Amazon

E-commerce & retail United Statesamazon.comRank 2 of the most impersonated
Cert findings · 24 h
5
Cert findings · 7 days
38
17 reported or listed · 17 on phishing hosts · 4 on Spamhaus DROP
Registered lookalikes
320
24 listed by a source or an address list
Official domains
73
verified from Amazon's own sites and records

Certificate findings for Amazon

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Amazon's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 56 findings, grouped by hostname

  1. jonahost.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ReportedParking page · ParkingCrew (Team Internet)Reported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    jonahost.com
    First seen
    2026-11-05 10:05 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 09:05 UTC to 2027-02-03 09:05 UTC
    Logged 2026-11-05 10:04 UTC in Google PlumbersArms2027h1, entry 624,246,153
    SHA-256 2883d59ddb8a2610a16dd95b423893f2f55b5bc979a7794022c0d9924de7acda
    Public key SHA-256 6558e7ade3261601a8e0dd0889214f0b0c9824b19b3aaa542bbee0bde44d429c
    PhishTank
    PhishTank report #9495922
    Brand
    Amazon
    Addresses
    185.53.179.149 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.149): a parking service. It answers for names that are typically for sale or unused.
    Domain
    jonahost.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:09 UTC

    Suggest a correction

  2. www.primevideo.com.cn US · AS46844 · Sharktech2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.primevideo.com.cn
    First seen
    2026-11-05 00:16 UTC
    First published
    2026-11-03 00:09 UTC
    DNS
    Resolves · checked 2026-11-05 00:16 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 208.98.40.32.
    1. Phishing-host list fetched with the address
    2. Resolved to 208.98.40.32
    Brand
    Amazon
    Addresses
    208.98.40.32 · United States · AS46844 SHARKTECH - Sharktech
    208.98.43.33 · United States · AS46844 SHARKTECH - Sharktech
    Domain
    primevideo.com.cn
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:22 UTC

    Suggest a correction

  3. primevideo.com.cn US · AS46844 · Sharktech2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    primevideo.com.cn
    First seen
    2026-11-04 22:58 UTC
    First published
    2026-10-31 22:45 UTC
    DNS
    Resolves · checked 2026-11-04 22:58 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 208.98.40.227.
    1. Phishing-host list fetched with the address
    2. Resolved to 208.98.40.227
    Brand
    Amazon
    Addresses
    208.98.40.227 · United States · AS46844 SHARKTECH - Sharktech
    208.98.43.96 · United States · AS46844 SHARKTECH - Sharktech
    Domain
    primevideo.com.cn
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:22 UTC

    Suggest a correction

  4. www.amazon.fr.retrait-abonnement.com MY · AS45839 · Shinjiru Technology Sdn Bhd
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    www.amazon.fr.retrait-abonnement.com
    First seen
    2026-11-04 15:41 UTC
    First published
    2026-11-04 16:54 UTC
    DNS
    Resolves · checked 2026-11-04 17:06 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 101.99.75.184.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 101.99.75.184
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-04 14:40 UTC to 2027-02-02 14:40 UTC
    Logged 2026-11-04 15:39 UTC in Geomys Tuscolo2027h1, entry 474,793,853
    SHA-256 0bdc62402051f9229e09b26396555972595dbaf09ddc115cd6c49017691703cc
    Public key SHA-256 b65ae11ad270aa00e13c39fd8ee51d2fa5e5ba597431dee8f9487535d53d5ea3
    Brand
    Amazon
    Addresses
    101.99.75.184 · Malaysia · AS45839 SHINJIRU-MY-AS-AP - Shinjiru Technology Sdn Bhd
    Domain
    retrait-abonnement.com
    Registered
    2026-11-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:55 UTC

    Suggest a correction

  5. www.amazon.fr.resiliation-abonnement.com MY · AS45839 · Shinjiru Technology Sdn Bhd
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    www.amazon.fr.resiliation-abonnement.com
    First seen
    2026-11-04 15:41 UTC
    First published
    2026-11-04 16:54 UTC
    DNS
    Resolves · checked 2026-11-04 17:06 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 101.99.75.184.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 101.99.75.184
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-04 14:40 UTC to 2027-02-02 14:40 UTC
    Logged 2026-11-04 15:38 UTC in Let's Encrypt Willow2027h1, entry 934,516,660
    SHA-256 4bbb405deb564c828581062e670412b024c33efe1802fae5e6befadfb5aa0c26
    Public key SHA-256 de23766b71ffc17c274e32f2bf93c76c8d00405946c955378483c8cc06c6be76
    Brand
    Amazon
    Addresses
    101.99.75.184 · Malaysia · AS45839 SHINJIRU-MY-AS-AP - Shinjiru Technology Sdn Bhd
    Domain
    resiliation-abonnement.com
    Registered
    2026-11-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:55 UTC

    Suggest a correction

  6. myfamilyprime-espace.com US · AS399979 · 49.3 Networking LLC
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    myfamilyprime-espace.com
    First seen
    2026-11-04 03:36 UTC
    First published
    2026-11-04 04:15 UTC
    Listing
    PhishTank: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Observed in the PhishTank feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-03 03:58 UTC to 2027-02-01 03:58 UTC
    Logged 2026-11-03 04:56 UTC in Google PlumbersArms2027h1, entry 584,516,055
    SHA-256 06ef8e8fb828854b438da4aada2d1abc674553ea3c75aac9f312845aad8ff85c
    Public key SHA-256 eab2ccc75cb7c342a56aa363e8a99ae429ea672160a8d898244fd82062d8c71b
    PhishTank
    PhishTank report #9554426
    Brand
    Amazon
    Addresses
    180.178.191.53 · United States · AS399979 AS-493NETWORKING - 49.3 Networking LLC
    Domain
    myfamilyprime-espace.com
    Registered
    2026-11-03 · Key-Systems GmbH
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:43 UTC

    Suggest a correction

  7. myprimevideo.shop SC · AS197170 · TECHTIES-AS TechTies Inc.2 addresses
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 19 d ago
    DetailsHide
    Hostname
    myprimevideo.shop
    First seen
    2026-11-04 03:35 UTC
    First published
    2026-10-31 22:45 UTC
    DNS
    Resolves · checked 2026-11-04 22:58 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 85.11.167.206.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 85.11.167.206
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-04 02:31 UTC to 2027-02-02 02:31 UTC
    Logged 2026-11-04 03:30 UTC in Geomys Tuscolo2027h1, entry 467,810,313
    SHA-256 90010ce674eea773489f3962004507dc9647a31947894184d4b2cd4e8d514f8c
    Public key SHA-256 648899d16834970d509786fdad2c6405f15f53972904dd7f6ec021c65ea5c5ac
    Brand
    Amazon
    Addresses
    85.11.167.206 · Seychelles · AS197170 TECHTIES-AS TechTies Inc.
    185.241.208.132 · Germany · AS210558 services-1337-gmbh 1337 Services GmbH
    Domain
    myprimevideo.shop
    Registered
    2026-10-17 · NameSilo
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:44 UTC

    Suggest a correction

  8. 104polo.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by JPCERT/CC as imitating AmazonMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    104polo.com
    First seen
    2026-11-03 21:00 UTC
    First published
    2026-11-03 21:33 UTC
    Listing
    JPCERT/CC confirmed it 2026-06-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-04 21:40 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-03 19:59 UTC to 2027-02-01 20:57 UTC
    Logged 2026-11-03 20:59 UTC in IPng Networks Gouda2027h1, entry 306,819,129
    SHA-256 673ceca4afaed139cb6f5f9dbf3b27346d85de59193805e525fa050cfb2a7317
    Public key SHA-256 97c9645d3e92d8e583cd4a7a5b5846cdd7ed5f695619bab24850dd4f5707bce9
    Brand
    Amazon
    Addresses
    104.21.38.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.156, 172.67.168.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    104polo.com
    Registered
    2026-08-30 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 21:33 UTC

    Suggest a correction

  9. mobile-ayxsports.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by JPCERT/CC as imitating AmazonMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    mobile-ayxsports.com
    First seen
    2026-11-03 19:00 UTC
    First published
    2026-11-03 19:26 UTC
    Listing
    JPCERT/CC confirmed it 2026-05-29 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-04 19:33 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-05 14:44 UTC to 2026-12-04 15:43 UTC
    Logged 2026-11-03 18:58 UTC in DigiCert Wyvern2026h2, entry 2,201,825,094
    SHA-256 7d8566ca54f1e38e7e1f7eaea24207f81088ae551c5d94c09bdf869f99a929f5
    Public key SHA-256 b752ef6da265735bc0d748aeb717c1487326cd4eaa4c268cf9955bb916de6ffe
    Brand
    Amazon
    Addresses
    104.21.62.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.62.181, 172.67.138.2): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mobile-ayxsports.com
    Registered
    2025-12-06 · Metaregistrar BV
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  10. esp-amp.info 101.1.16.9
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide
    Hostname
    esp-amp.info
    First seen
    2026-11-03 09:32 UTC
    First published
    2026-11-03 09:58 UTC
    Listing
    PhishTank: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Not resolving · checked 2026-11-05 10:02 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Observed in the PhishTank feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-02 11:14 UTC to 2027-01-31 11:14 UTC
    Logged 2026-11-02 12:13 UTC in IPng Networks Gouda2027h1, entry 293,323,527
    SHA-256 3cd06005c67d2c1d1f07800b6f1153381353effae66c3241aeff76ee426dcfa5
    Public key SHA-256 732f96347b811172528b37332ee66c0d0201a6828a49847677d515152473633c
    PhishTank
    PhishTank report #9553840
    Brand
    Amazon
    Addresses
    101.1.16.9
    Domain
    esp-amp.info
    Registered
    2026-10-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:59 UTC

    Suggest a correction

  11. amazon-signin-update-payment-secure-billing-mainapp.172-246-243-65.cpanel.site FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    amazon-signin-update-payment-secure-billing-mainapp.172-246-243-65.cpanel.site
    First seen
    2026-11-02 02:42 UTC
    First published
    2026-11-02 03:20 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-02 01:38 UTC to 2027-01-31 01:38 UTC
    Logged 2026-11-02 02:36 UTC in Google PlumbersArms2027h1, entry 565,312,123
    SHA-256 3570ac07b58c95d5e2e1958ebdbc29fee76c0701b96760d28cf123d6b18ab6a4
    Public key SHA-256 116648674df66b0988d0606663ec15ba20b343f3705d9e7cb4e2314bf9fa8e61
    Brand
    Amazon
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS

    Suggest a correction

  12. www.www.www.www.www.www.amazon-signin-update-payment-secure-verify-billing-mainsec.172-246-243-65.plesk.page FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    www.www.www.www.www.www.amazon-signin-update-payment-secure-verify-billing-mainsec.172-246-243-65.plesk.page
    First seen
    2026-11-02 02:37 UTC
    First published
    2026-11-02 03:20 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-02 01:36 UTC to 2027-01-31 01:36 UTC
    Logged 2026-11-02 02:35 UTC in Google ParcelYard2027h1, entry 564,781,515
    SHA-256 6a7bbc31df932c8f00f5542565e5363d3a889f68e7f2465238c148f320b687ef
    Public key SHA-256 e478403f9a90cc5efb13ab8e19082a92553102b2472b4f02bbce3f1437aad4ea
    Brand
    Amazon
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS

    Suggest a correction

  13. www.www.www.www.www.amazon-signin-update-payment-secure-verify-billing-mainsec.172-246-243-65.plesk.page FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    www.www.www.www.www.amazon-signin-update-payment-secure-verify-billing-mainsec.172-246-243-65.plesk.page
    First seen
    2026-11-02 02:37 UTC
    First published
    2026-11-02 03:20 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-02 01:35 UTC to 2027-01-31 01:35 UTC
    Logged 2026-11-02 02:34 UTC in Geomys Tuscolo2027h1, entry 439,740,067
    SHA-256 8a29ba70760e739dd09dff0c076d8e164f02dd39f46b7c3260a72a348558868e
    Public key SHA-256 c34a4527ba81aad8ef5fc9914d3b0864fcd202716ee18a5108c236fd59c2cfc4
    Brand
    Amazon
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS

    Suggest a correction

  14. www.www.www.www.amazon-signin-update-payment-secure-verify-billing-mainsec.172-246-243-65.plesk.page FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    www.www.www.www.amazon-signin-update-payment-secure-verify-billing-mainsec.172-246-243-65.plesk.page
    First seen
    2026-11-02 02:37 UTC
    First published
    2026-11-02 03:20 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-02 01:35 UTC to 2027-01-31 01:35 UTC
    Logged 2026-11-02 02:33 UTC in IPng Networks Halloumi2027h1, entry 334,656,616
    SHA-256 9db7a919cccc1ce36574fa548a6ff47eb8c837e506379fcd088fe013ee78e42e
    Public key SHA-256 fdf094b0a7d4991a3027239986f28283150e03e49487d115d0a158525859b715
    Brand
    Amazon
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS

    Suggest a correction

  15. www.www.www.amazon-signin-update-payment-secure-verify-billing-mainsec.172-246-243-65.plesk.page FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    www.www.www.amazon-signin-update-payment-secure-verify-billing-mainsec.172-246-243-65.plesk.page
    First seen
    2026-11-02 02:37 UTC
    First published
    2026-11-02 03:20 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-02 01:35 UTC to 2027-01-31 01:34 UTC
    Logged 2026-11-02 02:33 UTC in Google PlumbersArms2027h1, entry 565,282,283
    SHA-256 135ab4a9d88f15e1d59b85359fc1f45f3ca35571b5b8212085ecd6e7bdd22c04
    Public key SHA-256 36448d21dd23f896e1817d3648b52e964c339016dca7118dc966bbab7951c3f3
    Brand
    Amazon
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS

    Suggest a correction

  16. www.www.amazon-signin-update-payment-secure-verify-billing-mainsec.172-246-243-65.plesk.page FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    www.www.amazon-signin-update-payment-secure-verify-billing-mainsec.172-246-243-65.plesk.page
    First seen
    2026-11-02 02:37 UTC
    First published
    2026-11-02 03:20 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-02 01:34 UTC to 2027-01-31 01:34 UTC
    Logged 2026-11-02 02:33 UTC in Google PlumbersArms2027h1, entry 565,279,131
    SHA-256 bac704e7c38256cf39a674f6b3f4f209fdb586a097e6af1991af2c1982dbd96a
    Public key SHA-256 bacc6133598b051d490f3efc64b567b73159abf8df633f46087c4c08508cf839
    Brand
    Amazon
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS

    Suggest a correction

  17. www.amazon-signin-update-payment-secure-verify-billing-mainsec.172-246-243-65.plesk.page FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    www.amazon-signin-update-payment-secure-verify-billing-mainsec.172-246-243-65.plesk.page
    First seen
    2026-11-02 02:36 UTC
    First published
    2026-11-02 03:20 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-02 01:34 UTC to 2027-01-31 01:34 UTC
    Logged 2026-11-02 02:32 UTC in Google ParcelYard2027h1, entry 564,758,961
    SHA-256 837ef470e1250a9f20b3439bddcbad7563fc9d1d327ff41fc6c2c1e5a99ae88d
    Public key SHA-256 388715247b06d84e5bac83f3d98c55c89350735644c1f5c95368a9f47750036f
    Brand
    Amazon
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS

    Suggest a correction

  18. amazon-signin-update-payment-secure-verify-billing-mainsec.172-246-243-65.plesk.page FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    amazon-signin-update-payment-secure-verify-billing-mainsec.172-246-243-65.plesk.page
    First seen
    2026-11-02 02:36 UTC
    First published
    2026-11-02 03:20 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-02 01:33 UTC to 2027-01-31 01:33 UTC
    Logged 2026-11-02 02:32 UTC in Google PlumbersArms2027h1, entry 565,271,765
    SHA-256 1fc84e53dd3cc009a440cf6608ec18db39ce498f23dbfa45554731dc1a5ac2a0
    Public key SHA-256 6a5fa0b8920a8a74ca36b2a93bf7f5a6d4f2b0ce5a27c037b06c5a61be5d833d
    Brand
    Amazon
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS

    Suggest a correction

  19. www.www.www.www.www.amazon-signin-update-payment-secure-billing-mainapp.172-246-243-65.plesk.page FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    www.www.www.www.www.amazon-signin-update-payment-secure-billing-mainapp.172-246-243-65.plesk.page
    First seen
    2026-11-02 02:26 UTC
    First published
    2026-11-02 03:20 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-02 01:24 UTC to 2027-01-31 01:24 UTC
    Logged 2026-11-02 02:23 UTC in Google ParcelYard2027h1, entry 564,669,214
    SHA-256 0e2a52c49152387af67ad3e982509278c1a99b0043769f63aecf355670e638bd
    Public key SHA-256 346785775a0edbb407b568df4ee99de9a5fe7653b22f7402da952b7e84c33142
    Brand
    Amazon
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS

    Suggest a correction

  20. www.www.www.www.amazon-signin-update-payment-secure-billing-mainapp.172-246-243-65.plesk.page FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    www.www.www.www.amazon-signin-update-payment-secure-billing-mainapp.172-246-243-65.plesk.page
    First seen
    2026-11-02 02:26 UTC
    First published
    2026-11-02 03:20 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-02 01:22 UTC to 2027-01-31 01:22 UTC
    Logged 2026-11-02 02:20 UTC in Google PlumbersArms2027h1, entry 565,160,403
    SHA-256 76249da8ff5210fc4ffb43406072efde11b4968c90824ab96c8d7de27ec19f8b
    Public key SHA-256 335af671e756b60126533330c08dae68dc9af1388abc8330441081919649676d
    Brand
    Amazon
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS

    Suggest a correction

  21. www.www.www.amazon-signin-update-payment-secure-billing-mainapp.172-246-243-65.plesk.page FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    www.www.www.amazon-signin-update-payment-secure-billing-mainapp.172-246-243-65.plesk.page
    First seen
    2026-11-02 02:21 UTC
    First published
    2026-11-02 03:20 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-02 01:20 UTC to 2027-01-31 01:20 UTC
    Logged 2026-11-02 02:18 UTC in Google PlumbersArms2027h1, entry 565,145,063
    SHA-256 13c262ee7cfe84809235ba8e537b721c7f44e03a42a1830551db6da4771d04cf
    Public key SHA-256 6e8a2cfd50360e7c4116ee0b885ef04d6e63f4f929c14e80bddd9ba4d7a7b05b
    Brand
    Amazon
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS

    Suggest a correction

  22. www.www.amazon-signin-update-payment-secure-billing-mainapp.172-246-243-65.plesk.page FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    www.www.amazon-signin-update-payment-secure-billing-mainapp.172-246-243-65.plesk.page
    First seen
    2026-11-02 02:21 UTC
    First published
    2026-11-02 03:20 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-02 01:19 UTC to 2027-01-31 01:19 UTC
    Logged 2026-11-02 02:17 UTC in Let's Encrypt Willow2027h1, entry 888,840,879
    SHA-256 232b155c14a316d56c185a2e5c2e76c7ed40ff7f8a6d230cac4e6f43f17b7717
    Public key SHA-256 90eeaad1fd726ff2e0b48e56fc766e8bf748c7b10ce6fa96a09f544c0bf1cbac
    Brand
    Amazon
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS

    Suggest a correction

  23. www.amazon-signin-update-payment-secure-billing-mainapp.172-246-243-65.plesk.page FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    www.amazon-signin-update-payment-secure-billing-mainapp.172-246-243-65.plesk.page
    First seen
    2026-11-02 02:21 UTC
    First published
    2026-11-02 03:20 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-02 01:17 UTC to 2027-01-31 01:17 UTC
    Logged 2026-11-02 02:15 UTC in Let's Encrypt Sycamore2027h1, entry 896,131,501
    SHA-256 c6a2979a9f8721f82c4054a102b8f2689127b8a9af518d90d86617da47825a6a
    Public key SHA-256 fd33512bcc22cc93e55890dbc5e90b815d4b206a393cd3db8aaf34dcc2e3afb5
    Brand
    Amazon
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS

    Suggest a correction

  24. amazon-signin-update-payment-secure-billing-mainapp.172-246-243-65.plesk.page FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    amazon-signin-update-payment-secure-billing-mainapp.172-246-243-65.plesk.page
    First seen
    2026-11-02 02:16 UTC
    First published
    2026-11-02 03:20 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-02 01:16 UTC to 2027-01-31 01:16 UTC
    Logged 2026-11-02 02:14 UTC in Google PlumbersArms2027h1, entry 565,102,749
    SHA-256 6ca54058ba6eb566314dcbf464547839aaacc186cf526419ed0da5e635aace64
    Public key SHA-256 2ab5f8c024da722d518624a8016477415b8bc992623925205745d1e81c9f22ef
    Brand
    Amazon
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS

    Suggest a correction

  25. cn-web-xingkonggames.com US · AS54801 · Zillion Network Inc.
    ListedListed by JPCERT/CC as imitating AmazonMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    cn-web-xingkonggames.com
    First seen
    2026-11-01 15:21 UTC
    First published
    2026-11-01 16:25 UTC
    Listing
    JPCERT/CC confirmed it 2026-06-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-04 16:31 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-01 14:21 UTC to 2027-01-30 14:21 UTC
    Logged 2026-11-01 15:20 UTC in DigiCert Sphinx2027h1, entry 329,252,605
    SHA-256 c2e42bd9dcc6fab5000740ddc2642a5733e2f884c4f17859323f143b4602825a
    Public key SHA-256 9e6b4acaa660d925098b2c7ac08cdf7eebcdf11a81143bad1ef7eadc7e5438df
    Brand
    Amazon
    Addresses
    38.4.85.242 · United States · AS54801 ZILLION-NETWORK - Zillion Network Inc.
    Domain
    cn-web-xingkonggames.com
    Registered
    2026-08-27 · Gransy, s.r.o.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  26. avedb.com US · AS54600 · PEG TECH INC
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 5 d ago
    DetailsHide
    Hostname
    avedb.com
    First seen
    2026-11-01 07:41 UTC
    First published
    2026-11-01 08:03 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-05 08:08 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-01 06:39 UTC to 2027-01-30 06:39 UTC
    Logged 2026-11-01 07:38 UTC in Let's Encrypt Willow2027h1, entry 876,941,102
    SHA-256 3034dac107f0608f14d985659660673ed16782ba4e088460a9a77d3236f67c0b
    Public key SHA-256 7ba8bf0258607b40cdfb00ee4f83a1ab9c4f0a2bd63a8a9afae85e66d00fbdef
    PhishTank
    PhishTank report #9492238
    Brand
    Amazon
    Addresses
    140.188.100.182 · United States · AS54600 PEG-SV - PEG TECH INC
    Domain
    avedb.com
    Registered
    2026-10-31 · Realtime Register B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  27. akitastonet.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by JPCERT/CC as imitating AmazonMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    akitastonet.com
    First seen
    2026-11-01 01:10 UTC
    First published
    2026-11-01 01:31 UTC
    Listing
    JPCERT/CC confirmed it 2026-08-05 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-05 01:39 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-01 00:57 UTC to 2027-01-27 19:07 UTC
    Logged 2026-11-01 01:07 UTC in DigiCert Wyvern2027h1, entry 370,456,241
    SHA-256 385394e1d2ced9df0e7aa48cbcbb3db4663bcce51a923be1d2f32f776535dfd4
    Public key SHA-256 731191d88555903f9edb0f86a46f0602515a5be08a04c471449fa17eaa0de697
    Brand
    Amazon
    Addresses
    104.21.82.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.159.214 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.170, 172.67.159.214): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    akitastonet.com
    Registered
    2026-08-01 · Aceville Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  28. restsetestes.com US · AS205397 · AS-69HOST 69HOST LLC
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 13 d ago
    DetailsHide
    Hostname
    restsetestes.com
    First seen
    2026-10-31 20:00 UTC
    First published
    2026-10-31 20:09 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-04 20:20 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 18:59 UTC to 2027-01-29 18:59 UTC
    Logged 2026-10-31 19:57 UTC in DigiCert Sphinx2027h1, entry 324,436,458
    SHA-256 354bd82d17647378e34cabe9093d9a883d6221b1a67423f4a9d3e01c36edaf33
    Public key SHA-256 bfa045186d542733ff67ae1d53a335032f4a40c9e5e93af85633632772e1d3f9
    PhishTank
    PhishTank report #9548870
    Brand
    Amazon
    Addresses
    45.74.61.12 · United States · AS205397 AS-69HOST 69HOST LLC
    Domain
    restsetestes.com
    Registered
    2026-10-23 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:39 UTC

    Suggest a correction

  29. primeservicefilm.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide
    Hostname
    primeservicefilm.com
    First seen
    2026-10-31 10:38 UTC
    First published
    2026-10-31 11:03 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-31 · delisted on 2026-11-04
    DNS
    Not resolving since 2026-11-01 · checked 2026-11-04 11:10 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Observed in the PhishTank feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-10-30 00:00 UTC to 2027-01-28 01:14 UTC
    Logged 2026-10-30 03:20 UTC in GoDaddy Aquamarine2027h1, entry 167,407,402
    SHA-256 d151e9f95e3e894dcab95172e22abc8c92937eab8a628a411de8e8548312b08e
    Public key SHA-256 9af6cefcf870987ea8e660a9f73a939939d1d8e712fcf905a0a647bf628c9a92
    PhishTank
    PhishTank report #9552888
    Brand
    Amazon
    Addresses
    104.21.93.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:cab1
    2606:4700:3035::6815:5d0e
    Cloudflare
    Cloudflare (104.21.93.14, 172.67.202.177): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    primeservicefilm.com
    Registered
    2026-10-27 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  30. primeserviceserie.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide
    Hostname
    primeserviceserie.com
    First seen
    2026-10-31 09:09 UTC
    First published
    2026-10-31 09:25 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-31 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Not resolving since 2026-11-01 · checked 2026-11-05 09:35 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Observed in the PhishTank feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-10-30 00:00 UTC to 2027-01-28 04:02 UTC
    Logged 2026-10-30 14:15 UTC in Sectigo Tiger2027h1, entry 652,101,555
    SHA-256 af3174e008c7ea0fc60e4d9d80eb281149f105558472bbe78584eba7e476f022
    Public key SHA-256 6937e37c27d910aeceb344a1d976138199475e94462d019f34faa161ad957c3d
    PhishTank
    PhishTank report #9552875
    Brand
    Amazon
    Addresses
    104.21.71.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:936f
    2606:4700:3032::6815:47a7
    Cloudflare
    Cloudflare (104.21.71.167, 172.67.147.111): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    primeserviceserie.com
    Registered
    2026-10-27 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  31. ab-primevideo.com US · AS399979 · 49.3 Networking LLC
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 5 d ago
    DetailsHide
    Hostname
    ab-primevideo.com
    First seen
    2026-10-31 03:21 UTC
    First published
    2026-11-02 21:09 UTC
    DNS
    Resolves · checked 2026-11-04 21:19 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.139.104.212.
    1. Resolved to 45.139.104.212
    2. Phishing-host list fetched with the address
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 45.139.104.212.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 45.139.104.212
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 02:19 UTC to 2027-01-29 02:19 UTC
    Logged 2026-10-31 03:17 UTC in Google ParcelYard2027h1, entry 532,782,904
    SHA-256 c3ac348aa665559d93ca419552e408ac208513afe98fde93c73162555d3ff3f1
    Public key SHA-256 298cc39807b82d712e8ba66d7106169939e13495ab5667939dbd57b7ef451824
    Brand
    Amazon
    Addresses
    45.139.104.212 · United States · AS399979 AS-493NETWORKING - 49.3 Networking LLC
    Domain
    ab-primevideo.com
    Registered
    2026-10-31 · Key-Systems GmbH
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  32. support-retractations.com GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    support-retractations.com
    First seen
    2026-10-30 23:15 UTC
    First published
    2026-10-30 23:53 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-04 23:58 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-30 22:12 UTC to 2027-01-28 22:12 UTC
    Logged 2026-10-30 23:11 UTC in Google PlumbersArms2027h1, entry 530,805,462
    SHA-256 3fa5f7ac82a649f79a99b1f1c312a92831af06c9af472b10eadeb0bc246692f7
    Public key SHA-256 983f35335759842153e75c8d77b433dcac016c7f09dbf0030b53728470ad49b4
    PhishTank
    PhishTank report #9527397
    Brand
    Amazon
    Addresses
    62.60.226.234 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    support-retractations.com
    Registered
    2026-08-25 · Realtime Register B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  33. primeseriesservices.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide
    Hostname
    primeseriesservices.com
    First seen
    2026-10-30 19:34 UTC
    First published
    2026-10-30 19:38 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Not resolving since 2026-10-31 · checked 2026-11-04 19:47 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Observed in the PhishTank feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-10-30 00:00 UTC to 2027-01-28 05:30 UTC
    Logged 2026-10-30 15:31 UTC in HARICA Selene2027h1, entry 44,944,295
    SHA-256 a03c3da84aa7ddf0593379edec20c7d50f81481dd42d6ec769925b3d44cf1d33
    Public key SHA-256 f1c5e3c43042a9179e6a18e955ebd5539da61c66efc791681d075a1232598a11
    PhishTank
    PhishTank report #9552669
    Brand
    Amazon
    Addresses
    104.21.20.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:144f
    2606:4700:3035::ac43:bfe7
    Cloudflare
    Cloudflare (104.21.20.79, 172.67.191.231): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    primeseriesservices.com
    Registered
    2026-10-27 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  34. client-essais-primes.com GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    client-essais-primes.com
    First seen
    2026-10-30 17:36 UTC
    First published
    2026-10-30 18:07 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-04 18:13 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-30 16:33 UTC to 2027-01-28 16:33 UTC
    Logged 2026-10-30 17:32 UTC in Let's Encrypt Willow2027h1, entry 852,669,652
    SHA-256 c6d6f7ac09f6070ab161d68a2f89e77799a3473400d77b73bc2cf74f319dacd6
    Public key SHA-256 3bd27881fcdc6287e6c5205e8333d7a26995a75cc406e32fbc86d92bd294a7a2
    PhishTank
    PhishTank report #9527529
    Brand
    Amazon
    Addresses
    62.60.226.234 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    client-essais-primes.com
    Registered
    2026-07-10 · Gransy, s.r.o.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  35. serviceclients-primes.com GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    serviceclients-primes.com
    First seen
    2026-10-30 02:59 UTC
    First published
    2026-10-30 03:51 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-05 04:01 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-30 00:13 UTC to 2027-01-28 00:13 UTC
    Logged 2026-10-30 01:11 UTC in IPng Networks Gouda2027h1, entry 265,193,206
    SHA-256 6a985d7dcbd71e0c58fdb71d4603bacc480e01cfd9e9b9f5bce2a433056dd565
    Public key SHA-256 062ace9014cd84fe138886e4b7145094124afea98fb219e35d626097a15e2fa8
    PhishTank
    PhishTank report #9527120
    Brand
    Amazon
    Addresses
    62.60.226.234 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    serviceclients-primes.com
    Registered
    2026-07-15 · Gransy, s.r.o.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  36. primefilmservice.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 13 d ago
    DetailsHide
    Hostname
    primefilmservice.com
    First seen
    2026-10-29 14:36 UTC
    First published
    2026-10-29 15:21 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Not resolving since 2026-10-30 · checked 2026-11-04 15:34 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-29 13:33 UTC to 2027-01-27 13:33 UTC
    Logged 2026-10-29 14:32 UTC in Google PlumbersArms2027h1, entry 507,956,559
    SHA-256 1363c713e8760ae81d558d1909b13a98f64fa7169db303aac2edb0470230ed27
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    PhishTank
    PhishTank report #9552031
    Brand
    Amazon
    Addresses
    104.21.70.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.200, 172.67.138.240): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    primefilmservice.com
    Registered
    2026-10-23 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  37. serviceclient-primes.com GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    serviceclient-primes.com
    First seen
    2026-10-29 14:16 UTC
    First published
    2026-10-29 15:21 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-04 15:34 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-29 13:16 UTC to 2027-01-27 13:16 UTC
    Logged 2026-10-29 14:14 UTC in Let's Encrypt Willow2027h1, entry 833,831,806
    SHA-256 c661f61d21bf64e9bc0e2d7ef3a84f09ddf5629075c776f3c7a7c323a7eb8fb8
    Public key SHA-256 9077eada7a56e1aa82285e76626e34d3e7726d50edbeadae4f388ded4e5daa60
    PhishTank
    PhishTank report #9527554
    Brand
    Amazon
    Addresses
    62.60.226.234 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    serviceclient-primes.com
    Registered
    2026-07-10 · Gransy, s.r.o.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  38. fdheheherhfd.com US · AS205397 · AS-69HOST 69HOST LLC
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    fdheheherhfd.com
    First seen
    2026-10-29 07:26 UTC
    First published
    2026-10-29 07:46 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Not resolving since 2026-11-01 · checked 2026-11-05 07:51 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Observed in the PhishTank feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-29 04:39 UTC to 2027-01-27 04:39 UTC
    Logged 2026-10-29 05:38 UTC in Geomys Tuscolo2027h1, entry 391,133,523
    SHA-256 8194ee56f971a2edca2d9dcc40faa36f16be4ea79bbbdec4ce0115146f41c920
    Public key SHA-256 a4bd574288867bff116fdd999ea980e128f409406c3660d98ee86d77d15d784d
    PhishTank
    PhishTank report #9552032
    Brand
    Amazon
    Addresses
    45.74.61.12 · United States · AS205397 AS-69HOST 69HOST LLC
    Domain
    fdheheherhfd.com
    Registered
    2026-10-29 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:44 UTC

    Suggest a correction

  39. gunaigute.com
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 10 d ago
    DetailsHide
    Hostname
    gunaigute.com
    First seen
    2026-10-29 05:57 UTC
    First published
    2026-10-29 06:44 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-05 06:51 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-29 04:57 UTC to 2027-01-27 04:56 UTC
    Logged 2026-10-29 05:55 UTC in DigiCert Wyvern2027h1, entry 343,717,340
    SHA-256 4b4d956fb75e17b0c193ec6571f66e52b99f37b632ba6d04577e8dda0c91984d
    Public key SHA-256 7a70da0d5788b8cef7e7bdf8163dc0b955c2f05b16f81ad205434bd0a968f69e
    PhishTank
    PhishTank report #9431058
    Brand
    Amazon
    Domain
    gunaigute.com
    Registered
    2026-10-26 · Realtime Register B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 07:34 UTC

    Suggest a correction

  40. clients-essais-primes.com GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    clients-essais-primes.com
    First seen
    2026-10-29 01:10 UTC
    First published
    2026-10-29 01:32 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-05 01:41 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-29 00:10 UTC to 2027-01-27 00:10 UTC
    Logged 2026-10-29 01:09 UTC in Google ParcelYard2027h1, entry 497,752,535
    SHA-256 51d3b59a4368e336f4506365b09c202745fdee5f46851ba045ada9044931e398
    Public key SHA-256 4566f9558a62d6a3aa572192f92527a2919d8a126d37d10591e3b9959e8938c1
    PhishTank
    PhishTank report #9528664
    Brand
    Amazon
    Addresses
    62.60.226.234 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    clients-essais-primes.com
    Registered
    2026-07-09 · Gransy, s.r.o.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:52 UTC

    Suggest a correction

  41. primes-retractations.com GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    primes-retractations.com
    First seen
    2026-10-29 01:10 UTC
    First published
    2026-10-29 01:32 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-05 01:41 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-29 00:10 UTC to 2027-01-27 00:10 UTC
    Logged 2026-10-29 01:09 UTC in Geomys Tuscolo2027h1, entry 388,895,134
    SHA-256 30d0b8dfa9217e731bbd72b6f2534ae6f6260f066f985f62cd5a4389137bd7fe
    Public key SHA-256 7969b8a1ca6a681b2283f7b0400a3883bcc02715f1e8469ebe61bfff203d5893
    PhishTank
    PhishTank report #9527119
    Brand
    Amazon
    Addresses
    62.60.226.234 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    primes-retractations.com
    Registered
    2026-08-28 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:52 UTC

    Suggest a correction

  42. thweuakawair.top
    ListedListed by JPCERT/CC as imitating AmazonMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    thweuakawair.top
    First seen
    2026-10-28 14:26 UTC
    First published
    2026-10-28 15:12 UTC
    Listing
    JPCERT/CC confirmed it 2026-08-27 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Not resolving since 2026-10-28 · checked 2026-11-04 15:21 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-28 13:24 UTC to 2027-01-26 14:22 UTC
    Logged 2026-10-28 14:24 UTC in DigiCert Wyvern2027h1, entry 335,075,278
    SHA-256 d05343c446ff9d710d020358064a6b60bf8f7e8ea27d315160c237512b79cfd4
    Public key SHA-256 ccfbc9307d5fff52bf231016990af3167e77a10545a6cbadb6c3e7538f85c527
    Brand
    Amazon
    Domain
    thweuakawair.top
    Registered
    2026-03-29 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  43. a.mazon-prime.info US · AS205397 · AS-69HOST 69HOST LLC
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 8 d ago
    DetailsHide
    Hostname
    a.mazon-prime.info
    First seen
    2026-10-28 08:47 UTC
    First published
    2026-10-28 08:56 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Not resolving since 2026-10-30 · checked 2026-11-05 09:07 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Observed in the PhishTank feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-28 02:55 UTC to 2027-01-26 02:55 UTC
    Logged 2026-10-28 03:54 UTC in IPng Networks Halloumi2027h1, entry 284,425,965
    SHA-256 226c2790dbd9cd6cfacfc151207c7ccb71b1643a02fbe12b3d1ff03a34192b3e
    Public key SHA-256 adc7854017c202d91654e21a502a0434f263d4edd054d729fd268902d340e2a2
    PhishTank
    PhishTank report #9551470
    Brand
    Amazon
    Addresses
    45.74.61.8 · United States · AS205397 AS-69HOST 69HOST LLC
    Domain
    mazon-prime.info
    Registered
    2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  44. pochecorp.eu.cc US · AS205397 · AS-69HOST 69HOST LLC
    ReportedReported by PhishTank as imitating Amazon.com
    DetailsHide
    Hostname
    pochecorp.eu.cc
    First seen
    2026-10-28 00:10 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-27 23:09 UTC to 2027-01-25 23:09 UTC
    Logged 2026-10-28 00:08 UTC in Google ParcelYard2027h1, entry 479,677,943
    SHA-256 595acc6e688a2ab647f02400206eb6afadada51e049ab8829e1c733653a46bce
    Public key SHA-256 82fec73b2d4feb1445ead0548b362b4cb838880fea639d268caaab480db939f6
    PhishTank
    PhishTank report #9514095
    Brand
    Amazon
    Addresses
    45.74.61.11 · United States · AS205397 AS-69HOST 69HOST LLC

    Suggest a correction

  45. amp-espace.com US · AS205397 · AS-69HOST 69HOST LLC
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide
    Hostname
    amp-espace.com
    First seen
    2026-10-27 16:14 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Not resolving since 2026-10-30 · checked 2026-11-05 09:04 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. We matched the new listing
    3. Latest DNS check
    PhishTank
    PhishTank report #9550983
    Brand
    Amazon
    Addresses
    45.74.61.9 · United States · AS205397 AS-69HOST 69HOST LLC
    Domain
    amp-espace.com
    Registered
    2026-10-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:34 UTC

    Suggest a correction

  46. bjlivecircle.com AU · AS133618 · Trellian Pty. Limited
    ListedParking page · Above.comListed by JPCERT/CC as imitating AmazonMX presentSPF -allDMARC missingRegistered 10 d ago
    DetailsHide
    Hostname
    bjlivecircle.com
    First seen
    2026-10-27 14:05 UTC
    Listing
    JPCERT/CC confirmed it 2026-08-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. We matched the new listing
    3. Certificate logged in CT
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-28 15:52 UTC to 2027-01-26 15:52 UTC
    Logged 2026-10-28 16:51 UTC in Google ParcelYard2027h1, entry 491,674,961
    SHA-256 ecbac635d079c5baa16b0ef11703d8b8b9df49e2da1d545a58b6db832861ae04
    Public key SHA-256 14ac537cc07a498c354d1350c9e2180f46a11d341ba1b24a39c313ceb37c37bd
    Brand
    Amazon
    Addresses
    103.224.212.212 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates bjlivecircle.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.212): a parking service. It answers for names that are typically for sale or unused.
    Domain
    bjlivecircle.com
    Registered
    2026-10-26 · Draftpick Domains LLC
    MX
    Receives mail at park-mx.above.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

  47. chelonproduction.com AU · AS133618 · Trellian Pty. Limited
    ListedParking page · Trellian / Above.comListed by JPCERT/CC as imitating AmazonMX absentSPF missingDMARC missingRegistered 11 d ago
    DetailsHide
    Hostname
    chelonproduction.com
    First seen
    2026-10-27 14:05 UTC
    Listing
    JPCERT/CC confirmed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Not resolving since 2026-10-31 · checked 2026-11-05 09:04 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Amazon
    Addresses
    103.224.212.217 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Trellian / Above.com
    Trellian / Above.com (103.224.212.217): a parking service. It answers for names that are typically for sale or unused.
    Domain
    chelonproduction.com
    Registered
    2026-10-25 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

  48. claustrability.com AU · AS133618 · Trellian Pty. Limited
    ListedParking page · Trellian / Above.comListed by JPCERT/CC as imitating AmazonMX absentSPF missingDMARC missingRegistered 11 d ago
    DetailsHide
    Hostname
    claustrability.com
    First seen
    2026-10-27 14:05 UTC
    Listing
    JPCERT/CC confirmed it 2026-07-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Not resolving since 2026-10-31 · checked 2026-11-05 09:00 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Amazon
    Addresses
    103.224.182.214 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Trellian / Above.com
    Trellian / Above.com (103.224.182.214): a parking service. It answers for names that are typically for sale or unused.
    Domain
    claustrability.com
    Registered
    2026-10-25 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

  49. considerless.com AU · AS133618 · Trellian Pty. Limited
    ListedParking page · Trellian / Above.comListed by JPCERT/CC as imitating AmazonMX absentSPF missingDMARC missingRegistered 11 d ago
    DetailsHide
    Hostname
    considerless.com
    First seen
    2026-10-27 14:05 UTC
    Listing
    JPCERT/CC confirmed it 2026-07-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Not resolving since 2026-10-31 · checked 2026-11-05 09:02 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Amazon
    Addresses
    103.224.182.217 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Trellian / Above.com
    Trellian / Above.com (103.224.182.217): a parking service. It answers for names that are typically for sale or unused.
    Domain
    considerless.com
    Registered
    2026-10-25 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

  50. ddcece.com CN · AS132203 · Tencent Building, Kejizhong…
    ListedTencent CloudListed by JPCERT/CC as imitating AmazonMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    ddcece.com
    First seen
    2026-10-27 14:05 UTC
    Listing
    JPCERT/CC confirmed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. We matched the new listing
    3. Certificate logged in CT
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-10-30 06:24 UTC to 2027-01-25 19:12 UTC
    Logged 2026-10-30 06:34 UTC in DigiCert Wyvern2027h1, entry 357,249,501
    SHA-256 bcdb7ed568733c37874b08d4d0e5835b0d2f8b511f7b570a7ee67ee292d43e15
    Public key SHA-256 b02f1204f739bf7b4d6778ea187c6dce40ad2d21d309640a945b08b213c8a510
    Brand
    Amazon
    Addresses
    43.167.30.201 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
    Tencent Cloud
    Tencent Cloud (43.167.30.201): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ddcece.com
    Registered
    2026-01-13 · Xiamen Nawang Technology Co., Ltd
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

  51. environmentet.com AU · AS133618 · Trellian Pty. Limited
    ListedParking page · Trellian / Above.comListed by JPCERT/CC as imitating AmazonMX absentSPF missingDMARC missingRegistered 11 d ago
    DetailsHide
    Hostname
    environmentet.com
    First seen
    2026-10-27 14:05 UTC
    Listing
    JPCERT/CC confirmed it 2026-07-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Not resolving since 2026-10-31 · checked 2026-11-05 09:02 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Amazon
    Addresses
    103.224.182.215 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Trellian / Above.com
    Trellian / Above.com (103.224.182.215): a parking service. It answers for names that are typically for sale or unused.
    Domain
    environmentet.com
    Registered
    2026-10-25 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

  52. wowozaoqi.com HK · AS135357 · HONG KONG KOWLOON TELECOMMU…
    ListedListed by JPCERT/CC as imitating AmazonMX absentSPF missingDMARC missingRegistered 18 mo ago
    DetailsHide
    Hostname
    wowozaoqi.com
    First seen
    2026-10-27 14:05 UTC
    Listing
    JPCERT/CC confirmed it 2026-05-08 · first observed in the feed 2026-10-27 · listing window ended 2026-11-04
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Amazon
    Addresses
    207.226.136.195 · Hong Kong · AS135357 PCCW22-HK - HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED
    Domain
    wowozaoqi.com
    Registered
    2025-05-07 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

  53. yjfbei.com KR · AS138195 · MOACK.Co.LTD
    ListedListed by JPCERT/CC as imitating AmazonMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    yjfbei.com
    First seen
    2026-10-27 14:05 UTC
    Listing
    JPCERT/CC confirmed it 2026-06-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Amazon
    Addresses
    115.89.129.211 · South Korea · AS138195 MOACKCOLTD-AS-AP - MOACK.Co.LTD
    Domain
    yjfbei.com
    Registered
    2026-08-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

  54. efgqfgqdfg.com US · AS205397 · AS-69HOST 69HOST LLC
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 10 d ago
    DetailsHide
    Hostname
    efgqfgqdfg.com
    First seen
    2026-10-27 01:07 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Not resolving since 2026-11-01 · checked 2026-11-05 00:26 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. We matched the new listing
    3. Latest DNS check
    PhishTank
    PhishTank report #9549994
    Brand
    Amazon
    Addresses
    45.74.61.10 · United States · AS205397 AS-69HOST 69HOST LLC
    Domain
    efgqfgqdfg.com
    Registered
    2026-10-26 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:24 UTC

    Suggest a correction

  55. fsdfsgfscssdgbq.com US · AS205397 · AS-69HOST 69HOST LLC
    ReportedReported by PhishTank as imitating Amazon.comMX absentSPF missingDMARC missingRegistered 10 d ago
    DetailsHide
    Hostname
    fsdfsgfscssdgbq.com
    First seen
    2026-10-27 01:07 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Not resolving since 2026-11-01 · checked 2026-11-05 00:26 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. We matched the new listing
    3. Latest DNS check
    PhishTank
    PhishTank report #9549995
    Brand
    Amazon
    Addresses
    45.74.61.10 · United States · AS205397 AS-69HOST 69HOST LLC
    Domain
    fsdfsgfscssdgbq.com
    Registered
    2026-10-26 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:24 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Amazon when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in E-commerce & retail

All brands →