CLEAN MX realtime database    
public access query for phishing URL Top 50 stats
Totally watched: 390, to down: 0, to up: 0, changed ip: 0
As of 2013-05-18 10:05:15 CEST
Subscribe to the PhishWatch Mailing list, updated hourly
This database consists of Phishing URI, collected and verified since Oct 2006 some of them may be already closed, but are still recognized as fraud by firefox and opera also offending domain names are honored by SURBL.
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

Attention: all URI'S are manually verified, but not cross-checked for real phishing function in this moment you make this query.(Sites may have been closed already..)
Our automatic Phishwalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

to look at some nice charts her are complete statistics for this database
and for our german friends some minutes on Symantec Phishing report

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0018 Seconds
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(1165796) 1165796  2012-07-20 04:22:32 2012-07-21 22:18:57 41.9  1500395  PayPal  up No evidence recorded dead SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34  AS8972 SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34  elbrasildelosbrics.com lookup in virustotal http://elbrasildelosbrics.com/savina/  DE  RIPE  abuse@justdsl.de  85.25.96.0 - 85.25.111.255  JustDSL  JustDSL Broadband Dialin  ns20.hostblastnet.com.  ns21.hostblastnet.com.  ns2.hostblast.net.  ns1.hostblast.net.   lookup in virustotal http://elbrasildelosbrics.com/savina/
2 follow up this item(1165821) 1165821  2012-07-20 01:10:02 2012-07-21 22:18:12 45.1  1500341  PayPal  up No evidence recorded dead SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34  AS8972 SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34  elbrasildelosbrics.com lookup in virustotal http://elbrasildelosbrics.com/bocanci/de ...  DE  RIPE  abuse@justdsl.de  85.25.96.0 - 85.25.111.255  JustDSL  JustDSL Broadband Dialin  ns20.hostblastnet.com  ns21.hostblastnet.com  ns2.hostblast.net  ns1.hostblast.net   lookup in virustotal http://elbrasildelosbrics.com/bocanci/de ...
3 follow up this item(1165941) 1165941  2012-07-19 23:58:57 2012-07-21 22:15:28 46.3  1500289  PayPal  up No evidence recorded dead SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34  AS8972 SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34  elbrasildelosbrics.com lookup in virustotal http://elbrasildelosbrics.com/cutie/  DE  RIPE  abuse@justdsl.de  85.25.96.0 - 85.25.111.255  JustDSL  JustDSL Broadband Dialin  ns20.hostblastnet.com  ns21.hostblastnet.com  ns2.hostblast.net  ns1.hostblast.net   lookup in virustotal http://elbrasildelosbrics.com/cutie/
4 follow up this item(1165500) 1165500  2012-07-19 19:36:05 2012-07-21 22:25:35 50.8  1499959  PayPal  up No evidence recorded dead SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34  AS8972 SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34  elbrasildelosbrics.com lookup in virustotal http://elbrasildelosbrics.com/pufuleti/  DE  RIPE  abuse@justdsl.de  85.25.96.0 - 85.25.111.255  JustDSL  JustDSL Broadband Dialin  ns21.hostblastnet.com.  ns20.hostblastnet.com.  ns2.hostblast.net.  ns1.hostblast.net.   lookup in virustotal http://elbrasildelosbrics.com/pufuleti/
5 follow up this item(1128367) 1128367  2012-06-12 18:17:53 2012-06-14 08:15:39 38  1459393  Poste Italiane  up No evidence recorded dead SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34 SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34  universeofpoetry.com lookup in virustotal http://universeofpoetry.com/htl/sniff/in ...  DE  RIPE  abuse@plusserver.de  85.25.99.0 - 85.25.99.127  PLUSSERVER-1  PlusServer - Dedicated Premium Serverhostinghttp  ns1.hostblast.net  ns2.hostblast.net  ns20.hostblastnet.com  ns21.hostblastnet.com   lookup in virustotal http://universeofpoetry.com/htl/sniff/in ...
6 follow up this item(1124761) 1124761  2012-06-07 09:20:41 2012-06-07 09:56:05 0.6  1455598  PayPal  up No evidence recorded dead SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34 SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34  karasimsek.net lookup in virustotal http://karasimsek.net/.www.paypal.com/uk ...  DE  RIPE  abuse@plusserver.de  85.25.99.0 - 85.25.99.127  PLUSSERVER-1  PlusServer - Dedicated Premium Serverhostinghttp  ns1.hostblast.net.  ns20.hostblastnet.com.  ns21.hostblastnet.com.  ns2.hostblast.net.   lookup in virustotal http://karasimsek.net/.www.paypal.com/uk ...
7 follow up this item(1112010) 1112010  2012-05-19 16:51:31 2012-05-19 16:53:01 0  1442588  Other  up No evidence recorded dead SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34 SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34  secureforum.in lookup in virustotal http://services.runescape.com.secureforu ...  DE  RIPE  abuse@plusserver.de  85.25.99.0 - 85.25.99.127  PLUSSERVER-1  PlusServer - Dedicated Premium Serverhostinghttp  ns2.hostblast.net  ns31.myhostblast.net  ns1.hostblast.net  ns30.myhostblast.net   lookup in virustotal http://services.runescape.com.secureforu ...
8 follow up this item(1111895) 1111895  2012-05-19 13:18:10 2012-05-22 10:12:05 68.9  1442526  Other  down No evidence recorded dead SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34 SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34  secureforum.in lookup in virustotal http://services.runescape.com.secureforu ...  DE  RIPE  abuse@plusserver.de  85.25.99.0 - 85.25.99.127  PLUSSERVER-1  PlusServer - Dedicated Premium Serverhostinghttp  ns2.hostblast.net.  ns1.hostblast.net.  ns31.myhostblast.net.  ns30.myhostblast.net.   lookup in virustotal http://services.runescape.com.secureforu ...
9 follow up this item(1092739) 1092739  2012-04-27 15:05:10 2012-05-04 07:21:24 160.3  1422460  Santander UK  down No evidence recorded dead SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34 SenderBaselookup 85.25.99.34 at virustotallookup 85.25.99.34 at Rus CERT university stuttgart germanylookup 85.25.99.34 at Ripe 85.25.99.34  chandigarhservices.com lookup in virustotal http://www.chandigarhservices.com/wp-inc ...  DE  RIPE  abuse@plusserver.de  85.25.99.0 - 85.25.99.127  PLUSSERVER-1  PlusServer - Dedicated Premium Serverhostinghttp  ns2.hostblast.net  ns21.hostblastnet.com  ns20.hostblastnet.com  ns1.hostblast.net   lookup in virustotal http://www.chandigarhservices.com/wp-inc ...
Click here for other vital incidents


Protected by clean MX
Access is provided for free and subject to these Terms and Conditions.