bitFlyer
Certificate findings for bitFlyer
DomainSpoof matched these hostnames, from public certificate logs, to bitFlyer's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 6 findings, grouped by hostname
- www.b1tflyer.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of bitflyer.com · similar-looking charactersPhishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 11 mo ago
DetailsHide details for www.b1tflyer.com
- Hostname
- www.b1tflyer.com
- First seen
- 2026-11-05 02:20 UTC
- First published
- 2026-11-05 02:59 UTC
- DNS
- Resolves · checked 2026-11-05 03:11 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 2.57.91.91
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-05 01:06 UTC to 2027-02-03 01:06 UTCLogged 2026-11-05 02:05 UTC in Google PlumbersArms2027h1, entry 618,632,765SHA-256 cf3df581d13322a9bf9e6ccfe5efe6639773b50f8384fac3e766501808486d28Public key SHA-256 49cb6fe49098d3fb4941da1d1065a6c2bd676f881dc97e634a9492357ca33e55
- Brand
- bitFlyer (spelled like bitflyer.com with similar-looking characters)
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- b1tflyer.com
- Registered
- 2025-12-08 · HOSTINGER operations, UAB
- MX
- Receives mail at mx1.hostinger.com, mx2.hostinger.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 02:15 UTC
- b1tflyer.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of bitflyer.com · similar-looking charactersPhishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 11 mo ago
DetailsHide details for b1tflyer.com
- Hostname
- b1tflyer.com
- First seen
- 2026-11-05 02:11 UTC
- First published
- 2026-11-05 02:59 UTC
- DNS
- Resolves · checked 2026-11-05 03:11 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 2.57.91.91
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-05 01:06 UTC to 2027-02-03 01:06 UTCLogged 2026-11-05 02:05 UTC in Google PlumbersArms2027h1, entry 618,632,765SHA-256 cf3df581d13322a9bf9e6ccfe5efe6639773b50f8384fac3e766501808486d28Public key SHA-256 49cb6fe49098d3fb4941da1d1065a6c2bd676f881dc97e634a9492357ca33e55
- Brand
- bitFlyer (spelled like bitflyer.com with similar-looking characters)
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- b1tflyer.com
- Registered
- 2025-12-08 · HOSTINGER operations, UAB
- MX
- Receives mail at mx1.hostinger.com, mx2.hostinger.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 02:15 UTC
- bitfiyer-team.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of bitflyer.com · similar-looking charactersReportedAmazon Web ServicesReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 13 mo ago
DetailsHide details for bitfiyer-team.com
- Hostname
- bitfiyer-team.com
- First seen
- 2026-10-31 04:31 UTC
- First published
- 2026-10-31 05:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 05:18 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by GoDaddy TLS Intermediate CA DV - R1v1Valid 2026-10-31 04:28 UTC to 2027-05-17 04:28 UTCLogged 2026-10-31 04:28 UTC in GoDaddy Aquamarine2027h1, entry 169,962,725SHA-256 054757b20747aefbdd6d4ec559130432b16c6ade9362277f5897d42dd8d15ed1Public key SHA-256 dc8f7e9f6dc4e6648a129c05788fec88c1c2958239eadcb8e3327544c5107ce5
- PhishDestroy
- Brand
- bitFlyer (spelled like bitflyer.com with similar-looking characters)
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Domain
- bitfiyer-team.com
- Registered
- 2025-10-19 · GoDaddy.com, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 09:51 UTC
- www.bitfiyer-team.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of bitflyer.com · similar-looking charactersReportedAmazon Web ServicesUnder bitfiyer-team.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 13 mo ago
DetailsHide details for www.bitfiyer-team.com
- Hostname
- www.bitfiyer-team.com
- First seen
- 2026-10-31 03:56 UTC
- First published
- 2026-10-31 04:02 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 04:08 UTC
- Reported
- PhishDestroy, listing bitfiyer-team.com and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by GoDaddy TLS Intermediate CA DV - R1v1 · precertificateValid 2026-10-31 03:53 UTC to 2027-05-17 03:53 UTCLogged 2026-10-31 03:53 UTC in Sectigo Elephant2027h1, entry 646,387,502SHA-256 1a6cf929bb0c85e38dc13cfa24af7214524bb63f3de54506a19528291a2719ebPublic key SHA-256 6d6b8853d5d435ef34b7669e32f3e263de56f740eef7c2870af18919c56967c4
- PhishDestroy
- Brand
- bitFlyer (spelled like bitflyer.com with similar-looking characters)
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Domain
- bitfiyer-team.com
- Registered
- 2025-10-19 · GoDaddy.com, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 09:51 UTC
- www.bitflyer.deals CY · AS47583 · AS-HOSTINGER Hostinger Inte…Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 7 d ago
DetailsHide details for www.bitflyer.deals
- Hostname
- www.bitflyer.deals
- First seen
- 2026-10-29 07:26 UTC
- First published
- 2026-10-29 07:46 UTC
- DNS
- Resolves · checked 2026-11-05 07:51 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
- Certificate logged in CT
- Phishing-host list fetched with the address
- Resolved to 2.57.91.91
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-10-29 06:23 UTC to 2027-01-27 06:23 UTCLogged 2026-10-29 07:22 UTC in Google PlumbersArms2027h1, entry 502,357,474SHA-256 8fadc551a6fc05a56ab78f6bdc1cbe20551b57ee9891d191ee1b663f61fa36dfPublic key SHA-256 b4fd29038ef399df9593c6da8e5b38613dc5b229b783a2088196c0767d469f9a
- Brand
- bitFlyer
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- bitflyer.deals
- Registered
- 2026-10-29 · HOSTINGER operations, UAB
- MX
- Receives mail at mx1.hostinger.com, mx2.hostinger.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-04 11:04 UTC
- bitflyer.deals CY · AS47583 · AS-HOSTINGER Hostinger Inte…Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 7 d ago
DetailsHide details for bitflyer.deals
- Hostname
- bitflyer.deals
- First seen
- 2026-10-29 07:26 UTC
- First published
- 2026-10-29 07:46 UTC
- DNS
- Resolves · checked 2026-11-05 07:51 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
- Certificate logged in CT
- Resolved to 2.57.91.91
- Phishing-host list fetched with the address
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-10-29 06:23 UTC to 2027-01-27 06:23 UTCLogged 2026-10-29 07:22 UTC in Google PlumbersArms2027h1, entry 502,357,474SHA-256 8fadc551a6fc05a56ab78f6bdc1cbe20551b57ee9891d191ee1b663f61fa36dfPublic key SHA-256 b4fd29038ef399df9593c6da8e5b38613dc5b229b783a2088196c0767d469f9a
- Brand
- bitFlyer
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- bitflyer.deals
- Registered
- 2026-10-29 · HOSTINGER operations, UAB
- MX
- Receives mail at mx1.hostinger.com, mx2.hostinger.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-04 11:04 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches bitFlyer when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

