Havan

E-commerce & retail Brazilhavan.com.brRank 673 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
8
8 on phishing hosts
Registered lookalikes
189
6 listed by a source or an address list
Official domains
5
verified from Havan's own sites and records

Certificate findings for Havan

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Havan's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 9 findings, grouped by hostname

  1. www.havan-x-empiricus-app.com UA · AS42237 · w1n Anastasiia Hein
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.havan-x-empiricus-app.com
    First seen
    2026-11-02 09:27 UTC
    First published
    2026-11-02 09:39 UTC
    DNS
    Resolves · checked 2026-11-05 09:43 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.236.116.210.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.236.116.210
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-02 08:26 UTC to 2027-01-31 08:26 UTC
    Logged 2026-11-02 09:24 UTC in Google ParcelYard2027h1, entry 569,324,418
    SHA-256 5cbb59b0fc848bcb7f12581c3d0e5a1937de0f6fd625ba35a76334dafbf6b328
    Public key SHA-256 6fdf79a2081f3968d8a5173b0d8f66718bcb45bb8486cf9033b2787d56d72171
    Brand
    Havan
    Addresses
    91.236.116.210 · Ukraine · AS42237 w1n Anastasiia Hein
    Domain
    havan-x-empiricus-app.com
    Registered
    2026-05-06 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  2. www.dieu-est-un-fumeur-de-havanes.fr FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 15 y ago
    DetailsHide
    Hostname
    www.dieu-est-un-fumeur-de-havanes.fr
    First seen
    2026-11-01 22:42 UTC
    First published
    2026-11-01 23:56 UTC
    DNS
    Resolves · checked 2026-11-05 00:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.186.33.4.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.186.33.4
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-01 21:41 UTC to 2027-01-30 21:41 UTC
    Logged 2026-11-01 22:39 UTC in Geomys Tuscolo2027h1, entry 437,628,868
    SHA-256 ba75cfde53dafe49bf6c452e80e66b2cce2327ad96e7dd00ea9148b0854d24b4
    Public key SHA-256 87ebdfa587b9f1869a3a6e2c32b8e01c231ef921634d30004b51bd62710b0143
    Brand
    Havan
    Addresses
    213.186.33.4 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (213.186.33.4): a cloud provider. It rents servers and addresses to its customers.
    Domain
    dieu-est-un-fumeur-de-havanes.fr
    Registered
    2011-10-19 · OVH
    MX
    Receives mail at mx1.ovh.net, mx2.ovh.net, mxb.ovh.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  3. www.havan-investimentos-s-a.net UA · AS42237 · w1n Anastasiia Hein
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.havan-investimentos-s-a.net
    First seen
    2026-11-01 09:27 UTC
    First published
    2026-11-01 10:14 UTC
    DNS
    Resolves · checked 2026-11-05 10:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.236.116.210.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 91.236.116.210
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-01 08:26 UTC to 2027-01-30 08:26 UTC
    Logged 2026-11-01 09:24 UTC in Let's Encrypt Sycamore2027h1, entry 885,219,918
    SHA-256 2c9d1f940248eb4fcd55af93b8236481747053e4934684b23c6951cd34ed432a
    Public key SHA-256 ced3d3b53b1ead3f5cd8765eddffeb48a9943c49d65f82d77646168c0962c76c
    Brand
    Havan
    Addresses
    91.236.116.210 · Ukraine · AS42237 w1n Anastasiia Hein
    Domain
    havan-investimentos-s-a.net
    Registered
    2026-05-05 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  4. dieu-est-un-fumeur-de-havanes.fr FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 15 y ago
    DetailsHide
    Hostname
    dieu-est-un-fumeur-de-havanes.fr
    First seen
    2026-11-01 09:16 UTC
    First published
    2026-11-01 10:14 UTC
    DNS
    Resolves · checked 2026-11-05 10:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.186.33.4.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.186.33.4
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-01 08:14 UTC to 2027-01-30 08:14 UTC
    Logged 2026-11-01 09:12 UTC in Google ParcelYard2027h1, entry 553,146,783
    SHA-256 001578c015b10b21dff55223a43cb5124df27ea56e71c3e94189de1f36add349
    Public key SHA-256 97d752bc69cd0fb0f1098f4502e17f7dcb725e0d1dace71a0c27a9b0b502fddf
    Brand
    Havan
    Addresses
    213.186.33.4 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (213.186.33.4): a cloud provider. It rents servers and addresses to its customers.
    Domain
    dieu-est-un-fumeur-de-havanes.fr
    Registered
    2011-10-19 · OVH
    MX
    Receives mail at mx1.ovh.net, mx2.ovh.net, mxb.ovh.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  5. www.havan-futuro-economico.com UA · AS42237 · w1n Anastasiia Hein
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.havan-futuro-economico.com
    First seen
    2026-10-31 03:41 UTC
    First published
    2026-10-31 04:02 UTC
    DNS
    Resolves · checked 2026-11-05 04:08 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.236.116.210.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.236.116.210
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 02:41 UTC to 2027-01-29 02:41 UTC
    Logged 2026-10-31 03:39 UTC in IPng Networks Gouda2027h1, entry 275,275,396
    SHA-256 b66d59d19beb43af80d4b6818434558dcc6d9e53aa993f814f6ecf8604da2b5d
    Public key SHA-256 940642e45318a4b79df43b6d7f8ccfa6d32db91bef338342af52c104f95eb096
    Brand
    Havan
    Addresses
    91.236.116.210 · Ukraine · AS42237 w1n Anastasiia Hein
    Domain
    havan-futuro-economico.com
    Registered
    2026-05-05 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  6. havan-x-empiricus-app.com UA · AS42237 · w1n Anastasiia Hein
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    havan-x-empiricus-app.com
    First seen
    2026-10-31 01:21 UTC
    First published
    2026-10-31 01:50 UTC
    DNS
    Resolves · checked 2026-11-05 01:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.236.116.210.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.236.116.210
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-31 00:20 UTC to 2027-01-29 00:20 UTC
    Logged 2026-10-31 01:18 UTC in Google ParcelYard2027h1, entry 531,528,175
    SHA-256 5c44abf01e6a0d852d2553adca5289e8db16d0026de103da8db671983353ae33
    Public key SHA-256 7ec0be3a4a6ee1c97535acab5fd593b00c3a7a63fd2518abbee205fbb02bcc68
    Brand
    Havan
    Addresses
    91.236.116.210 · Ukraine · AS42237 w1n Anastasiia Hein
    Domain
    havan-x-empiricus-app.com
    Registered
    2026-05-06 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  7. havan-investimentos-s-a.net UA · AS42237 · w1n Anastasiia Hein
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    havan-investimentos-s-a.net
    First seen
    2026-10-30 08:01 UTC
    First published
    2026-10-30 08:40 UTC
    DNS
    Resolves · checked 2026-11-05 08:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.236.116.210.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.236.116.210
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-30 06:57 UTC to 2027-01-28 06:57 UTC
    Logged 2026-10-30 07:56 UTC in Google PlumbersArms2027h1, entry 519,835,734
    SHA-256 7ca21b6e8e3952020d7c0081bdfb4238dfa637f34e421916600ce4b7c42b29f6
    Public key SHA-256 28de93348ac6ed253f66a231028a6bf0b411246a6d45a8cc58f0e80c6860bdc5
    Brand
    Havan
    Addresses
    91.236.116.210 · Ukraine · AS42237 w1n Anastasiia Hein
    Domain
    havan-investimentos-s-a.net
    Registered
    2026-05-05 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  8. havan-futuro-economico.com UA · AS42237 · w1n Anastasiia Hein
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    havan-futuro-economico.com
    First seen
    2026-10-30 04:26 UTC
    First published
    2026-10-30 04:55 UTC
    DNS
    Resolves · checked 2026-11-05 05:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.236.116.210.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.236.116.210
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-30 03:24 UTC to 2027-01-28 03:24 UTC
    Logged 2026-10-30 04:23 UTC in Google PlumbersArms2027h1, entry 517,409,256
    SHA-256 0fcfa6838c087b63b1bc59378a781a4614bb2c03f7bba34a76c5bb0bcac2c3f3
    Public key SHA-256 d70c1c29c692cff182d8c4f1214ab4a44cb0384409562abd0a35f3f3fa54a385
    Brand
    Havan
    Addresses
    91.236.116.210 · Ukraine · AS42237 w1n Anastasiia Hein
    Domain
    havan-futuro-economico.com
    Registered
    2026-05-05 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  9. havan-brasil.com SG · AS63949 · Akamai Connected Cloud
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 26 d ago
    DetailsHide
    Hostname
    havan-brasil.com
    First seen
    2026-10-27 02:31 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 139.144.200.145.
    1. Resolved to 139.144.200.145
    2. Phishing-host list fetched with the address
    3. Latest DNS check
    Brand
    Havan
    Addresses
    139.144.200.145 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (139.144.200.145): a cloud provider. It rents servers and addresses to its customers.
    Domain
    havan-brasil.com
    Registered
    2026-10-10 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:28 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Havan when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in E-commerce & retail

All brands →