CLEAN MX realtime database    
public access query for phishing URL Top 50 stats
Totally watched: 24, to down: 0, to up: 0, changed ip: 0
As of 2013-05-25 22:59:54 CEST
Subscribe to the PhishWatch Mailing list, updated hourly
This database consists of Phishing URI, collected and verified since Oct 2006 some of them may be already closed, but are still recognized as fraud by firefox and opera also offending domain names are honored by SURBL.
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

Attention: all URI'S are manually verified, but not cross-checked for real phishing function in this moment you make this query.(Sites may have been closed already..)
Our automatic Phishwalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

to look at some nice charts her are complete statistics for this database
and for our german friends some minutes on Symantec Phishing report

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.7729 Seconds
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(1137419) 1137419  2012-06-20 09:54:56 2012-09-20 11:28:42 2209.6  1467037  Other  down No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  jiangsushunlilndustria.tk lookup in virustotal http://jiangsushunlilndustria.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://jiangsushunlilndustria.tk/
2 follow up this item(1132191) 1132191  2012-06-17 15:06:35 2012-06-18 13:46:50 22.7  1463308  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  img920.tk lookup in virustotal http://www.facebook.com.img920.tk/Photo- ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.facebook.com.img920.tk/Photo- ...
3 follow up this item(1131344) 1131344  2012-06-15 21:40:12 2012-06-15 23:23:38 1.7  1462449  AOL  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  i4lpq.tk lookup in virustotal http://i4lpq.tk  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://i4lpq.tk
4 follow up this item(1128993) 1128993  2012-06-13 13:32:40 2012-06-13 14:18:40 0.8  1460091  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  cielofidelidade4.tk lookup in virustotal http://cielofidelidade4.tk  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://cielofidelidade4.tk
5 follow up this item(1128017) 1128017  2012-06-11 08:37:44 2012-06-12 03:56:49 19.3  1457871  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  gomercyaprodnew.tk lookup in virustotal http://gomercyaprodnew.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://gomercyaprodnew.tk/
6 follow up this item(1126682) 1126682  2012-06-10 19:32:57 2012-06-12 05:38:17 34.1  1457617  Other  up No evidence recorded dead SenderBaselookup 173.236.55.211 at virustotallookup 173.236.55.211 at Rus CERT university stuttgart germanylookup 173.236.55.211 at ARIN 173.236.55.211  AS32475 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at ARIN 93.170.52.20  facevid.tk lookup in virustotal http://facevid.tk/i/login.live.com/en/?i ...  US  ARIN  netops@singlehop.com  173.236.0.0 - 173.236.127.255  SINGLEHOP  SingleHop, Inc. SINGL-8 621 W. Randolph St. 3rd Floor Chicago IL 60661  ns1.theyous.com.  ns2.theyous.com.       lookup in virustotal http://facevid.tk/i/login.live.com/en/?i ...
7 follow up this item(1125854) 1125854  2012-06-08 16:20:53 2012-06-12 05:53:36 85.5  1456491  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  alumni-helpdeskteam-web.tk lookup in virustotal http://www.alumni-helpdeskteam-web.tk  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.alumni-helpdeskteam-web.tk
8 follow up this item(1125268) 1125268  2012-06-07 22:51:44 2012-06-12 06:03:28 103.2  1456050  RuneScape  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  service-runescape-forum-giveaway.tk lookup in virustotal http://service-runescape-forum-giveaway. ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://service-runescape-forum-giveaway. ...
9 follow up this item(1123395) 1123395  2012-06-05 14:16:57 2012-06-12 06:20:13 160.1  1454052  Sulake Corporati  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  habbostaffHack.tk lookup in virustotal http://www.habbostaffHack.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.habbostaffHack.tk/
10 follow up this item(1123315) 1123315  2012-06-05 14:12:12 2012-06-12 06:21:37 160.2  1454037  Sulake Corporati  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  furnirare.tk lookup in virustotal http://www.furnirare.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.furnirare.tk/
11 follow up this item(1123937) 1123937  2012-06-05 11:10:58 2012-06-12 06:16:00 163.1  1453953  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  ibsglobalproductsample.tk lookup in virustotal http://ibsglobalproductsample.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://ibsglobalproductsample.tk/
12 follow up this item(1122804) 1122804  2012-06-04 16:54:27 2012-06-12 06:26:41 181.5  1453370  Other  up No evidence recorded dead SenderBaselookup 113.10.149.76 at virustotallookup 113.10.149.76 at Rus CERT university stuttgart germanylookup 113.10.149.76 at Ripe 113.10.149.76  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  seaon-loven.tk lookup in virustotal http://www.seaon-loven.tk/battle_net_acc ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET    NS01.DOT.tk  NS02.DOT.tk  NS04.DOT.tk  NS03.DOT.tk   lookup in virustotal http://www.seaon-loven.tk/battle_net_acc ...
13 follow up this item(1122658) 1122658  2012-06-04 14:23:54 2012-06-12 06:28:08 184.1  1453246  Other  up No evidence recorded dead SenderBaselookup 113.10.149.76 at virustotallookup 113.10.149.76 at Rus CERT university stuttgart germanylookup 113.10.149.76 at Ripe 113.10.149.76  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  seaon-loven.tk lookup in virustotal http://www.seaon-loven.tk/battle_net_acc ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET    NS03.DOT.tk  NS04.DOT.tk  NS01.DOT.tk  NS02.DOT.tk   lookup in virustotal http://www.seaon-loven.tk/battle_net_acc ...
14 follow up this item(1121964) 1121964  2012-06-02 23:26:15 2012-06-12 06:50:13 223.4  1452663  PayPal  up No evidence recorded dead SenderBaselookup 173.199.183.164 at virustotallookup 173.199.183.164 at Rus CERT university stuttgart germanylookup 173.199.183.164 at Ripe 173.199.183.164  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  twenty10.tk lookup in virustotal http://paypal.com.cgi-bin.webscr.cmd.log ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET    ns2.100gb.co  ns1.100gb.co       lookup in virustotal http://paypal.com.cgi-bin.webscr.cmd.log ...
15 follow up this item(1121963) 1121963  2012-06-02 23:26:14 2012-06-12 06:50:33 223.4  1452662  PayPal  up No evidence recorded dead SenderBaselookup 173.199.183.164 at virustotallookup 173.199.183.164 at Rus CERT university stuttgart germanylookup 173.199.183.164 at Ripe 173.199.183.164  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  twenty10.tk lookup in virustotal http://paypal.com.cgi-bin.webscr.cmd.log ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET    ns2.100gb.co  ns1.100gb.co       lookup in virustotal http://paypal.com.cgi-bin.webscr.cmd.log ...
16 follow up this item(1121322) 1121322  2012-06-01 17:46:58 2012-06-12 07:13:24 253.4  1451990  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  microsoft-helptech.tk lookup in virustotal http://microsoft-helptech.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://microsoft-helptech.tk/
17 follow up this item(1120605) 1120605  2012-05-31 03:38:26 2012-06-12 07:24:24 291.8  1451113  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  batsav.tk lookup in virustotal http://eu.battle.net.login.batsav.tk/log ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://eu.battle.net.login.batsav.tk/log ...
18 follow up this item(1120483) 1120483  2012-05-31 02:10:35 2012-06-12 07:26:58 293.3  1451112  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  batsav.tk lookup in virustotal http://eu.battle.net.login.batsav.tk/log ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://eu.battle.net.login.batsav.tk/log ...
19 follow up this item(1120484) 1120484  2012-05-31 02:10:35 2012-06-12 07:26:38 293.3  1451113  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  batsav.tk lookup in virustotal http://eu.battle.net.login.batsav.tk/log ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://eu.battle.net.login.batsav.tk/log ...
20 follow up this item(1120189) 1120189  2012-05-30 14:02:35 2012-06-10 07:07:28 257.1  1450825  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  manadgement.tk lookup in virustotal http://us.battle.net.login.manadgement.t ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://us.battle.net.login.manadgement.t ...
21 follow up this item(1120008) 1120008  2012-05-30 12:10:32 2012-06-12 07:52:04 307.7  1450657  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  managemeant.tk lookup in virustotal http://us.battle.net.login.managemeant.t ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://us.battle.net.login.managemeant.t ...
22 follow up this item(1051720) 1051720  2012-05-30 05:21:36 2012-05-31 05:21:36 24  1450503  Other  up No evidence recorded dead SenderBaselookup 182.16.4.140 at virustotallookup 182.16.4.140 at Rus CERT university stuttgart germanylookup 182.16.4.140 at apnic 182.16.4.140  AS45753 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at apnic 93.170.52.20  worldofwardraft.tk lookup in virustotal http://us.battle.net.worldofwardraft.tk/ ...  HK  APNIC  ipadmin@simcentric.com  182.16.0.0 - 182.16.127.255  SIMCENTRIC-AS-AP  Simcentric Solutions Limited.Flat F, 40/F, Tower 1AquaMarine, 8 Sham Sheng Road  NS04.DOT.tk  NS01.DOT.tk  NS02.DOT.tk  NS03.DOT.tk   lookup in virustotal http://us.battle.net.worldofwardraft.tk/ ...
23 follow up this item(1119815) 1119815  2012-05-30 04:00:27 2012-06-12 07:54:51 315.9  1450503  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  worldofwardraft.tk lookup in virustotal http://us.battle.net.worldofwardraft.tk/ ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://us.battle.net.worldofwardraft.tk/ ...
24 follow up this item(1119893) 1119893  2012-05-29 23:40:33 2012-06-12 07:54:09 320.2  1450279  AOL  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  propertyforpeanut.tk lookup in virustotal http://propertyforpeanut.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://propertyforpeanut.tk/
25 follow up this item(1119510) 1119510  2012-05-29 20:02:44 2012-06-12 07:57:24 323.9  1449994  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  microsoftc-helpdesk24hrs.tk lookup in virustotal http://microsoftc-helpdesk24hrs.tk  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://microsoftc-helpdesk24hrs.tk
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
26 follow up this item(1117583) 1117583  2012-05-26 14:20:26 2012-06-12 08:11:32 401.9  1448177  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  dhl-packstation-verifizierung.tk lookup in virustotal http://dhl-packstation-verifizierung.tk/ ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://dhl-packstation-verifizierung.tk/ ...
27 follow up this item(1116887) 1116887  2012-05-24 16:55:32 2012-06-12 08:27:55 447.5  1447097  Mastercard  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  support-center.tk lookup in virustotal http://support-center.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://support-center.tk/
28 follow up this item(1116253) 1116253  2012-05-23 18:06:03 2012-06-12 08:34:01 470.5  1446569  Visa  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  visa-mastercard-sicherheit.tk lookup in virustotal http://www.visa-mastercard-sicherheit.tk ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.visa-mastercard-sicherheit.tk ...
29 follow up this item(1115164) 1115164  2012-05-22 12:01:28 2012-06-12 08:41:07 500.7  1445512  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  vvlogin.tk lookup in virustotal http://secure.runescape.com.vvlogin.tk/m ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://secure.runescape.com.vvlogin.tk/m ...
30 follow up this item(1115307) 1115307  2012-05-22 09:33:53 2012-06-12 08:39:27 503.1  1445428  Visa  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  mastercard-visa-sicherheit-de.tk lookup in virustotal http://mastercard-visa-sicherheit-de.tk  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://mastercard-visa-sicherheit-de.tk
31 follow up this item(1115168) 1115168  2012-05-22 08:16:52 2012-06-12 08:40:46 504.4  1445394  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  worldofwrcraft.tk lookup in virustotal http://us.battle.net.login.worldofwrcraf ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://us.battle.net.login.worldofwrcraf ...
32 follow up this item(1115030) 1115030  2012-05-22 03:24:38 2012-06-12 08:43:46 509.3  1445323  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  vvlogin.tk lookup in virustotal http://secure.runescape.com.vvlogin.tk/m ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://secure.runescape.com.vvlogin.tk/m ...
33 follow up this item(1115029) 1115029  2012-05-22 03:12:31 2012-06-12 08:44:07 509.5  1445291  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  worldofwrcraft.tk lookup in virustotal http://us.battle.net.login.worldofwrcraf ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://us.battle.net.login.worldofwrcraf ...
34 follow up this item(1114915) 1114915  2012-05-22 02:11:11 2012-06-12 08:45:38 510.6  1445323  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  vvlogin.tk lookup in virustotal http://secure.runescape.com.vvlogin.tk/m ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://secure.runescape.com.vvlogin.tk/m ...
35 follow up this item(1114459) 1114459  2012-05-21 18:21:43 2012-06-12 08:50:10 518.5  1445015  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  worldooruf.tk lookup in virustotal http://us.battle.net.login.worldooruf.tk ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://us.battle.net.login.worldooruf.tk ...
36 follow up this item(1115085) 1115085  2012-05-21 17:01:39 2012-06-12 08:42:29 519.7  1444816  Sulake Corporati  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  totem--habbo.tk lookup in virustotal http://www.totem--habbo.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.totem--habbo.tk/
37 follow up this item(1114816) 1114816  2012-05-21 16:58:14 2012-06-12 08:47:18 519.8  1444812  Sulake Corporati  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  parceria-r7.tk lookup in virustotal http://www.parceria-r7.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.parceria-r7.tk/
38 follow up this item(1114272) 1114272  2012-05-21 16:09:52 2012-06-12 08:52:00 520.7  1444698  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  worldofwrcraft.tk lookup in virustotal http://us.battle.net.login.worldofwrcraf ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://us.battle.net.login.worldofwrcraf ...
39 follow up this item(1114273) 1114273  2012-05-21 16:09:44 2012-06-12 08:51:39 520.7  1444695  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  worldooruf.tk lookup in virustotal http://us.battle.net.login.worldooruf.tk ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://us.battle.net.login.worldooruf.tk ...
40 follow up this item(1114946) 1114946  2012-05-21 14:59:25 2012-06-12 08:45:14 521.8  1444477  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  worldofwrcraft.tk lookup in virustotal http://us.battle.net.login.worldofwrcraf ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://us.battle.net.login.worldofwrcraf ...
41 follow up this item(1113365) 1113365  2012-05-21 14:37:55 2012-06-12 09:05:45 522.5  1444218  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  account-apply.tk lookup in virustotal http://eu.battle.net.login.account-apply ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://eu.battle.net.login.account-apply ...
42 follow up this item(1113694) 1113694  2012-05-21 14:25:42 2012-06-12 08:59:05 522.6  1444051  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  aologin.tk lookup in virustotal http://secure.runescape.com.aologin.tk/m ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://secure.runescape.com.aologin.tk/m ...
43 follow up this item(1115386) 1115386  2012-05-21 14:23:27 2012-06-12 08:38:40 522.3  1443971  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  ko-betaprofile.tk lookup in virustotal http://kr.battle.net.login.ko-betaprofil ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://kr.battle.net.login.ko-betaprofil ...
44 follow up this item(1113773) 1113773  2012-05-21 12:49:55 2012-06-12 08:57:21 524.1    up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  blizzard-en.tk lookup in virustotal http://us.battle.net.login.blizzard-en.t ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://us.battle.net.login.blizzard-en.t ...
45 follow up this item(1113482) 1113482  2012-05-21 12:49:42 2012-05-21 13:45:07 0.9    up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  ko-betaprofile.tk lookup in virustotal http://kr.battle.net.login.ko-betaprofil ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://kr.battle.net.login.ko-betaprofil ...
46 follow up this item(1112341) 1112341  2012-05-19 20:35:40 2012-06-12 09:15:05 564.7  1442762  PayPal  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  paypal-secured.tk lookup in virustotal http://paypal-secured.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://paypal-secured.tk/
47 follow up this item(1111827) 1111827  2012-05-19 09:12:53 2012-06-12 09:17:11 576.1  1442476  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  lhlejac.tk lookup in virustotal http://lhlejac.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://lhlejac.tk/
48 follow up this item(1111785) 1111785  2012-05-18 22:37:55 2012-06-12 09:17:52 586.7  1442317  TAM Fidelidade  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  lhlejac.tk lookup in virustotal http://lhlejac.tk  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://lhlejac.tk
49 follow up this item(1111351) 1111351  2012-05-18 16:25:02 2012-06-12 09:18:49 592.9  1442037  TAM Fidelidade  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  otcwcxo.tk lookup in virustotal http://otcwcxo.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://otcwcxo.tk/
50 follow up this item(1111139) 1111139  2012-05-18 12:26:51 2012-06-12 09:19:39 596.9  1441845  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  eooamqq.tk lookup in virustotal http://eooamqq.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://eooamqq.tk/
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
51 follow up this item(1110303) 1110303  2012-05-17 10:15:37 2012-06-12 09:24:51 623.2  1440975  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  aol-upgrade.tk lookup in virustotal http://www.aol-upgrade.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.aol-upgrade.tk/
52 follow up this item(1108988) 1108988  2012-05-15 23:19:21 2012-06-12 09:28:49 658.2  1439683  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  nexoncae.tk lookup in virustotal http://nexoncae.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://nexoncae.tk/
53 follow up this item(1108130) 1108130  2012-05-14 20:23:13 2012-06-12 09:31:58 685.1  1438686  Other  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  microsoft-helpdesks.tk lookup in virustotal http://microsoft-helpdesks.tk  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://microsoft-helpdesks.tk
54 follow up this item(1108133) 1108133  2012-05-14 19:10:41 2012-05-28 14:08:06 331  1438600  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  admin-helpdeskteam-web.tk lookup in virustotal http://admin-helpdeskteam-web.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://admin-helpdeskteam-web.tk/
55 follow up this item(1107356) 1107356  2012-05-13 15:56:42 2012-06-14 12:15:03 764.3  1437876  World of Warcraf  up No evidence recorded dead SenderBaselookup 184.82.123.80 at virustotallookup 184.82.123.80 at Rus CERT university stuttgart germanylookup 184.82.123.80 at ARIN 184.82.123.80  AS21788 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at ARIN 93.170.52.20  wowgms.tk lookup in virustotal http://www.wowgms.tk  US  ARIN  nic@hostnoc.net  184.82.0.0 - 184.82.255.255  HOSTNOC-8BLK  Network Operations Center Inc. NOC PO Box 591 Scranton PA 18501-0591  NS04.DOT.tk  NS03.DOT.tk  NS01.DOT.tk  NS02.DOT.tk   lookup in virustotal http://www.wowgms.tk
56 follow up this item(1107324) 1107324  2012-05-13 08:28:26 2012-05-14 08:02:55 23.6  1437820  Mastercard  up  dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  kreditkartenverifizierung-mastercard-visa.tk lookup in virustotal http://www.kreditkartenverifizierung-mas ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.kreditkartenverifizierung-mas ...
57 follow up this item(1107063) 1107063  2012-05-12 13:57:53 2012-06-14 14:15:01 792.3  1437582  World of Warcraf  up No evidence recorded dead SenderBaselookup 184.82.123.80 at virustotallookup 184.82.123.80 at Rus CERT university stuttgart germanylookup 184.82.123.80 at ARIN 184.82.123.80  AS21788 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at ARIN 93.170.52.20  wowbattlgame.tk lookup in virustotal http://www.wowbattlgame.tk  US  ARIN  nic@hostnoc.net  184.82.0.0 - 184.82.255.255  HOSTNOC-8BLK  Network Operations Center Inc. NOC PO Box 591 Scranton PA 18501-0591  NS02.DOT.tk  NS03.DOT.tk  NS04.DOT.tk  NS01.DOT.tk   lookup in virustotal http://www.wowbattlgame.tk
58 follow up this item(1106960) 1106960  2012-05-12 03:11:22 2012-05-14 08:17:34 53.1  1437519  Other  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  axiehgj.tk lookup in virustotal http://axiehgj.tk/XcnbQ/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://axiehgj.tk/XcnbQ/
59 follow up this item(1106701) 1106701  2012-05-11 20:22:58 2012-06-12 10:56:35 758.6  1437033  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  microsoft-helpdesk.tk lookup in virustotal http://microsoft-helpdesk.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://microsoft-helpdesk.tk/
60 follow up this item(1104949) 1104949  2012-05-11 01:14:31 2012-05-12 06:50:07 29.6  1435487  Royal Bank of Sc  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  rbs-uk.tk lookup in virustotal http://www.rbs-uk.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.rbs-uk.tk/
61 follow up this item(1104666) 1104666  2012-05-10 12:19:34 2012-06-12 11:01:43 790.7  1434686  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  webmail-quotas.tk lookup in virustotal http://webmail-quotas.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://webmail-quotas.tk/
62 follow up this item(1103216) 1103216  2012-05-09 09:27:59 2012-05-12 07:33:13 70.1  1433659  Amazon.com  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  amazon-center.tk lookup in virustotal http://amazon-center.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://amazon-center.tk/
63 follow up this item(1102245) 1102245  2012-05-08 14:12:00 2012-05-08 15:03:00 0.9    up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  image82.tk lookup in virustotal http://www.facebook.com.image82.tk/Photo ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.facebook.com.image82.tk/Photo ...
64 follow up this item(1101962) 1101962  2012-05-07 17:14:08 2012-05-12 07:43:26 110.5  1432076  Sulake Corporati  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  hab4fun.tk lookup in virustotal http://hab4fun.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://hab4fun.tk/
65 follow up this item(1102182) 1102182  2012-05-07 16:31:46 2012-05-10 05:18:02 60.8  1432035  Sulake Corporati  up  dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  pixelforraro.tk lookup in virustotal http://pixelforraro.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://pixelforraro.tk/
66 follow up this item(1102069) 1102069  2012-05-07 16:26:17 2012-06-12 11:10:37 858.7  1432030  Sulake Corporati  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  vipsgerador.tk lookup in virustotal http://vipsgerador.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://vipsgerador.tk/
67 follow up this item(1100880) 1100880  2012-05-06 01:20:34 2012-05-12 07:57:02 150.6  1431260  Other  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  img920.tk lookup in virustotal http://www.facebook.com.img920.tk/Photo- ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.facebook.com.img920.tk/Photo- ...
68 follow up this item(1099018) 1099018  2012-05-03 17:47:54 2012-05-06 05:58:54 60.2  1429301  PayPal  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  viewitemnumberdllls.tk lookup in virustotal http://www.viewitemnumberdllls.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.viewitemnumberdllls.tk/
69 follow up this item(1098563) 1098563  2012-05-03 16:01:24 2012-05-04 04:28:18 12.4  1429256  Other  up  dead SenderBaselookup 216.172.164.16 at virustotallookup 216.172.164.16 at Rus CERT university stuttgart germanylookup 216.172.164.16 at ARIN 216.172.164.16  AS36351 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at ARIN 93.170.52.20  usedofficefurnituredallas.tk lookup in virustotal http://usedofficefurnituredallas.tk/wp-i ...  US  ARIN  ipadmin@websitewelcome.com  216.172.160.0 - 216.172.191.255  HGBLOCK-2  WEBSITEWELCOME.COM BO 11251 Northwest Freeway Houston TX 77092  ns3064.hostgator.com.  ns3063.hostgator.com.       lookup in virustotal http://usedofficefurnituredallas.tk/wp-i ...
70 follow up this item(1099850) 1099850  2012-05-03 09:37:33 2012-06-12 11:19:09 961.7  1428584  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  batewow.tk lookup in virustotal http://www.batewow.tk/login.asp?ref=http ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.batewow.tk/login.asp?ref=http ...
71 follow up this item(1093749) 1093749  2012-04-30 02:01:34 2012-05-08 04:19:45 194.3  1423726  RuneScape  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  secure-runescape-mweb-thread-forums--com-695-swp-266-8-813-sl0.tk lookup in virustotal http://secure-runescape-mweb-thread-foru ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://secure-runescape-mweb-thread-foru ...
72 follow up this item(1093688) 1093688  2012-04-29 20:53:42 2012-05-02 02:19:23 53.4  1423648  Visa  up  dead SenderBaselookup 178.21.20.209 at virustotallookup 178.21.20.209 at Rus CERT university stuttgart germanylookup 178.21.20.209 at Ripe 178.21.20.209  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  5331.tk lookup in virustotal http://5331.tk/www.promocoesvisa.com.br/ ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://5331.tk/www.promocoesvisa.com.br/ ...
73 follow up this item(1092971) 1092971  2012-04-27 21:40:35 2012-05-02 02:36:34 100.9  1422830  TAM Fidelidade  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  vcjanzs.tk lookup in virustotal http://vcjanzs.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://vcjanzs.tk/
74 follow up this item(1092844) 1092844  2012-04-27 18:50:27 2012-05-02 02:39:12 103.8  1422674  TAM Fidelidade  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  uzhnswz.tk lookup in virustotal http://uzhnswz.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://uzhnswz.tk/
75 follow up this item(1092740) 1092740  2012-04-27 14:57:00 2012-06-12 11:31:09 1100.6  1422452  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  webs-mastrdsk.tk lookup in virustotal http://webs-mastrdsk.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://webs-mastrdsk.tk/
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
76 follow up this item(1092641) 1092641  2012-04-27 14:03:31 2012-05-02 02:42:51 108.7  1422410  TAM Fidelidade  up  dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  kwctwjr.tk lookup in virustotal http://kwctwjr.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://kwctwjr.tk/
77 follow up this item(1092283) 1092283  2012-04-27 03:41:10 2012-04-28 03:22:19 23.7  1422315  Other  up  dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  image41.tk lookup in virustotal http://www.facebook.com.image41.tk/Photo ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.facebook.com.image41.tk/Photo ...
78 follow up this item(1092280) 1092280  2012-04-27 03:31:48 2012-04-28 03:22:24 23.8  1422313  Other  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  image41.tk lookup in virustotal http://www.facebook.com.image41.tk/Photo ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.facebook.com.image41.tk/Photo ...
79 follow up this item(1092256) 1092256  2012-04-27 01:10:52 2012-04-28 03:22:50 26.2  1422294  Other  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  image41.tk lookup in virustotal http://www.facebook.com.image41.tk/Photo ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.facebook.com.image41.tk/Photo ...
80 follow up this item(1092143) 1092143  2012-04-26 18:52:51 2012-04-28 03:26:15 32.6  1422105  Other  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  image41.tk lookup in virustotal http://www.facebook.com.image41.tk/Photo ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.facebook.com.image41.tk/Photo ...
81 follow up this item(1092142) 1092142  2012-04-26 18:42:51 2012-04-28 03:26:19 32.7  1422111  Other  up  dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  image41.tk lookup in virustotal http://www.facebook.com.image41.tk/Photo ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.facebook.com.image41.tk/Photo ...
82 follow up this item(1091760) 1091760  2012-04-26 00:31:10 2012-04-26 00:57:38 0.4    up  dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  img097.tk lookup in virustotal http://www.facebook.com.img097.tk/Photo- ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.facebook.com.img097.tk/Photo- ...
83 follow up this item(1090646) 1090646  2012-04-24 22:23:24 2012-04-24 23:04:51 0.7  1420431  RuneScape  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  ruenscapegivaway13bill.tk lookup in virustotal http://ruenscapegivaway13bill.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://ruenscapegivaway13bill.tk/
84 follow up this item(1090644) 1090644  2012-04-24 22:21:46 2012-04-26 03:38:44 29.3  1420429  RuneScape  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  secure-runescape-forumlogin.tk lookup in virustotal http://secure-runescape-forumlogin.tk/aF ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://secure-runescape-forumlogin.tk/aF ...
85 follow up this item(1090640) 1090640  2012-04-24 22:18:23 2012-04-26 03:39:13 29.3  1420425  RuneScape  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  services-runescape-com-m-forum-forums-ws-15-16-885-63625995783.tk lookup in virustotal http://services-runescape-com-m-forum-fo ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://services-runescape-com-m-forum-fo ...
86 follow up this item(1090486) 1090486  2012-04-24 19:31:12 2012-04-26 03:44:51 32.2  1420275  PayPal  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  paypal-account.tk lookup in virustotal http://www.paypal-account.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.paypal-account.tk/
87 follow up this item(1090414) 1090414  2012-04-24 18:22:10 2012-04-26 03:54:38 33.5  1420259  Other  up  dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  img618.tk lookup in virustotal http://www.facebook.com.img618.tk/Photo- ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.facebook.com.img618.tk/Photo- ...
88 follow up this item(1089607) 1089607  2012-04-24 10:15:57 2012-04-26 04:15:22 42  1419379  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  ssl-secure.tk lookup in virustotal http://secure.runescape.com.ssl-secure.t ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://secure.runescape.com.ssl-secure.t ...
89 follow up this item(1089542) 1089542  2012-04-24 04:21:17 2012-04-26 04:17:43 47.9  1419299  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  img618.tk lookup in virustotal http://www.facebook.com.img618.tk/Photo- ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.facebook.com.img618.tk/Photo- ...
90 follow up this item(1089539) 1089539  2012-04-24 04:11:10 2012-04-26 04:17:55 48.1  1419298  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  img616.tk lookup in virustotal http://www.facebook.com.img616.tk/Photo- ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.facebook.com.img616.tk/Photo- ...
91 follow up this item(1089441) 1089441  2012-04-24 01:20:41 2012-04-26 04:19:40 51  1419230  Other  up  dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  img618.tk lookup in virustotal http://www.facebook.com.img618.tk/Photo- ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.facebook.com.img618.tk/Photo- ...
92 follow up this item(1089323) 1089323  2012-04-23 23:13:07 2012-04-26 04:22:32 53.2  1419067  Facebook  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  secretos.tk lookup in virustotal http://secretos.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://secretos.tk/
93 follow up this item(1089201) 1089201  2012-04-23 21:58:21 2012-04-26 04:24:38 54.4  1418947  RuneScape  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  gratiscre.tk lookup in virustotal http://gratiscre.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://gratiscre.tk/
94 follow up this item(1089199) 1089199  2012-04-23 21:57:26 2012-04-26 04:24:49 54.5  1418945  RuneScape  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  rsps-modclient.tk lookup in virustotal http://rsps-modclient.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://rsps-modclient.tk/
95 follow up this item(1089197) 1089197  2012-04-23 21:56:38 2012-04-26 04:25:00 54.5  1418943  RuneScape  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  runescape-apply.tk lookup in virustotal http://runescape-apply.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://runescape-apply.tk/
96 follow up this item(1089195) 1089195  2012-04-23 21:55:38 2012-04-26 04:25:13 54.5  1418941  RuneScape  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  freegold4u.tk lookup in virustotal http://freegold4u.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://freegold4u.tk/
97 follow up this item(1089153) 1089153  2012-04-23 21:41:43 2012-04-26 04:26:39 54.7  1418911  Facebook  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  colorfb.tk lookup in virustotal http://colorfb.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://colorfb.tk/
98 follow up this item(1089140) 1089140  2012-04-23 21:35:05 2012-04-26 04:27:03 54.9  1418895  Facebook  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  facebook-images.tk lookup in virustotal http://facebook-images.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://facebook-images.tk/
99 follow up this item(1089138) 1089138  2012-04-23 21:34:17 2012-04-26 04:27:15 54.9  1418891  Facebook  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  juandiego.tk lookup in virustotal http://juandiego.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://juandiego.tk/
100 follow up this item(1089136) 1089136  2012-04-23 21:33:27 2012-04-24 01:02:17 3.5  1418889  Facebook  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  worldmovies.tk lookup in virustotal http://www.worldmovies.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.worldmovies.tk/
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
101 follow up this item(1089134) 1089134  2012-04-23 21:32:50 2012-04-26 04:27:17 54.9  1418887  Facebook  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  aboutfacebook-timeline.tk lookup in virustotal http://aboutfacebook-timeline.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://aboutfacebook-timeline.tk/
102 follow up this item(1089132) 1089132  2012-04-23 21:31:31 2012-04-26 04:27:30 54.9  1418885  Facebook  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  freerechargespot.tk lookup in virustotal http://www.freerechargespot.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.freerechargespot.tk/
103 follow up this item(1089120) 1089120  2012-04-23 21:22:52 2012-04-26 04:28:04 55.1  1418872  Hotmail  up No evidence recorded dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  freexboxliverewards.tk lookup in virustotal http://freexboxliverewards.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://freexboxliverewards.tk/
104 follow up this item(1088510) 1088510  2012-04-22 20:46:31 2012-04-24 01:22:06 28.6  1418199  PayPal  up  dead SenderBaselookup 67.23.248.206 at virustotallookup 67.23.248.206 at Rus CERT university stuttgart germanylookup 67.23.248.206 at ARIN 67.23.248.206  AS33182 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at ARIN 93.170.52.20  ramaa.tk lookup in virustotal http://paypal.com.ramaa.tk/?i=387  US  ARIN  abuse@dimenoc.com  67.23.224.0 - 67.23.255.255  DIMECNET  HostDime.com, Inc. DIMEN-6 189 South Orange Avenue Suite 1500S Orlando FL 32801  ns1.raiddiskspace.com  ns2.raiddiskspace.com       lookup in virustotal http://paypal.com.ramaa.tk/?i=387
105 follow up this item(1087464) 1087464  2012-04-21 00:01:56 2012-04-24 01:37:57 73.6  1416864  Other  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  webinternet-helptechs.tk lookup in virustotal http://www.webinternet-helptechs.tk  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.webinternet-helptechs.tk
106 follow up this item(1085704) 1085704  2012-04-18 22:20:50 2012-04-18 22:58:52 0.6  1414666    up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  battlebate.tk lookup in virustotal http://www.battlebate.tk/login.asp?ref=h ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.battlebate.tk/login.asp?ref=h ...
107 follow up this item(1085652) 1085652  2012-04-18 22:13:07 2012-04-20 20:52:43 46.7  1415314  Hotmail  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  live-msn.tk lookup in virustotal http://live-msn.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://live-msn.tk/
108 follow up this item(1085648) 1085648  2012-04-18 22:11:28 2012-04-20 20:52:48 46.7  1415310  Hotmail  up  dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  livelogin.tk lookup in virustotal http://livelogin.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://livelogin.tk/
109 follow up this item(1085826) 1085826  2012-04-18 16:55:48 2012-06-12 11:42:48 1314.8  1415050  Other  up No evidence recorded dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  systemadmns.tk lookup in virustotal http://www.systemadmns.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://www.systemadmns.tk/
110 follow up this item(1085265) 1085265  2012-04-18 15:37:12 2012-04-18 18:57:45 3.3  1414666  World of Warcraf  up  dead SenderBaselookup 184.82.123.80 at virustotallookup 184.82.123.80 at Rus CERT university stuttgart germanylookup 184.82.123.80 at ARIN 184.82.123.80  AS21788 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at ARIN 93.170.52.20  battlebate.tk lookup in virustotal http://www.battlebate.tk/login.asp?ref=h ...  US  ARIN  nic@hostnoc.net  184.82.0.0 - 184.82.255.255  HOSTNOC-8BLK  Network Operations Center Inc. NOC PO Box 591 Scranton PA 18501-0591  NS03.DOT.tk  NS04.DOT.tk  NS01.DOT.tk  NS02.DOT.tk   lookup in virustotal http://www.battlebate.tk/login.asp?ref=h ...
111 follow up this item(1084814) 1084814  2012-04-18 02:36:05 2012-04-20 21:08:01 66.5  1414432  PayPal  up  dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  signinebay209342.tk lookup in virustotal http://signinebay209342.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://signinebay209342.tk/
112 follow up this item(1084810) 1084810  2012-04-18 02:35:47 2012-04-20 21:08:11 66.5  1414428  PayPal  up  dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  signinebay2012931.tk lookup in virustotal http://signinebay2012931.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://signinebay2012931.tk/
113 follow up this item(1084808) 1084808  2012-04-18 02:35:24 2012-04-20 21:08:14 66.5  1414426  PayPal  up  dead SenderBaselookup 93.170.52.30 at virustotallookup 93.170.52.30 at Rus CERT university stuttgart germanylookup 93.170.52.30 at Ripe 93.170.52.30  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  signinebay209834.tk lookup in virustotal http://signinebay209834.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://signinebay209834.tk/
114 follow up this item(1084591) 1084591  2012-04-17 21:40:33 2012-04-20 21:15:42 71.6  1414239  PayPal  up  dead SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  signinebay2934719.tk lookup in virustotal http://signinebay2934719.tk/  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET             lookup in virustotal http://signinebay2934719.tk/
115 follow up this item(1084306) 1084306  2012-04-17 16:21:53 2012-04-18 19:35:47 27.2  1413931  Other  up  dead SenderBaselookup 173.208.222.246 at virustotallookup 173.208.222.246 at Rus CERT university stuttgart germanylookup 173.208.222.246 at Ripe 173.208.222.246  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  battlpe.tk lookup in virustotal http://us.blizzard.com.login.battlpe.tk/ ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET    NS02.DOT.tk.  NS03.DOT.tk.  NS01.DOT.tk.  NS04.DOT.tk.   lookup in virustotal http://us.blizzard.com.login.battlpe.tk/ ...
116 follow up this item(1084399) 1084399  2012-04-17 16:08:46 2012-04-18 19:31:28 27.4  1413931  Other  up  dead SenderBaselookup 173.208.222.246 at virustotallookup 173.208.222.246 at Rus CERT university stuttgart germanylookup 173.208.222.246 at Ripe 173.208.222.246  AS44546 SenderBaselookup 93.170.52.20 at virustotallookup 93.170.52.20 at Rus CERT university stuttgart germanylookup 93.170.52.20 at Ripe 93.170.52.20  battlpe.tk lookup in virustotal http://us.blizzard.com.login.battlpe.tk/ ...  NL  RIPE  abuse@dot.tk  93.170.52.0 - 93.170.52.255  DOT-TK-NET    NS01.DOT.tk  NS02.DOT.tk  NS03.DOT.tk  NS04.DOT.tk