CLEAN MX realtime database    
public access query for phishing URL Top 50 stats
Totally watched: 49, to down: 0, to up: 0, changed ip: 0
As of 2013-05-22 18:59:50 CEST
Subscribe to the PhishWatch Mailing list, updated hourly
This database consists of Phishing URI, collected and verified since Oct 2006 some of them may be already closed, but are still recognized as fraud by firefox and opera also offending domain names are honored by SURBL.
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

Attention: all URI'S are manually verified, but not cross-checked for real phishing function in this moment you make this query.(Sites may have been closed already..)
Our automatic Phishwalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

to look at some nice charts her are complete statistics for this database
and for our german friends some minutes on Symantec Phishing report

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0019 Seconds
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(3300901) 3300901  2013-05-19 12:38:42 2013-05-19 12:53:39 0.2    up  dead SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  AS22489 SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  nimrodltd-uk.net lookup in virustotal http://nimrodltd-uk.net/files/  AU  ARIN  hostmaster@trellian.com  69.43.161.0 - 69.43.161.255  NET-69-43-161-0-1  Trellian Pty Ltd TRELL-4 8 East Concourse Beaumaris VIC 3193  ns2.above.com.  ns1.above.com.       lookup in virustotal http://nimrodltd-uk.net/files/
2 follow up this item(3270521) 3270521  2013-05-11 09:36:40 2013-05-12 15:42:01 30.1  1836157  Other  up  dead SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  AS22489 SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  mak2004.com lookup in virustotal http://mak2004.com/%7Ealekbg/1/paypal-up ...  AU  ARIN  hostmaster@trellian.com  69.43.161.0 - 69.43.161.255  NET-69-43-161-0-1  Trellian Pty Ltd TRELL-4 8 East Concourse Beaumaris VIC 3193  ns2.above.com.  ns1.above.com.       lookup in virustotal http://mak2004.com/%7Ealekbg/1/paypal-up ...
3 follow up this item(3269739) 3269739  2013-05-10 22:37:19 2013-05-12 15:32:58 40.9  1835692  Other  up  dead SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  AS22489 SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  mak2004.com lookup in virustotal http://mak2004.com/%7Ealekbg/1/paypal-up ...  AU  ARIN  hostmaster@trellian.com  69.43.161.0 - 69.43.161.255  NET-69-43-161-0-1  Trellian Pty Ltd TRELL-4 8 East Concourse Beaumaris VIC 3193  ns1.above.com.  ns2.above.com.       lookup in virustotal http://mak2004.com/%7Ealekbg/1/paypal-up ...
4 follow up this item(3263188) 3263188  2013-05-09 18:03:41 2013-05-09 18:57:47 0.9  1832537  Other  up  dead SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  AS22489 SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  gcbaneh.com lookup in virustotal http://gcbaneh.com/wp-content/themes/m-g ...  AU  ARIN  hostmaster@trellian.com  69.43.161.0 - 69.43.161.255  NET-69-43-161-0-1  Trellian Pty Ltd TRELL-4 8 East Concourse Beaumaris VIC 3193  ns2.above.com  ns1.above.com       lookup in virustotal http://gcbaneh.com/wp-content/themes/m-g ...
5 follow up this item(3203033) 3203033  2013-04-09 20:19:22 OVERDUE! 1030.7     No log recorded SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  AS22489 SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  sdyjzs.com lookup in virustotal http://sdyjzs.com/js/?us.battle.net/logi ...  AU  ARIN  hostmaster@trellian.com  69.43.161.0 - 69.43.161.255  NET-69-43-161-0-1  Trellian Pty Ltd TRELL-4 8 East Concourse Beaumaris VIC 3193  ns1.above.com.  ns2.above.com.       lookup in virustotal http://sdyjzs.com/js/?us.battle.net/logi ...
6 follow up this item(3181069) 3181069  2013-03-17 06:39:30 2013-03-17 06:54:11 0.2    up  dead SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  AS22489 SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  ceberd.com lookup in virustotal http://ceberd.com/wev/files/  AU  ARIN  hostmaster@trellian.com  69.43.161.0 - 69.43.161.255  NET-69-43-161-0-1  Trellian Pty Ltd TRELL-4 8 East Concourse Beaumaris VIC 3193  ns1.above.com.  ns2.above.com.       lookup in virustotal http://ceberd.com/wev/files/
7 follow up this item(784143) 784143  2010-05-24 14:44:00 2012-01-11 03:33:40 14317.8  983001    up  dead SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  AS22489 SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  onlineservices-pp.com lookup in virustotal http://onlineservices-pp.com/  US  ARIN  abuse@castleaccess.com  69.43.128.0 - 69.43.207.255  ARIN-CASTLE-ALLOC  Castle Access Inc CASTL 9606 Aero Drive Ste 1900 San Diego CA 92123           lookup in virustotal http://onlineservices-pp.com/
8 follow up this item(781685) 781685  2010-05-18 02:44:00 2012-01-11 03:35:43 14473.9  979916    up  dead SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  AS22489 SenderBaselookup 69.43.161.179 at virustotallookup 69.43.161.179 at Rus CERT university stuttgart germanylookup 69.43.161.179 at ARIN 69.43.161.179  plspsirs.com lookup in virustotal http://www.plspsirs.com/ptzyk/SearchTAX. ...  US  ARIN  abuse@castleaccess.com  69.43.128.0 - 69.43.207.255  ARIN-CASTLE-ALLOC  Castle Access Inc CASTL 9606 Aero Drive Ste 1900 San Diego CA 92123  yns1.yahoo.com.  yns2.yahoo.com.       lookup in virustotal http://www.plspsirs.com/ptzyk/SearchTAX. ...
Click here for other vital incidents


Protected by clean MX
Access is provided for free and subject to these Terms and Conditions.