CLEAN MX realtime database
safe Phish viewer

hex view of evidence ...
0: 3C68746D6C3E0D0A3C686561643E0D0A3C6D65746120687474702D6571756976          <html> <head> <meta http-equiv
32: 3D22526566726573682220636F6E74656E743D22302E313B55524C3D22687474          ="Refresh" content=" .1;URL="htt
64: 703A2F2F6D2D686F737465722E636F6D2F73746F702E706870223E0D0A3C2F68          p://m-hoster.com/stop.php"> </h
96: 6561643E0D0A3C626F64793E0D0A3C736372697074206C616E67756167653D22          ead> <body> <script language="
128: 6A6176617363726970742220747970653D22746578742F6A6176617363726970          javascript" type="text/javascrip
160: 74223E0D0A646F63756D656E742E6C6F636174696F6E3D22687474703A2F2F6D          t"> document.location="http://m
192: 2D686F737465722E636F6D2F73746F702E706870223B0D0A3C2F736372697074          -hoster.com/stop.php"; </script
224: 3E0D0A3C2F626F64793E0D0A3C2F68746D6C3E          > </body> </html>