CLEAN MX realtime database    
public access query for phishing URL Top 50 stats
Totally watched: 50, to down: 0, to up: 0, changed ip: 0
As of 2013-05-21 07:59:30 CEST
Subscribe to the PhishWatch Mailing list, updated hourly
This database consists of Phishing URI, collected and verified since Oct 2006 some of them may be already closed, but are still recognized as fraud by firefox and opera also offending domain names are honored by SURBL.
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

Attention: all URI'S are manually verified, but not cross-checked for real phishing function in this moment you make this query.(Sites may have been closed already..)
Our automatic Phishwalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

to look at some nice charts her are complete statistics for this database
and for our german friends some minutes on Symantec Phishing report

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0028 Seconds
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(3161521) 3161521  2013-02-22 14:40:09 2013-02-22 14:59:36 0.3    up  dead SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  AS14112 SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  5raam.com lookup in virustotal http://www.5raam.com/~masauto/www.paypal ...  US  ARIN  abuse@level3.com  8.0.0.0 - 8.255.255.255  LVLT-ORG-8-8  Level 3 Communications, Inc. LVLT 1025 Eldorado Blvd. Broomfield CO 80021  dns2.name-services.com.  dns4.name-services.com.  dns1.name-services.com.  dns5.name-services.com.  dns3.name-services.com. lookup in virustotal http://www.5raam.com/~masauto/www.paypal ...
2 follow up this item(3153424) 3153424  2013-02-21 03:01:30 2013-02-21 03:42:30 0.7  1738257  PayPal  up  dead SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  AS14112 SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  siagh.org lookup in virustotal http://siagh.org/~hjhcom1/paypal.fr.cgi- ...  US  ARIN  abuse@level3.com  8.0.0.0 - 8.255.255.255  LVLT-ORG-8-8  Level 3 Communications, Inc. LVLT 1025 Eldorado Blvd. Broomfield CO 80021  dns1.name-services.com  dns5.name-services.com  dns2.name-services.com  dns4.name-services.com  dns3.name-services.com lookup in virustotal http://siagh.org/~hjhcom1/paypal.fr.cgi- ...
3 follow up this item(3027745) 3027745  2012-11-24 05:23:37 2012-12-08 10:22:41 341  1623411  Other  up  dead SenderBaselookup 89.145.88.160 at virustotallookup 89.145.88.160 at Rus CERT university stuttgart germanylookup 89.145.88.160 at ARIN 89.145.88.160  AS14112 SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  bar-le-chatelier.com lookup in virustotal http://remax.com.bar-le-chatelier.com/lo ...  US  ARIN  abuse@level3.com  8.0.0.0 - 8.255.255.255  LVLT-ORG-8-8  Level 3 Communications, Inc. LVLT 1025 Eldorado Blvd. Broomfield CO 80021  ns2.ns-metis.com  ns1.ns-metis.com       lookup in virustotal http://remax.com.bar-le-chatelier.com/lo ...
4 follow up this item(878265) 878265  2011-02-23 16:42:44 2011-02-23 21:42:34 5    up  dead SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  AS14112 SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  myfinancevillage.com lookup in virustotal http://www.myfinancevillage.com/debt-and ...  US  ARIN  abuse@level3.com  8.0.0.0 - 8.255.255.255  LVLT-ORG-8-8  Level 3 Communications, Inc. LVLT 1025 Eldorado Blvd. Broomfield CO 80021  dns4.name-services.com.  dns2.name-services.com.  dns1.name-services.com.  dns5.name-services.com.  dns3.name-services.com. lookup in virustotal http://www.myfinancevillage.com/debt-and ...
5 follow up this item(878024) 878024  2011-02-23 16:42:42 2011-02-23 21:51:11 5.1  1133632    up  dead SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  AS14112 SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  l-sahar.com lookup in virustotal http://www.l-sahar.com/vb/archive/1/2/pe ...  US  ARIN  abuse@level3.com  8.0.0.0 - 8.255.255.255  LVLT-ORG-8-8  Level 3 Communications, Inc. LVLT 1025 Eldorado Blvd. Broomfield CO 80021  dns5.name-services.com  dns2.name-services.com  dns4.name-services.com  dns3.name-services.com  dns1.name-services.com lookup in virustotal http://www.l-sahar.com/vb/archive/1/2/pe ...
6 follow up this item(878025) 878025  2011-02-23 16:42:42 2011-02-23 21:51:10 5.1  1135000    up  dead SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  AS14112 SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  l-sahar.com lookup in virustotal http://www.l-sahar.com/vb/hsbc/hcbc.com. ...  US  ARIN  abuse@level3.com  8.0.0.0 - 8.255.255.255  LVLT-ORG-8-8  Level 3 Communications, Inc. LVLT 1025 Eldorado Blvd. Broomfield CO 80021  dns5.name-services.com  dns2.name-services.com  dns4.name-services.com  dns3.name-services.com  dns1.name-services.com lookup in virustotal http://www.l-sahar.com/vb/hsbc/hcbc.com. ...
7 follow up this item(878026) 878026  2011-02-23 16:42:42 2011-02-23 21:51:09 5.1  1138065    up  dead SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  AS14112 SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  l-sahar.com lookup in virustotal http://www.l-sahar.com/vb/pylimlcnfrmils ...  US  ARIN  abuse@level3.com  8.0.0.0 - 8.255.255.255  LVLT-ORG-8-8  Level 3 Communications, Inc. LVLT 1025 Eldorado Blvd. Broomfield CO 80021  dns5.name-services.com  dns2.name-services.com  dns4.name-services.com  dns3.name-services.com  dns1.name-services.com lookup in virustotal http://www.l-sahar.com/vb/pylimlcnfrmils ...
8 follow up this item(873718) 873718  2011-02-23 16:42:11 2011-02-23 23:45:21 7.1    up  dead SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  AS14112 SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  l-sahar.com lookup in virustotal http://l-sahar.com/vb/archive/pylimlcnfr ...  US  ARIN  abuse@level3.com  8.0.0.0 - 8.255.255.255  LVLT-ORG-8-8  Level 3 Communications, Inc. LVLT 1025 Eldorado Blvd. Broomfield CO 80021  dns5.name-services.com  dns1.name-services.com  dns3.name-services.com  dns2.name-services.com  dns4.name-services.com lookup in virustotal http://l-sahar.com/vb/archive/pylimlcnfr ...
9 follow up this item(818266) 818266  2010-11-05 17:58:00 2010-11-10 21:44:18 123.8  1074401    up  dead SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  AS14112 SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  28slovenia.com lookup in virustotal http://28slovenia.com/about.html  US  ARIN  abuse@level3.com  8.0.0.0 - 8.255.255.255  LVLT-ORG-8-8  Level 3 Communications, Inc. LVLT 1025 Eldorado Blvd. Broomfield CO 80021  dns4.name-services.com  dns3.name-services.com  dns1.name-services.com  dns5.name-services.com  dns2.name-services.com lookup in virustotal http://28slovenia.com/about.html
10 follow up this item(807026) 807026  2010-09-29 08:30:00 2010-10-02 23:55:32 87.4  1057771  PayPal  up  dead SenderBaselookup 208.115.218.62 at virustotallookup 208.115.218.62 at Rus CERT university stuttgart germanylookup 208.115.218.62 at ARIN 208.115.218.62  AS14112 SenderBaselookup 8.5.1.30 at virustotallookup 8.5.1.30 at Rus CERT university stuttgart germanylookup 8.5.1.30 at ARIN 8.5.1.30  l-sahar.com lookup in virustotal http://l-sahar.com/vb/archive/pylimlcnfr ...  US  ARIN  abuse@level3.com  8.0.0.0 - 8.255.255.255  LVLT-ORG-8-8  Level 3 Communications, Inc. LVLT 1025 Eldorado Blvd. Broomfield CO 80021  ns1.speed2host.net  ns2.speed2host.net       lookup in virustotal http://l-sahar.com/vb/archive/pylimlcnfr ...
Click here for other vital incidents


Protected by clean MX
Access is provided for free and subject to these Terms and Conditions.