I-PASS

Toll & transport United Statesgetipass.comRank 311 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
5
5 on phishing hosts
Registered lookalikes
85
1 listed by a source or an address list
Official domains
2
verified from I-PASS's own sites and records

Certificate findings for I-PASS

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to I-PASS's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 10 findings, grouped by hostname

  1. ipass.com.ng GB · AS52148 · ENIXLTD Enix Ltd
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missing
    DetailsHide
    Hostname
    ipass.com.ng
    First seen
    2026-11-02 21:51 UTC
    First published
    2026-11-02 22:16 UTC
    DNS
    Resolves · checked 2026-11-04 22:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.204.209.2.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.204.209.2
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-02 20:47 UTC to 2027-01-31 20:47 UTC
    Logged 2026-11-02 21:45 UTC in DigiCert Sphinx2027h1, entry 336,992,097
    SHA-256 470f910d4eaf09b54d2f8dab9f8d282291dcd105f26b54145400e6bd23582aa1
    Public key SHA-256 9ba130295f43361bd930c04cb05a5950a6c362230af961392fee7902c1214d68
    Brand
    I-PASS
    Addresses
    91.204.209.2 · United Kingdom · AS52148 ENIXLTD Enix Ltd
    Domain
    ipass.com.ng
    MX
    Receives mail at entrap-01.hostns.io, entrap-02.hostns.io, entrap-03.hostns.io
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  2. www.ipass.ca CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    www.ipass.ca
    First seen
    2026-10-31 00:32 UTC
    First published
    2026-10-31 00:45 UTC
    DNS
    Resolves · checked 2026-11-05 00:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 187.124.243.128.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 187.124.243.128
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
    Valid 2026-10-31 00:00 UTC to 2027-01-29 23:59 UTC
    Logged 2026-10-31 00:26 UTC in Let's Encrypt Sycamore2027h1, entry 863,724,775
    SHA-256 34ea4fa3ebe31a75822f6b6a4fe2f2922ea66e476827bcb405419d4ff777422c
    Public key SHA-256 8e6bedb4c9d1bb78b5aa6ddc6ec171c7b5beb5abed628444cb1a70018067a3c0
    Brand
    I-PASS
    Addresses
    187.124.243.128 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (187.124.243.128): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    ipass.ca
    Registered
    2021-04-07 · Go Daddy Domains Canada, Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:33 UTC

    Suggest a correction

  3. ipass.ca CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    ipass.ca
    First seen
    2026-10-30 21:52 UTC
    First published
    2026-10-30 22:50 UTC
    DNS
    Resolves · checked 2026-11-04 22:58 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 187.124.243.128.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 187.124.243.128
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
    Valid 2026-10-30 00:00 UTC to 2027-01-28 23:59 UTC
    Logged 2026-10-30 21:49 UTC in Let's Encrypt Sycamore2027h1, entry 862,022,000
    SHA-256 f279a174338a38661fe9bab7c87c3b73b6011d1fb6ee2258af2b7e6747334934
    Public key SHA-256 cd287ebe40100134a788aa53aa919c3d6ff6ae2c596bd048028bdba9d6ce7b41
    Brand
    I-PASS
    Addresses
    187.124.243.128 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (187.124.243.128): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    ipass.ca
    Registered
    2021-04-07 · Go Daddy Domains Canada, Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:33 UTC

    Suggest a correction

  4. www.ipass.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC rejectRegistered 8 d ago
    DetailsHide
    Hostname
    www.ipass.pl
    First seen
    2026-10-29 14:27 UTC
    First published
    2026-10-29 15:21 UTC
    DNS
    Resolves · checked 2026-11-04 15:34 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.253.212.22.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 185.253.212.22
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-29 13:25 UTC to 2027-01-27 13:25 UTC
    Logged 2026-10-29 14:24 UTC in Google ParcelYard2027h1, entry 507,170,132
    SHA-256 6c806afa00c6caf6ec7bf8582b570cccb7788c88b4be131243f737a7226ac537
    Public key SHA-256 ffb09e7d7bf283b425d59e6dfde3919f0021b1a0015cb8ec3233a942505de1eb
    Brand
    I-PASS
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    Domain
    ipass.pl
    Registered
    2026-10-28 · Aftermarket.pl Limited
    MX
    Receives mail at blackhole.aftermarket.pl
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  5. ipass.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC rejectRegistered 8 d ago
    DetailsHide
    Hostname
    ipass.pl
    First seen
    2026-10-29 14:27 UTC
    First published
    2026-10-29 15:21 UTC
    DNS
    Resolves · checked 2026-11-04 15:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.253.212.22.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 185.253.212.22
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-29 13:25 UTC to 2027-01-27 13:25 UTC
    Logged 2026-10-29 14:24 UTC in Google ParcelYard2027h1, entry 507,170,132
    SHA-256 6c806afa00c6caf6ec7bf8582b570cccb7788c88b4be131243f737a7226ac537
    Public key SHA-256 ffb09e7d7bf283b425d59e6dfde3919f0021b1a0015cb8ec3233a942505de1eb
    Brand
    I-PASS
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    Domain
    ipass.pl
    Registered
    2026-10-28 · Aftermarket.pl Limited
    MX
    Receives mail at blackhole.aftermarket.pl
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  6. test.wine-ipass.se SE · AS39570 · LOOPIA Loopia AB
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missing
    DetailsHide
    Hostname
    test.wine-ipass.se
    First seen
    2026-10-26 10:21 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 93.188.2.52.
    1. Phishing-host list fetched with the address
    2. Resolved to 93.188.2.52
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 453,758,613
    SHA-256 cb58ccdfda4ef3e6bb4206db37173055caf0599a011ee8d64ef09b880cfef5da
    Brand
    I-PASS
    Addresses
    93.188.2.52 · Sweden · AS39570 LOOPIA Loopia AB
    Domain
    wine-ipass.se
    MX
    Receives mail at mailcluster.loopia.se, mail2.loopia.se
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  7. www.media.wine-ipass.se SE · AS39570 · LOOPIA Loopia AB
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missing
    DetailsHide
    Hostname
    www.media.wine-ipass.se
    First seen
    2026-10-26 10:11 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 93.188.2.52.
    1. Phishing-host list fetched with the address
    2. Resolved to 93.188.2.52
    3. Latest DNS check
    Certificate
    Logged in IPng Networks Halloumi2027h1, entry 268,660,190
    SHA-256 12e406eacd4c3f0a3052d9e2af75276fcccebd05d63c574f90d255b5b72dbc41
    Brand
    I-PASS
    Addresses
    93.188.2.52 · Sweden · AS39570 LOOPIA Loopia AB
    Domain
    wine-ipass.se
    MX
    Receives mail at mailcluster.loopia.se, mail2.loopia.se
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  8. media.wine-ipass.se SE · AS39570 · LOOPIA Loopia AB
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missing
    DetailsHide
    Hostname
    media.wine-ipass.se
    First seen
    2026-10-26 10:11 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 93.188.2.52.
    1. Phishing-host list fetched with the address
    2. Resolved to 93.188.2.52
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 784,553,652
    SHA-256 925ef3df8d8c33f4bd46e6b0697e0bd1dfb5a8f519d12a1fcc5ffdb1809e3733
    Brand
    I-PASS
    Addresses
    93.188.2.52 · Sweden · AS39570 LOOPIA Loopia AB
    Domain
    wine-ipass.se
    MX
    Receives mail at mailcluster.loopia.se, mail2.loopia.se
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  9. www.shopping.wine-ipass.se SE · AS39570 · LOOPIA Loopia AB
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missing
    DetailsHide
    Hostname
    www.shopping.wine-ipass.se
    First seen
    2026-10-26 10:06 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 93.188.2.52.
    1. Phishing-host list fetched with the address
    2. Resolved to 93.188.2.52
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 784,465,782
    SHA-256 51a4fb30382df1b71c7050d5427f79f3d161c3e5f0b4dca7cc27e9d1200873a1
    Brand
    I-PASS
    Addresses
    93.188.2.52 · Sweden · AS39570 LOOPIA Loopia AB
    Domain
    wine-ipass.se
    MX
    Receives mail at mailcluster.loopia.se, mail2.loopia.se
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  10. shopping.wine-ipass.se SE · AS39570 · LOOPIA Loopia AB
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missing
    DetailsHide
    Hostname
    shopping.wine-ipass.se
    First seen
    2026-10-26 10:00 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 93.188.2.52.
    1. Phishing-host list fetched with the address
    2. Resolved to 93.188.2.52
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 784,436,789
    SHA-256 19aaf040879b14e7c2aec251adcacfa97a9230798f06300d08eed826edeb7e31
    Brand
    I-PASS
    Addresses
    93.188.2.52 · Sweden · AS39570 LOOPIA Loopia AB
    Domain
    wine-ipass.se
    MX
    Receives mail at mailcluster.loopia.se, mail2.loopia.se
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches I-PASS when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Toll & transport

All brands →