Aruba

Hosting & domains Italyaruba.itRank 88 of the most impersonated
Cert findings · 24 h
2
Cert findings · 7 days
13
12 on phishing hosts · 1 on Spamhaus DROP
Registered lookalikes
205
14 listed by a source or an address list
Official domains
82
verified from Aruba's own sites and records

Certificate findings for Aruba

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Aruba's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 17 findings, grouped by hostname

  1. aruba-rrustemi.de CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    aruba-rrustemi.de
    First seen
    2026-11-05 10:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 93.127.179.44.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 93.127.179.44
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 08:48 UTC to 2027-02-03 08:48 UTC
    Logged 2026-11-05 09:46 UTC in IPng Networks Gouda2027h1, entry 323,088,328
    SHA-256 bf3ffcd002239befa5e64a31bfebc0e0d806f59fbf75cc90346ce13022f69527
    Public key SHA-256 86d670b29542a6d6aee93bbd5c86396f8468a7c39573ef9ea622ec593e6dc720
    Brand
    Aruba
    Addresses
    93.127.179.44 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (93.127.179.44): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    aruba-rrustemi.de
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  2. webmail-log-aruba-login-auth-protocol-auth.com US · AS399979 · 49.3 Networking LLC
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    webmail-log-aruba-login-auth-protocol-auth.com
    First seen
    2026-11-04 20:47 UTC
    First published
    2026-11-04 21:09 UTC
    DNS
    Resolves · checked 2026-11-04 21:16 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 104.250.165.186.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 104.250.165.186
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 19:45 UTC to 2027-02-02 19:45 UTC
    Logged 2026-11-04 20:44 UTC in Google ParcelYard2027h1, entry 614,334,783
    SHA-256 8bf29dcf0266785a9619d3249068f53d962fbb6382d8ded76a637b5f7993db27
    Public key SHA-256 4849f70e802950f6cf4007dfaa088125a41b56a2de827e0c355c455a73ac4bbe
    Brand
    Aruba
    Addresses
    104.250.165.186 · United States · AS399979 AS-493NETWORKING - 49.3 Networking LLC
    Domain
    webmail-log-aruba-login-auth-protocol-auth.com
    Registered
    2026-11-04 · Key-Systems GmbH
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 21:09 UTC

    Suggest a correction

  3. www.pectrack.com GB · AS14670 · WHG-USE1 WHG Hosting Servic…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 20 mo ago
    DetailsHide
    Hostname
    www.pectrack.com
    First seen
    2026-11-04 03:16 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.181.111.157.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 65.181.111.157
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 02:15 UTC to 2027-02-02 02:15 UTC
    Logged 2026-11-04 03:14 UTC in Google ParcelYard2027h1, entry 601,335,070
    SHA-256 204b8cb6121bc8b921b661698cfd82cde4a27170be4a8a1497998b74a71b47b3
    Public key SHA-256 a6dea207eb90583663d6d016762c3c0adb88d53b355ca3242d797dd7abf5d810
    Brand
    Aruba
    Addresses
    65.181.111.157 · United Kingdom · AS14670 WHG-USE1 WHG Hosting Services Ltd
    Domain
    pectrack.com
    Registered
    2025-03-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at pectrack.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:23 UTC

    Suggest a correction

  4. webmail.pectrack.com GB · AS14670 · WHG-USE1 WHG Hosting Servic…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 20 mo ago
    DetailsHide
    Hostname
    webmail.pectrack.com
    First seen
    2026-11-04 03:16 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.181.111.157.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 65.181.111.157
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 02:15 UTC to 2027-02-02 02:15 UTC
    Logged 2026-11-04 03:14 UTC in Google ParcelYard2027h1, entry 601,335,070
    SHA-256 204b8cb6121bc8b921b661698cfd82cde4a27170be4a8a1497998b74a71b47b3
    Public key SHA-256 a6dea207eb90583663d6d016762c3c0adb88d53b355ca3242d797dd7abf5d810
    Brand
    Aruba
    Addresses
    65.181.111.157 · United Kingdom · AS14670 WHG-USE1 WHG Hosting Services Ltd
    Domain
    pectrack.com
    Registered
    2025-03-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at pectrack.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:23 UTC

    Suggest a correction

  5. webdisk.pectrack.com GB · AS14670 · WHG-USE1 WHG Hosting Servic…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 20 mo ago
    DetailsHide
    Hostname
    webdisk.pectrack.com
    First seen
    2026-11-04 03:16 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.181.111.157.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 65.181.111.157
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 02:15 UTC to 2027-02-02 02:15 UTC
    Logged 2026-11-04 03:14 UTC in Google ParcelYard2027h1, entry 601,335,070
    SHA-256 204b8cb6121bc8b921b661698cfd82cde4a27170be4a8a1497998b74a71b47b3
    Public key SHA-256 a6dea207eb90583663d6d016762c3c0adb88d53b355ca3242d797dd7abf5d810
    Brand
    Aruba
    Addresses
    65.181.111.157 · United Kingdom · AS14670 WHG-USE1 WHG Hosting Services Ltd
    Domain
    pectrack.com
    Registered
    2025-03-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at pectrack.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:23 UTC

    Suggest a correction

  6. pectrack.com GB · AS14670 · WHG-USE1 WHG Hosting Servic…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 20 mo ago
    DetailsHide
    Hostname
    pectrack.com
    First seen
    2026-11-04 03:16 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.181.111.157.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 65.181.111.157
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 02:15 UTC to 2027-02-02 02:15 UTC
    Logged 2026-11-04 03:14 UTC in Google ParcelYard2027h1, entry 601,335,070
    SHA-256 204b8cb6121bc8b921b661698cfd82cde4a27170be4a8a1497998b74a71b47b3
    Public key SHA-256 a6dea207eb90583663d6d016762c3c0adb88d53b355ca3242d797dd7abf5d810
    Brand
    Aruba
    Addresses
    65.181.111.157 · United Kingdom · AS14670 WHG-USE1 WHG Hosting Services Ltd
    Domain
    pectrack.com
    Registered
    2025-03-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at pectrack.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:23 UTC

    Suggest a correction

  7. mail.pectrack.com GB · AS14670 · WHG-USE1 WHG Hosting Servic…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 20 mo ago
    DetailsHide
    Hostname
    mail.pectrack.com
    First seen
    2026-11-04 03:16 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.181.111.157.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 65.181.111.157
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 02:15 UTC to 2027-02-02 02:15 UTC
    Logged 2026-11-04 03:14 UTC in Google ParcelYard2027h1, entry 601,335,070
    SHA-256 204b8cb6121bc8b921b661698cfd82cde4a27170be4a8a1497998b74a71b47b3
    Public key SHA-256 a6dea207eb90583663d6d016762c3c0adb88d53b355ca3242d797dd7abf5d810
    Brand
    Aruba
    Addresses
    65.181.111.157 · United Kingdom · AS14670 WHG-USE1 WHG Hosting Services Ltd
    Domain
    pectrack.com
    Registered
    2025-03-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at pectrack.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:23 UTC

    Suggest a correction

  8. cpcontacts.pectrack.com GB · AS14670 · WHG-USE1 WHG Hosting Servic…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 20 mo ago
    DetailsHide
    Hostname
    cpcontacts.pectrack.com
    First seen
    2026-11-04 03:16 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.181.111.157.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 65.181.111.157
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 02:15 UTC to 2027-02-02 02:15 UTC
    Logged 2026-11-04 03:14 UTC in Google ParcelYard2027h1, entry 601,335,070
    SHA-256 204b8cb6121bc8b921b661698cfd82cde4a27170be4a8a1497998b74a71b47b3
    Public key SHA-256 a6dea207eb90583663d6d016762c3c0adb88d53b355ca3242d797dd7abf5d810
    Brand
    Aruba
    Addresses
    65.181.111.157 · United Kingdom · AS14670 WHG-USE1 WHG Hosting Services Ltd
    Domain
    pectrack.com
    Registered
    2025-03-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at pectrack.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:23 UTC

    Suggest a correction

  9. cpcalendars.pectrack.com GB · AS14670 · WHG-USE1 WHG Hosting Servic…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 20 mo ago
    DetailsHide
    Hostname
    cpcalendars.pectrack.com
    First seen
    2026-11-04 03:16 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.181.111.157.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 65.181.111.157
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 02:15 UTC to 2027-02-02 02:15 UTC
    Logged 2026-11-04 03:14 UTC in Google ParcelYard2027h1, entry 601,335,070
    SHA-256 204b8cb6121bc8b921b661698cfd82cde4a27170be4a8a1497998b74a71b47b3
    Public key SHA-256 a6dea207eb90583663d6d016762c3c0adb88d53b355ca3242d797dd7abf5d810
    Brand
    Aruba
    Addresses
    65.181.111.157 · United Kingdom · AS14670 WHG-USE1 WHG Hosting Services Ltd
    Domain
    pectrack.com
    Registered
    2025-03-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at pectrack.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:23 UTC

    Suggest a correction

  10. cpanel.pectrack.com GB · AS14670 · WHG-USE1 WHG Hosting Servic…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 20 mo ago
    DetailsHide
    Hostname
    cpanel.pectrack.com
    First seen
    2026-11-04 03:16 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.181.111.157.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 65.181.111.157
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 02:15 UTC to 2027-02-02 02:15 UTC
    Logged 2026-11-04 03:14 UTC in Google ParcelYard2027h1, entry 601,335,070
    SHA-256 204b8cb6121bc8b921b661698cfd82cde4a27170be4a8a1497998b74a71b47b3
    Public key SHA-256 a6dea207eb90583663d6d016762c3c0adb88d53b355ca3242d797dd7abf5d810
    Brand
    Aruba
    Addresses
    65.181.111.157 · United Kingdom · AS14670 WHG-USE1 WHG Hosting Services Ltd
    Domain
    pectrack.com
    Registered
    2025-03-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at pectrack.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:23 UTC

    Suggest a correction

  11. autodiscover.pectrack.com GB · AS14670 · WHG-USE1 WHG Hosting Servic…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 20 mo ago
    DetailsHide
    Hostname
    autodiscover.pectrack.com
    First seen
    2026-11-04 03:16 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.181.111.157.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 65.181.111.157
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 02:15 UTC to 2027-02-02 02:15 UTC
    Logged 2026-11-04 03:14 UTC in Google ParcelYard2027h1, entry 601,335,070
    SHA-256 204b8cb6121bc8b921b661698cfd82cde4a27170be4a8a1497998b74a71b47b3
    Public key SHA-256 a6dea207eb90583663d6d016762c3c0adb88d53b355ca3242d797dd7abf5d810
    Brand
    Aruba
    Addresses
    65.181.111.157 · United Kingdom · AS14670 WHG-USE1 WHG Hosting Services Ltd
    Domain
    pectrack.com
    Registered
    2025-03-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at pectrack.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:23 UTC

    Suggest a correction

  12. autoconfig.pectrack.com GB · AS14670 · WHG-USE1 WHG Hosting Servic…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 20 mo ago
    DetailsHide
    Hostname
    autoconfig.pectrack.com
    First seen
    2026-11-04 03:16 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.181.111.157.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 65.181.111.157
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 02:15 UTC to 2027-02-02 02:15 UTC
    Logged 2026-11-04 03:14 UTC in Google ParcelYard2027h1, entry 601,335,070
    SHA-256 204b8cb6121bc8b921b661698cfd82cde4a27170be4a8a1497998b74a71b47b3
    Public key SHA-256 a6dea207eb90583663d6d016762c3c0adb88d53b355ca3242d797dd7abf5d810
    Brand
    Aruba
    Addresses
    65.181.111.157 · United Kingdom · AS14670 WHG-USE1 WHG Hosting Services Ltd
    Domain
    pectrack.com
    Registered
    2025-03-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at pectrack.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:23 UTC

    Suggest a correction

  13. aruba-fatture.click SC · AS209101 · ipvendettainc IP Vendetta I…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    aruba-fatture.click
    First seen
    2026-10-30 02:06 UTC
    First published
    2026-10-30 02:55 UTC
    DNS
    Resolves · checked 2026-11-05 03:03 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.95.156.162.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.95.156.162
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-30 01:06 UTC to 2027-01-28 01:06 UTC
    Logged 2026-10-30 02:05 UTC in Google PlumbersArms2027h1, entry 515,896,679
    SHA-256 0e70ce6ebd8b8504a1e6cc6f3a0c07992f6faa4fd3217a48cc03a1042f2a065c
    Public key SHA-256 37c04f252e9091f3563e749d8d3b1b6c82c5d316b9f608602d70d84c451a5252
    Brand
    Aruba
    Addresses
    185.95.156.162 · Seychelles · AS209101 ipvendettainc IP Vendetta Inc.
    Domain
    aruba-fatture.click
    Registered
    2026-03-04 · Sav.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  14. post-aruba.com US · AS205397 · AS-69HOST 69HOST LLC
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    post-aruba.com
    First seen
    2026-10-28 09:47 UTC
    First published
    2026-10-28 10:00 UTC
    DNS
    Resolves · checked 2026-11-05 10:08 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.74.61.9.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 45.74.61.9
    4. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 45.74.61.9.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 45.74.61.9
    3. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-28 08:43 UTC to 2027-01-26 09:41 UTC
    Logged 2026-10-28 09:43 UTC in DigiCert Wyvern2027h1, entry 332,300,030
    SHA-256 44b2251718ea0e22683743bf8c97d7d16fba970eebe7d3b2875cc31db5ed01fe
    Public key SHA-256 fa89d3b725d38b9c10ca5c98904db7d3e1577d95a871feb73029695c5e3a5b2a
    Brand
    Aruba
    Addresses
    45.74.61.9 · United States · AS205397 AS-69HOST 69HOST LLC
    Domain
    post-aruba.com
    Registered
    2026-07-02 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  15. www.aruba-spa.it FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.aruba-spa.it
    First seen
    2026-10-26 05:06 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 135.125.204.195.
    1. Phishing-host list fetched with the address
    2. Resolved to 135.125.204.195
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 450,638,993
    SHA-256 50af0c4cb25e3da4a29557b92b5ef18467c0da11673fa2f7e731acfa24dc632c
    Brand
    Aruba
    Addresses
    135.125.204.195 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (135.125.204.195): a cloud provider. It rents servers and addresses to its customers.
    Domain
    aruba-spa.it
    MX
    Receives mail at server-mail.it
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  16. aruba-spa.it FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missing
    DetailsHide
    Hostname
    aruba-spa.it
    First seen
    2026-10-26 05:06 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 135.125.204.195.
    1. Phishing-host list fetched with the address
    2. Resolved to 135.125.204.195
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 450,638,993
    SHA-256 50af0c4cb25e3da4a29557b92b5ef18467c0da11673fa2f7e731acfa24dc632c
    Brand
    Aruba
    Addresses
    135.125.204.195 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (135.125.204.195): a cloud provider. It rents servers and addresses to its customers.
    Domain
    aruba-spa.it
    MX
    Receives mail at server-mail.it
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Aruba when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Hosting & domains

All brands →