CLEAN MX realtime database
safe Phish viewer

hex view of evidence ...

switching to first hex view of evidence ...
0: 3C68746D6C3E3C686561643E0D0A3C6D65746120485454502D45717569763D22          <html><head> <meta HTTP-Equiv="
32: 726566726573682220636F6E74656E743D22303B2055524C3D7765627363722E          refresh" content=" ; URL=webscr.
64: 7068703F636D643D5F6C6F67696E2D72756E2664697370617463683D35383835          php?cmd=_login-run&dispatch=5885
96: 6438306131336330646231663939386361303534656662646632633239383738          d8 a13c db1f998ca 54efbdf2c29878
128: 6134333566653332346565633235313137323766626633653965666333356336          a435fe324eec2511727fbf3e9efc35c6
160: 6331363133663134383834316138373065633263373635336637346633356336          c1613f148841a87 ec2c7653f74f35c6
192: 63313631336631343838343161383730656332633736353366373466223E0D0A          c1613f148841a87 ec2c7653f74f">
224: 3C73637269707420747970653D22746578742F6A617661736372697074223E0D          <script type="text/javascript">
256: 0A6563686F203D20227765627363722E7068703F636D643D5F6C6F67696E2D72          echo = "webscr.php?cmd=_login-r
288: 756E2664697370617463683D3538383564383061313363306462316639393863          un&dispatch=5885d8 a13c db1f998c
320: 6130353465666264663263323938373861343335666533323465656332353131          a 54efbdf2c29878a435fe324eec2511
352: 3732376662663365396566633335633663313631336631343838343161383730          727fbf3e9efc35c6c1613f148841a87 
384: 6563326337363533663734663335633663313631336631343838343161383730          ec2c7653f74f35c6c1613f148841a87 
416: 656332633736353366373466220D0A73656C662E6C6F636174696F6E2E726570          ec2c7653f74f" self.location.rep
448: 6C616365286563686F293B0D0A77696E646F772E6C6F636174696F6E203D2065          lace(echo); window.location = e
480: 63686F3B0D0A3C2F7363726970743E0D0A3C2F686561643E          cho; </script> </head>