1.3    up  dead SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  AS40793 SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  3z.cc lookup in virustotal http://3z.cc/  US  ARIN  abuse@internap.com  64.74.0.0 - 64.74.255.255  PNAP-SEA-BLOCK4  Internap Network Services Corporation PNAP 250 Williams Street Suite E100 Atlanta GA 30303  dns5.name-services.com.  dns1.name-services.com.  dns3.name-services.com.  dns2.name-services.com.  dns4.name-services.com. lookup in virustotal http://3z.cc/
6 follow up this item(3185871) 3185871  2013-03-21 07:00:10 OVERDUE! 1468.6     No log recorded SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  AS40793 SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  bjzjg.com lookup in virustotal http://www.bjzjg.com/js/?app=com-d3& ...  US  ARIN  abuse@internap.com  64.74.0.0 - 64.74.255.255  PNAP-SEA-BLOCK4  Internap Network Services Corporation PNAP 250 Williams Street Suite E100 Atlanta GA 30303  dns4.name-services.com.  dns5.name-services.com.  dns1.name-services.com.  dns2.name-services.com.  dns3.name-services.com. lookup in virustotal http://www.bjzjg.com/js/?app=com-d3& ...
7 follow up this item(3180797) 3180797  2013-03-17 00:38:15 2013-03-17 00:59:28 0.4    up No evidence recorded dead SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  AS40793 SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  bjzjg.com lookup in virustotal http://www.bjzjg.com/js/?app=com-d3& ...  US  ARIN  abuse@internap.com  64.74.0.0 - 64.74.255.255  PNAP-SEA-BLOCK4  Internap Network Services Corporation PNAP 250 Williams Street Suite E100 Atlanta GA 30303  dns4.name-services.com.  dns5.name-services.com.  dns1.name-services.com.  dns3.name-services.com.  dns2.name-services.com. lookup in virustotal http://www.bjzjg.com/js/?app=com-d3& ...
8 follow up this item(3165663) 3165663  2013-02-26 14:42:33 2013-02-26 15:05:03 0.4  1747347  Other  up  dead SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  AS40793 SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  ryaxservices.com lookup in virustotal http://ryaxservices.com/www.paypal.com.c ...  US  ARIN  abuse@internap.com  64.74.0.0 - 64.74.255.255  PNAP-SEA-BLOCK4  Internap Network Services Corporation PNAP 250 Williams Street Suite E100 Atlanta GA 30303  dns4.name-services.com.  dns3.name-services.com.  dns5.name-services.com.  dns1.name-services.com.  dns2.name-services.com. lookup in virustotal http://ryaxservices.com/www.paypal.com.c ...
9 follow up this item(2473982) 2473982  2012-11-16 23:00:01 2013-01-12 04:47:55 1349.8  1619868  AOL  up  dead SenderBaselookup 31.170.167.158 at virustotallookup 31.170.167.158 at Rus CERT university stuttgart germanylookup 31.170.167.158 at Ripe 31.170.167.158  AS47583 SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at Ripe 64.74.223.35  cheaphostingpage.com lookup in virustotal http://yuodax.cheaphostingpage.com/huipd ...  US  RIPE  abuse@main-hosting.com  31.170.166.0 - 31.170.167.255  MAIN-HOSTING-SERVERS  Main Hosting Servers  ns1.main-hosting.com.  ns2.main-hosting.com.  ns3.main-hosting.com.  ns4.main-hosting.com.   lookup in virustotal http://yuodax.cheaphostingpage.com/huipd ...
10 follow up this item(1175834) 1175834  2012-07-30 22:44:38 2012-10-27 04:14:08 2117.5  1511230  AOL  up  dead SenderBaselookup 69.65.3.197 at virustotallookup 69.65.3.197 at Rus CERT university stuttgart germanylookup 69.65.3.197 at ARIN 69.65.3.197  AS40793 SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  bestkettlebellsforsale.com lookup in virustotal http://bestkettlebellsforsale.com/aol.co ...  US  ARIN  abuse@internap.com  64.74.0.0 - 64.74.255.255  PNAP-SEA-BLOCK4  Internap Network Services Corporation PNAP 250 Williams Street Suite E100 Atlanta GA 30303  ns2.webhostingpad.com.  ns1.webhostingpad.com.       lookup in virustotal http://bestkettlebellsforsale.com/aol.co ...
11 follow up this item(1128973) 1128973  2012-06-13 13:24:24 2012-07-04 03:21:45 494  1460152  Other  up  dead SenderBaselookup 209.105.230.141 at virustotallookup 209.105.230.141 at Rus CERT university stuttgart germanylookup 209.105.230.141 at ARIN 209.105.230.141  AS40793 SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  snapplecoupons.org lookup in virustotal http://snapplecoupons.org/wp-login.php  US  ARIN  abuse@internap.com  64.74.0.0 - 64.74.255.255  PNAP-SEA-BLOCK4  Internap Network Services Corporation PNAP 250 Williams Street Suite E100 Atlanta GA 30303  dns1.registrar-servers.com.  dns3.registrar-servers.com.  dns4.registrar-servers.com.  dns2.registrar-servers.com.  dns5.registrar-servers.com. lookup in virustotal http://snapplecoupons.org/wp-login.php
12 follow up this item(930053) 930053  2011-06-07 12:22:36 2012-01-10 23:28:06 5220.1    up  dead SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  AS40793 SenderBaselookup 64.74.223.35 at virustotallookup 64.74.223.35 at Rus CERT university stuttgart germanylookup 64.74.223.35 at ARIN 64.74.223.35  afronex.us lookup in virustotal http://afronex.us/scripts/relatedresourc ...  US  ARIN  abuse@internap.com  64.74.0.0 - 64.74.255.255  PNAP-SEA-BLOCK4  Internap Network Services Corporation PNAP 250 Williams Street Suite E100 Atlanta GA 30303           lookup in virustotal http://afronex.us/scripts/relatedresourc ...
Click here for other vital incidents


Protected by clean MX
Access is provided for free and subject to these Terms and Conditions.