Baykar
Certificate findings for Baykar
DomainSpoof matched these hostnames, from public certificate logs, to Baykar's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 4 findings, grouped by hostname
- baykar-tr.news US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for baykar-tr.news
- Hostname
- baykar-tr.news
- First seen
- 2026-11-03 20:31 UTC
- First published
- 2026-11-03 21:33 UTC
- Listing
- USOM listed it 2026-07-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 09:43 UTC
- DNS
- Resolves · checked 2026-11-04 21:40 UTC
- Listed
- USOM
- Listed by USOM
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-03 19:26 UTC to 2027-02-01 20:25 UTCLogged 2026-11-03 20:26 UTC in IPng Networks Halloumi2027h1, entry 352,884,276SHA-256 e02a4c15ec699f78c2ebe7caededd709a4ef94d17f952fc0b5ccc12ae8339cfePublic key SHA-256 9ebcebac8668e8d5f3784755f9e8ab8abcb8f5d4a015bf2d182554ae4399c1a7
- Brand
- Baykar
- Addresses
- 104.21.87.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.144.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.87.171, 172.67.144.198): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- baykar-tr.news
- Registered
- 2026-07-08 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 21:33 UTC
- baykar-invest.click US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for baykar-invest.click
- Hostname
- baykar-invest.click
- First seen
- 2026-11-03 18:34 UTC
- First published
- 2026-11-03 19:26 UTC
- Listing
- USOM listed it 2026-07-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 09:43 UTC
- DNS
- Resolves · checked 2026-11-04 19:33 UTC
- Listed
- USOM
- Listed by USOM
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-03 17:30 UTC to 2027-02-01 18:29 UTCLogged 2026-11-03 18:30 UTC in DigiCert Wyvern2027h1, entry 392,024,741SHA-256 253956b5c9f7e4fc428ab87da31ee0fa3d99ea47eeca6729839889ac1d83b4c7Public key SHA-256 10168f3f49f8082570aa83e43993c8d5146a34851b1cbcdeea748a515f5f93e6
- Brand
- Baykar
- Addresses
- 104.21.37.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.205.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:25422606:4700:3034::ac43:cd0f
- Cloudflare
- Cloudflare (104.21.37.66, 172.67.205.15): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- baykar-invest.click
- Registered
- 2026-07-08 · Dynadot, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 23:46 UTC
- baykar-investment-program-com.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by USOM
DetailsHide details for baykar-investment-program-com.pages.dev
- Hostname
- baykar-investment-program-com.pages.dev
- First seen
- 2026-11-01 17:46 UTC
- First published
- 2026-11-01 18:03 UTC
- Listing
- USOM listed it 2026-05-06 · first observed in the feed 2026-10-27 · listing window ended 2026-11-02
- DNS
- Resolves · checked 2026-11-04 18:08 UTC
- Listed
- USOM
- Listed by USOM
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Sectigo Public Server Authentication CA DV E36 · precertificateValid 2026-11-01 00:00 UTC to 2027-01-28 14:02 UTCLogged 2026-11-01 17:44 UTC in DigiCert Sphinx2027h1, entry 329,818,907SHA-256 34b385a39791aa70f418628d36cb3d592c989475646e741e654c4512fe6133e9Public key SHA-256 42a530ec40899daa77c8c241db0c792e478756ce431d9055bfbdf17b476b25c4
- Brand
- Baykar
- Addresses
- 172.66.44.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2ca72606:4700:310c::ac42:2f59
- Cloudflare
- Cloudflare (172.66.44.167, 172.66.47.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- baykartrade.com SE · AS33837 · PRQ-AS Fredrik HolmqvistListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for baykartrade.com
- Hostname
- baykartrade.com
- First seen
- 2026-10-31 02:56 UTC
- First published
- 2026-10-31 04:02 UTC
- Listing
- CERT Polska listed it 2026-07-27 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 09:17 UTCUSOM listed it 2026-06-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 09:43 UTC
- DNS
- Resolves · checked 2026-11-05 04:06 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-10-31 01:55 UTC to 2027-01-29 01:55 UTCLogged 2026-10-31 02:53 UTC in Google PlumbersArms2027h1, entry 533,149,917SHA-256 4f2ab11426ce7ba8f4dd9d7e577806d0f85e30fa811d461d630f282d440e33f3Public key SHA-256 f7724301f83bde1ce06c8ef878cf413b381f653f98ec2d99766872b0eb725b1a
- Brand
- Baykar
- Addresses
- 88.80.24.133 · Sweden · AS33837 PRQ-AS Fredrik Holmqvist
- Domain
- baykartrade.com
- Registered
- 2026-05-14 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:43 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Baykar when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

