Among Us
Certificate findings for Among Us
DomainSpoof matched these hostnames, from public certificate logs, to Among Us's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 8 findings, grouped by hostname
- www.amongus.co.uk US · AS20473 · The Constant Company, LLC2 addressesPhishing hostVultrAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 13 mo ago
DetailsHide details for www.amongus.co.uk
- Hostname
- www.amongus.co.uk
- First seen
- 2026-10-31 05:47 UTC
- First published
- 2026-11-04 10:44 UTC
- DNS
- Resolves · checked 2026-11-05 10:49 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.77.102.235.
- Resolved to 45.77.102.235
- Phishing-host list fetched with the address
- Latest DNS check
- Brand
- Among Us
- Addresses
- 45.77.102.235 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)64.176.195.8 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)
- Vultr
- Vultr (45.77.102.235, 64.176.195.8): a cloud provider. It rents servers and addresses to its customers.
- Domain
- amongus.co.uk
- Registered
- 2025-10-13 · Garth Piesse
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 09:32 UTC
- amongus.co.uk US · AS20473 · The Constant Company, LLC2 addressesPhishing hostVultrAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 13 mo ago
DetailsHide details for amongus.co.uk
- Hostname
- amongus.co.uk
- First seen
- 2026-10-29 16:11 UTC
- First published
- 2026-11-04 10:44 UTC
- DNS
- Resolves · checked 2026-11-05 10:49 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.77.102.235.
- Resolved to 45.77.102.235
- Phishing-host list fetched with the address
- Latest DNS check
- Brand
- Among Us
- Addresses
- 45.77.102.235 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)64.176.195.8 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)
- Vultr
- Vultr (45.77.102.235, 64.176.195.8): a cloud provider. It rents servers and addresses to its customers.
- Domain
- amongus.co.uk
- Registered
- 2025-10-13 · Garth Piesse
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 09:32 UTC
- www.amongus77.org US · AS22612 · Namecheap, Inc.Phishing hostNamecheapAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missingRegistered 4 mo ago
DetailsHide details for www.amongus77.org
- Hostname
- www.amongus77.org
- First seen
- 2026-10-27 07:06 UTC
- DNS
- Resolves · checked 2026-11-05 09:06 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 66.29.148.128.
- Phishing-host list fetched with the address
- Resolved to 66.29.148.128
- Latest DNS check
- Certificate
- Logged in IPng Networks Halloumi2027h1, entry 275,856,609SHA-256 0a823f0c0ad951b0f48c8c5425c50c4ec30413a2e21cf6db2e5a01a80881210e
- Brand
- Among Us
- Addresses
- 66.29.148.128 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (66.29.148.128): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- amongus77.org
- Registered
- 2026-06-27 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:28 UTC
- amongus77.org US · AS22612 · Namecheap, Inc.Phishing hostNamecheapAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missingRegistered 4 mo ago
DetailsHide details for amongus77.org
- Hostname
- amongus77.org
- First seen
- 2026-10-27 07:06 UTC
- DNS
- Resolves · checked 2026-11-05 09:00 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 66.29.148.128.
- Phishing-host list fetched with the address
- Resolved to 66.29.148.128
- Latest DNS check
- Certificate
- Logged in IPng Networks Halloumi2027h1, entry 275,856,609SHA-256 0a823f0c0ad951b0f48c8c5425c50c4ec30413a2e21cf6db2e5a01a80881210e
- Brand
- Among Us
- Addresses
- 66.29.148.128 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (66.29.148.128): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- amongus77.org
- Registered
- 2026-06-27 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:28 UTC
- www.amongus88.com US · AS22612 · Namecheap, Inc.Phishing hostNamecheapAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missingRegistered 4 mo ago
DetailsHide details for www.amongus88.com
- Hostname
- www.amongus88.com
- First seen
- 2026-10-27 06:36 UTC
- DNS
- Resolves · checked 2026-11-05 08:59 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 66.29.148.150.
- Phishing-host list fetched with the address
- Resolved to 66.29.148.150
- Latest DNS check
- Certificate
- Logged in Google Xenon2027h1, entry 590,703,355SHA-256 30e4cc6dbd2d8841c308efec9f0fee55bce32090b4329b68b7877830cb3476a1
- Brand
- Among Us
- Addresses
- 66.29.148.150 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (66.29.148.150): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- amongus88.com
- Registered
- 2026-06-27 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:28 UTC
- amongus88.com US · AS22612 · Namecheap, Inc.Phishing hostNamecheapAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missingRegistered 4 mo ago
DetailsHide details for amongus88.com
- Hostname
- amongus88.com
- First seen
- 2026-10-27 06:36 UTC
- DNS
- Resolves · checked 2026-11-05 09:04 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 66.29.148.150.
- Phishing-host list fetched with the address
- Resolved to 66.29.148.150
- Latest DNS check
- Certificate
- Logged in Google Xenon2027h1, entry 590,703,355SHA-256 30e4cc6dbd2d8841c308efec9f0fee55bce32090b4329b68b7877830cb3476a1
- Brand
- Among Us
- Addresses
- 66.29.148.150 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (66.29.148.150): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- amongus88.com
- Registered
- 2026-06-27 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:28 UTC
- www.amongus138.org US · AS22612 · Namecheap, Inc.Phishing hostNamecheapAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missingRegistered 4 mo ago
DetailsHide details for www.amongus138.org
- Hostname
- www.amongus138.org
- First seen
- 2026-10-27 05:41 UTC
- DNS
- Resolves · checked 2026-11-05 09:04 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 66.29.148.150.
- Phishing-host list fetched with the address
- Resolved to 66.29.148.150
- Latest DNS check
- Certificate
- Logged in Let's Encrypt Sycamore2027h1, entry 797,640,382SHA-256 ceb39c640483086b19e3906ded0d1a562a3c9ec2ea8a672a2a3b33efd96b8362
- Brand
- Among Us
- Addresses
- 66.29.148.150 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (66.29.148.150): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- amongus138.org
- Registered
- 2026-06-27 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:28 UTC
- amongus138.org US · AS22612 · Namecheap, Inc.Phishing hostNamecheapAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missingRegistered 4 mo ago
DetailsHide details for amongus138.org
- Hostname
- amongus138.org
- First seen
- 2026-10-27 05:37 UTC
- DNS
- Resolves · checked 2026-11-05 09:00 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 66.29.148.150.
- Phishing-host list fetched with the address
- Resolved to 66.29.148.150
- Latest DNS check
- Certificate
- Logged in Let's Encrypt Sycamore2027h1, entry 797,640,382SHA-256 ceb39c640483086b19e3906ded0d1a562a3c9ec2ea8a672a2a3b33efd96b8362
- Brand
- Among Us
- Addresses
- 66.29.148.150 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (66.29.148.150): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- amongus138.org
- Registered
- 2026-06-27 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:28 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Among Us when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

