Hi Philp,
Go and work through it for me too to see if you find something interesting for us all to be aware of. Were the phishes reported to for instance Netcraft Anti-Phishing or tested against http://www.ptrrecord.net/dnsbl-check.php?ip= or against trunckenbrodt’s resources?
pol