Adobe

Software & cloud United Statesadobe.comRank 10 of the most impersonated
Cert findings · 24 h
3
Cert findings · 7 days
10
8 reported or listed · 2 on phishing hosts
Registered lookalikes
148
9 listed by a source or an address list
Official domains
155
verified from Adobe's own sites and records

Certificate findings for Adobe

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Adobe's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 11 findings, grouped by hostname

  1. www.adobe-billing.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    www.adobe-billing.com
    First seen
    2026-11-05 05:10 UTC
    First published
    2026-11-05 05:17 UTC
    DNS
    Resolves · checked 2026-11-05 05:23 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 04:10 UTC to 2027-02-03 04:10 UTC
    Logged 2026-11-05 05:09 UTC in DigiCert Wyvern2027h1, entry 411,634,141
    SHA-256 b28c55cb1938cc56ffb55c005779b55e2efe65bdc84e677c6016e7ac51d707b1
    Public key SHA-256 62cb5d7b23629f7f0c53a65e06e77e19bf964aa1f983da35c89f63691b01698f
    Brand
    Adobe
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    adobe-billing.com
    Registered
    2026-11-05 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 05:16 UTC

    Suggest a correction

  2. adobe-billing.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    adobe-billing.com
    First seen
    2026-11-05 05:10 UTC
    First published
    2026-11-05 05:17 UTC
    DNS
    Resolves · checked 2026-11-05 05:23 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 04:10 UTC to 2027-02-03 04:10 UTC
    Logged 2026-11-05 05:09 UTC in DigiCert Wyvern2027h1, entry 411,634,141
    SHA-256 b28c55cb1938cc56ffb55c005779b55e2efe65bdc84e677c6016e7ac51d707b1
    Public key SHA-256 62cb5d7b23629f7f0c53a65e06e77e19bf964aa1f983da35c89f63691b01698f
    Brand
    Adobe
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    adobe-billing.com
    Registered
    2026-11-05 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 05:16 UTC

    Suggest a correction

  3. fischliamsee.ch GB · AS200083 · SUB6 Sub 6 Limited
    ReportedReported by PhishTank as imitating AdobeMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    fischliamsee.ch
    First seen
    2026-11-04 23:21 UTC
    First published
    2026-11-04 23:32 UTC
    Listing
    PhishTank: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-04 23:38 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-04 22:17 UTC to 2027-02-02 22:17 UTC
    Logged 2026-11-04 23:15 UTC in Google PlumbersArms2027h1, entry 616,531,497
    SHA-256 b6ead716285f1219904d4e390fd9b13363e5b23d6cd8ab5391af91c27ad709a9
    Public key SHA-256 f329c83c48cc3b8cc056b6431569289c3adafcd902f0cd5e993a0af04a0dc623
    PhishTank
    PhishTank report #9553832
    Brand
    Adobe
    Addresses
    62.182.21.105 · United Kingdom · AS200083 SUB6 Sub 6 Limited
    Domain
    fischliamsee.ch
    MX
    Receives mail at mx1.email-cluster.com, mx2.email-cluster.com, failover1.email-cluster.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:22 UTC

    Suggest a correction

  4. hameem.net GB · AS52148 · ENIXLTD Enix Ltd
    ReportedReported by PhishTank as imitating AdobeMX presentSPF ~allDMARC policy noneRegistered 6 y ago
    DetailsHide
    Hostname
    hameem.net
    First seen
    2026-11-03 08:02 UTC
    First published
    2026-11-02 09:27 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishTank: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-05 09:33 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishTank feed
    4. We matched the new listing
    Certificate
    Issued by YR1
    Valid 2026-11-02 07:30 UTC to 2027-01-31 07:30 UTC
    Logged 2026-11-02 08:29 UTC in Google ParcelYard2027h1, entry 568,625,582
    SHA-256 db5e57bc8fda0ad8df5ebfa3a0e2eb6ea9d98a052951db1731de3942393de4fc
    Public key SHA-256 44d17448c9d76b02d62032a69311653dbb24f7dc553f5356599690cb8994efb9
    PhishTank
    PhishTank report #9553829
    Brand
    Adobe
    Addresses
    91.238.160.176 · United Kingdom · AS52148 ENIXLTD Enix Ltd
    Domain
    hameem.net
    Registered
    2020-12-02 · Dreamscape Networks International Pte Ltd
    MX
    Receives mail at smtp.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:53 UTC

    Suggest a correction

  5. prsnrw.de DE · AS51167 · CONTABO Contabo GmbH
    ReportedContaboReported by PhishTank as imitating AdobeMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    prsnrw.de
    First seen
    2026-11-03 08:02 UTC
    First published
    2026-11-03 08:50 UTC
    Listing
    PhishTank: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Observed in the PhishTank feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-02 04:07 UTC to 2027-01-31 04:07 UTC
    Logged 2026-11-02 05:05 UTC in Geomys Tuscolo2027h1, entry 440,944,742
    SHA-256 6d91e0e410a9a66b6c8c710e566169252e672b8d37c8d89262795c2a68923d6d
    Public key SHA-256 d014a7aa51116ce0b5a9a78a12b58fdc02b85224c272f202874aa7594ef786e0
    PhishTank
    PhishTank report #9553833
    Brand
    Adobe
    Addresses
    213.136.93.167 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (213.136.93.167): a cloud provider. It rents servers and addresses to its customers.
    Domain
    prsnrw.de
    MX
    Receives mail at mail.prsnrw.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  6. pomarosahotel.com US · AS23352 · DEFT.COM
    ReportedReported by PhishTank as imitating AdobeMX presentSPF ~allDMARC policy noneRegistered 2 mo ago
    DetailsHide
    Hostname
    pomarosahotel.com
    First seen
    2026-11-02 23:11 UTC
    First published
    2026-11-03 00:09 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-31 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-05 00:16 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-02 22:06 UTC to 2027-01-31 22:06 UTC
    Logged 2026-11-02 23:05 UTC in IPng Networks Gouda2027h1, entry 297,188,222
    SHA-256 4b4436ff26fe9bedc7c6b660e69a19c6205d6962b670ae9d0485f833abf466b3
    Public key SHA-256 f613b7a918a69d30a21d0e177d4e8babd1fcc234f0ea5e2dd4f66538b8e05515
    PhishTank
    PhishTank report #9552841
    Brand
    Adobe
    Addresses
    66.225.221.122 · United States · AS23352 SERVERCENTRAL - DEFT.COM
    Domain
    pomarosahotel.com
    Registered
    2026-09-02 · GoDaddy.com, LLC
    MX
    Receives mail at pomarosahotel.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 00:33 UTC

    Suggest a correction

  7. compositura.com ID · AS45711 · Imediabiz Indonesia
    ReportedReported by PhishTank as imitating AdobeMX presentSPF missingDMARC missingRegistered 12 y ago
    DetailsHide
    Hostname
    compositura.com
    First seen
    2026-11-02 13:55 UTC
    First published
    2026-11-02 14:21 UTC
    Listing
    PhishTank: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-04 14:41 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Observed in the PhishTank feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-01 02:30 UTC to 2027-01-30 02:30 UTC
    Logged 2026-11-01 03:28 UTC in Let's Encrypt Willow2027h1, entry 874,414,125
    SHA-256 2366aff81cfc42717439b971aba5dd9de1035afb7b661d814e4878ba7007baed
    Public key SHA-256 fd3aa7aa3f174ce6cf7b2f8cd738ff6d983d498da82f1f1b9a9e6957eec1b865
    PhishTank
    PhishTank report #9553534
    Brand
    Adobe
    Addresses
    103.18.239.174 · Indonesia · AS45711 IMEDIABIZ-AS-ID - Imediabiz Indonesia
    Domain
    compositura.com
    Registered
    2014-06-16 · Spaceship, Inc.
    MX
    Receives mail at compositura.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:34 UTC

    Suggest a correction

  8. huzur.de DE · AS51167 · CONTABO Contabo GmbH
    ReportedContaboReported by PhishTank as imitating AdobeMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    huzur.de
    First seen
    2026-11-01 15:05 UTC
    First published
    2026-11-01 15:18 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-04 15:31 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-01 14:02 UTC to 2027-01-30 14:02 UTC
    Logged 2026-11-01 15:00 UTC in Google ParcelYard2027h1, entry 556,858,836
    SHA-256 611905eb91bbfbacf45338fbbed19b97704d2ccd48e9af28e1174edbcac9825b
    Public key SHA-256 813f55e38233b6e8eaff0ea61f61c9adba882c7b9c69eb5b2c2df7c870be08d9
    PhishTank
    PhishTank report #9428823
    Brand
    Adobe
    Addresses
    193.34.145.201 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (193.34.145.201): a cloud provider. It rents servers and addresses to its customers.
    Domain
    huzur.de
    MX
    Receives mail at mail.huzur.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  9. onixone.com.co GB · AS36454 · WHG-DAL WHG Hosting Service…
    ReportedReported by PhishTank as imitating AdobeMX presentSPF ~allDMARC quarantine
    DetailsHide
    Hostname
    onixone.com.co
    First seen
    2026-11-01 03:10 UTC
    First published
    2026-11-01 03:57 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-05 04:01 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-01 02:10 UTC to 2027-01-30 02:10 UTC
    Logged 2026-11-01 03:09 UTC in DigiCert Wyvern2027h1, entry 371,039,693
    SHA-256 17c758ce780a5409921c6130c92f839cad0d2a2ee403a030217e83fbdef2019b
    Public key SHA-256 e7390c8efd655d8f527d569d8c4b47fa7c0463ecd540fbb103ca620b160900ce
    PhishTank
    PhishTank report #9514822
    Brand
    Adobe
    Addresses
    190.8.176.201 · United Kingdom · AS36454 WHG-DAL WHG Hosting Services Ltd
    Domain
    onixone.com.co
    MX
    Receives mail at mail.onixone.com.co
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-05 05:03 UTC

    Suggest a correction

  10. jobnep.com.np NP · AS4007 · Subisu Cablenet (Pvt) Ltd, …
    ReportedReported by PhishTank as imitating AdobeMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    jobnep.com.np
    First seen
    2026-10-29 16:51 UTC
    First published
    2026-10-29 17:26 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-04 17:34 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-29 15:50 UTC to 2027-01-27 15:50 UTC
    Logged 2026-10-29 16:49 UTC in IPng Networks Gouda2027h1, entry 261,458,529
    SHA-256 5dc6e07a110f8e19ad51108875df4c1ce9ac5008a3a654a0cd587700dc47dfbe
    Public key SHA-256 d158ed2b1d9f59cdfdd877f68788a8ab77bc80cfd0b83e4c16c41f52fce5eb97
    PhishTank
    PhishTank report #9540426
    Brand
    Adobe
    Addresses
    202.63.243.186 · Nepal · AS4007 SUBISU-CABLENET-AS-AP - Subisu Cablenet (Pvt) Ltd, Baluwatar, Kathmandu, Nepal
    Domain
    jobnep.com.np
    MX
    Receives mail at mail.jobnep.com.np
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  11. jyothycirrussaviation.com US · AS46606 · Unified Layer
    ReportedUnified Layer (Bluehost, HostGator)Reported by PhishTank as imitating AdobeMX presentSPF ~allDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    jyothycirrussaviation.com
    First seen
    2026-10-26 09:56 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-05 00:26 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. We matched its certificate name
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 452,783,254
    SHA-256 6edad8d2a84618b8466452330a8eab625ec3d9088208e6931b2a1b52cb588480
    PhishTank
    PhishTank report #9540423
    Brand
    Adobe
    Addresses
    162.241.123.153 · United States · AS46606 UNIFIEDLAYER-AS-1 - Unified Layer · Unified Layer (Bluehost, HostGator) (shared hosting)
    Unified Layer (Bluehost, HostGator)
    Unified Layer (Bluehost, HostGator) (162.241.123.153): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    jyothycirrussaviation.com
    Registered
    2024-06-20 · GoDaddy.com, LLC
    MX
    Receives mail at mail.jyothycirrussaviation.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:25 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Adobe when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Software & cloud

All brands →