CLEAN MX realtime database    
public access query for phishing URL Top 50 stats
Totally watched: 55, to down: 0, to up: 0, changed ip: 0
As of 2013-05-19 17:57:35 CEST
Subscribe to the PhishWatch Mailing list, updated hourly
This database consists of Phishing URI, collected and verified since Oct 2006 some of them may be already closed, but are still recognized as fraud by firefox and opera also offending domain names are honored by SURBL.
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

Attention: all URI'S are manually verified, but not cross-checked for real phishing function in this moment you make this query.(Sites may have been closed already..)
Our automatic Phishwalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

to look at some nice charts her are complete statistics for this database
and for our german friends some minutes on Symantec Phishing report

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0458 Seconds
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(1274240) 1274240  2012-11-07 18:57:10 2012-11-10 04:54:05 57.9  1610719  PayPal  up No evidence recorded dead SenderBaselookup 195.191.102.27 at virustotallookup 195.191.102.27 at Rus CERT university stuttgart germanylookup 195.191.102.27 at ARIN 195.191.102.27  AS1267 SenderBaselookup zzbaba.info. at virustotallookup zzbaba.info. at Rus CERT university stuttgart germanylookup zzbaba.info. at ARIN zzbaba.info.  zzbaba.info lookup in virustotal http://www.zzbaba.info    ARIN          ns13.domaincontrol.com.  ns14.domaincontrol.com.       lookup in virustotal http://www.zzbaba.info
2 follow up this item(465736) 465736  2009-03-24 11:09:00 2009-03-25 18:58:34 31.8  671658     No evidence recorded dead SenderBaselookup zariffa.com. at virustotallookup zariffa.com. at Rus CERT university stuttgart germany zariffa.com.  AS1267 SenderBaselookup zariffa.com. at virustotallookup zariffa.com. at Rus CERT university stuttgart germany zariffa.com.  zariffa.com. lookup in virustotal http://zariffa.com.//~seotool/xmlrpc/pay ...              ns1.panelboxmanager.com  ns2.panelboxmanager.com       lookup in virustotal http://zariffa.com.//~seotool/xmlrpc/pay ...
3 follow up this item(481339) 481339  2009-04-21 19:21:00 2009-04-21 21:33:05 2.2  688330    up No evidence recorded dead SenderBaselookup 94.23.23.219 at virustotallookup 94.23.23.219 at Rus CERT university stuttgart germanylookup 94.23.23.219 at apnic 94.23.23.219  AS1267 SenderBaselookup your.e-solutions at virustotallookup your.e-solutions at Rus CERT university stuttgart germanylookup your.e-solutions at apnic your.e-solutions  e-solutionswin.com lookup in virustotal http://www.your.e-solutionswin.com/    APNIC          ns2.e-solutionswin.com  ns1.e-solutionswin.com  ns3.e-solutionswin.com     lookup in virustotal http://www.your.e-solutionswin.com/
4 follow up this item(465739) 465739  2009-03-24 11:08:00 2009-03-25 18:58:43 31.8  671657  PayPal   No evidence recorded dead SenderBaselookup yetisnowremover. at virustotallookup yetisnowremover. at Rus CERT university stuttgart germany yetisnowremover.  AS1267 SenderBaselookup yetisnowremover. at virustotallookup yetisnowremover. at Rus CERT university stuttgart germany yetisnowremover.  yetisnowremover.com lookup in virustotal http://yetisnowremover.com.//~seotool/xm ...              ns2.panelboxmanager.com  ns1.panelboxmanager.com       lookup in virustotal http://yetisnowremover.com.//~seotool/xm ...
5 follow up this item(3207086) 3207086  2013-04-12 21:34:35 2013-04-17 21:55:14 120.3  1788362  Other  up No evidence recorded dead SenderBaselookup 31.170.167.158 at virustotallookup 31.170.167.158 at Rus CERT university stuttgart germanylookup 31.170.167.158 at Ripe 31.170.167.158  AS47583 SenderBaselookup yahoalertacesg.w at virustotallookup yahoalertacesg.w at Rus CERT university stuttgart germanylookup yahoalertacesg.w at Ripe yahoalertacesg.w  wink.ws lookup in virustotal http://www.yahoalertacesg.wink.ws/ychool ...  US  RIPE  abuse@main-hosting.com  31.170.166.0 - 31.170.167.255  MAIN-HOSTING-SERVERS  Main Hosting Servers  ns3.main-hosting.com  ns4.main-hosting.com  ns2.main-hosting.com  ns1.main-hosting.com   lookup in virustotal http://www.yahoalertacesg.wink.ws/ychool ...
6 follow up this item(3061857) 3061857  2012-12-14 11:35:10 2013-01-24 01:59:06 974.4  1660968  PayPal  up No evidence recorded dead SenderBaselookup 121.37.59.237 at virustotallookup 121.37.59.237 at Rus CERT university stuttgart germanylookup 121.37.59.237 at apnic 121.37.59.237  AS4134 SenderBaselookup www.zuoyuhuimo.c at virustotallookup www.zuoyuhuimo.c at Rus CERT university stuttgart germanylookup www.zuoyuhuimo.c at apnic www.zuoyuhuimo.c  zuoyuhuimo.com lookup in virustotal http://www.zuoyuhuimo.com/data/srv/websc ...  CN  APNIC  idc-service@hotmail.com  121.37.0.0 - 121.37.255.255  ChinaMotion  China Motion Network Communication9F,Yu Hua Industrial & Trading Building,Bao Gang Rd.Luo Hu District,Shenzhen, Guangdong Province  f1g1ns1.dnspod.net  f1g1ns2.dnspod.net       lookup in virustotal http://www.zuoyuhuimo.com/data/srv/websc ...
7 follow up this item(3059727) 3059727  2012-12-14 04:21:50 2013-01-23 08:24:43 964  1657466  PayPal  up No evidence recorded dead SenderBaselookup 121.37.59.237 at virustotallookup 121.37.59.237 at Rus CERT university stuttgart germanylookup 121.37.59.237 at apnic 121.37.59.237  AS4134 SenderBaselookup www.zuoyuhuimo.c at virustotallookup www.zuoyuhuimo.c at Rus CERT university stuttgart germanylookup www.zuoyuhuimo.c at apnic www.zuoyuhuimo.c  zuoyuhuimo.com lookup in virustotal http://www.zuoyuhuimo.com/data/paypal.co ...  CN  APNIC  idc-service@hotmail.com  121.37.0.0 - 121.37.255.255  ChinaMotion  China Motion Network Communication9F,Yu Hua Industrial & Trading Building,Bao Gang Rd.Luo Hu District,Shenzhen, Guangdong Province  f1g1ns1.dnspod.net  ns20.xincache.com  ns19.xincache.com  f1g1ns2.dnspod.net   lookup in virustotal http://www.zuoyuhuimo.com/data/paypal.co ...
8 follow up this item(3058970) 3058970  2012-12-14 03:13:45 2013-01-23 08:20:36 965.1  1656496  PayPal  up No evidence recorded dead SenderBaselookup 121.37.59.237 at virustotallookup 121.37.59.237 at Rus CERT university stuttgart germanylookup 121.37.59.237 at apnic 121.37.59.237  AS4134 SenderBaselookup www.zuoyuhuimo.c at virustotallookup www.zuoyuhuimo.c at Rus CERT university stuttgart germanylookup www.zuoyuhuimo.c at apnic www.zuoyuhuimo.c  zuoyuhuimo.com lookup in virustotal http://www.zuoyuhuimo.com/data/ppal/webs ...  CN  APNIC  idc-service@hotmail.com  121.37.0.0 - 121.37.255.255  ChinaMotion  China Motion Network Communication9F,Yu Hua Industrial & Trading Building,Bao Gang Rd.Luo Hu District,Shenzhen, Guangdong Province  f1g1ns2.dnspod.net  f1g1ns1.dnspod.net       lookup in virustotal http://www.zuoyuhuimo.com/data/ppal/webs ...
9 follow up this item(3054267) 3054267  2012-12-13 03:31:18 2013-01-24 01:36:05 1006.1  1649848  PayPal  up No evidence recorded dead SenderBaselookup 121.37.59.237 at virustotallookup 121.37.59.237 at Rus CERT university stuttgart germanylookup 121.37.59.237 at apnic 121.37.59.237  AS4134 SenderBaselookup www.zuoyuhuimo.c at virustotallookup www.zuoyuhuimo.c at Rus CERT university stuttgart germanylookup www.zuoyuhuimo.c at apnic www.zuoyuhuimo.c  zuoyuhuimo.com lookup in virustotal http://www.zuoyuhuimo.com/data/uk/webscr ...  CN  APNIC  idc-service@hotmail.com  121.37.0.0 - 121.37.255.255  ChinaMotion  China Motion Network Communication9F,Yu Hua Industrial & Trading Building,Bao Gang Rd.Luo Hu District,Shenzhen, Guangdong Province  f1g1ns2.dnspod.net.  f1g1ns1.dnspod.net.       lookup in virustotal http://www.zuoyuhuimo.com/data/uk/webscr ...
10 follow up this item(3046599) 3046599  2012-12-05 20:34:24 2013-01-24 00:27:01 1179.9  1642924  Other  up No evidence recorded dead SenderBaselookup 121.37.59.237 at virustotallookup 121.37.59.237 at Rus CERT university stuttgart germanylookup 121.37.59.237 at apnic 121.37.59.237  AS4134 SenderBaselookup www.zuoyuhuimo.c at virustotallookup www.zuoyuhuimo.c at Rus CERT university stuttgart germanylookup www.zuoyuhuimo.c at apnic www.zuoyuhuimo.c  zuoyuhuimo.com lookup in virustotal http://www.zuoyuhuimo.com/pic/amex.html  CN  APNIC  idc-service@hotmail.com  121.37.0.0 - 121.37.255.255  ChinaMotion  China Motion Network Communication9F,Yu Hua Industrial & Trading Building,Bao Gang Rd.Luo Hu District,Shenzhen, Guangdong Province  f1g1ns1.dnspod.net.  ns20.xincache.com.  ns19.xincache.com.  f1g1ns2.dnspod.net.   lookup in virustotal http://www.zuoyuhuimo.com/pic/amex.html
11 follow up this item(3059793) 3059793  2012-12-14 09:10:03 2013-02-01 16:32:01 1183.4  1659564  Other  up No evidence recorded dead SenderBaselookup 72.52.72.123 at virustotallookup 72.52.72.123 at Rus CERT university stuttgart germanylookup 72.52.72.123 at ARIN 72.52.72.123  AS1267 SenderBaselookup www.yaqi029.com. at virustotallookup www.yaqi029.com. at Rus CERT university stuttgart germanylookup www.yaqi029.com. at ARIN www.yaqi029.com.  yaqi029.com lookup in virustotal http://www.yaqi029.com/images/?http://us ...    ARIN          ns18.xincache.com  ns17.xincache.com       lookup in virustotal http://www.yaqi029.com/images/?http://us ...
12 follow up this item(3047727) 3047727  2012-12-06 20:29:03 2013-01-20 02:43:52 1062.2  1643701  Other  up No evidence recorded dead SenderBaselookup 74.86.183.73 at virustotallookup 74.86.183.73 at Rus CERT university stuttgart germanylookup 74.86.183.73 at ARIN 74.86.183.73  AS1267 SenderBaselookup www.yangguoguang at virustotallookup www.yangguoguang at Rus CERT university stuttgart germanylookup www.yangguoguang at ARIN www.yangguoguang  yangguoguang.com lookup in virustotal http://www.yangguoguang.com/wp-includes/ ...    ARIN          f1g1ns1.dnspod.net  f1g1ns2.dnspod.net       lookup in virustotal http://www.yangguoguang.com/wp-includes/ ...
13 follow up this item(440532) 440532  2009-02-11 16:47:00 2009-02-11 23:57:01 7.2  646365    down No evidence recorded dead SenderBaselookup www.whoblockedus at virustotallookup www.whoblockedus at Rus CERT university stuttgart germany www.whoblockedus  AS1267 SenderBaselookup www.whoblockedus at virustotallookup www.whoblockedus at Rus CERT university stuttgart germany www.whoblockedus  www.whoblockedus.com lookup in virustotal http://www.whoblockedus.com/paypal/paypa ...                       lookup in virustotal http://www.whoblockedus.com/paypal/paypa ...
14 follow up this item(1093825) 1093825  2012-04-30 15:20:33 2012-04-30 16:00:02 0.7    up No evidence recorded dead SenderBaselookup www.wellsfargo.c at virustotallookup www.wellsfargo.c at Rus CERT university stuttgart germanylookup www.wellsfargo.c at ARIN www.wellsfargo.c  AS1267 SenderBaselookup www.wellsfargo.c at virustotallookup www.wellsfargo.c at Rus CERT university stuttgart germanylookup www.wellsfargo.c at ARIN www.wellsfargo.c  wellsfargo.com lookup in virustotal http://www.wellsfargo.com./fraud.prevent ...    ARIN          nsh.wellsfargo.com.  nsg.wellsfargo.com.  nsf.wellsfargo.com.     lookup in virustotal http://www.wellsfargo.com./fraud.prevent ...
15 follow up this item(1239363) 1239363  2012-09-29 19:00:15 2012-09-29 19:59:35 1  1576882  Other  up No evidence recorded dead SenderBaselookup www.usbank.com. at virustotallookup www.usbank.com. at Rus CERT university stuttgart germany www.usbank.com.  AS1267 SenderBaselookup www.usbank.com. at virustotallookup www.usbank.com. at Rus CERT university stuttgart germany www.usbank.com.  usbank.com lookup in virustotal http://www.usbank.com.              ns3.usbank.com.  ns1.usbank.com.  ns2.usbank.com.     lookup in virustotal http://www.usbank.com.
16 follow up this item(3191611) 3191611  2013-03-26 20:07:47 2013-03-27 19:46:44 23.6  1773375  PayPal  up No evidence recorded dead SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  AS1267 SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  emsmusluk.com lookup in virustotal http://www.update.visaeurope.com.card.ve ...    ARIN          ns2.alanadi.com.tr  ns1.alanadi.com.tr       lookup in virustotal http://www.update.visaeurope.com.card.ve ...
17 follow up this item(3191608) 3191608  2013-03-26 20:11:59 2013-03-27 19:46:41 23.6  1773383  PayPal  up No evidence recorded dead SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  AS1267 SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  emsmusluk.com lookup in virustotal http://www.update.visaeurope.com.card.ve ...    ARIN          ns2.alanadi.com.tr  ns1.alanadi.com.tr       lookup in virustotal http://www.update.visaeurope.com.card.ve ...
18 follow up this item(3141698) 3141698  2013-02-14 01:24:07 2013-05-17 08:25:55 2214  1728813  PayPal  up No evidence recorded dead SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  AS1267 SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  perlesdenfant.fr lookup in virustotal http://www.update.visaeurope.com.card.ve ...    ARIN          nsb.planethoster.net  nsc.planethoster.net  nsa.planethoster.net     lookup in virustotal http://www.update.visaeurope.com.card.ve ...
19 follow up this item(3141654) 3141654  2013-02-14 01:23:52 2013-05-17 08:25:53 2214  1728812  PayPal  up No evidence recorded dead SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  AS1267 SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  perlesdenfant.fr lookup in virustotal http://www.update.visaeurope.com.card.ve ...    ARIN          nsa.planethoster.net  nsc.planethoster.net  nsb.planethoster.net     lookup in virustotal http://www.update.visaeurope.com.card.ve ...
20 follow up this item(3104921) 3104921  2013-01-16 05:35:24 2013-01-18 22:19:02 64.7  1696152  PayPal  up No evidence recorded dead SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  AS1267 SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  nicoleforest.fr lookup in virustotal http://www.update.visaeurope.com.card.ve ...    ARIN          nsb.planethoster.net  nsc.planethoster.net  nsa.planethoster.net     lookup in virustotal http://www.update.visaeurope.com.card.ve ...
21 follow up this item(3078940) 3078940  2012-12-27 01:26:16 2012-12-27 11:08:48 9.7  1676474  PayPal  up  dead SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  AS1267 SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  ae-isa-lille.fr lookup in virustotal http://www.update.visaeurope.com.card.ve ...    ARIN          nsb.planethoster.net  nsa.planethoster.net  nsc.planethoster.net     lookup in virustotal http://www.update.visaeurope.com.card.ve ...
22 follow up this item(3077446) 3077446  2012-12-25 04:19:41 2012-12-25 16:09:36 11.8  1674796  PayPal  up  dead SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  AS1267 SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  royaltiesmusic.net lookup in virustotal http://www.update.visaeurope.com.card.ve ...    ARIN          nsb.planethoster.net  nsa.planethoster.net  nsc.planethoster.net     lookup in virustotal http://www.update.visaeurope.com.card.ve ...
23 follow up this item(3077444) 3077444  2012-12-25 04:20:16 2012-12-25 16:09:38 11.8  1674801  PayPal  up  dead SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  AS1267 SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  royaltiesmusic.net lookup in virustotal http://www.update.visaeurope.com.card.ve ...    ARIN          nsb.planethoster.net  nsa.planethoster.net  nsc.planethoster.net     lookup in virustotal http://www.update.visaeurope.com.card.ve ...
24 follow up this item(3077411) 3077411  2012-12-25 04:19:42 2012-12-25 14:51:44 10.5  1674797  PayPal  up  dead SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  AS1267 SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  royaltiesmusic.net lookup in virustotal http://www.update.visaeurope.com.card.ve ...    ARIN          nsb.planethoster.net  nsa.planethoster.net  nsc.planethoster.net     lookup in virustotal http://www.update.visaeurope.com.card.ve ...
25 follow up this item(3076910) 3076910  2012-12-24 18:56:14 2012-12-24 23:57:00 5  1674016  PayPal  up  dead SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  AS1267 SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  projetcommerce.com lookup in virustotal http://www.update.visaeurope.com.card.ve ...    ARIN          nsb.planethoster.net  nsa.planethoster.net  nsc.planethoster.net     lookup in virustotal http://www.update.visaeurope.com.card.ve ...
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
26 follow up this item(3074619) 3074619  2012-12-23 04:13:44 2012-12-29 15:39:10 155.4  1672328  PayPal  up No evidence recorded dead SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  AS1267 SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  dalaguetenews.com lookup in virustotal http://www.update.visaeurope.com.card.ve ...    ARIN          ns2.solidhosting.ph  ns1.solidhosting.ph       lookup in virustotal http://www.update.visaeurope.com.card.ve ...
27 follow up this item(3074475) 3074475  2012-12-23 04:14:03 2012-12-29 15:43:39 155.5  1672330  PayPal  up No evidence recorded dead SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  AS1267 SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  dalaguetenews.com lookup in virustotal http://www.update.visaeurope.com.card.ve ...    ARIN          ns2.solidhosting.ph  ns1.solidhosting.ph       lookup in virustotal http://www.update.visaeurope.com.card.ve ...
28 follow up this item(3074302) 3074302  2012-12-22 06:49:26 2012-12-23 03:51:45 21  1671755  PayPal  up No evidence recorded dead SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  AS1267 SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  meucalendario.net lookup in virustotal http://www.update.visaeurope.com.card.ve ...    ARIN          ns2.cliqueservidor.com.br  ns1.cliqueservidor.com.br       lookup in virustotal http://www.update.visaeurope.com.card.ve ...
29 follow up this item(3068858) 3068858  2012-12-16 17:51:03 2012-12-18 08:29:00 38.6  1664045  PayPal  up  dead SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  AS1267 SenderBaselookup www.update.visae at virustotallookup www.update.visae at Rus CERT university stuttgart germanylookup www.update.visae at ARIN www.update.visae  delphia3.com lookup in virustotal http://www.update.visaeurope.com.card.ve ...    ARIN          ns1.idwebhost.com  ns2.idwebhost.com       lookup in virustotal http://www.update.visaeurope.com.card.ve ...
30 follow up this item(3077538) 3077538  2012-12-25 20:56:24 2012-12-26 18:11:41 21.3  1675330  Other  up  dead SenderBaselookup www.update.paypa at virustotallookup www.update.paypa at Rus CERT university stuttgart germanylookup www.update.paypa at ARIN www.update.paypa  AS1267 SenderBaselookup www.update.paypa at virustotallookup www.update.paypa at Rus CERT university stuttgart germanylookup www.update.paypa at ARIN www.update.paypa  radiesthesiste-victor.be lookup in virustotal http://www.update.paypal.com-us.cgi-bin. ...    ARIN          nsb.planethoster.net.  nsa.planethoster.net.  nsc.planethoster.net.     lookup in virustotal http://www.update.paypal.com-us.cgi-bin. ...
31 follow up this item(3077506) 3077506  2012-12-25 19:02:11 2012-12-26 18:12:29 23.2  1675294  Other  up  dead SenderBaselookup www.update.paypa at virustotallookup www.update.paypa at Rus CERT university stuttgart germanylookup www.update.paypa at ARIN www.update.paypa  AS1267 SenderBaselookup www.update.paypa at virustotallookup www.update.paypa at Rus CERT university stuttgart germanylookup www.update.paypa at ARIN www.update.paypa  radiesthesiste-victor.be lookup in virustotal http://www.update.paypal.com-us.cgi-bin. ...    ARIN          nsb.planethoster.net.  nsa.planethoster.net.  nsc.planethoster.net.     lookup in virustotal http://www.update.paypal.com-us.cgi-bin. ...
32 follow up this item(3077505) 3077505  2012-12-25 17:19:36 2012-12-26 18:12:31 24.9  1675271  PayPal  up  dead SenderBaselookup www.update.paypa at virustotallookup www.update.paypa at Rus CERT university stuttgart germanylookup www.update.paypa at ARIN www.update.paypa  AS1267 SenderBaselookup www.update.paypa at virustotallookup www.update.paypa at Rus CERT university stuttgart germanylookup www.update.paypa at ARIN www.update.paypa  radiesthesiste-victor.be lookup in virustotal http://www.update.paypal.com-us.cgi-bin. ...    ARIN          nsb.planethoster.net.  nsa.planethoster.net.  nsc.planethoster.net.     lookup in virustotal http://www.update.paypal.com-us.cgi-bin. ...
33 follow up this item(974562) 974562  2011-09-27 16:42:32 2011-09-27 16:53:07 0.2  1283573  PayPal  up No evidence recorded dead SenderBaselookup www.tfs3.net. at virustotallookup www.tfs3.net. at Rus CERT university stuttgart germanylookup www.tfs3.net. at ARIN www.tfs3.net.  AS1267 SenderBaselookup www.tfs3.net. at virustotallookup www.tfs3.net. at Rus CERT university stuttgart germanylookup www.tfs3.net. at ARIN www.tfs3.net.  vehicles-bill-online.com lookup in virustotal http://motors.shop.ebay.com-cars-trucks- ...    ARIN          www.tfs3.net         lookup in virustotal http://motors.shop.ebay.com-cars-trucks- ...
34 follow up this item(973172) 973172  2011-09-23 18:41:51 2011-09-23 18:50:28 0.1  1281033  PayPal  up No evidence recorded dead SenderBaselookup www.tfs3.net. at virustotallookup www.tfs3.net. at Rus CERT university stuttgart germanylookup www.tfs3.net. at ARIN www.tfs3.net.  AS1267 SenderBaselookup www.tfs3.net. at virustotallookup www.tfs3.net. at Rus CERT university stuttgart germanylookup www.tfs3.net. at ARIN www.tfs3.net.  vehicles-bill-online.com lookup in virustotal http://motors.shop.ebay.com-cars-trucks- ...    ARIN          www.tfs3.net         lookup in virustotal http://motors.shop.ebay.com-cars-trucks- ...
35 follow up this item(972885) 972885  2011-09-22 20:41:22 2011-09-22 20:50:32 0.2  1280480  PayPal  up No evidence recorded dead SenderBaselookup www.tfs3.net. at virustotallookup www.tfs3.net. at Rus CERT university stuttgart germanylookup www.tfs3.net. at ARIN www.tfs3.net.  AS1267 SenderBaselookup www.tfs3.net. at virustotallookup www.tfs3.net. at Rus CERT university stuttgart germanylookup www.tfs3.net. at ARIN www.tfs3.net.  vehicles-bill-online.com lookup in virustotal http://motors.shop.ebay.com-cars-trucks- ...    ARIN          www.tfs3.net         lookup in virustotal http://motors.shop.ebay.com-cars-trucks- ...
36 follow up this item(972715) 972715  2011-09-22 14:20:51 2011-09-22 14:50:12 0.5  1280230  PayPal  up No evidence recorded dead SenderBaselookup www.tfs3.net. at virustotallookup www.tfs3.net. at Rus CERT university stuttgart germanylookup www.tfs3.net. at ARIN www.tfs3.net.  AS1267 SenderBaselookup www.tfs3.net. at virustotallookup www.tfs3.net. at Rus CERT university stuttgart germanylookup www.tfs3.net. at ARIN www.tfs3.net.  vehicles-bill-online.com lookup in virustotal http://motors.shop.ebay.com-cars-trucks- ...    ARIN          www.tfs3.net.         lookup in virustotal http://motors.shop.ebay.com-cars-trucks- ...
37 follow up this item(963626) 963626  2011-08-30 20:42:54 2011-08-30 20:50:38 0.1  1264298  PayPal  up No evidence recorded dead SenderBaselookup www.tfs3.net. at virustotallookup www.tfs3.net. at Rus CERT university stuttgart germanylookup www.tfs3.net. at ARIN www.tfs3.net.  AS1267 SenderBaselookup www.tfs3.net. at virustotallookup www.tfs3.net. at Rus CERT university stuttgart germanylookup www.tfs3.net. at ARIN www.tfs3.net.  vehicles-bill-online.com lookup in virustotal http://motors.shop.ebay.com-cars-trucks- ...    ARIN          www.tfs3.net         lookup in virustotal http://motors.shop.ebay.com-cars-trucks- ...
38 follow up this item(440608) 440608  2009-02-11 19:50:00 2009-02-12 10:56:17 15.1  646481    down No evidence recorded dead SenderBaselookup www.tdfcusignin. at virustotallookup www.tdfcusignin. at Rus CERT university stuttgart germany www.tdfcusignin.  AS1267 SenderBaselookup www.tdfcusignin. at virustotallookup www.tdfcusignin. at Rus CERT university stuttgart germany www.tdfcusignin.  www.tdfcusignin.org lookup in virustotal http://www.tdfcusignin.org/                       lookup in virustotal http://www.tdfcusignin.org/
39 follow up this item(1088917) 1088917  2012-04-23 13:18:17 2012-09-14 02:28:56 3445.2  1418454  Other  up No evidence recorded dead SenderBaselookup www.tamfidelidad at virustotallookup www.tamfidelidad at Rus CERT university stuttgart germanylookup www.tamfidelidad at ARIN www.tamfidelidad  AS1267 SenderBaselookup www.tamfidelidad at virustotallookup www.tamfidelidad at Rus CERT university stuttgart germanylookup www.tamfidelidad at ARIN www.tamfidelidad  tamfidelidade.com.br lookup in virustotal http://www.tamfidelidade.com.br.    ARIN          ns01.tam.com.br  ns02.tam.com.br       lookup in virustotal http://www.tamfidelidade.com.br.
40 follow up this item(589015) 589015  2009-09-01 14:15:00 2009-09-01 14:25:30 0.2  800346     No evidence recorded dead SenderBaselookup www.rjaviation.c at virustotallookup www.rjaviation.c at Rus CERT university stuttgart germany www.rjaviation.c  AS1267 SenderBaselookup www.rjaviation.c at virustotallookup www.rjaviation.c at Rus CERT university stuttgart germany www.rjaviation.c  rjaviation.com lookup in virustotal http://www.rjaviation.com./store//images ...              ns2.powweb.com  ns3.powweb.com       lookup in virustotal http://www.rjaviation.com./store//images ...
41 follow up this item(438890) 438890  2009-02-03 18:32:00 2009-02-08 11:21:35 112.8  641940  Bank of America  down No evidence recorded dead SenderBaselookup www.review-your- at virustotallookup www.review-your- at Rus CERT university stuttgart germany www.review-your-  AS1267 SenderBaselookup www.review-your- at virustotallookup www.review-your- at Rus CERT university stuttgart germany www.review-your-  www.review-your-updates.com lookup in virustotal http://www.review-your-updates.com                       lookup in virustotal http://www.review-your-updates.com
42 follow up this item(440536) 440536  2009-02-11 13:36:00 2009-02-11 23:56:37 10.3  646272    down No evidence recorded dead SenderBaselookup www.read-changes at virustotallookup www.read-changes at Rus CERT university stuttgart germany www.read-changes  AS1267 SenderBaselookup www.read-changes at virustotallookup www.read-changes at Rus CERT university stuttgart germany www.read-changes  www.read-changes-bank0famerica-email.com lookup in virustotal http://www.read-changes-bank0famerica-em ...                       lookup in virustotal http://www.read-changes-bank0famerica-em ...
43 follow up this item(439968) 439968  2009-02-10 00:38:00 2009-02-10 11:42:06 11.1  644504    down No evidence recorded dead SenderBaselookup www.paypal.com.w at virustotallookup www.paypal.com.w at Rus CERT university stuttgart germany www.paypal.com.w  AS1267 SenderBaselookup www.paypal.com.w at virustotallookup www.paypal.com.w at Rus CERT university stuttgart germany www.paypal.com.w  www.paypal.com.webscr.login.ssl.id-session-89438.co.uk lookup in virustotal http://www.paypal.com.webscr.login.ssl.i ...                       lookup in virustotal http://www.paypal.com.webscr.login.ssl.i ...
44 follow up this item(440504) 440504  2009-02-11 20:17:00 2009-02-11 23:58:41 3.7  646493    down No evidence recorded dead SenderBaselookup www.paypal.co.uk at virustotallookup www.paypal.co.uk at Rus CERT university stuttgart germany www.paypal.co.uk  AS1267 SenderBaselookup www.paypal.co.uk at virustotallookup www.paypal.co.uk at Rus CERT university stuttgart germany www.paypal.co.uk  www.paypal.co.uk.burgerzoneone.com lookup in virustotal http://www.paypal.co.uk.burgerzoneone.co ...                       lookup in virustotal http://www.paypal.co.uk.burgerzoneone.co ...
45 follow up this item(440501) 440501  2009-02-11 20:33:00 2009-02-11 23:58:43 3.4  646499    down No evidence recorded dead SenderBaselookup www.paypal.co.uk at virustotallookup www.paypal.co.uk at Rus CERT university stuttgart germany www.paypal.co.uk  AS1267 SenderBaselookup www.paypal.co.uk at virustotallookup www.paypal.co.uk at Rus CERT university stuttgart germany www.paypal.co.uk  www.paypal.co.uk.antiquestodayfree.com lookup in virustotal http://www.paypal.co.uk.antiquestodayfre ...                       lookup in virustotal http://www.paypal.co.uk.antiquestodayfre ...
46 follow up this item(602986) 602986  2009-09-12 21:57:00 2009-09-12 22:52:36 0.9  814777  PayPal  down No evidence recorded dead SenderBaselookup www.mercatinocca at virustotallookup www.mercatinocca at Rus CERT university stuttgart germany www.mercatinocca  AS1267 SenderBaselookup www.mercatinocca at virustotallookup www.mercatinocca at Rus CERT university stuttgart germany www.mercatinocca  mercatinoccasioni.it lookup in virustotal http://www.mercatinoccasioni.it./images/ ...              ns16.4java.ca  ns17.4java.ca       lookup in virustotal http://www.mercatinoccasioni.it./images/ ...
47 follow up this item(595126) 595126  2009-09-08 02:38:00 2009-09-08 14:25:50 11.8  804367     No evidence recorded dead SenderBaselookup www.langenburg.n at virustotallookup www.langenburg.n at Rus CERT university stuttgart germany www.langenburg.n  AS1267 SenderBaselookup www.langenburg.n at virustotallookup www.langenburg.n at Rus CERT university stuttgart germany www.langenburg.n  langenburg.net lookup in virustotal http://www.langenburg.net./tmp/log/CARTE ...              ns1.loop1.nl  ns2.loop1.nl       lookup in virustotal http://www.langenburg.net./tmp/log/CARTE ...
48 follow up this item(3051062) 3051062  2012-12-11 10:25:53 2012-12-29 19:14:25 440.8  1646300  Other  up No evidence recorded dead SenderBaselookup 184.82.230.79 at virustotallookup 184.82.230.79 at Rus CERT university stuttgart germanylookup 184.82.230.79 at ARIN 184.82.230.79  AS1267 SenderBaselookup www.ksvty.info. at virustotallookup www.ksvty.info. at Rus CERT university stuttgart germanylookup www.ksvty.info. at ARIN www.ksvty.info.  ksvty.info lookup in virustotal http://www.ksvty.info/page/index.php    ARIN                   lookup in virustotal http://www.ksvty.info/page/index.php
49 follow up this item(439907) 439907  2009-02-09 16:28:00 2009-02-10 07:41:31 15.2  644022  Other  down No evidence recorded dead SenderBaselookup www.gwcuconfirm. at virustotallookup www.gwcuconfirm. at Rus CERT university stuttgart germany www.gwcuconfirm.  AS1267 SenderBaselookup www.gwcuconfirm. at virustotallookup www.gwcuconfirm. at Rus CERT university stuttgart germany www.gwcuconfirm.  www.gwcuconfirm.org lookup in virustotal http://www.gwcuconfirm.org/                       lookup in virustotal http://www.gwcuconfirm.org/
50 follow up this item(438524) 438524  2009-02-05 18:19:00 2009-02-07 17:25:28 47.1  642902    down No evidence recorded dead SenderBaselookup www.guadalupecus at virustotallookup www.guadalupecus at Rus CERT university stuttgart germany www.guadalupecus  AS1267 SenderBaselookup www.guadalupecus at virustotallookup www.guadalupecus at Rus CERT university stuttgart germany www.guadalupecus  www.guadalupecusignon.org lookup in virustotal http://www.guadalupecusignon.org/                       lookup in virustotal http://www.guadalupecusignon.org/
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
51 follow up this item(3056819) 3056819  2012-12-13 22:20:37 2012-12-13 23:38:45 1.3  1653782  PayPal  up No evidence recorded dead SenderBaselookup www.facebook.com at virustotallookup www.facebook.com at Rus CERT university stuttgart germanylookup www.facebook.com at ARIN www.facebook.com  AS1267 SenderBaselookup www.facebook.com at virustotallookup www.facebook.com at Rus CERT university stuttgart germanylookup www.facebook.com at ARIN www.facebook.com  highway.com.vn lookup in virustotal http://highway.com.vn/contact_us/new1/2c ...    ARIN          www.facebook.com/highwayvietnam         lookup in virustotal http://highway.com.vn/contact_us/new1/2c ...
52 follow up this item(1091176) 1091176  2012-04-25 04:33:18 2012-04-26 03:20:21 22.8  1420929  Other  up No evidence recorded dead SenderBaselookup 66.154.118.140 at virustotallookup 66.154.118.140 at Rus CERT university stuttgart germanylookup 66.154.118.140 at ARIN 66.154.118.140  AS1267 SenderBaselookup www.cradlokb.com at virustotallookup www.cradlokb.com at Rus CERT university stuttgart germanylookup www.cradlokb.com at ARIN www.cradlokb.com  cradlokb.com lookup in virustotal http://www.cradlokb.com/reg.asp    ARIN          f1g1ns2.dnspod.net  f1g1ns1.dnspod.net       lookup in virustotal http://www.cradlokb.com/reg.asp
53 follow up this item(439044) 439044  2009-01-31 02:42:00 2009-02-08 13:23:19 202.7  640205    down No evidence recorded dead SenderBaselookup www.celularitelc at virustotallookup www.celularitelc at Rus CERT university stuttgart germany www.celularitelc  AS1267 SenderBaselookup www.celularitelc at virustotallookup www.celularitelc at Rus CERT university stuttgart germany www.celularitelc  www.celularitelcel.com lookup in virustotal http://www.celularitelcel.com/                       lookup in virustotal http://www.celularitelcel.com/
54 follow up this item(3265282) 3265282  2013-05-08 14:28:48 2013-05-10 04:13:46 37.7  1828592  Barclays Bank PL  up No evidence recorded dead SenderBaselookup www.barclaysweal at virustotallookup www.barclaysweal at Rus CERT university stuttgart germanylookup www.barclaysweal at ARIN www.barclaysweal  AS1267 SenderBaselookup www.barclaysweal at virustotallookup www.barclaysweal at Rus CERT university stuttgart germanylookup www.barclaysweal at ARIN www.barclaysweal  barclayswealth.com lookup in virustotal https://www.barclayswealth.com.    ARIN          ns7.barcap.com  ns3.barcap.com  ns2.barcap.com     lookup in virustotal https://www.barclayswealth.com.
55 follow up this item(438484) 438484  2009-02-05 17:29:00 2009-02-07 16:25:35 46.9  642896    down No evidence recorded dead SenderBaselookup www.bank0fameric at virustotallookup www.bank0fameric at Rus CERT university stuttgart germany www.bank0fameric  AS1267 SenderBaselookup www.bank0fameric at virustotallookup www.bank0fameric at Rus CERT university stuttgart germany www.bank0fameric  www.bank0famerica-security-acc0unt-update.com lookup in virustotal http://www.bank0famerica-security-acc0un ...                       lookup in virustotal http://www.bank0famerica-security-acc0un ...
56 follow up this item(3110643) 3110643  2013-01-19 17:17:45 2013-01-22 19:27:32 74.2  1701039  Other  up No evidence recorded dead SenderBaselookup 115.239.227.206 at virustotallookup 115.239.227.206 at Rus CERT university stuttgart germanylookup 115.239.227.206 at ARIN 115.239.227.206  AS1267 SenderBaselookup www.b12.23dns.co at virustotallookup www.b12.23dns.co at Rus CERT university stuttgart germanylookup www.b12.23dns.co at ARIN www.b12.23dns.co  yaomaiyashua.com lookup in virustotal http://www.yaomaiyashua.com/images/?http ...    ARIN          ns19.xincache.com  ns20.xincache.com       lookup in virustotal http://www.yaomaiyashua.com/images/?http ...
57 follow up this item(3110285) 3110285  2013-01-19 17:17:40 2013-01-22 00:50:16 55.5  1701034  Other  up No evidence recorded dead SenderBaselookup 115.239.227.206 at virustotallookup 115.239.227.206 at Rus CERT university stuttgart germanylookup 115.239.227.206 at ARIN 115.239.227.206  AS1267 SenderBaselookup www.b12.23dns.co at virustotallookup www.b12.23dns.co at Rus CERT university stuttgart germanylookup www.b12.23dns.co at ARIN www.b12.23dns.co  yaomaiyashua.com lookup in virustotal http://www.yaomaiyashua.com/images?http: ...    ARIN          ns19.xincache.com  ns20.xincache.com       lookup in virustotal http://www.yaomaiyashua.com/images?http: ...
58 follow up this item(704649) 704649  2010-01-04 16:01:18 2012-01-11 05:27:29 17677.4    up No evidence recorded dead SenderBaselookup www. at virustotallookup www. at Rus CERT university stuttgart germanylookup www. at ARIN www.  AS1267 SenderBaselookup www. at virustotallookup www. at Rus CERT university stuttgart germanylookup www. at ARIN www.  www. lookup in virustotal http://www./www.facebook.com.hqasqwe1.co ...    ARIN                   lookup in virustotal http://www./www.facebook.com.hqasqwe1.co ...
59 follow up this item(622413) 622413  2009-10-02 04:14:00 2009-10-09 05:54:38 169.7  831641    up No evidence recorded dead SenderBaselookup 203.198.99.202 at virustotallookup 203.198.99.202 at Rus CERT university stuttgart germany 203.198.99.202  AS1267 SenderBaselookup wu8610.vicp.net. at virustotallookup wu8610.vicp.net. at Rus CERT university stuttgart germany wu8610.vicp.net.  wow-europeblizzard.net lookup in virustotal http://www.wow-europeblizzard.net/    ripe          ns1.superdns.org.  ns2.superdns.org.       lookup in virustotal http://www.wow-europeblizzard.net/
60 follow up this item(620388) 620388  2009-09-27 04:02:00 2009-10-09 06:16:46 290.2  830833    up No evidence recorded dead SenderBaselookup 208.53.145.230 at virustotallookup 208.53.145.230 at Rus CERT university stuttgart germany 208.53.145.230  AS1267 SenderBaselookup wu8610.vicp.net. at virustotallookup wu8610.vicp.net. at Rus CERT university stuttgart germany wu8610.vicp.net.  blizzard-euwow.net lookup in virustotal http://www.blizzard-euwow.net/    ripe          ns1.superdns.org  ns2.superdns.org       lookup in virustotal http://www.blizzard-euwow.net/
61 follow up this item(620321) 620321  2009-09-27 04:06:00 2009-10-09 06:17:00 290.2  830835    up No evidence recorded dead SenderBaselookup 208.53.145.230 at virustotallookup 208.53.145.230 at Rus CERT university stuttgart germany 208.53.145.230  AS1267 SenderBaselookup wu8610.vicp.net. at virustotallookup wu8610.vicp.net. at Rus CERT university stuttgart germany wu8610.vicp.net.  blizzard-euwow.net lookup in virustotal http://www.blizzard-euwow.net/index.asp    ripe          ns1.superdns.org  ns2.superdns.org       lookup in virustotal http://www.blizzard-euwow.net/index.asp
62 follow up this item(465734) 465734  2009-03-24 11:09:00 2009-03-25 18:58:28 31.8  671663     No evidence recorded dead SenderBaselookup worldtravelexper at virustotallookup worldtravelexper at Rus CERT university stuttgart germany worldtravelexper  AS1267 SenderBaselookup worldtravelexper at virustotallookup worldtravelexper at Rus CERT university stuttgart germany worldtravelexper  worldtravelexpert.net lookup in virustotal http://worldtravelexpert.net.//~seotool/ ...              ns1.panelboxmanager.com  ns2.panelboxmanager.com       lookup in virustotal http://worldtravelexpert.net.//~seotool/ ...
63 follow up this item(716675) 716675  2010-01-24 13:43:30 2010-01-24 20:56:21 7.2    up No evidence recorded dead SenderBaselookup worldofwracarft. at virustotallookup worldofwracarft. at Rus CERT university stuttgart germany worldofwracarft.  AS1267 SenderBaselookup worldofwracarft. at virustotallookup worldofwracarft. at Rus CERT university stuttgart germany worldofwracarft.  wor1dfowarcraft.com lookup in virustotal http://www.wor1dfowarcraft.com/    ripe          yns1.yahoo.com.  yns2.yahoo.com.       lookup in virustotal http://www.wor1dfowarcraft.com/
64 follow up this item(716672) 716672  2010-01-24 13:43:28 2010-01-24 20:56:28 7.2    up No evidence recorded dead SenderBaselookup worldofwracarft. at virustotallookup worldofwracarft. at Rus CERT university stuttgart germany worldofwracarft.  AS1267 SenderBaselookup worldofwracarft. at virustotallookup worldofwracarft. at Rus CERT university stuttgart germany worldofwracarft.  worldofwrarcraft-wow.com lookup in virustotal http://www.worldofwrarcraft-wow.com/    ripe          yns1.yahoo.com.  yns2.yahoo.com.       lookup in virustotal http://www.worldofwrarcraft-wow.com/
65 follow up this item(708011) 708011  2010-01-10 15:39:00 2010-01-20 19:56:55 244.3  906388  Other  up No evidence recorded dead SenderBaselookup 173.208.131.78 at virustotallookup 173.208.131.78 at Rus CERT university stuttgart germany 173.208.131.78  AS1267 SenderBaselookup worldofwracarft. at virustotallookup worldofwracarft. at Rus CERT university stuttgart germany worldofwracarft.  worldofwarcraft-tech.com lookup in virustotal http://www.worldofwarcraft-tech.com/    ripe          yns1.yahoo.com.  yns2.yahoo.com.       lookup in virustotal http://www.worldofwarcraft-tech.com/
66 follow up this item(707474) 707474  2010-01-08 15:27:00 2010-01-20 19:58:44 292.5  905646    up No evidence recorded dead SenderBaselookup 173.208.131.78 at virustotallookup 173.208.131.78 at Rus CERT university stuttgart germany 173.208.131.78  AS1267 SenderBaselookup worldofwracarft. at virustotallookup worldofwracarft. at Rus CERT university stuttgart germany worldofwracarft.  worldofwowarcraft.com lookup in virustotal http://www.worldofwowarcraft.com/    ripe          yns1.yahoo.com.  yns2.yahoo.com.       lookup in virustotal http://www.worldofwowarcraft.com/
67 follow up this item(707473) 707473  2010-01-08 15:23:00 2010-01-20 19:58:51 292.6  905645    up No evidence recorded dead SenderBaselookup 173.208.131.78 at virustotallookup 173.208.131.78 at Rus CERT university stuttgart germany 173.208.131.78  AS1267 SenderBaselookup worldofwracarft. at virustotallookup worldofwracarft. at Rus CERT university stuttgart germany worldofwracarft.  worldofwaracraft-wow.com lookup in virustotal http://www.worldofwaracraft-wow.com/    ripe          yns1.yahoo.com.  yns2.yahoo.com.       lookup in virustotal http://www.worldofwaracraft-wow.com/
68 follow up this item(704395) 704395  2010-01-02 17:09:00 2010-01-20 20:15:11 435.1  902955    up No evidence recorded dead SenderBaselookup 173.208.131.77 at virustotallookup 173.208.131.77 at Rus CERT university stuttgart germany 173.208.131.77  AS1267 SenderBaselookup worldofwracarft. at virustotallookup worldofwracarft. at Rus CERT university stuttgart germany worldofwracarft.  worldofwrarcarft-safe.com lookup in virustotal http://www.worldofwrarcarft-safe.com/    ripe          yns1.yahoo.com  yns2.yahoo.com       lookup in virustotal http://www.worldofwrarcarft-safe.com/
69 follow up this item(889392) 889392  2011-03-14 11:50:41 2011-03-15 07:11:43 19.4  1154772    up No evidence recorded dead SenderBaselookup 174.142.67.86 at virustotallookup 174.142.67.86 at Rus CERT university stuttgart germanylookup 174.142.67.86 at ARIN 174.142.67.86  AS1267 SenderBaselookup withpic.com. at virustotallookup withpic.com. at Rus CERT university stuttgart germanylookup withpic.com. at ARIN withpic.com.  withpic.com lookup in virustotal http://www.withpic.com/wp-includes/image ...    ARIN          ns4.parmishost.com  ns3.parmishost.com       lookup in virustotal http://www.withpic.com/wp-includes/image ...
70 follow up this item(889391) 889391  2011-03-14 11:50:55 2011-03-15 07:11:44 19.3  1154773    up No evidence recorded dead SenderBaselookup 174.142.67.86 at virustotallookup 174.142.67.86 at Rus CERT university stuttgart germanylookup 174.142.67.86 at ARIN 174.142.67.86  AS1267 SenderBaselookup withpic.com. at virustotallookup withpic.com. at Rus CERT university stuttgart germanylookup withpic.com. at ARIN withpic.com.  withpic.com lookup in virustotal http://www.withpic.com/wp-includes/image ...    ARIN          ns4.parmishost.com  ns3.parmishost.com       lookup in virustotal http://www.withpic.com/wp-includes/image ...
71 follow up this item(889390) 889390  2011-03-14 11:51:07 2011-03-15 07:11:45 19.3  1154774    up No evidence recorded dead SenderBaselookup 174.142.67.86 at virustotallookup 174.142.67.86 at Rus CERT university stuttgart germanylookup 174.142.67.86 at ARIN 174.142.67.86  AS1267 SenderBaselookup withpic.com. at virustotallookup withpic.com. at Rus CERT university stuttgart germanylookup withpic.com. at ARIN withpic.com.  withpic.com lookup in virustotal http://www.withpic.com/wp-includes/image ...    ARIN          ns4.parmishost.com  ns3.parmishost.com       lookup in virustotal http://www.withpic.com/wp-includes/image ...
72 follow up this item(889389) 889389  2011-03-14 11:51:32 2011-03-15 07:11:47 19.3  1154776    up No evidence recorded dead SenderBaselookup 174.142.67.86 at virustotallookup 174.142.67.86 at Rus CERT university stuttgart germanylookup 174.142.67.86 at ARIN 174.142.67.86  AS1267 SenderBaselookup withpic.com. at virustotallookup withpic.com. at Rus CERT university stuttgart germanylookup withpic.com. at ARIN withpic.com.  withpic.com lookup in virustotal http://www.withpic.com/wp-includes/image ...    ARIN          ns4.parmishost.com  ns3.parmishost.com       lookup in virustotal http://www.withpic.com/wp-includes/image ...
73 follow up this item(824667) 824667  2010-11-23 07:58:00 2010-11-24 11:05:19 27.1  1082372  Other  up No evidence recorded dead SenderBaselookup 210.245.23.130 at virustotallookup 210.245.23.130 at Rus CERT university stuttgart germanylookup 210.245.23.130 at ARIN 210.245.23.130  AS1267 SenderBaselookup wildcard.vnnic.n at virustotallookup wildcard.vnnic.n at Rus CERT university stuttgart germanylookup wildcard.vnnic.n at ARIN wildcard.vnnic.n  camxahoc.vn lookup in virustotal http://www.ver.camxahoc.vn/2/modules/mod ...    ARIN          dns2.bon.vn  dns1.bon.vn       lookup in virustotal http://www.ver.camxahoc.vn/2/modules/mod ...
74 follow up this item(503353) 503353  2009-05-24 21:33:00 2009-05-25 10:43:19 13.2  710502    up No evidence recorded dead SenderBaselookup 211.95.78.98 at virustotallookup 211.95.78.98 at Rus CERT university stuttgart germanylookup 211.95.78.98 at apnic 211.95.78.98  AS1267 SenderBaselookup whiteflash.be. at virustotallookup whiteflash.be. at Rus CERT university stuttgart germanylookup whiteflash.be. at apnic whiteflash.be.  whiteflash.be lookup in virustotal http://www.whiteflash.be    APNIC          ns3.everydns.net  ns2.everydns.net  ns4.everydns.net  ns1.everydns.net   lookup in virustotal http://www.whiteflash.be
75 follow up this item(948160) 948160  2011-07-23 06:41:33 2011-07-26 00:13:57 65.5  1239074  Visa  up No evidence recorded dead SenderBaselookup 187.45.15.1 at virustotallookup 187.45.15.1 at Rus CERT university stuttgart germanylookup 187.45.15.1 at ARIN 187.45.15.1  AS1267 SenderBaselookup wh1.srnet.com.br at virustotallookup wh1.srnet.com.br at Rus CERT university stuttgart germanylookup wh1.srnet.com.br at ARIN wh1.srnet.com.br  culturafisica.com.br lookup in virustotal http://www.culturafisica.com.br/site/ima ...    ARIN          sv5.srnet.com.br  sv2.srnet.com.br       lookup in virustotal http://www.culturafisica.com.br/site/ima ...
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
76 follow up this item(946495) 946495  2011-07-20 21:19:31 2011-07-26 00:20:00 123  1237881  Visa  up No evidence recorded dead SenderBaselookup 187.45.15.1 at virustotallookup 187.45.15.1 at Rus CERT university stuttgart germanylookup 187.45.15.1 at ARIN 187.45.15.1  AS1267 SenderBaselookup wh1.srnet.com.br at virustotallookup wh1.srnet.com.br at Rus CERT university stuttgart germanylookup wh1.srnet.com.br at ARIN wh1.srnet.com.br  culturafisica.com.br lookup in virustotal http://www.culturafisica.com.br/site/obj ...    ARIN          sv5.srnet.com.br  sv2.srnet.com.br       lookup in virustotal http://www.culturafisica.com.br/site/obj ...
77 follow up this item(438891) 438891  2009-02-03 17:59:00 2009-02-08 11:21:35 113.4  641929    down No evidence recorded dead SenderBaselookup wellsoffice2.wel at virustotallookup wellsoffice2.wel at Rus CERT university stuttgart germany wellsoffice2.wel  AS1267 SenderBaselookup wellsoffice2.wel at virustotallookup wellsoffice2.wel at Rus CERT university stuttgart germany wellsoffice2.wel  wellsoffice2.wellsfargo.com.27xml-netcfg.biz lookup in virustotal http://wellsoffice2.wellsfargo.com.27xml ...                       lookup in virustotal http://wellsoffice2.wellsfargo.com.27xml ...
78 follow up this item(3128155) 3128155  2013-01-31 21:31:35 2013-01-31 22:00:29 0.5  1717355  Other  up No evidence recorded dead SenderBaselookup webui2.elasticbe at virustotallookup webui2.elasticbe at Rus CERT university stuttgart germanylookup webui2.elasticbe at ARIN webui2.elasticbe  AS1267 SenderBaselookup webui2.elasticbe at virustotallookup webui2.elasticbe at Rus CERT university stuttgart germanylookup webui2.elasticbe at ARIN webui2.elasticbe  eyeona.com lookup in virustotal http://www.eyeona.com/login.htm    ARIN          ns22.domaincontrol.com  ns21.domaincontrol.com       lookup in virustotal http://www.eyeona.com/login.htm
79 follow up this item(465741) 465741  2009-03-24 11:07:00 2009-03-25 18:58:49 31.9  671652     No evidence recorded dead SenderBaselookup webdesignindia.b at virustotallookup webdesignindia.b at Rus CERT university stuttgart germany webdesignindia.b  AS1267 SenderBaselookup webdesignindia.b at virustotallookup webdesignindia.b at Rus CERT university stuttgart germany webdesignindia.b  webdesignindia.biz lookup in virustotal http://webdesignindia.biz.//~seotool/xml ...              ns1.panelboxmanager.com  ns2.panelboxmanager.com       lookup in virustotal http://webdesignindia.biz.//~seotool/xml ...
80 follow up this item(465740) 465740  2009-03-24 11:08:00 2009-03-25 18:58:46 31.8  671656     No evidence recorded dead SenderBaselookup web-commerceenli at virustotallookup web-commerceenli at Rus CERT university stuttgart germany web-commerceenli  AS1267 SenderBaselookup web-commerceenli at virustotallookup web-commerceenli at Rus CERT university stuttgart germany web-commerceenli  web-commerceenligne.com lookup in virustotal http://web-commerceenligne.com.//~seotoo ...              ns2.iweb-hosting.com  ns1.iweb-hosting.com       lookup in virustotal http://web-commerceenligne.com.//~seotoo ...
81 follow up this item(3048599) 3048599  2012-12-08 02:30:13 2013-01-06 07:40:31 701.2  1660914  Other  up No evidence recorded dead SenderBaselookup 222.35.31.224 at virustotallookup 222.35.31.224 at Rus CERT university stuttgart germanylookup 222.35.31.224 at apnic 222.35.31.224  AS9394 SenderBaselookup w65.northidc.net at virustotallookup w65.northidc.net at Rus CERT university stuttgart germanylookup w65.northidc.net at apnic w65.northidc.net  sevkon.net lookup in virustotal http://www.sevkon.net/js/?amp;app=com-d3 ...  CN  APNIC  crnet_mgr@chinatietong.com  222.32.0.0 - 222.63.255.255  CTTNET  China TieTong Telecommunications CorporationJinze Mansion, 2 Guangningbo Street,Xicheng District, Beijing, China, 100032  ns20.xincache.com  ns19.xincache.com       lookup in virustotal http://www.sevkon.net/js/?amp;app=com-d3 ...
82 follow up this item(3048215) 3048215  2012-12-07 17:30:14 2013-01-06 07:45:21 710.3  1644204  Other  up No evidence recorded dead SenderBaselookup 222.35.31.224 at virustotallookup 222.35.31.224 at Rus CERT university stuttgart germanylookup 222.35.31.224 at apnic 222.35.31.224  AS9394 SenderBaselookup w65.northidc.net at virustotallookup w65.northidc.net at Rus CERT university stuttgart germanylookup w65.northidc.net at apnic w65.northidc.net  sevkon.net lookup in virustotal http://www.sevkon.net/js/?app=com-d3&ref ...  CN  APNIC  crnet_mgr@chinatietong.com  222.32.0.0 - 222.63.255.255  CTTNET  China TieTong Telecommunications CorporationJinze Mansion, 2 Guangningbo Street,Xicheng District, Beijing, China, 100032  ns20.xincache.com.  ns19.xincache.com.       lookup in virustotal http://www.sevkon.net/js/?app=com-d3&ref ...
83 follow up this item(3048214) 3048214  2012-12-07 17:30:14 2013-01-06 07:45:22 710.3  1644203  Other  up No evidence recorded dead SenderBaselookup 222.35.31.224 at virustotallookup 222.35.31.224 at Rus CERT university stuttgart germanylookup 222.35.31.224 at apnic 222.35.31.224  AS9394 SenderBaselookup w65.northidc.net at virustotallookup w65.northidc.net at Rus CERT university stuttgart germanylookup w65.northidc.net at apnic w65.northidc.net  sevkon.net lookup in virustotal http://www.sevkon.net/js/?amp;us.battle. ...  CN  APNIC  crnet_mgr@chinatietong.com  222.32.0.0 - 222.63.255.255  CTTNET  China TieTong Telecommunications CorporationJinze Mansion, 2 Guangningbo Street,Xicheng District, Beijing, China, 100032  ns20.xincache.com.  ns19.xincache.com.       lookup in virustotal http://www.sevkon.net/js/?amp;us.battle. ...
84 follow up this item(3048213) 3048213  2012-12-07 17:30:14 2013-01-06 07:45:23 710.3  1644202  Other  up No evidence recorded dead SenderBaselookup 222.35.31.224 at virustotallookup 222.35.31.224 at Rus CERT university stuttgart germanylookup 222.35.31.224 at apnic 222.35.31.224  AS9394 SenderBaselookup w65.northidc.net at virustotallookup w65.northidc.net at Rus CERT university stuttgart germanylookup w65.northidc.net at apnic w65.northidc.net  sevkon.net lookup in virustotal http://www.sevkon.net/js/?amp;&us.battle ...  CN  APNIC  crnet_mgr@chinatietong.com  222.32.0.0 - 222.63.255.255  CTTNET  China TieTong Telecommunications CorporationJinze Mansion, 2 Guangningbo Street,Xicheng District, Beijing, China, 100032  ns20.xincache.com.  ns19.xincache.com.       lookup in virustotal http://www.sevkon.net/js/?amp;&us.battle ...
85 follow up this item(3046979) 3046979  2012-12-03 10:37:45 2013-01-06 08:01:50 813.4  1643242  frame.battle.net  up No evidence recorded dead SenderBaselookup 222.35.31.224 at virustotallookup 222.35.31.224 at Rus CERT university stuttgart germanylookup 222.35.31.224 at apnic 222.35.31.224  AS9394 SenderBaselookup w65.northidc.net at virustotallookup w65.northidc.net at Rus CERT university stuttgart germanylookup w65.northidc.net at apnic w65.northidc.net  sevkon.net lookup in virustotal http://www.sevkon.net/js?us.battle.net/l ...  CN  APNIC  crnet_mgr@chinatietong.com  222.32.0.0 - 222.63.255.255  CTTNET  China TieTong Telecommunications CorporationJinze Mansion, 2 Guangningbo Street,Xicheng District, Beijing, China, 100032  ns20.xincache.com.  ns19.xincache.com.       lookup in virustotal http://www.sevkon.net/js?us.battle.net/l ...
86 follow up this item(465744) 465744  2009-03-24 11:03:00 2009-03-25 18:58:57 31.9  671644     No evidence recorded dead SenderBaselookup votinhclub.info. at virustotallookup votinhclub.info. at Rus CERT university stuttgart germany votinhclub.info.  AS1267 SenderBaselookup votinhclub.info. at virustotallookup votinhclub.info. at Rus CERT university stuttgart germany votinhclub.info.  votinhclub.info. lookup in virustotal http://votinhclub.info.//~seotool/xmlrpc ...              ns1.everydns.net  ns2.everydns.net  ns3.everydns.net  ns4.everydns.net   lookup in virustotal http://votinhclub.info.//~seotool/xmlrpc ...
87 follow up this item(465742) 465742  2009-03-24 11:07:00 2009-03-25 18:58:51 31.9  671653     No evidence recorded dead SenderBaselookup vohracompany.com at virustotallookup vohracompany.com at Rus CERT university stuttgart germany vohracompany.com  AS1267 SenderBaselookup vohracompany.com at virustotallookup vohracompany.com at Rus CERT university stuttgart germany vohracompany.com  vohracompany.com lookup in virustotal http://vohracompany.com.//~seotool/xmlrp ...              ns1.panelboxmanager.com  ns2.panelboxmanager.com       lookup in virustotal http://vohracompany.com.//~seotool/xmlrp ...
88 follow up this item(465745) 465745  2009-03-24 11:03:00 2009-03-25 18:59:01 31.9  671646     No evidence recorded dead SenderBaselookup vktvc.net. at virustotallookup vktvc.net. at Rus CERT university stuttgart germany vktvc.net.  AS1267 SenderBaselookup vktvc.net. at virustotallookup vktvc.net. at Rus CERT university stuttgart germany vktvc.net.  vktvc.net. lookup in virustotal http://vktvc.net.//~seotool/xmlrpc/pay/o ...              ns2.everydns.net  ns1.everydns.net  ns4.everydns.net  ns3.everydns.net   lookup in virustotal http://vktvc.net.//~seotool/xmlrpc/pay/o ...
89 follow up this item(465747) 465747  2009-03-24 11:03:00 2009-03-25 18:59:08 31.9  671642     No evidence recorded dead SenderBaselookup villadulacducast at virustotallookup villadulacducast at Rus CERT university stuttgart germany villadulacducast  AS1267 SenderBaselookup villadulacducast at virustotallookup villadulacducast at Rus CERT university stuttgart germany villadulacducast  villadulacducastor.com lookup in virustotal http://villadulacducastor.com.//~seotool ...              ns1.panelboxmanager.com  ns2.panelboxmanager.com       lookup in virustotal http://villadulacducastor.com.//~seotool ...
90 follow up this item(465746) 465746  2009-03-24 11:03:00 2009-03-25 18:59:04 31.9  671643     No evidence recorded dead SenderBaselookup vietnampro.info. at virustotallookup vietnampro.info. at Rus CERT university stuttgart germany vietnampro.info.  AS1267 SenderBaselookup vietnampro.info. at virustotallookup vietnampro.info. at Rus CERT university stuttgart germany vietnampro.info.  vietnampro.info. lookup in virustotal http://vietnampro.info.//~seotool/xmlrpc ...              ns2.panelboxmanager.com  ns1.panelboxmanager.com       lookup in virustotal http://vietnampro.info.//~seotool/xmlrpc ...
91 follow up this item(465751) 465751  2009-03-24 11:02:00 2009-03-25 18:59:19 32  671637     No evidence recorded dead SenderBaselookup viachaletscharle at virustotallookup viachaletscharle at Rus CERT university stuttgart germany viachaletscharle  AS1267 SenderBaselookup viachaletscharle at virustotallookup viachaletscharle at Rus CERT university stuttgart germany viachaletscharle  viachaletscharlevoix.com lookup in virustotal http://viachaletscharlevoix.com.//~seoto ...              ns2.panelboxmanager.com  ns1.panelboxmanager.com       lookup in virustotal http://viachaletscharlevoix.com.//~seoto ...
92 follow up this item(439001) 439001  2009-02-03 04:03:00 2009-02-08 13:27:07 129.4  641629    down No evidence recorded dead SenderBaselookup ustreasurydept.s at virustotallookup ustreasurydept.s at Rus CERT university stuttgart germany ustreasurydept.s  AS1267 SenderBaselookup ustreasurydept.s at virustotallookup ustreasurydept.s at Rus CERT university stuttgart germany ustreasurydept.s  ustreasurydept.secureserver-12.us lookup in virustotal http://ustreasurydept.secureserver-12.us ...                       lookup in virustotal http://ustreasurydept.secureserver-12.us ...
93 follow up this item(438984) 438984  2009-02-03 23:47:00 2009-02-08 13:27:41 109.7  642134    down No evidence recorded dead SenderBaselookup ustreasury.secur at virustotallookup ustreasury.secur at Rus CERT university stuttgart germany ustreasury.secur  AS1267 SenderBaselookup ustreasury.secur at virustotallookup ustreasury.secur at Rus CERT university stuttgart germany ustreasury.secur  ustreasury.secureserver-2.us lookup in virustotal http://ustreasury.secureserver-2.us/3722 ...                       lookup in virustotal http://ustreasury.secureserver-2.us/3722 ...
94 follow up this item(490355) 490355  2009-05-06 22:37:00 2009-05-10 12:50:49 86.2  697506    up No evidence recorded dead SenderBaselookup 88.255.63.66 at virustotallookup 88.255.63.66 at Rus CERT university stuttgart germanylookup 88.255.63.66 at apnic 88.255.63.66  AS1267 SenderBaselookup uralbilgisayar.c at virustotallookup uralbilgisayar.c at Rus CERT university stuttgart germanylookup uralbilgisayar.c at apnic uralbilgisayar.c  uralbilgisayar.com lookup in virustotal http://www.uralbilgisayar.com/administra ...    APNIC          ns1.uralbilgisayar.com  ns2.uralbilgisayar.com       lookup in virustotal http://www.uralbilgisayar.com/administra ...
95 follow up this item(489780) 489780  2009-05-06 08:23:00 2009-05-10 12:52:18 100.5  696936    up No evidence recorded dead SenderBaselookup 88.255.63.66 at virustotallookup 88.255.63.66 at Rus CERT university stuttgart germanylookup 88.255.63.66 at apnic 88.255.63.66  AS1267 SenderBaselookup uralbilgisayar.c at virustotallookup uralbilgisayar.c at Rus CERT university stuttgart germanylookup uralbilgisayar.c at apnic uralbilgisayar.c  uralbilgisayar.com lookup in virustotal http://www.uralbilgisayar.com/administra ...    APNIC          ns1.uralbilgisayar.com  ns2.uralbilgisayar.com       lookup in virustotal http://www.uralbilgisayar.com/administra ...
96 follow up this item(1115424) 1115424  2012-05-22 19:01:13 2012-05-22 19:58:32 1  1445762  PayPal  up No evidence recorded dead SenderBaselookup update-paypai.co at virustotallookup update-paypai.co at Rus CERT university stuttgart germanylookup update-paypai.co at ARIN update-paypai.co  AS1267 SenderBaselookup update-paypai.co at virustotallookup update-paypai.co at Rus CERT university stuttgart germanylookup update-paypai.co at ARIN update-paypai.co  login.submit lookup in virustotal http://update-paypai.com.cgi.bin.webscr. ...    ARIN                   lookup in virustotal http://update-paypai.com.cgi.bin.webscr. ...
97 follow up this item(3209317) 3209317 Report false positive Report closed case make a suggestion 2013-04-16 15:20:23 OVERDUE! 795.5  1791448  Other  down  alive SenderBaselookup 46.238.36.5 at virustotallookup 46.238.36.5 at Rus CERT university stuttgart germanylookup 46.238.36.5 at Ripe 46.238.36.5  AS35141 undef  radiobulgari.com lookup in virustotal http://radiobulgari.com/wp-includes/js/t ...  BG  RIPE    46.238.32.0 - 46.238.39.255  RAZSADNIKA-NET-SOF  Megalan Network Ltd.Megalan Network Ltd.  offi423718.venus.orderbox-dns.com  offi423718.mercury.orderbox-dns.com  offi423718.earth.orderbox-dns.com  offi423718.mars.orderbox-dns.com   lookup in virustotal http://radiobulgari.com/wp-includes/js/t ...
98 follow up this item(3170563) 3170563 Report false positive Report closed case make a suggestion 2013-03-04 05:33:20 OVERDUE! 1836.3  1751926  Other  down  alive SenderBaselookup 91.202.63.178 at virustotallookup 91.202.63.178 at Rus CERT university stuttgart germanylookup 91.202.63.178 at Ripe 91.202.63.178  AS44571 undef  spec-stockfolder.ru lookup in virustotal http://filespace.spec-stockfolder.ru/cjs ...  VG  RIPE  noc.akrino@gmail.com  91.202.60.0 - 91.202.63.255  AKRINO-NET  Akrino IncAKRINO BLOCKAKRINO BLOCK #4  ns1.reg.ru  ns2.reg.ru       lookup in virustotal http://filespace.spec-stockfolder.ru/cjs ...
99 follow up this item(3062383) 3062383  2012-12-14 13:21:45 2012-12-14 13:42:39 0.3  1661377  PayPal  down No evidence recorded dead undef  AS1267 undef  csacosmeticos.com.br lookup in virustotal http://paypal.us.cgi.bin.webscr.cmd.logi ...              ns2.outmist.com.  ns1.outmist.com.       lookup in virustotal http://paypal.us.cgi.bin.webscr.cmd.logi ...
100 follow up this item(3062380) 3062380  2012-12-14 13:21:45 2012-12-14 13:42:42 0.3  1661367  PayPal  down No evidence recorded dead undef  AS1267 undef  acarlarfilokiralama.com lookup in virustotal http://update-information054.acarlarfilo ...              ns1.ennethosting.net.  ns2.ennethosting.net.       lookup in virustotal http://update-information054.acarlarfilo ...
Line#DateClosedhoursPhishTanktargetip stateresponseIp initialAS#ip reviewDomainURLcountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
101 follow up this item(3062379) 3062379  2012-12-14 13:21:45 2012-12-14 13:42:42 0.3  1661366  PayPal  down No evidence recorded dead undef  AS1267 undef  liceomontessoriano.net lookup in virustotal http://palpay.com.usa.cgi-bin.update.acc ...              ns13.colservicios.com.  ns14.colservicios.com.       lookup in virustotal http://palpay.com.usa.cgi-bin.update.acc ...
102 follow up this item(3062370) 3062370  2012-12-14 13:21:45 2012-12-14 13:43:02 0.4  1661348  PayPal  down No evidence recorded dead undef  AS1267 undef  baghujeans.com lookup in virustotal http://www.paypal.com.cgi-bin-webscr-cmd ...              ns125.webhostingworld.net.  ns126.webhostingworld.net.       lookup in virustotal http://www.paypal.com.cgi-bin-webscr-cmd ...
103 follow up this item(3061109) 3061109  2012-12-14 10:21:12 2012-12-14 10:31:27 0.2  1659696  PayPal  down No evidence recorded dead undef  AS1267 undef  vox.md lookup in virustotal http://pp.rmc.vox.md/center-paypal-resol ...              vns1.nocdirect.com.  vns2.nocdirect.com.       lookup in virustotal http://pp.rmc.vox.md/center-paypal-resol ...
104 follow up this item(3060439) 3060439  2012-12-14 07:20:46 2012-12-14 07:35:29 0.2  1658455  PayPal  down No evidence recorded dead undef  AS1267 undef  greenolivecatering.ie lookup in virustotal http://www.paypal.com.ch.cgi.bin.webscr. ...              ns6.dnsireland.com.  ns7.dnsireland.ie.  ns5.dnsireland.com.     lookup in virustotal http://www.paypal.com.ch.cgi.bin.webscr. ...
105 follow up this item(3059340) 3059340  2012-12-14 04:20:25 2012-12-14 04:44:35 0.4  1656815  PayPal  down No evidence recorded dead undef  AS1267 undef  paypal-home.de lookup in virustotal http://paypal-home.de/login/13603/index. ...                       lookup in virustotal http://paypal-home.de/login/13603/index. ...
106 follow up this item(3059330) 3059330  2012-12-14 04:20:25 2012-12-14 04:44:50 0.4  1656797  PayPal  down No evidence recorded dead undef  AS1267 undef  weddingcarhire.com.au lookup in virustotal http://www-paypal-com-login.23583verfica ...              ns.quickdns.net.  ns2.quickdns.net.       lookup in virustotal http://www-paypal-com-login.23583verfica ...
107 follow up this item(3059328) 3059328  2012-12-14 04:20:25 2012-12-14 04:45:00 0.4  1656793  PayPal  down No evidence recorded dead undef  AS1267 undef  la-aus.com lookup in virustotal http://paypal.com.us.cgi.bin.webscr.cmd. ...              ns2.ich-17.com.  ns1.ich-17.com.       lookup in virustotal http://paypal.com.us.cgi.bin.webscr.cmd. ...
108 follow up this item(3059326) 3059326  2012-12-14 04:20:25 2012-12-14 04:45:01 0.4  1656791  PayPal  down No evidence recorded dead undef  AS1267 undef  allcx.com lookup in virustotal http://update-details-ppllogon.allcx.com ...              ns1.host1free.com.  ns2.host1free.com.       lookup in virustotal http://update-details-ppllogon.allcx.com ...
109 follow up this item(1272898) 1272898  2012-11-06 14:00:20 2012-11-06 14:01:10 0    down No evidence recorded dead undef  AS1267 undef  zh-mot.in lookup in virustotal http://us.diablo.com.zh-mot.in/login.htm ...                       lookup in virustotal http://us.diablo.com.zh-mot.in/login.htm ...
110 follow up this item(1267955) 1267955  2012-10-31 05:00:11 2012-10-31 05:00:31 0    down No evidence recorded dead undef  AS1267 undef  secure4o.mx lookup in virustotal http://www.paypal.ca.1418.secure4o.mx/im ...                       lookup in virustotal http://www.paypal.ca.1418.secure4o.mx/im ...
111 follow up this item(1227096) 1227096  2012-09-17 18:20:15 2012-09-17 18:21:53 0  1565348  PayPal  down No evidence recorded dead undef  AS1267 undef  cigarsmanila.com lookup in virustotal http://cigarsmanila.com/js/walls/ntasa/4 ...                       lookup in virustotal http://cigarsmanila.com/js/walls/ntasa/4 ...
112 follow up this item(1227094) 1227094  2012-09-17 18:20:15 2012-09-17 18:22:06 0  1565346  PayPal  down No evidence recorded dead undef  AS1267 undef  cigarsmanila.com lookup in virustotal http://cigarsmanila.com/js/wallss/ntasa/ ...                       lookup in virustotal http://cigarsmanila.com/js/wallss/ntasa/ ...
113 follow up this item(1068301) 1068301  2012-03-27 03:00:49 2012-03-27 03:07:52 0.1  1396261  PayPal  down No evidence recorded dead undef  AS1267 undef  iusein-forum.net lookup in virustotal http://www.paypal.de.sicherheit-paypalbi ...                       lookup in virustotal http://www.paypal.de.sicherheit-paypalbi ...
114 follow up this item(1068295) 1068295  2012-03-27 03:00:49 2012-03-27 03:08:39 0.1  1396255  PayPal  down No evidence recorded dead undef  AS1267 undef  ppveri.co.uk lookup in virustotal http://ppveri.co.uk/loginpage.php                       lookup in virustotal http://ppveri.co.uk/loginpage.php
115 follow up this item(1068294) 1068294  2012-03-27 03:00:49 2012-03-27 03:08:45 0.1  1396254  PayPal  down No evidence recorded dead undef  AS1267 undef  themelbourneremovalists.com.au lookup in virustotal http://paypal.com.cgi-bin.webscr-cmd-log ...              ns1.jumba.net.au.  ns2.jumba.net.au.       lookup in virustotal http://paypal.com.cgi-bin.webscr-cmd-log ...
116 follow up this item(1068290) 1068290  2012-03-27 03:00:49 2012-03-27 03:09:23 0.1  1396250  PayPal  down No evidence recorded dead undef  AS1267 undef  ppveri.co.uk lookup in virustotal http://gh3paypal2.ppveri.co.uk/OrZnfntHy ...                       lookup in virustotal http://gh3paypal2.ppveri.co.uk/OrZnfntHy ...
117 follow up this item(1061387) 1061387  2012-03-12 22:54:33 2012-03-12 22:55:40 0    down No evidence recorded dead undef  AS1267 undef  chadhendrixexperience.com lookup in virustotal http://www.chadhendrixexperience.com/inc ...                       lookup in virustotal http://www.chadhendrixexperience.com/inc ...
118 follow up this item(1060515) 1060515  2012-03-12 21:53:57 2012-03-12 21:58:25 0.1    down No evidence recorded dead undef  AS1267 undef  blue-bubble.com lookup in virustotal http://www.chris.blue-bubble.com/css/onl ...              ns1.galaxywebsolutions.com.  ns2.galaxywebsolutions.com.       lookup in virustotal http://www.chris.blue-bubble.com/css/onl ...
119 follow up this item(1060514) 1060514  2012-03-12 21:53:57 2012-03-12 21:58:26 0.1    down No evidence recorded dead undef  AS1267 undef  breivhartz.org lookup in virustotal http://www.breivhartz.org/main/component ...                       lookup in virustotal http://www.breivhartz.org/main/component ...
120 follow up this item(1060512) 1060512  2012-03-12 21:53:57 2012-03-12 21:58:28 0.1    down No evidence recorded dead undef  AS1267 undef  9vw72z7ip6k8eprx11snid.com lookup in virustotal http://www.paypal.com.6nn2qc5cykpa5.9vw7 ...                       lookup in virustotal http://www.paypal.com.6nn2qc5cykpa5.9vw7 ...
121 follow up this item(1060511) 1060511  2012-03-12 21:53:57 2012-03-12 21:58:29 0.1    down No evidence recorded dead undef  AS1267 undef  9vw72z7ip6k8eprx11snid.com lookup in virustotal http://www.paypal.com.6nn2qc5cykpa5.9vw7 ...                       lookup in virustotal http://www.paypal.com.6nn2qc5cykpa5.9vw7 ...
122 follow up this item(1057743) 1057743  2012-03-09 20:53:36 2012-03-09 21:02:59 0.2    down No evidence recorded dead undef  AS1267 undef  digitalbearmedia.com lookup in virustotal http://digitalbearmedia.com/cp/images/di ...                       lookup in virustotal http://digitalbearmedia.com/cp/images/di ...
123