Cointelegraph

Othercointelegraph.comRank 194 of the most impersonated
Cert findings · 24 h
4
Cert findings · 7 days
19
14 reported or listed · 5 on phishing hosts
Registered lookalikes
43
4 listed by a source or an address list
Official domains
9
verified from Cointelegraph's own sites and records

Certificate findings for Cointelegraph

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Cointelegraph's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 24 findings, grouped by hostname

  1. gro34d-cointelegraph.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    ReportedPhishing hostReported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    gro34d-cointelegraph.com
    First seen
    2026-11-04 23:26 UTC
    First published
    2026-11-05 00:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:49 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Resolved to 192.142.10.5
    3. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-04 22:25 UTC to 2027-02-02 23:23 UTC
    Logged 2026-11-04 23:25 UTC in Geomys Tuscolo2027h1, entry 479,121,535
    SHA-256 16133c76dddeeae397d674c37a40336709dcd4c9b8cb5898d2a266a4f8ab3e09
    Public key SHA-256 33de7eda96c8f95069d35e8474fbaf7d8326e13177992a2b260d38caab0b9409
    PhishDestroy
    Brand
    Cointelegraph
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    gro34d-cointelegraph.com
    Registered
    2026-01-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:42 UTC

    Suggest a correction

  2. spx55k-cointelegraph.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    spx55k-cointelegraph.com
    First seen
    2026-11-04 18:46 UTC
    First published
    2026-11-04 20:01 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 20:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-04 17:45 UTC to 2027-02-02 18:42 UTC
    Logged 2026-11-04 18:45 UTC in Let's Encrypt Willow2027h1, entry 936,824,305
    SHA-256 2070abac8c3e37dae8dca9754c28b55b80e2a6bfa696999c3df3df7e992f9ca9
    Public key SHA-256 93546a36d00281e856d4ea5c4d5d1fba4871bfa0c42672fcfdb4993213856096
    PhishDestroy
    Brand
    Cointelegraph
    Addresses
    104.21.76.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.190 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:4c88
    2606:4700:3033::ac43:c3be
    Cloudflare
    Cloudflare (104.21.76.136, 172.67.195.190): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spx55k-cointelegraph.com
    Registered
    2026-07-09 · Ultahost, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:01 UTC

    Suggest a correction

  3. grok65b-cointelegraph.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    grok65b-cointelegraph.com
    First seen
    2026-11-04 16:52 UTC
    First published
    2026-11-04 18:05 UTC
    DNS
    Resolves · checked 2026-11-04 18:17 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.142.10.5
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-04 15:47 UTC to 2027-02-02 16:44 UTC
    Logged 2026-11-04 16:47 UTC in IPng Networks Halloumi2027h1, entry 363,485,377
    SHA-256 652ea76c99fd7e26e3101646fa5ec5912f59d7bdbc22d0e8337625a55a9481e6
    Public key SHA-256 49cc420944d1c207777866d5137922281b93bce29ffafce05285c792c732a8cc
    Brand
    Cointelegraph
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    grok65b-cointelegraph.com
    Registered
    2025-11-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:07 UTC

    Suggest a correction

  4. spax80b-cointelegraph.com US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    spax80b-cointelegraph.com
    First seen
    2026-11-04 01:15 UTC
    First published
    2026-11-04 01:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 01:47 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-04 00:13 UTC to 2027-02-02 00:13 UTC
    Logged 2026-11-04 01:11 UTC in Let's Encrypt Willow2027h1, entry 923,574,752
    SHA-256 f0e91f3c7c5f34a7dc27b5fa7a02f3dd9d8c74185bb282c8aa2a77858067fa25
    Public key SHA-256 e91d51b33922634e9792d2f81418a431b872d09b4bbcdb7df9387a38308ced03
    Brand
    Cointelegraph
    Addresses
    64.29.17.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.29.17.65, 216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    Domain
    spax80b-cointelegraph.com
    Registered
    2026-04-30 · Internet Domain Service BS Corp
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  5. xa20b-cointelegraph.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    xa20b-cointelegraph.com
    First seen
    2026-11-04 00:51 UTC
    First published
    2026-11-04 01:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 01:47 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-03 23:47 UTC to 2027-02-02 00:47 UTC
    Logged 2026-11-04 00:47 UTC in IPng Networks Halloumi2027h1, entry 355,029,393
    SHA-256 652a4a504e1e69dda3af69c37c955a7683f60bdef86688b30e78a5b756dace88
    Public key SHA-256 2b7df11a443c539d384915e304c9c2761c4f5468046941f7721d6a06c5140ddb
    PhishDestroy
    Brand
    Cointelegraph
    Addresses
    104.21.43.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:2b9b
    2606:4700:3034::ac43:b52b
    Cloudflare
    Cloudflare (104.21.43.155, 172.67.181.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xa20b-cointelegraph.com
    Registered
    2026-01-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  6. grok46k-cointelegraph.com US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    grok46k-cointelegraph.com
    First seen
    2026-11-04 00:46 UTC
    First published
    2026-11-04 01:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 01:47 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-03 23:43 UTC to 2027-02-01 23:43 UTC
    Logged 2026-11-04 00:42 UTC in Google PlumbersArms2027h1, entry 599,968,314
    SHA-256 69808bfd82f8ca498e652706b07a10490e49ee3c14133d98402b84a8d698c1b2
    Public key SHA-256 97937ae816d26a04f25d6226bbe74ed3e7b887432c7b43f195bdc053eae5f484
    Brand
    Cointelegraph
    Addresses
    75.2.60.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    99.83.231.61 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (75.2.60.5, 99.83.231.61): a cloud provider. It rents servers and addresses to its customers.
    Domain
    grok46k-cointelegraph.com
    Registered
    2026-05-10 · Ultahost, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  7. xainog-cointelegraph.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    xainog-cointelegraph.com
    First seen
    2026-11-04 00:00 UTC
    First published
    2026-11-04 00:32 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:46 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-05 21:14 UTC to 2026-12-04 22:13 UTC
    Logged 2026-11-03 23:59 UTC in DigiCert Wyvern2026h2, entry 2,202,332,864
    SHA-256 10c0fc844b16496340a9034ee9195dce5f677a45697eaa8020cec744a923eccc
    Public key SHA-256 ae99898ae5c8274e3b00b906f2937afc95af9fbd837930c9f0a4807f0542f00f
    PhishDestroy
    Brand
    Cointelegraph
    Addresses
    104.21.48.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:9c30
    2606:4700:3031::6815:30ce
    Cloudflare
    Cloudflare (104.21.48.206, 172.67.156.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xainog-cointelegraph.com
    Registered
    2026-01-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:33 UTC

    Suggest a correction

  8. spax70p-cointelegraph.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    spax70p-cointelegraph.com
    First seen
    2026-11-02 22:31 UTC
    First published
    2026-11-02 23:02 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 23:12 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-02 21:29 UTC to 2027-01-31 22:27 UTC
    Logged 2026-11-02 22:29 UTC in IPng Networks Halloumi2027h1, entry 342,191,019
    SHA-256 b32bc8476874abae862af781b206ca272e2f7290ea215c92d698c1372fb326d3
    Public key SHA-256 944ba426fde61ddf12b31acb57383d1be1f9b1eae3ef2f274d64455b1b833d2f
    PhishDestroy
    Brand
    Cointelegraph
    Addresses
    104.21.73.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:95e8
    2606:4700:3034::6815:49d7
    Cloudflare
    Cloudflare (104.21.73.215, 172.67.149.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spax70p-cointelegraph.com
    Registered
    2026-05-09 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:22 UTC

    Suggest a correction

  9. spx88k-cointelegraph.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    spx88k-cointelegraph.com
    First seen
    2026-11-02 17:41 UTC
    First published
    2026-11-02 18:02 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:10 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-04 11:26 UTC to 2026-12-03 12:26 UTC
    Logged 2026-11-02 17:39 UTC in Google ParcelYard2026h2, entry 1,635,101,512
    SHA-256 cb85e7c6fbeca500be88be968afdfa1640fa8376e465a7fc13060a52ef90ac42
    Public key SHA-256 6f39179c7e89b39d4896ab115f06af364dbbf7129d7bc119f0b2d7ba138c21b9
    PhishDestroy
    Brand
    Cointelegraph
    Addresses
    104.21.64.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:4017
    2606:4700:3037::ac43:ae62
    Cloudflare
    Cloudflare (104.21.64.23, 172.67.174.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spx88k-cointelegraph.com
    Registered
    2026-07-06 · Ultahost, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:19 UTC

    Suggest a correction

  10. xaicod-cointelegraph.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    xaicod-cointelegraph.com
    First seen
    2026-11-02 08:00 UTC
    First published
    2026-11-02 08:38 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:52 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-02 00:00 UTC to 2027-01-23 16:32 UTC
    Logged 2026-11-02 07:57 UTC in IPng Networks Halloumi2027h1, entry 336,502,008
    SHA-256 97bee5bd16da6ca040f4af2c41d609a87fa65cbdd9a40b7afe128b5d6e973b91
    Public key SHA-256 ea9bdea68b01cd56c3ee71031fde9a9181eda6af788006738a4e64c0be7a23c8
    PhishDestroy
    Brand
    Cointelegraph
    Addresses
    104.21.70.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::ac43:89b1
    2606:4700:3037::6815:46a2
    Cloudflare
    Cloudflare (104.21.70.162, 172.67.137.177): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaicod-cointelegraph.com
    Registered
    2025-11-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  11. grok90k-cointelegraph.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    grok90k-cointelegraph.com
    First seen
    2026-11-02 07:42 UTC
    First published
    2026-11-02 08:00 UTC
    DNS
    Resolves · checked 2026-11-05 08:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.142.10.5
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-02 06:38 UTC to 2027-01-31 07:36 UTC
    Logged 2026-11-02 07:38 UTC in IPng Networks Halloumi2027h1, entry 336,377,247
    SHA-256 e6a0f74845f839a1542b430a24074d02e18b0c72576d44f1e713158050224d1f
    Public key SHA-256 047564d76f5f8a2a0ba32a0e698ed35a1fa01e045f1526fd6ae864c4a41b4c8a
    Brand
    Cointelegraph
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    grok90k-cointelegraph.com
    Registered
    2025-11-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  12. xa25b-cointelegraph.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    xa25b-cointelegraph.com
    First seen
    2026-11-02 05:31 UTC
    First published
    2026-11-02 05:45 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 05:52 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-02 04:29 UTC to 2027-01-31 05:28 UTC
    Logged 2026-11-02 05:29 UTC in IPng Networks Halloumi2027h1, entry 335,591,327
    SHA-256 cb2fc457a7d5916fb38650c639a6030eeed5ffa7713115bae4b52d6cbe1b0acf
    Public key SHA-256 0c65ffe8ed520d55259c2f619191deadee6f6bed2898b44d84d3dbe6f4acc8f0
    PhishDestroy
    Brand
    Cointelegraph
    Addresses
    104.21.1.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:175
    2606:4700:3034::ac43:983c
    Cloudflare
    Cloudflare (104.21.1.117, 172.67.152.60): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xa25b-cointelegraph.com
    Registered
    2025-11-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  13. spcx20b-cointelegraph.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    spcx20b-cointelegraph.com
    First seen
    2026-10-31 05:15 UTC
    First published
    2026-10-31 06:08 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 06:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 04:13 UTC to 2027-01-29 04:13 UTC
    Logged 2026-10-31 05:11 UTC in Google ParcelYard2027h1, entry 533,931,540
    SHA-256 135dad66a567267c599a0c0f9ebe973618bece5b471423a8fb501eb2b1b982a7
    Public key SHA-256 ac2dd8d208eb0ea1819c7816641161c843242d153bf3a69d65fc63ba51eec522
    Brand
    Cointelegraph
    Addresses
    104.21.3.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:3bb
    2606:4700:3037::ac43:8319
    Cloudflare
    Cloudflare (104.21.3.187, 172.67.131.25): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spcx20b-cointelegraph.com
    Registered
    2026-05-07 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  14. xaiquest-cointelegraph.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    xaiquest-cointelegraph.com
    First seen
    2026-10-30 15:46 UTC
    First published
    2026-10-30 15:59 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 16:12 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-30 14:43 UTC to 2027-01-28 15:41 UTC
    Logged 2026-10-30 15:43 UTC in Google ParcelYard2027h1, entry 524,771,943
    SHA-256 c7ced795fd4aa345f30f6beed0418f87bfe13b6026559d7dc28d43ebb4801ec0
    Public key SHA-256 d024b35af3a1b9c4ea7c14c74c7a553776816f7c787e31054406ccad27305328
    PhishDestroy
    Brand
    Cointelegraph
    Addresses
    104.21.50.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:32a1
    2606:4700:3036::ac43:a425
    Cloudflare
    Cloudflare (104.21.50.161, 172.67.164.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaiquest-cointelegraph.com
    Registered
    2026-01-08 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  15. grok49k-cointelegraph.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    ReportedPhishing hostReported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    grok49k-cointelegraph.com
    First seen
    2026-10-30 13:05 UTC
    First published
    2026-10-30 13:53 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 14:01 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Resolved to 192.142.10.5
    3. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-10-30 00:00 UTC to 2027-01-15 16:12 UTC
    Logged 2026-10-30 13:02 UTC in Google PlumbersArms2027h1, entry 523,483,949
    SHA-256 63c2abe89e01f20fcf792154d80c8ea1344628eea42af7855ac9018ea49771ca
    Public key SHA-256 4b6b90d838478635a16fadb0434790139bc546452e55f9dc39af5bb265652173
    PhishDestroy
    Brand
    Cointelegraph
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    grok49k-cointelegraph.com
    Registered
    2026-03-13 · Internet Domain Service BS Corp
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  16. grok80k-cointelegraph.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    grok80k-cointelegraph.com
    First seen
    2026-10-30 12:47 UTC
    First published
    2026-10-30 12:50 UTC
    DNS
    Resolves · checked 2026-11-04 13:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.142.10.5
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-30 11:42 UTC to 2027-01-28 12:40 UTC
    Logged 2026-10-30 12:42 UTC in DigiCert Wyvern2027h1, entry 360,519,577
    SHA-256 72639218d086e13f75281f495ce18d9076f79d83dcf3812e1c6dc28a5c8465bd
    Public key SHA-256 4b5bec857f5ffb248bd7425c92a7a8c3d4305de3247ec32197a0782ceb013698
    Brand
    Cointelegraph
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    grok80k-cointelegraph.com
    Registered
    2025-11-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:35 UTC

    Suggest a correction

  17. grok82c-cointelegraph.com US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    grok82c-cointelegraph.com
    First seen
    2026-10-30 04:30 UTC
    First published
    2026-10-30 04:55 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 05:01 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-30 03:31 UTC to 2027-01-28 03:31 UTC
    Logged 2026-10-30 04:29 UTC in Google ParcelYard2027h1, entry 516,797,882
    SHA-256 a6fbddc2a8ec340752769fef70e185d09225a0ff276e0538c33500954fb76f73
    Public key SHA-256 7100847b4851dad09298cef42076f1116ffc4e2c9db00d5bb20750abb1524dcb
    Brand
    Cointelegraph
    Addresses
    75.2.60.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    99.83.231.61 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (75.2.60.5, 99.83.231.61): a cloud provider. It rents servers and addresses to its customers.
    Domain
    grok82c-cointelegraph.com
    Registered
    2026-05-06 · Ultahost, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  18. gro98k-cointelegraph.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    gro98k-cointelegraph.com
    First seen
    2026-10-29 10:51 UTC
    First published
    2026-10-29 10:53 UTC
    DNS
    Resolves · checked 2026-11-04 11:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.142.10.5
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-29 09:49 UTC to 2027-01-27 10:48 UTC
    Logged 2026-10-29 10:49 UTC in DigiCert Wyvern2027h1, entry 346,535,579
    SHA-256 16ee072d3949eadf1cead0867f5e1ae22d95a0df15572df2bb98721193cfd1e4
    Public key SHA-256 981104b1919de5a42d18c9dc8e14502b6a1e68f31e67cf55ed7d9eb2121278c0
    Brand
    Cointelegraph
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    gro98k-cointelegraph.com
    Registered
    2026-01-07 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  19. xa91p-cointelegraph.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    xa91p-cointelegraph.com
    First seen
    2026-10-28 13:41 UTC
    First published
    2026-10-28 14:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 14:21 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-28 12:39 UTC to 2027-01-26 13:37 UTC
    Logged 2026-10-28 13:39 UTC in Google PlumbersArms2027h1, entry 489,814,788
    SHA-256 51f61aa0f932edf8b5f5195914725eece3bcd3ceb9ad53bdf7bf33299cbccad1
    Public key SHA-256 1037a24ed11ff9d2571eb2675384d7df9208f4b8dc53f5d40a4a5e236b360ba1
    PhishDestroy
    Brand
    Cointelegraph
    Addresses
    104.21.52.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:34b1
    2606:4700:3032::ac43:ca59
    Cloudflare
    Cloudflare (104.21.52.177, 172.67.202.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xa91p-cointelegraph.com
    Registered
    2025-11-07 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  20. spax30t-cointelegraph.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    spax30t-cointelegraph.com
    First seen
    2026-10-28 09:31 UTC
    First published
    2026-10-28 10:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 10:08 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-10-28 08:29 UTC to 2027-01-26 09:24 UTC
    Logged 2026-10-28 09:29 UTC in Let's Encrypt Sycamore2027h1, entry 817,847,477
    SHA-256 88a0c3b9e1c27a79241d6d339d8cd07a579042acc03fbcb3b3d89a955ba92932
    Public key SHA-256 b30375ae7c2227169b9cfd2eaaf9e9a4063a2238f3413e5ed6cef88b98392d0b
    Brand
    Cointelegraph
    Addresses
    104.21.63.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.173.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:3fec
    2606:4700:3032::ac43:ad19
    Cloudflare
    Cloudflare (104.21.63.236, 172.67.173.25): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spax30t-cointelegraph.com
    Registered
    2026-05-04 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  21. xaivort-cointelegraph.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    xaivort-cointelegraph.com
    First seen
    2026-10-26 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. We matched its certificate name
    3. Latest DNS check
    Certificate
    Logged in IPng Networks Halloumi2027h1, entry 272,301,835
    SHA-256 700e0865dcc162f303e214fd5dfc9d45bfcec3b9bf6c371173741c959d7f6bbe
    PhishDestroy
    Brand
    Cointelegraph
    Addresses
    104.21.85.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:c93b
    2606:4700:3034::6815:551d
    Cloudflare
    Cloudflare (104.21.85.29, 172.67.201.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaivort-cointelegraph.com
    Registered
    2026-01-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  22. xa80b-cointelegraph.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    xa80b-cointelegraph.com
    First seen
    2026-10-26 06:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:00 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. We matched its certificate name
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 450,858,728
    SHA-256 0da1a810dffb4682f16c3d4ce906c130edd8d3076bedc3f39db77bca54e20226
    PhishDestroy
    Brand
    Cointelegraph
    Addresses
    104.21.87.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:5776
    2606:4700:3037::ac43:8f09
    Cloudflare
    Cloudflare (104.21.87.118, 172.67.143.9): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xa80b-cointelegraph.com
    Registered
    2025-11-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Cointelegraph when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More monitored brands

All brands →