IONOS

Hosting & domains Germanyionos.comRank 332 of the most impersonated
Cert findings · 24 h
2
Cert findings · 7 days
3
3 on phishing hosts
Registered lookalikes
370
15 listed by a source or an address list
Official domains
59
verified from IONOS's own sites and records

Certificate findings for IONOS

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to IONOS's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 18 findings, grouped by hostname

  1. ionoswebmail.com NL · AS43350 · NFORCE NForce Entertainment…2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 y ago
    DetailsHide
    Hostname
    ionoswebmail.com
    First seen
    2026-11-05 09:04 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.247.182.249.
    1. Phishing-host list fetched with the address
    2. Resolved to 77.247.182.249
    Brand
    IONOS
    Addresses
    77.247.182.249 · Netherlands · AS43350 NFORCE NForce Entertainment B.V.
    216.245.213.78 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    Domain
    ionoswebmail.com
    Registered
    2019-12-13 · Media Elite Holdings Limited, S.A.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:26 UTC

    Suggest a correction

  2. ionosmail.com NL · AS60781 · LEASEWEB-NL-AMS-01 LeaseWeb…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    ionosmail.com
    First seen
    2026-11-04 14:23 UTC
    DNS
    Resolves · checked 2026-11-04 14:23 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 37.48.110.48.
    1. Phishing-host list fetched with the address
    2. Resolved to 37.48.110.48
    Brand
    IONOS
    Addresses
    37.48.110.48 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
    Domain
    ionosmail.com
    Registered
    2019-01-07 · Media Elite Holdings Limited, S.A.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:31 UTC

    Suggest a correction

  3. www.ionos-contact.help SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    www.ionos-contact.help
    First seen
    2026-11-03 18:46 UTC
    First published
    2026-11-03 19:26 UTC
    DNS
    Resolves · checked 2026-11-04 19:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-03 17:45 UTC to 2027-02-01 17:45 UTC
    Logged 2026-11-03 18:44 UTC in DigiCert Sphinx2027h1, entry 345,667,654
    SHA-256 05a7ee3d0a71ad4d46c17dc1eff83bd0ad0336ea3e61d1c70da721d5368f5742
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    IONOS
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ionos-contact.help
    Registered
    2026-06-17 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  4. www.appsuite-rechnung-ionos-9078524.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 7 d ago
    DetailsHide
    Hostname
    www.appsuite-rechnung-ionos-9078524.com
    First seen
    2026-10-29 10:47 UTC
    First published
    2026-10-29 10:53 UTC
    DNS
    Resolves · checked 2026-11-04 11:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 79.133.41.203.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 79.133.41.203
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-29 09:46 UTC to 2027-01-27 09:46 UTC
    Logged 2026-10-29 10:45 UTC in Geomys Tuscolo2027h1, entry 393,876,497
    SHA-256 6d957f737d680c1d2678809d137d72aeba6aefd27c56cf4d7a74bf7339e5072d
    Public key SHA-256 10a1a771d205e49cb0d278249e7d725bcb3a5e028ecd7cc1edec929fabdf1a6c
    Brand
    IONOS
    Addresses
    79.133.41.203 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    appsuite-rechnung-ionos-9078524.com
    Registered
    2026-10-29 · Ultahost, Inc.
    MX
    Receives mail at appsuite-rechnung-ionos-9078524.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  5. webmail.appsuite-rechnung-ionos-9078524.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 7 d ago
    DetailsHide
    Hostname
    webmail.appsuite-rechnung-ionos-9078524.com
    First seen
    2026-10-29 10:47 UTC
    First published
    2026-10-29 10:53 UTC
    DNS
    Resolves · checked 2026-11-04 11:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 79.133.41.203.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 79.133.41.203
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-29 09:46 UTC to 2027-01-27 09:46 UTC
    Logged 2026-10-29 10:45 UTC in Geomys Tuscolo2027h1, entry 393,876,497
    SHA-256 6d957f737d680c1d2678809d137d72aeba6aefd27c56cf4d7a74bf7339e5072d
    Public key SHA-256 10a1a771d205e49cb0d278249e7d725bcb3a5e028ecd7cc1edec929fabdf1a6c
    Brand
    IONOS
    Addresses
    79.133.41.203 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    appsuite-rechnung-ionos-9078524.com
    Registered
    2026-10-29 · Ultahost, Inc.
    MX
    Receives mail at appsuite-rechnung-ionos-9078524.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  6. webdisk.appsuite-rechnung-ionos-9078524.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 7 d ago
    DetailsHide
    Hostname
    webdisk.appsuite-rechnung-ionos-9078524.com
    First seen
    2026-10-29 10:47 UTC
    First published
    2026-10-29 10:53 UTC
    DNS
    Resolves · checked 2026-11-04 11:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 79.133.41.203.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 79.133.41.203
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-29 09:46 UTC to 2027-01-27 09:46 UTC
    Logged 2026-10-29 10:45 UTC in Geomys Tuscolo2027h1, entry 393,876,497
    SHA-256 6d957f737d680c1d2678809d137d72aeba6aefd27c56cf4d7a74bf7339e5072d
    Public key SHA-256 10a1a771d205e49cb0d278249e7d725bcb3a5e028ecd7cc1edec929fabdf1a6c
    Brand
    IONOS
    Addresses
    79.133.41.203 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    appsuite-rechnung-ionos-9078524.com
    Registered
    2026-10-29 · Ultahost, Inc.
    MX
    Receives mail at appsuite-rechnung-ionos-9078524.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  7. mail.appsuite-rechnung-ionos-9078524.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 7 d ago
    DetailsHide
    Hostname
    mail.appsuite-rechnung-ionos-9078524.com
    First seen
    2026-10-29 10:47 UTC
    First published
    2026-10-29 10:53 UTC
    DNS
    Resolves · checked 2026-11-04 11:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 79.133.41.203.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 79.133.41.203
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-29 09:46 UTC to 2027-01-27 09:46 UTC
    Logged 2026-10-29 10:45 UTC in Geomys Tuscolo2027h1, entry 393,876,497
    SHA-256 6d957f737d680c1d2678809d137d72aeba6aefd27c56cf4d7a74bf7339e5072d
    Public key SHA-256 10a1a771d205e49cb0d278249e7d725bcb3a5e028ecd7cc1edec929fabdf1a6c
    Brand
    IONOS
    Addresses
    79.133.41.203 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    appsuite-rechnung-ionos-9078524.com
    Registered
    2026-10-29 · Ultahost, Inc.
    MX
    Receives mail at appsuite-rechnung-ionos-9078524.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  8. cpcontacts.appsuite-rechnung-ionos-9078524.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 7 d ago
    DetailsHide
    Hostname
    cpcontacts.appsuite-rechnung-ionos-9078524.com
    First seen
    2026-10-29 10:47 UTC
    First published
    2026-10-29 10:53 UTC
    DNS
    Resolves · checked 2026-11-04 11:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 79.133.41.203.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 79.133.41.203
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-29 09:46 UTC to 2027-01-27 09:46 UTC
    Logged 2026-10-29 10:45 UTC in Geomys Tuscolo2027h1, entry 393,876,497
    SHA-256 6d957f737d680c1d2678809d137d72aeba6aefd27c56cf4d7a74bf7339e5072d
    Public key SHA-256 10a1a771d205e49cb0d278249e7d725bcb3a5e028ecd7cc1edec929fabdf1a6c
    Brand
    IONOS
    Addresses
    79.133.41.203 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    appsuite-rechnung-ionos-9078524.com
    Registered
    2026-10-29 · Ultahost, Inc.
    MX
    Receives mail at appsuite-rechnung-ionos-9078524.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  9. cpcalendars.appsuite-rechnung-ionos-9078524.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 7 d ago
    DetailsHide
    Hostname
    cpcalendars.appsuite-rechnung-ionos-9078524.com
    First seen
    2026-10-29 10:47 UTC
    First published
    2026-10-29 10:53 UTC
    DNS
    Resolves · checked 2026-11-04 11:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 79.133.41.203.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 79.133.41.203
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-29 09:46 UTC to 2027-01-27 09:46 UTC
    Logged 2026-10-29 10:45 UTC in Geomys Tuscolo2027h1, entry 393,876,497
    SHA-256 6d957f737d680c1d2678809d137d72aeba6aefd27c56cf4d7a74bf7339e5072d
    Public key SHA-256 10a1a771d205e49cb0d278249e7d725bcb3a5e028ecd7cc1edec929fabdf1a6c
    Brand
    IONOS
    Addresses
    79.133.41.203 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    appsuite-rechnung-ionos-9078524.com
    Registered
    2026-10-29 · Ultahost, Inc.
    MX
    Receives mail at appsuite-rechnung-ionos-9078524.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  10. cpanel.appsuite-rechnung-ionos-9078524.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 7 d ago
    DetailsHide
    Hostname
    cpanel.appsuite-rechnung-ionos-9078524.com
    First seen
    2026-10-29 10:47 UTC
    First published
    2026-10-29 10:53 UTC
    DNS
    Resolves · checked 2026-11-04 11:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 79.133.41.203.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 79.133.41.203
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-29 09:46 UTC to 2027-01-27 09:46 UTC
    Logged 2026-10-29 10:45 UTC in Geomys Tuscolo2027h1, entry 393,876,497
    SHA-256 6d957f737d680c1d2678809d137d72aeba6aefd27c56cf4d7a74bf7339e5072d
    Public key SHA-256 10a1a771d205e49cb0d278249e7d725bcb3a5e028ecd7cc1edec929fabdf1a6c
    Brand
    IONOS
    Addresses
    79.133.41.203 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    appsuite-rechnung-ionos-9078524.com
    Registered
    2026-10-29 · Ultahost, Inc.
    MX
    Receives mail at appsuite-rechnung-ionos-9078524.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  11. autodiscover.appsuite-rechnung-ionos-9078524.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 7 d ago
    DetailsHide
    Hostname
    autodiscover.appsuite-rechnung-ionos-9078524.com
    First seen
    2026-10-29 10:47 UTC
    First published
    2026-10-29 10:53 UTC
    DNS
    Resolves · checked 2026-11-04 11:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 79.133.41.203.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 79.133.41.203
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-29 09:46 UTC to 2027-01-27 09:46 UTC
    Logged 2026-10-29 10:45 UTC in Geomys Tuscolo2027h1, entry 393,876,497
    SHA-256 6d957f737d680c1d2678809d137d72aeba6aefd27c56cf4d7a74bf7339e5072d
    Public key SHA-256 10a1a771d205e49cb0d278249e7d725bcb3a5e028ecd7cc1edec929fabdf1a6c
    Brand
    IONOS
    Addresses
    79.133.41.203 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    appsuite-rechnung-ionos-9078524.com
    Registered
    2026-10-29 · Ultahost, Inc.
    MX
    Receives mail at appsuite-rechnung-ionos-9078524.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  12. autoconfig.appsuite-rechnung-ionos-9078524.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 7 d ago
    DetailsHide
    Hostname
    autoconfig.appsuite-rechnung-ionos-9078524.com
    First seen
    2026-10-29 10:47 UTC
    First published
    2026-10-29 10:53 UTC
    DNS
    Resolves · checked 2026-11-04 11:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 79.133.41.203.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 79.133.41.203
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-29 09:46 UTC to 2027-01-27 09:46 UTC
    Logged 2026-10-29 10:45 UTC in Geomys Tuscolo2027h1, entry 393,876,497
    SHA-256 6d957f737d680c1d2678809d137d72aeba6aefd27c56cf4d7a74bf7339e5072d
    Public key SHA-256 10a1a771d205e49cb0d278249e7d725bcb3a5e028ecd7cc1edec929fabdf1a6c
    Brand
    IONOS
    Addresses
    79.133.41.203 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    appsuite-rechnung-ionos-9078524.com
    Registered
    2026-10-29 · Ultahost, Inc.
    MX
    Receives mail at appsuite-rechnung-ionos-9078524.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  13. appsuite-rechnung-ionos-9078524.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 7 d ago
    DetailsHide
    Hostname
    appsuite-rechnung-ionos-9078524.com
    First seen
    2026-10-29 10:47 UTC
    First published
    2026-10-29 10:53 UTC
    DNS
    Resolves · checked 2026-11-04 11:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 79.133.41.203.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 79.133.41.203
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-29 09:46 UTC to 2027-01-27 09:46 UTC
    Logged 2026-10-29 10:45 UTC in Geomys Tuscolo2027h1, entry 393,876,497
    SHA-256 6d957f737d680c1d2678809d137d72aeba6aefd27c56cf4d7a74bf7339e5072d
    Public key SHA-256 10a1a771d205e49cb0d278249e7d725bcb3a5e028ecd7cc1edec929fabdf1a6c
    Brand
    IONOS
    Addresses
    79.133.41.203 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    appsuite-rechnung-ionos-9078524.com
    Registered
    2026-10-29 · Ultahost, Inc.
    MX
    Receives mail at appsuite-rechnung-ionos-9078524.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  14. aktuelles.avedo-ionos-training.de SE · AS1299 · TWELVE99 Arelion Sweden AB
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    aktuelles.avedo-ionos-training.de
    First seen
    2026-10-28 12:52 UTC
    First published
    2026-10-28 13:04 UTC
    DNS
    Resolves · checked 2026-11-04 13:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.154.150.15.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.154.150.15
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-28 11:51 UTC to 2027-01-26 11:51 UTC
    Logged 2026-10-28 12:50 UTC in Google ParcelYard2027h1, entry 488,498,086
    SHA-256 36f5a5fec6e5e7d73f915eb11901c5f705ca746bcf2225ec713ac94dbc3b81ca
    Public key SHA-256 4615eb1d42310e0907a1d514f93d9fe6c4aa6b85b63d8250be9de47b64ec17e8
    Brand
    IONOS
    Addresses
    185.154.150.15 · Sweden · AS1299 TWELVE99 Arelion Sweden AB
    Domain
    avedo-ionos-training.de
    MX
    Receives mail at mx00.ionos.de, mx01.ionos.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  15. newsletter.test-ionos-1.fr SE · AS1299 · TWELVE99 Arelion Sweden AB
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 3 y ago
    DetailsHide
    Hostname
    newsletter.test-ionos-1.fr
    First seen
    2026-10-28 11:57 UTC
    First published
    2026-10-28 13:04 UTC
    DNS
    Resolves · checked 2026-11-04 13:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.154.150.15.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.154.150.15
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-28 10:56 UTC to 2027-01-26 10:56 UTC
    Logged 2026-10-28 11:54 UTC in Google PlumbersArms2027h1, entry 488,478,471
    SHA-256 0a80478f722232c9528b416bddbd663d20476a0c41ab836e57c2c08ac38a5d37
    Public key SHA-256 4326d51bbbb2413abb9c995588550ff8c6d5e9ae412542bf6a532f7bb41cdf9c
    Brand
    IONOS
    Addresses
    185.154.150.15 · Sweden · AS1299 TWELVE99 Arelion Sweden AB
    Domain
    test-ionos-1.fr
    Registered
    2023-05-24 · IONOS SE
    MX
    Receives mail at mx00.ionos.fr, mx01.ionos.fr
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  16. owa-exchanges-ionos.com SG · AS63949 · Akamai Connected Cloud
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    owa-exchanges-ionos.com
    First seen
    2026-10-28 06:12 UTC
    First published
    2026-11-03 04:56 UTC
    DNS
    Not resolving since 2026-11-03 · checked 2026-11-05 05:06 UTC
    Checks
    Overdue since 2026-11-03 05:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.236.104.43.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.236.104.43
    Certificate
    Issued by YE1
    Valid 2026-10-28 05:06 UTC to 2027-01-26 05:06 UTC
    Logged 2026-10-28 06:05 UTC in DigiCert Wyvern2027h1, entry 330,144,947
    SHA-256 9fced68706a1f629ff91ebc3ae24622b4cfa4ea332ea613ac489e3a24ccbdd95
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    IONOS
    Addresses
    172.236.104.43 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.236.104.43): a cloud provider. It rents servers and addresses to its customers.
    Domain
    owa-exchanges-ionos.com
    Registered
    2024-09-23 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  17. ionos-account-test.maileon.de SE · AS1299 · TWELVE99 Arelion Sweden AB
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC quarantine
    DetailsHide
    Hostname
    ionos-account-test.maileon.de
    First seen
    2026-10-28 02:37 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.154.150.15.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.154.150.15
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-28 01:34 UTC to 2027-01-26 01:34 UTC
    Logged 2026-10-28 02:32 UTC in DigiCert Wyvern2027h1, entry 328,122,690
    SHA-256 8579e83ccd6a556a8c36b296514e76a2cb4a6c3d17f3666ea6a3c903265f2266
    Public key SHA-256 ddbcf09333c9bc0c750ae8c13a46a857aeb9f5381c296fed5cfd4d445c3219b4
    Brand
    IONOS
    Addresses
    185.154.150.15 · Sweden · AS1299 TWELVE99 Arelion Sweden AB
    Domain
    maileon.de
    MX
    Receives mail at maileon-de.mail.protection.outlook.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  18. www.owa-exchanges-ionos.com SG · AS63949 · Akamai Connected Cloud
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    www.owa-exchanges-ionos.com
    First seen
    2026-10-27 20:26 UTC
    DNS
    Not resolving since 2026-11-03 · checked 2026-11-05 05:06 UTC
    Checks
    Overdue since 2026-11-03 05:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.236.104.43.
    1. Resolved to 172.236.104.43
    2. Phishing-host list fetched with the address
    Brand
    IONOS
    Addresses
    172.236.104.43 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.236.104.43): a cloud provider. It rents servers and addresses to its customers.
    Domain
    owa-exchanges-ionos.com
    Registered
    2024-09-23 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches IONOS when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Hosting & domains

All brands →