Interactive Brokers

Investing United Statesinteractivebrokers.comRank 576 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
3
3 reported or listed
Registered lookalikes
85
11 listed by a source or an address list
Official domains
8
verified from Interactive Brokers's own sites and records

Certificate findings for Interactive Brokers

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Interactive Brokers's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 4 findings, grouped by hostname

  1. bronzewindow.live US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishTank as imitating Interactive BrokersMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    bronzewindow.live
    First seen
    2026-10-29 19:29 UTC
    First published
    2026-10-29 11:56 UTC
    Listing
    CERT Polska listed it 2026-10-29 · still listed at the last successful feed check 2026-11-05 09:17 UTC
    PhishTank: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Not resolving since 2026-11-03 · checked 2026-11-04 12:02 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishTank feed
    4. We matched the new listing
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-29 00:56 UTC to 2027-01-27 00:56 UTC
    Logged 2026-10-29 01:55 UTC in Let's Encrypt Sycamore2027h1, entry 830,487,737
    SHA-256 1dd9b8f8c66ec08b0cdc9a90c0653bc76585e95b0c6984fcc4cc71b67401e1ec
    Public key SHA-256 7d84b72207ebafbf62f696b54c4820c3efb9afd2ba3081056dbdbaf87fa7cca1
    PhishTank
    PhishTank report #9552267
    Brand
    Interactive Brokers
    Addresses
    104.21.76.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:4c7b
    2606:4700:3034::ac43:c235
    Cloudflare
    Cloudflare (104.21.76.123, 172.67.194.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bronzewindow.live
    Registered
    2026-10-29 · GNAME.COM PTE. LTD.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  2. granitecompass.live US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishTank as imitating Interactive BrokersMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    granitecompass.live
    First seen
    2026-10-29 19:29 UTC
    First published
    2026-10-29 19:32 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-29 · delisted on 2026-11-01
    DNS
    Not resolving since 2026-10-30 · checked 2026-11-04 19:44 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Observed in the PhishTank feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-29 00:45 UTC to 2027-01-27 00:45 UTC
    Logged 2026-10-29 01:44 UTC in Google ParcelYard2027h1, entry 498,138,383
    SHA-256 56b5574539e372a3e64f6a4e871383bfb81747c33703255000d05d06a80db1e4
    Public key SHA-256 485bca544c99841e2c99d58021b60c5027b6d9f72685a434f683a2fe6995f5d4
    PhishTank
    PhishTank report #9552260
    Brand
    Interactive Brokers
    Addresses
    104.21.55.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:8fc3
    2606:4700:3037::6815:3704
    Cloudflare
    Cloudflare (104.21.55.4, 172.67.143.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    granitecompass.live
    Registered
    2026-10-29 · GNAME.COM PTE. LTD.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  3. orchidpuzzle.live US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishTank as imitating Interactive BrokersMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    orchidpuzzle.live
    First seen
    2026-10-29 19:29 UTC
    First published
    2026-10-29 15:21 UTC
    Listing
    CERT Polska listed it 2026-10-29 · still listed at the last successful feed check 2026-11-05 09:17 UTC
    PhishTank: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-04 15:34 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishTank feed
    4. We matched the new listing
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-29 00:56 UTC to 2027-01-27 00:56 UTC
    Logged 2026-10-29 01:54 UTC in DigiCert Wyvern2027h1, entry 341,682,974
    SHA-256 162be200a15503985a7b580e6184e87501be54e5b8bb9c04ec9d437cc62b1ba3
    Public key SHA-256 7d3ab35d0bb46a9adc5251948c28e0273abbc05e90615be8e6c4b3647b602881
    PhishTank
    PhishTank report #9552263
    Brand
    Interactive Brokers
    Addresses
    104.21.87.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:90c4
    2606:4700:3034::6815:57a9
    Cloudflare
    Cloudflare (104.21.87.169, 172.67.144.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    orchidpuzzle.live
    Registered
    2026-10-29 · GNAME.COM PTE. LTD.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  4. rusticcomet.live US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishTank as imitating Interactive BrokersMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide
    Hostname
    rusticcomet.live
    First seen
    2026-10-28 14:50 UTC
    First published
    2026-10-28 15:12 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Not resolving since 2026-10-29 · checked 2026-11-04 15:21 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. We matched the new listing
    3. Latest DNS check
    PhishTank
    PhishTank report #9551559
    Brand
    Interactive Brokers
    Addresses
    104.21.45.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:2d6f
    2606:4700:3031::ac43:d590
    Cloudflare
    Cloudflare (104.21.45.111, 172.67.213.144): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rusticcomet.live
    Registered
    2026-10-27 · GNAME.COM PTE. LTD.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Interactive Brokers when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Investing

All brands →