Cisco

Software & cloud United Statescisco.comOperator of Webex
Cert findings · 24 h
9
Cert findings · 7 days
31
23 on phishing hosts · 8 on Spamhaus DROP
Registered lookalikes
857
83 listed by a source or an address list
Official domains
67
verified from Cisco's own sites and records

Certificate findings for Cisco

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Cisco's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 36 findings, grouped by hostname

  1. meraki-vision.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    meraki-vision.com
    First seen
    2026-11-04 21:53 UTC
    First published
    2026-11-04 22:19 UTC
    DNS
    Resolves · checked 2026-11-04 22:27 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 145.239.37.162.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 145.239.37.162
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-04 20:38 UTC to 2027-02-02 20:38 UTC
    Logged 2026-11-04 21:36 UTC in Google ParcelYard2027h1, entry 614,937,729
    SHA-256 3e9800bc863dcce9f98a50859f4143710ca6fae89732866ed24bc378e3259072
    Public key SHA-256 59b9eb79e78dabee23e6c8ad289c1eb30c034a83bfb41144916e25d52969f34f
    Brand
    Cisco
    Addresses
    145.239.37.162 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (145.239.37.162): a cloud provider. It rents servers and addresses to its customers.
    Domain
    meraki-vision.com
    Registered
    2026-11-04 · OVH sas
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:19 UTC

    Suggest a correction

  2. www.meraki-vision.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    www.meraki-vision.com
    First seen
    2026-11-04 21:35 UTC
    First published
    2026-11-04 22:19 UTC
    DNS
    Resolves · checked 2026-11-04 22:27 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 145.239.37.162.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 145.239.37.162
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-04 20:28 UTC to 2027-02-02 20:28 UTC
    Logged 2026-11-04 21:26 UTC in Geomys Tuscolo2027h1, entry 477,984,036
    SHA-256 2333174d0330c204332288c40ec3b1b97c92f6e54705e48c48981ae0602043db
    Public key SHA-256 6b472fb7d4c71917b7a48ec85e10bc889fdd37b462eb3b0abcef79d0338bebdf
    Brand
    Cisco
    Addresses
    145.239.37.162 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (145.239.37.162): a cloud provider. It rents servers and addresses to its customers.
    Domain
    meraki-vision.com
    Registered
    2026-11-04 · OVH sas
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:19 UTC

    Suggest a correction

  3. cisco-software.com KZ · AS210006 · ASKZ Shereverov Marat Ahmed…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    cisco-software.com
    First seen
    2026-11-04 17:38 UTC
    First published
    2026-11-04 18:05 UTC
    DNS
    Resolves · checked 2026-11-04 18:17 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 86.54.25.145.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 86.54.25.145
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-04 16:27 UTC to 2027-02-02 17:25 UTC
    Logged 2026-11-04 17:27 UTC in IPng Networks Halloumi2027h1, entry 363,858,209
    SHA-256 073a5b7e6e934c82e03ed4d15efbd0a0b688b1631437014652fbe39719d2040f
    Public key SHA-256 b63ecf5d1ece9109a4f49e924c14466a1ecc0ab8c2c7db0a9067571c60a552b1
    Brand
    Cisco
    Addresses
    86.54.25.145 · Kazakhstan · AS210006 ASKZ Shereverov Marat Ahmedovich
    Domain
    cisco-software.com
    Registered
    2026-01-13 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:05 UTC

    Suggest a correction

  4. eu-cisco.com KZ · AS210006 · ASKZ Shereverov Marat Ahmed…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    eu-cisco.com
    First seen
    2026-11-04 13:21 UTC
    First published
    2026-11-04 13:59 UTC
    DNS
    Resolves · checked 2026-11-04 14:20 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 178.20.210.34.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 178.20.210.34
    Certificate
    Issued by YE2
    Valid 2026-11-04 12:21 UTC to 2027-02-02 12:21 UTC
    Logged 2026-11-04 13:19 UTC in Google ParcelYard2027h1, entry 608,940,018
    SHA-256 2953fae753488db6d2d9363faee30799621b92159cf2546a975b09448268807a
    Public key SHA-256 ef38706cc7e2687458ce1d9df26173c43a1e89e24cd0fafcebc19f358c097a44
    Brand
    Cisco
    Addresses
    178.20.210.34 · Kazakhstan · AS210006 ASKZ Shereverov Marat Ahmedovich
    Domain
    eu-cisco.com
    Registered
    2026-06-24 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:59 UTC

    Suggest a correction

  5. ciscoeu.com KZ · AS210006 · ASKZ Shereverov Marat Ahmed…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ciscoeu.com
    First seen
    2026-11-04 13:21 UTC
    First published
    2026-11-04 13:59 UTC
    DNS
    Resolves · checked 2026-11-04 14:20 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 178.20.210.34.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 178.20.210.34
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-04 12:21 UTC to 2027-02-02 12:21 UTC
    Logged 2026-11-04 13:19 UTC in Let's Encrypt Sycamore2027h1, entry 941,598,346
    SHA-256 392e1ba500cf8fd0e388d3d14dcff0d0f58efd4d2174ef8f896c75e9f9113cf2
    Public key SHA-256 2b3e9dabd63aabd2e24c91272871172ea6f39020865a72e401f6d143192b4230
    Brand
    Cisco
    Addresses
    178.20.210.34 · Kazakhstan · AS210006 ASKZ Shereverov Marat Ahmedovich
    Domain
    ciscoeu.com
    Registered
    2026-06-24 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:59 UTC

    Suggest a correction

  6. cisco-us.com KZ · AS210006 · ASKZ Shereverov Marat Ahmed…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    cisco-us.com
    First seen
    2026-11-04 13:21 UTC
    First published
    2026-11-04 13:59 UTC
    DNS
    Resolves · checked 2026-11-04 14:20 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 178.20.210.34.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 178.20.210.34
    Certificate
    Issued by YE1
    Valid 2026-11-04 12:20 UTC to 2027-02-02 12:20 UTC
    Logged 2026-11-04 13:19 UTC in Google PlumbersArms2027h1, entry 609,357,219
    SHA-256 501721dcb55b2c4b658feab8d990628211bc8b0de5ed14314b723b8442de6c44
    Public key SHA-256 68b834a176049801d13ce118f7f3b9e1144b2a5422207fd6dfc1fe2dcda0c29c
    Brand
    Cisco
    Addresses
    178.20.210.34 · Kazakhstan · AS210006 ASKZ Shereverov Marat Ahmedovich
    Domain
    cisco-us.com
    Registered
    2026-06-24 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:59 UTC

    Suggest a correction

  7. api.eu-cisco.com KZ · AS210006 · ASKZ Shereverov Marat Ahmed…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    api.eu-cisco.com
    First seen
    2026-11-04 13:21 UTC
    First published
    2026-11-04 13:59 UTC
    DNS
    Resolves · checked 2026-11-04 14:20 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 178.20.210.34.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 178.20.210.34
    Certificate
    Issued by YE2
    Valid 2026-11-04 12:21 UTC to 2027-02-02 12:21 UTC
    Logged 2026-11-04 13:19 UTC in Google ParcelYard2027h1, entry 608,940,018
    SHA-256 2953fae753488db6d2d9363faee30799621b92159cf2546a975b09448268807a
    Public key SHA-256 ef38706cc7e2687458ce1d9df26173c43a1e89e24cd0fafcebc19f358c097a44
    Brand
    Cisco
    Addresses
    178.20.210.34 · Kazakhstan · AS210006 ASKZ Shereverov Marat Ahmedovich
    Domain
    eu-cisco.com
    Registered
    2026-06-24 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:59 UTC

    Suggest a correction

  8. api.ciscoeu.com KZ · AS210006 · ASKZ Shereverov Marat Ahmed…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    api.ciscoeu.com
    First seen
    2026-11-04 13:21 UTC
    First published
    2026-11-04 13:59 UTC
    DNS
    Resolves · checked 2026-11-04 14:20 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 178.20.210.34.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 178.20.210.34
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-04 12:21 UTC to 2027-02-02 12:21 UTC
    Logged 2026-11-04 13:19 UTC in Let's Encrypt Sycamore2027h1, entry 941,598,346
    SHA-256 392e1ba500cf8fd0e388d3d14dcff0d0f58efd4d2174ef8f896c75e9f9113cf2
    Public key SHA-256 2b3e9dabd63aabd2e24c91272871172ea6f39020865a72e401f6d143192b4230
    Brand
    Cisco
    Addresses
    178.20.210.34 · Kazakhstan · AS210006 ASKZ Shereverov Marat Ahmedovich
    Domain
    ciscoeu.com
    Registered
    2026-06-24 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:59 UTC

    Suggest a correction

  9. api.cisco-us.com KZ · AS210006 · ASKZ Shereverov Marat Ahmed…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    api.cisco-us.com
    First seen
    2026-11-04 13:21 UTC
    First published
    2026-11-04 13:59 UTC
    DNS
    Resolves · checked 2026-11-04 14:20 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 178.20.210.34.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 178.20.210.34
    Certificate
    Issued by YE1
    Valid 2026-11-04 12:20 UTC to 2027-02-02 12:20 UTC
    Logged 2026-11-04 13:19 UTC in Google PlumbersArms2027h1, entry 609,357,219
    SHA-256 501721dcb55b2c4b658feab8d990628211bc8b0de5ed14314b723b8442de6c44
    Public key SHA-256 68b834a176049801d13ce118f7f3b9e1144b2a5422207fd6dfc1fe2dcda0c29c
    Brand
    Cisco
    Addresses
    178.20.210.34 · Kazakhstan · AS210006 ASKZ Shereverov Marat Ahmedovich
    Domain
    cisco-us.com
    Registered
    2026-06-24 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:59 UTC

    Suggest a correction

  10. comunity-cisco.com KZ · AS210006 · ASKZ Shereverov Marat Ahmed…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    comunity-cisco.com
    First seen
    2026-11-03 07:32 UTC
    First published
    2026-11-03 07:43 UTC
    DNS
    Resolves · checked 2026-11-05 07:49 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 86.54.25.145.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 86.54.25.145
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-03 00:00 UTC to 2027-01-28 02:25 UTC
    Logged 2026-11-03 07:26 UTC in DigiCert Wyvern2027h1, entry 385,227,814
    SHA-256 a73c1dc44ab5de622e5363180f61f10cf1ad1061436b009afc2f0c0358f23b59
    Public key SHA-256 329ed9dc1ae95ad2fc50e65a5e0c9d9a39c96b4275cb4ea664bf282defe19358
    Brand
    Cisco
    Addresses
    86.54.25.145 · Kazakhstan · AS210006 ASKZ Shereverov Marat Ahmedovich
    Domain
    comunity-cisco.com
    Registered
    2025-12-27 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:36 UTC

    Suggest a correction

  11. www.merakicode.ng ZA · AS328364 · Host Africa (Pty) Ltd
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    www.merakicode.ng
    First seen
    2026-11-02 10:35 UTC
    First published
    2026-11-02 10:48 UTC
    DNS
    Resolves · checked 2026-11-04 11:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 102.130.123.40.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 102.130.123.40
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-02 09:29 UTC to 2027-01-31 09:29 UTC
    Logged 2026-11-02 10:27 UTC in Google ParcelYard2027h1, entry 570,216,436
    SHA-256 102a464ec7afae57b96f4ff966f133dc2d63e2ee46a93d96d67bc6fe64698465
    Public key SHA-256 df73931774aab689e77570b63d18fe42c9fc423ca7b406f32afe696840ff54d7
    Brand
    Cisco
    Addresses
    102.130.123.40 · South Africa · AS328364 Host Africa (Pty) Ltd - Host Africa (Pty) Ltd
    Domain
    merakicode.ng
    Registered
    2026-01-12 · HostAfrica
    MX
    Receives mail at mail.merakicode.ng
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:54 UTC

    Suggest a correction

  12. merakicode.ng ZA · AS328364 · Host Africa (Pty) Ltd
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    merakicode.ng
    First seen
    2026-11-02 10:35 UTC
    First published
    2026-11-02 10:48 UTC
    DNS
    Resolves · checked 2026-11-04 11:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 102.130.123.40.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 102.130.123.40
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-02 09:29 UTC to 2027-01-31 09:29 UTC
    Logged 2026-11-02 10:27 UTC in Google ParcelYard2027h1, entry 570,216,436
    SHA-256 102a464ec7afae57b96f4ff966f133dc2d63e2ee46a93d96d67bc6fe64698465
    Public key SHA-256 df73931774aab689e77570b63d18fe42c9fc423ca7b406f32afe696840ff54d7
    Brand
    Cisco
    Addresses
    102.130.123.40 · South Africa · AS328364 Host Africa (Pty) Ltd - Host Africa (Pty) Ltd
    Domain
    merakicode.ng
    Registered
    2026-01-12 · HostAfrica
    MX
    Receives mail at mail.merakicode.ng
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:54 UTC

    Suggest a correction

  13. www.meraki-red.es CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.meraki-red.es
    First seen
    2026-11-01 14:06 UTC
    First published
    2026-11-01 14:12 UTC
    DNS
    Resolves · checked 2026-11-04 14:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-01 13:06 UTC to 2027-01-30 13:06 UTC
    Logged 2026-11-01 14:04 UTC in Google ParcelYard2027h1, entry 556,272,619
    SHA-256 07e2a305869868766229880b95a5c614b332dde0f3d06069e7f410e054e9634f
    Public key SHA-256 31872bcba7c80a3d75d7e43803148b81d5afbacc97de94f6fd5f3e05c373d3dc
    Brand
    Cisco
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    meraki-red.es
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:34 UTC

    Suggest a correction

  14. meraki-red.es CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    meraki-red.es
    First seen
    2026-11-01 14:06 UTC
    First published
    2026-11-01 14:12 UTC
    DNS
    Resolves · checked 2026-11-04 14:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-01 13:06 UTC to 2027-01-30 13:06 UTC
    Logged 2026-11-01 14:04 UTC in Google ParcelYard2027h1, entry 556,272,619
    SHA-256 07e2a305869868766229880b95a5c614b332dde0f3d06069e7f410e054e9634f
    Public key SHA-256 31872bcba7c80a3d75d7e43803148b81d5afbacc97de94f6fd5f3e05c373d3dc
    Brand
    Cisco
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    meraki-red.es
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:34 UTC

    Suggest a correction

  15. meraki-formation.com DE · AS8560 · IONOS-AS IONOS SE
    Phishing hostIONOSAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 5 y ago
    DetailsHide
    Hostname
    meraki-formation.com
    First seen
    2026-11-01 11:52 UTC
    First published
    2026-11-01 13:04 UTC
    DNS
    Resolves · checked 2026-11-04 13:09 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 217.160.0.214.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 217.160.0.214
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV R36
    Valid 2026-11-01 00:00 UTC to 2027-05-14 23:59 UTC
    Logged 2026-11-01 11:49 UTC in Google ParcelYard2027h1, entry 554,791,796
    SHA-256 6c125e3ac56b915e0f32f6cd8ef82b0d4467957a9c54c7e3a8572b057cfe5a05
    Public key SHA-256 0d952ced1bfe652dd5ccdf52e853b58dacc03ae194ee63ba2d8a2bb4f73f9483
    Brand
    Cisco
    Addresses
    217.160.0.214 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    IONOS
    IONOS (217.160.0.214): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    meraki-formation.com
    Registered
    2021-05-16 · IONOS SE
    MX
    Receives mail at mx00.ionos.fr, mx01.ionos.fr
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  16. www.ashri.meraki-group.net GB · AS52148 · ENIXLTD Enix Ltd
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    www.ashri.meraki-group.net
    First seen
    2026-10-31 20:42 UTC
    First published
    2026-10-31 21:14 UTC
    DNS
    Resolves · checked 2026-11-04 21:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.204.209.18.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.204.209.18
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 19:39 UTC to 2027-01-29 19:39 UTC
    Logged 2026-10-31 20:37 UTC in Google ParcelYard2027h1, entry 544,742,496
    SHA-256 583abe3c904a8e3ef8cc62e5a9e4e96cc24f2b490561b489117337c825f44cf7
    Public key SHA-256 24bd2638c649ebe054bdb83e68b4df5eedab4b4f04535821c9d1c9cf309e9ad5
    Brand
    Cisco
    Addresses
    91.204.209.18 · United Kingdom · AS52148 ENIXLTD Enix Ltd
    Domain
    meraki-group.net
    Registered
    2022-03-13 · NameSilo, LLC
    MX
    Receives mail at entrap-01.hostns.io, entrap-02.hostns.io, entrap-03.hostns.io
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  17. meraki-group.net GB · AS52148 · ENIXLTD Enix Ltd
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    meraki-group.net
    First seen
    2026-10-31 20:42 UTC
    First published
    2026-10-31 21:14 UTC
    DNS
    Resolves · checked 2026-11-04 21:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.204.209.18.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.204.209.18
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 19:39 UTC to 2027-01-29 19:39 UTC
    Logged 2026-10-31 20:37 UTC in Google ParcelYard2027h1, entry 544,742,496
    SHA-256 583abe3c904a8e3ef8cc62e5a9e4e96cc24f2b490561b489117337c825f44cf7
    Public key SHA-256 24bd2638c649ebe054bdb83e68b4df5eedab4b4f04535821c9d1c9cf309e9ad5
    Brand
    Cisco
    Addresses
    91.204.209.18 · United Kingdom · AS52148 ENIXLTD Enix Ltd
    Domain
    meraki-group.net
    Registered
    2022-03-13 · NameSilo, LLC
    MX
    Receives mail at entrap-01.hostns.io, entrap-02.hostns.io, entrap-03.hostns.io
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  18. www.meraki-arts.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    www.meraki-arts.com
    First seen
    2026-10-31 20:06 UTC
    First published
    2026-10-31 21:14 UTC
    DNS
    Resolves · checked 2026-11-04 21:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 19:03 UTC to 2027-01-29 19:03 UTC
    Logged 2026-10-31 20:01 UTC in Google PlumbersArms2027h1, entry 544,867,681
    SHA-256 0e978f8c961ee1e70e15e81fe3b04c0d69703ec2064acb22beeb06b2d75d16b4
    Public key SHA-256 3363089b997bc129fdf93b6091d592df10dc8b44a36aceb369e9085b40fe7030
    Brand
    Cisco
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    meraki-arts.com
    Registered
    2025-12-04 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  19. meraki-arts.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    meraki-arts.com
    First seen
    2026-10-31 20:06 UTC
    First published
    2026-10-31 21:14 UTC
    DNS
    Resolves · checked 2026-11-04 21:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 19:03 UTC to 2027-01-29 19:03 UTC
    Logged 2026-10-31 20:01 UTC in Google PlumbersArms2027h1, entry 544,867,681
    SHA-256 0e978f8c961ee1e70e15e81fe3b04c0d69703ec2064acb22beeb06b2d75d16b4
    Public key SHA-256 3363089b997bc129fdf93b6091d592df10dc8b44a36aceb369e9085b40fe7030
    Brand
    Cisco
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    meraki-arts.com
    Registered
    2025-12-04 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  20. www.meraki-community.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 d ago
    DetailsHide
    Hostname
    www.meraki-community.com
    First seen
    2026-10-31 19:52 UTC
    First published
    2026-10-31 20:09 UTC
    DNS
    Resolves · checked 2026-11-04 20:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 18:50 UTC to 2027-01-29 18:50 UTC
    Logged 2026-10-31 19:48 UTC in DigiCert Wyvern2027h1, entry 368,863,499
    SHA-256 b548221be9012dbd8e2aa69f6843688aaa5deb3f81c55c67c24b18efcef17b4f
    Public key SHA-256 cbc7ef935d688e06e96f053ee52a0f0aba2718e311225fddea20db5b26fb2662
    Brand
    Cisco
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    meraki-community.com
    Registered
    2026-10-31 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:39 UTC

    Suggest a correction

  21. meraki-community.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 d ago
    DetailsHide
    Hostname
    meraki-community.com
    First seen
    2026-10-31 19:52 UTC
    First published
    2026-10-31 20:09 UTC
    DNS
    Resolves · checked 2026-11-04 20:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 18:50 UTC to 2027-01-29 18:50 UTC
    Logged 2026-10-31 19:48 UTC in DigiCert Wyvern2027h1, entry 368,863,499
    SHA-256 b548221be9012dbd8e2aa69f6843688aaa5deb3f81c55c67c24b18efcef17b4f
    Public key SHA-256 cbc7ef935d688e06e96f053ee52a0f0aba2718e311225fddea20db5b26fb2662
    Brand
    Cisco
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    meraki-community.com
    Registered
    2026-10-31 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:39 UTC

    Suggest a correction

  22. yallagox.meraki-group.net GB · AS52148 · ENIXLTD Enix Ltd
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    yallagox.meraki-group.net
    First seen
    2026-10-31 17:46 UTC
    First published
    2026-10-31 17:58 UTC
    DNS
    Resolves · checked 2026-11-04 18:11 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.204.209.18.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.204.209.18
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-31 16:42 UTC to 2027-01-29 16:42 UTC
    Logged 2026-10-31 17:40 UTC in DigiCert Sphinx2027h1, entry 323,804,397
    SHA-256 1490aabaf0ae01de54b48c08b0d3e6b1e74659935e54e7c95fcd7e71f56d73f1
    Public key SHA-256 c7cc4e6b04d32e63f0df32d0a2f0ab75a499df50c1af449c42bbc531fd3e81cc
    Brand
    Cisco
    Addresses
    91.204.209.18 · United Kingdom · AS52148 ENIXLTD Enix Ltd
    Domain
    meraki-group.net
    Registered
    2022-03-13 · NameSilo, LLC
    MX
    Receives mail at entrap-01.hostns.io, entrap-02.hostns.io, entrap-03.hostns.io
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  23. www.yallagox.meraki-group.net GB · AS52148 · ENIXLTD Enix Ltd
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    www.yallagox.meraki-group.net
    First seen
    2026-10-31 17:46 UTC
    First published
    2026-10-31 17:58 UTC
    DNS
    Resolves · checked 2026-11-04 18:11 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.204.209.18.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.204.209.18
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-31 16:42 UTC to 2027-01-29 16:42 UTC
    Logged 2026-10-31 17:40 UTC in DigiCert Sphinx2027h1, entry 323,804,397
    SHA-256 1490aabaf0ae01de54b48c08b0d3e6b1e74659935e54e7c95fcd7e71f56d73f1
    Public key SHA-256 c7cc4e6b04d32e63f0df32d0a2f0ab75a499df50c1af449c42bbc531fd3e81cc
    Brand
    Cisco
    Addresses
    91.204.209.18 · United Kingdom · AS52148 ENIXLTD Enix Ltd
    Domain
    meraki-group.net
    Registered
    2022-03-13 · NameSilo, LLC
    MX
    Receives mail at entrap-01.hostns.io, entrap-02.hostns.io, entrap-03.hostns.io
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  24. www.resto.meraki-group.net GB · AS52148 · ENIXLTD Enix Ltd
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    www.resto.meraki-group.net
    First seen
    2026-10-31 17:46 UTC
    First published
    2026-10-31 17:58 UTC
    DNS
    Resolves · checked 2026-11-04 18:11 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.204.209.18.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.204.209.18
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-31 16:42 UTC to 2027-01-29 16:42 UTC
    Logged 2026-10-31 17:40 UTC in DigiCert Sphinx2027h1, entry 323,804,397
    SHA-256 1490aabaf0ae01de54b48c08b0d3e6b1e74659935e54e7c95fcd7e71f56d73f1
    Public key SHA-256 c7cc4e6b04d32e63f0df32d0a2f0ab75a499df50c1af449c42bbc531fd3e81cc
    Brand
    Cisco
    Addresses
    91.204.209.18 · United Kingdom · AS52148 ENIXLTD Enix Ltd
    Domain
    meraki-group.net
    Registered
    2022-03-13 · NameSilo, LLC
    MX
    Receives mail at entrap-01.hostns.io, entrap-02.hostns.io, entrap-03.hostns.io
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  25. www.nfc.meraki-group.net GB · AS52148 · ENIXLTD Enix Ltd
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    www.nfc.meraki-group.net
    First seen
    2026-10-31 17:46 UTC
    First published
    2026-10-31 17:58 UTC
    DNS
    Resolves · checked 2026-11-04 18:11 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.204.209.18.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.204.209.18
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-31 16:42 UTC to 2027-01-29 16:42 UTC
    Logged 2026-10-31 17:40 UTC in DigiCert Sphinx2027h1, entry 323,804,397
    SHA-256 1490aabaf0ae01de54b48c08b0d3e6b1e74659935e54e7c95fcd7e71f56d73f1
    Public key SHA-256 c7cc4e6b04d32e63f0df32d0a2f0ab75a499df50c1af449c42bbc531fd3e81cc
    Brand
    Cisco
    Addresses
    91.204.209.18 · United Kingdom · AS52148 ENIXLTD Enix Ltd
    Domain
    meraki-group.net
    Registered
    2022-03-13 · NameSilo, LLC
    MX
    Receives mail at entrap-01.hostns.io, entrap-02.hostns.io, entrap-03.hostns.io
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  26. resto.meraki-group.net GB · AS52148 · ENIXLTD Enix Ltd
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    resto.meraki-group.net
    First seen
    2026-10-31 17:46 UTC
    First published
    2026-10-31 17:58 UTC
    DNS
    Resolves · checked 2026-11-04 18:11 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.204.209.18.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.204.209.18
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-31 16:42 UTC to 2027-01-29 16:42 UTC
    Logged 2026-10-31 17:40 UTC in DigiCert Sphinx2027h1, entry 323,804,397
    SHA-256 1490aabaf0ae01de54b48c08b0d3e6b1e74659935e54e7c95fcd7e71f56d73f1
    Public key SHA-256 c7cc4e6b04d32e63f0df32d0a2f0ab75a499df50c1af449c42bbc531fd3e81cc
    Brand
    Cisco
    Addresses
    91.204.209.18 · United Kingdom · AS52148 ENIXLTD Enix Ltd
    Domain
    meraki-group.net
    Registered
    2022-03-13 · NameSilo, LLC
    MX
    Receives mail at entrap-01.hostns.io, entrap-02.hostns.io, entrap-03.hostns.io
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  27. nfc.meraki-group.net GB · AS52148 · ENIXLTD Enix Ltd
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    nfc.meraki-group.net
    First seen
    2026-10-31 17:46 UTC
    First published
    2026-10-31 17:58 UTC
    DNS
    Resolves · checked 2026-11-04 18:11 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.204.209.18.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.204.209.18
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-31 16:42 UTC to 2027-01-29 16:42 UTC
    Logged 2026-10-31 17:40 UTC in DigiCert Sphinx2027h1, entry 323,804,397
    SHA-256 1490aabaf0ae01de54b48c08b0d3e6b1e74659935e54e7c95fcd7e71f56d73f1
    Public key SHA-256 c7cc4e6b04d32e63f0df32d0a2f0ab75a499df50c1af449c42bbc531fd3e81cc
    Brand
    Cisco
    Addresses
    91.204.209.18 · United Kingdom · AS52148 ENIXLTD Enix Ltd
    Domain
    meraki-group.net
    Registered
    2022-03-13 · NameSilo, LLC
    MX
    Receives mail at entrap-01.hostns.io, entrap-02.hostns.io, entrap-03.hostns.io
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  28. www.merakiglobal.es CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    www.merakiglobal.es
    First seen
    2026-10-31 11:06 UTC
    First published
    2026-10-31 11:14 UTC
    DNS
    Resolves · checked 2026-11-04 11:22 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 10:05 UTC to 2027-01-29 10:05 UTC
    Logged 2026-10-31 11:04 UTC in Google ParcelYard2027h1, entry 537,804,790
    SHA-256 3a1a644b7f28fb050672dd80bb6befa9c8fc154b46b0153cc9aa7519d9d2a059
    Public key SHA-256 ac19594e879f4ba17fb02f9a89344797c8eeffc4cacc9dd24bf49b4a0f6710c3
    Brand
    Cisco
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    merakiglobal.es
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  29. merakiglobal.es CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    merakiglobal.es
    First seen
    2026-10-31 11:06 UTC
    First published
    2026-10-31 11:14 UTC
    DNS
    Resolves · checked 2026-11-04 11:22 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 10:05 UTC to 2027-01-29 10:05 UTC
    Logged 2026-10-31 11:04 UTC in Google ParcelYard2027h1, entry 537,804,790
    SHA-256 3a1a644b7f28fb050672dd80bb6befa9c8fc154b46b0153cc9aa7519d9d2a059
    Public key SHA-256 ac19594e879f4ba17fb02f9a89344797c8eeffc4cacc9dd24bf49b4a0f6710c3
    Brand
    Cisco
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    merakiglobal.es
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  30. yahia.meraki-group.net GB · AS52148 · ENIXLTD Enix Ltd
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    yahia.meraki-group.net
    First seen
    2026-10-29 14:42 UTC
    First published
    2026-10-29 15:21 UTC
    DNS
    Resolves · checked 2026-11-04 15:34 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.204.209.18.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.204.209.18
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-29 13:40 UTC to 2027-01-27 13:40 UTC
    Logged 2026-10-29 14:38 UTC in Let's Encrypt Sycamore2027h1, entry 840,116,138
    SHA-256 2761f426fe7c97f304f4f4e228ab6afb98e79f54a4d146dd6a80b30c3efebdc4
    Public key SHA-256 ed37784dcfeba904e559477a49b3bfba552132eb895262e1ec75d5dadbc135cb
    Brand
    Cisco
    Addresses
    91.204.209.18 · United Kingdom · AS52148 ENIXLTD Enix Ltd
    Domain
    meraki-group.net
    Registered
    2022-03-13 · NameSilo, LLC
    MX
    Receives mail at entrap-01.hostns.io, entrap-02.hostns.io, entrap-03.hostns.io
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  31. www.yahia.meraki-group.net GB · AS52148 · ENIXLTD Enix Ltd
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    www.yahia.meraki-group.net
    First seen
    2026-10-29 14:42 UTC
    First published
    2026-10-29 15:21 UTC
    DNS
    Resolves · checked 2026-11-04 15:34 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.204.209.18.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.204.209.18
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-29 13:40 UTC to 2027-01-27 13:40 UTC
    Logged 2026-10-29 14:38 UTC in Let's Encrypt Sycamore2027h1, entry 840,116,138
    SHA-256 2761f426fe7c97f304f4f4e228ab6afb98e79f54a4d146dd6a80b30c3efebdc4
    Public key SHA-256 ed37784dcfeba904e559477a49b3bfba552132eb895262e1ec75d5dadbc135cb
    Brand
    Cisco
    Addresses
    91.204.209.18 · United Kingdom · AS52148 ENIXLTD Enix Ltd
    Domain
    meraki-group.net
    Registered
    2022-03-13 · NameSilo, LLC
    MX
    Receives mail at entrap-01.hostns.io, entrap-02.hostns.io, entrap-03.hostns.io
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  32. cisco-italy.com IT · AS31034 · ARUBA-ASN Aruba S.p.A.
    ReportedPhishing hostReported by PhishTank · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    cisco-italy.com
    First seen
    2026-10-28 04:21 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 94.177.219.27.
    1. Phishing-host list fetched with the address
    2. Resolved to 94.177.219.27
    3. Latest DNS check
    Certificate
    Issued by Actalis Domain Validated TLS Server RSA CA 2025 · precertificate
    Valid 2026-10-28 04:09 UTC to 2027-05-15 04:09 UTC
    Logged 2026-10-28 04:19 UTC in DigiCert Wyvern2027h1, entry 329,152,882
    SHA-256 1bb6ece30d367d4d0fc5d2739d30f37d00a109b55e4bb537c8c513aa474f3c66
    Public key SHA-256 f3e89650af59eef99029f8d9820ef489f24102fb28f12d9bed51ae179a72a433
    PhishTank
    PhishTank report #8175728
    Brand
    Cisco
    Addresses
    94.177.219.27 · Italy · AS31034 ARUBA-ASN Aruba S.p.A.
    Domain
    cisco-italy.com
    Registered
    2022-03-26 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:36 UTC

    Suggest a correction

  33. meraki-it.de DE · AS8560 · IONOS-AS IONOS SE
    Phishing hostIONOSAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    meraki-it.de
    First seen
    2026-10-28 00:57 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 217.160.0.81.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 217.160.0.81
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV R36 · precertificate
    Valid 2026-10-28 00:00 UTC to 2027-05-10 23:59 UTC
    Logged 2026-10-28 00:53 UTC in Geomys Tuscolo2027h1, entry 376,596,725
    SHA-256 b281482613f29e394ccb1b0b983f61fb89906a6e89fc7ce9e068fb1a9b01f012
    Public key SHA-256 523ac43037732ecf2cd89e8ea7ab58c8533df88ff68cb17acc5a1b649f28916a
    Brand
    Cisco
    Addresses
    217.160.0.81 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    IONOS
    IONOS (217.160.0.81): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    meraki-it.de
    MX
    Receives mail at mx00.ionos.de, mx01.ionos.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

  34. meraki-health.co.uk DE · AS8560 · IONOS-AS IONOS SE
    Phishing hostIONOSAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 6 y ago
    DetailsHide
    Hostname
    meraki-health.co.uk
    First seen
    2026-10-28 00:52 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 217.160.0.32.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 217.160.0.32
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV R36 · precertificate
    Valid 2026-10-28 00:00 UTC to 2027-05-10 23:59 UTC
    Logged 2026-10-28 00:47 UTC in IPng Networks Gouda2027h1, entry 242,840,327
    SHA-256 cdbcf730ee4e218ed005e6a046db53658b202034edce051ebabbbe7b231523fb
    Public key SHA-256 d70cb1fae1c5cdaa0e2e09255ecdd65abd08bb38d14b2818d31ab0f8ea744c56
    Brand
    Cisco
    Addresses
    217.160.0.32 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    IONOS
    IONOS (217.160.0.32): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    meraki-health.co.uk
    Registered
    2020-11-22 · Ionos SE
    MX
    Receives mail at mx00.ionos.co.uk, mx01.ionos.co.uk
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  35. meraki.co.ke DE · AS28753 · LEASEWEB-DE-FRA-10 Leaseweb…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 3 y ago
    DetailsHide
    Hostname
    meraki.co.ke
    First seen
    2026-10-27 07:57 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 84.16.251.118.
    1. Phishing-host list fetched with the address
    2. Resolved to 84.16.251.118
    3. Latest DNS check
    Certificate
    Logged in DigiCert Wyvern2027h1, entry 320,574,055
    SHA-256 b07a8dcab6f46faa13dd4d421f0abebc69ad816bc1e7002f8f010538171847af
    Brand
    Cisco
    Addresses
    84.16.251.118 · Germany · AS28753 LEASEWEB-DE-FRA-10 Leaseweb Deutschland GmbH
    Domain
    meraki.co.ke
    Registered
    2024-02-23
    MX
    Receives mail at meraki.co.ke
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 08:29 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Cisco when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Software & cloud

All brands →