JCB
Certificate findings for JCB
DomainSpoof matched these hostnames, from public certificate logs, to JCB's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 27 findings, grouped by hostname
- hhrtvu.com CN · AS136188 · NINGBO, ZHEJIANG Province, …ListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 3 d ago
DetailsHide details for hhrtvu.com
- Hostname
- hhrtvu.com
- First seen
- 2026-11-04 21:31 UTC
- First published
- 2026-11-04 22:19 UTC
- Listing
- JPCERT/CC confirmed it 2026-07-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 22:27 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-04 20:31 UTC to 2027-02-02 20:31 UTCLogged 2026-11-04 21:29 UTC in IPng Networks Halloumi2027h1, entry 365,910,625SHA-256 cfe0c57d8e3803be3ac4118803a536ab5cefb4f3de89df88a5ac08a1b6dbb9bcPublic key SHA-256 6b7910986b03c20349ad8033c33064570f197e188d9bd1f253ebbc159d1197fd
- Brand
- JCB
- Addresses
- 183.136.138.190 · China · AS136188 CHINATELECOM-ZHEJIANG-NINGBO-IDC - NINGBO, ZHEJIANG Province, P.R.China.
- Domain
- hhrtvu.com
- Registered
- 2026-11-02 · July Name Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 22:20 UTC
- ifcvf.com US · AS18978 · Enzu IncListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 20 d ago
DetailsHide details for ifcvf.com
- Hostname
- ifcvf.com
- First seen
- 2026-11-04 17:21 UTC
- First published
- 2026-11-04 18:05 UTC
- Listing
- JPCERT/CC confirmed it 2026-07-06 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 18:17 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-04 16:18 UTC to 2027-02-02 16:18 UTCLogged 2026-11-04 17:17 UTC in Let's Encrypt Willow2027h1, entry 935,763,189SHA-256 0dd4141f95f52b76d03173ab3e0c27a729b646effcb589f792db0e343b09bbf8Public key SHA-256 693a04eef4d014bcb77dc93e0030c0ed6ecc46b6da14c3d0a2ae1781c85b89f4
- Brand
- JCB
- Addresses
- 107.163.230.163 · United States · AS18978 ENZUINC-US - Enzu Inc
- Domain
- ifcvf.com
- Registered
- 2026-10-16 · TuringSign Inc. d/b/a Cosmotown
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 18:06 UTC
- www.speahx.com CN · AS136188 · NINGBO, ZHEJIANG Province, …ListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 2 d ago
DetailsHide details for www.speahx.com
- Hostname
- www.speahx.com
- First seen
- 2026-11-04 16:16 UTC
- First published
- 2026-11-04 16:54 UTC
- Listing
- JPCERT/CC confirmed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 17:06 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-04 15:16 UTC to 2027-02-02 15:16 UTCLogged 2026-11-04 16:14 UTC in Let's Encrypt Willow2027h1, entry 934,951,995SHA-256 fa1a28c33131c50968e21e9508cbaf143fa685c260753a67054f16114a72c30ePublic key SHA-256 cb945fa5dc36cdf2b5252f4a40656c54220cc1c6428b62fcff3a7dd0ba1feb2f
- Brand
- JCB
- Addresses
- 183.136.138.173 · China · AS136188 CHINATELECOM-ZHEJIANG-NINGBO-IDC - NINGBO, ZHEJIANG Province, P.R.China.
- Domain
- speahx.com
- Registered
- 2026-11-03 · July Name Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:54 UTC
- qqjftb.info US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 12 mo ago
DetailsHide details for qqjftb.info
- Hostname
- qqjftb.info
- First seen
- 2026-11-04 05:26 UTC
- First published
- 2026-11-04 05:41 UTC
- Listing
- JPCERT/CC confirmed it 2026-09-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 05:45 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-06 03:42 UTC to 2026-12-05 04:41 UTCLogged 2026-11-04 05:20 UTC in DigiCert Wyvern2026h2, entry 2,202,881,187SHA-256 b8399fe990e87a5398091b41a4f47fb5e5c6152cd84b38d5a09db4f6996af12fPublic key SHA-256 58eec23a4915ecc912c56da77f64828e28c63d2fa8d9ac65f13f59a3983b0107
- Brand
- JCB
- Addresses
- 104.21.80.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.152.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.80.172, 172.67.152.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- qqjftb.info
- Registered
- 2025-11-10 · Chengdu West Dimension Digital Technology Co., Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 05:30 UTC
- ygyamdb.info US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 12 mo ago
DetailsHide details for ygyamdb.info
- Hostname
- ygyamdb.info
- First seen
- 2026-11-03 08:25 UTC
- First published
- 2026-11-03 08:50 UTC
- Listing
- JPCERT/CC confirmed it 2026-09-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 09:02 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-03 07:20 UTC to 2027-02-01 08:18 UTCLogged 2026-11-03 08:20 UTC in Google ParcelYard2027h1, entry 586,609,756SHA-256 befd4eeebc9a82dbd75da8e9fee27c5712701677ecbe49e8c3fa26d9616670d8Public key SHA-256 1b9fd61db8503f0e8a07bea862f0085808840189f63c0cb8d79643c774624532
- Brand
- JCB
- Addresses
- 104.21.93.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.204.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.93.42, 172.67.204.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ygyamdb.info
- Registered
- 2025-11-10 · Chengdu West Dimension Digital Technology Co., Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:54 UTC
- www.umichen.com US · AS54600 · PEG TECH INCListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 35 d ago
DetailsHide details for www.umichen.com
- Hostname
- www.umichen.com
- First seen
- 2026-11-03 01:56 UTC
- First published
- 2026-11-03 02:31 UTC
- Listing
- JPCERT/CC confirmed it 2026-07-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 02:45 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-03 00:54 UTC to 2027-02-01 00:54 UTCLogged 2026-11-03 01:52 UTC in IPng Networks Halloumi2027h1, entry 343,514,416SHA-256 10cbca6c15c066d7ee4f313811b1f041a00a27dfe49d19f6d1bf95c44a44f668Public key SHA-256 dbf7147003f581b93fda065727419f2f5ac079150a595fd9d9a1244ed47fad51
- Brand
- JCB
- Addresses
- 104.233.204.12 · United States · AS54600 PEG-SV - PEG TECH INC
- Domain
- umichen.com
- Registered
- 2026-10-01 · Realtime Register B.V.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 03:07 UTC
- mbvyv.com US · AS18978 · Enzu IncListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 40 d ago
DetailsHide details for mbvyv.com
- Hostname
- mbvyv.com
- First seen
- 2026-11-02 14:41 UTC
- First published
- 2026-11-02 15:44 UTC
- Listing
- JPCERT/CC confirmed it 2026-06-29 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 15:58 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-02 13:38 UTC to 2027-01-31 13:38 UTCLogged 2026-11-02 14:37 UTC in Let's Encrypt Sycamore2027h1, entry 905,330,874SHA-256 5a27100fa1a34dbf381598239cb894c13b3177d8b8b1dfbdd1f91620d97e586ePublic key SHA-256 51eea91e70882f2b1d2a82fbf8b641a62cd90aa83f88713c248f26887523c7e4
- Brand
- JCB
- Addresses
- 107.163.230.231 · United States · AS18978 ENZUINC-US - Enzu Inc
- Domain
- mbvyv.com
- Registered
- 2026-09-26 · TuringSign Inc. d/b/a Cosmotown
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- 8vd4t.info CN · AS132203 · Tencent Building, Kejizhong…ListedTencent CloudListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 12 mo ago
DetailsHide details for 8vd4t.info
- Hostname
- 8vd4t.info
- First seen
- 2026-11-02 06:46 UTC
- First published
- 2026-11-02 06:52 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 07:03 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Sectigo Public Server Authentication CA DV E36Valid 2026-11-02 00:00 UTC to 2027-01-20 14:58 UTCLogged 2026-11-02 06:43 UTC in DigiCert Sphinx2027h1, entry 332,907,927SHA-256 165a53142157e8e719c155b6628126f9c815e4223b4a8944645aa293c4d696f5Public key SHA-256 fbd9d985fa16ce9599b1d672edd0ae446f5f660ee943ffc1ed77d0c197a93409
- Brand
- JCB
- Addresses
- 43.129.217.56 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
- Tencent Cloud
- Tencent Cloud (43.129.217.56): a cloud provider. It rents servers and addresses to its customers.
- Domain
- 8vd4t.info
- Registered
- 2025-11-10 · Chengdu West Dimension Digital Technology Co., Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:41 UTC
- pjlstayu.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.ListedListed by JPCERT/CC as imitating JCBMX presentSPF missingDMARC missingRegistered 11 mo ago
DetailsHide details for pjlstayu.icu
- Hostname
- pjlstayu.icu
- First seen
- 2026-11-02 05:26 UTC
- First published
- 2026-11-02 05:45 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-03 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 05:52 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-02 04:22 UTC to 2027-01-31 04:22 UTCLogged 2026-11-02 05:21 UTC in Google ParcelYard2027h1, entry 566,377,949SHA-256 1869e34a75812009d776ed984527db11534fa0b16b5586ad91a2672d5303bad9Public key SHA-256 0b8bf30873d002dfb8a01d4fc409980097998d157c8b5d4d8d9e703099e84932
- Brand
- JCB
- Addresses
- 91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
- Domain
- pjlstayu.icu
- Registered
- 2025-12-10 · Gname.com Pte. Ltd.
- MX
- Receives mail at mx.pjlstayu.icu
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:43 UTC
- cctvppch.com US · AS979 · NetLab GlobalListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 7 d ago
DetailsHide details for cctvppch.com
- Hostname
- cctvppch.com
- First seen
- 2026-11-02 04:10 UTC
- First published
- 2026-11-02 04:28 UTC
- Listing
- JPCERT/CC confirmed it 2026-07-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 04:42 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 03:10 UTC to 2027-01-31 03:10 UTCLogged 2026-11-02 04:08 UTC in IPng Networks Gouda2027h1, entry 290,593,738SHA-256 7e9d42055386eb02a55c02cdb34e48d9430099e015f6969643ae1544f3753284Public key SHA-256 7ba5ff0e564b7fcd23733840fdd317f08469d35ce56f8dcef98ac22590d44a61
- Brand
- JCB
- Addresses
- 64.90.2.112 · United States · AS979 NETLAB-SDN - NetLab Global
- Domain
- cctvppch.com
- Registered
- 2026-10-29 · TuringSign Inc. d/b/a Cosmotown
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 05:03 UTC
- boshijk.com US · AS401696 · cognetcloud INCListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 10 d ago
DetailsHide details for boshijk.com
- Hostname
- boshijk.com
- First seen
- 2026-10-31 22:06 UTC
- First published
- 2026-10-31 22:45 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-05 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 22:58 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-10-31 21:03 UTC to 2027-01-29 21:03 UTCLogged 2026-10-31 22:01 UTC in Google PlumbersArms2027h1, entry 546,275,780SHA-256 37091a8dab94d54d580b07b4c11b6dc42b5c9ae9dc00a9d863e776102bec1d09Public key SHA-256 6958c1c11cd56b8202b4cc5907dd429766ab1e6e391ea6231c239b7d87f273d9
- Brand
- JCB
- Addresses
- 154.12.31.240 · United States · AS401696 COGNETCLOUD - cognetcloud INC
- Domain
- boshijk.com
- Registered
- 2026-10-26 · Realtime Register B.V.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 23:22 UTC
- abusjmma.net CN · AS132203 · Tencent Building, Kejizhong…ListedTencent CloudListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for abusjmma.net
- Hostname
- abusjmma.net
- First seen
- 2026-10-31 11:16 UTC
- First published
- 2026-10-31 11:51 UTC
- Listing
- JPCERT/CC confirmed it 2026-07-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 11:55 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-10-31 10:12 UTC to 2027-01-29 11:11 UTCLogged 2026-10-31 11:12 UTC in Let's Encrypt Willow2027h1, entry 863,408,116SHA-256 07d4b100341b040c77fd9e03b89802000793e3e3e005c6984e046d0cc65c8255Public key SHA-256 82bc6c8588c058aab9591df2df18f61612b458f26a200f53af33612385a935f7
- Brand
- JCB
- Addresses
- 43.165.186.124 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
- Tencent Cloud
- Tencent Cloud (43.165.186.124): a cloud provider. It rents servers and addresses to its customers.
- Domain
- abusjmma.net
- Registered
- 2026-07-05 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
- xwhur.com US · AS18978 · Enzu IncListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 38 d ago
DetailsHide details for xwhur.com
- Hostname
- xwhur.com
- First seen
- 2026-10-31 05:31 UTC
- First published
- 2026-10-31 06:08 UTC
- Listing
- JPCERT/CC confirmed it 2026-06-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 06:11 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-10-31 04:28 UTC to 2027-01-29 04:28 UTCLogged 2026-10-31 05:26 UTC in Let's Encrypt Willow2027h1, entry 859,939,250SHA-256 6873007c4c21e042b83fc5b73a8879e4d342f777735f808c4c071166d0310120Public key SHA-256 846f90e430b3dd3a10a2994e507428b6a4ba35b860c21bdbdc2f4abaac3e7b62
- Brand
- JCB
- Addresses
- 107.163.230.125 · United States · AS18978 ENZUINC-US - Enzu Inc
- Domain
- xwhur.com
- Registered
- 2026-09-28 · Gname.com Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:54 UTC
- fzshangyi.com US · AS62904 · Eonix CorporationListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 9 d ago
DetailsHide details for fzshangyi.com
- Hostname
- fzshangyi.com
- First seen
- 2026-10-31 04:51 UTC
- First published
- 2026-10-31 05:05 UTC
- Listing
- JPCERT/CC confirmed it 2026-07-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 05:18 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-10-31 03:49 UTC to 2027-01-29 03:49 UTCLogged 2026-10-31 04:47 UTC in Google ParcelYard2027h1, entry 533,682,356SHA-256 040484f483be0797781dbdf4d809fff8fd725842463a258b9c46b828fa9f048dPublic key SHA-256 0f1724564de834aedc4b2fe699458e313d21631256d64bc24722371e56e03164
- Brand
- JCB
- Addresses
- 50.2.198.140 · United States · AS62904 AS62904 - Eonix Corporation
- Domain
- fzshangyi.com
- Registered
- 2026-10-27 · Gname 382 Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:43 UTC
- whgnsq.com HK · AS138415 · Yancy Limited13 addressesListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 14 d ago
DetailsHide details for whgnsq.com
- Hostname
- whgnsq.com
- First seen
- 2026-10-30 18:15 UTC
- First published
- 2026-10-30 19:10 UTC
- Listing
- JPCERT/CC confirmed it 2026-07-06 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 19:15 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Sectigo Public Server Authentication CA DV E36 · precertificateValid 2026-10-30 00:00 UTC to 2027-01-22 11:57 UTCLogged 2026-10-30 18:13 UTC in Let's Encrypt Sycamore2027h1, entry 859,578,032SHA-256 2ae16f948d037b0a8748b070e17865f289cd7c9d63c9f42bc1dcc218b6badc7dPublic key SHA-256 e13aab0b636e2fc3e8c313a8e3323b130d85b86c389ba62c271afbf8613f4f5f
- Brand
- JCB
- Addresses
- 156.234.199.108 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited156.234.199.109 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited156.234.199.110 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited156.234.199.111 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited156.234.199.112 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited156.234.199.113 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited156.234.199.114 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited156.234.199.115 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited156.234.225.79 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited156.234.225.80 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited156.234.225.81 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited156.234.225.82 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited156.234.225.83 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited
- Domain
- whgnsq.com
- Registered
- 2026-10-22 · NameSilo, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:41 UTC
- integrity6689.com US · AS54600 · PEG TECH INCListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 7 d ago
DetailsHide details for integrity6689.com
- Hostname
- integrity6689.com
- First seen
- 2026-10-30 05:57 UTC
- First published
- 2026-10-30 06:35 UTC
- Listing
- JPCERT/CC confirmed it 2026-07-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 06:39 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-10-30 04:53 UTC to 2027-01-28 04:53 UTCLogged 2026-10-30 05:52 UTC in IPng Networks Gouda2027h1, entry 267,277,637SHA-256 30295bde8ef12f2ace149f8864ea26ed8149a85d00b4a1dfacfa09dcf8e17842Public key SHA-256 c1774166985bea75ef783e55320be634c0cd7723f867c053961dae3a430bedda
- Brand
- JCB
- Addresses
- 38.28.183.136 · United States · AS54600 PEG-SV - PEG TECH INC
- Domain
- integrity6689.com
- Registered
- 2026-10-29 · Gname 473 Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:41 UTC
- oeaog.com US · AS18978 · Enzu IncListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 42 d ago
DetailsHide details for oeaog.com
- Hostname
- oeaog.com
- First seen
- 2026-10-30 04:55 UTC
- First published
- 2026-10-30 05:30 UTC
- Listing
- JPCERT/CC confirmed it 2026-06-30 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 05:39 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-10-30 03:55 UTC to 2027-01-28 03:55 UTCLogged 2026-10-30 04:54 UTC in Let's Encrypt Sycamore2027h1, entry 850,158,641SHA-256 69ce94a314ac1acb1e7a307b3f66eea108b6825342efe200c5c73eccfbdabd63Public key SHA-256 836f28a98b529407236bbbe0fd115af69ca0fd5fe2259b6765e9a6560f99a13f
- Brand
- JCB
- Addresses
- 107.163.230.59 · United States · AS18978 ENZUINC-US - Enzu Inc
- Domain
- oeaog.com
- Registered
- 2026-09-24 · TuringSign Inc. d/b/a Cosmotown
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:41 UTC
- bjcrlm.com US · AS18978 · Enzu IncListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 41 d ago
DetailsHide details for bjcrlm.com
- Hostname
- bjcrlm.com
- First seen
- 2026-10-30 00:51 UTC
- First published
- 2026-10-30 01:51 UTC
- Listing
- JPCERT/CC confirmed it 2026-07-06 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 02:04 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-10-29 23:50 UTC to 2027-01-27 23:50 UTCLogged 2026-10-30 00:49 UTC in Let's Encrypt Willow2027h1, entry 841,258,350SHA-256 30854edd8f593632809fd7a165452377d4b5bfe0d2e9ad3f74b229e32b2a4055Public key SHA-256 273c997b9b87c99f18a2137432c6ef4570d261e2cc987b2f0475e156418fd8b8
- Brand
- JCB
- Addresses
- 107.163.230.9 · United States · AS18978 ENZUINC-US - Enzu Inc
- Domain
- bjcrlm.com
- Registered
- 2026-09-25 · TuringSign Inc. d/b/a Cosmotown
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:42 UTC
- match-jingyu.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 2 mo ago
DetailsHide details for match-jingyu.com
- Hostname
- match-jingyu.com
- First seen
- 2026-10-29 12:10 UTC
- First published
- 2026-10-29 12:13 UTC
- Listing
- JPCERT/CC confirmed it 2026-06-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 12:22 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-10-29 11:09 UTC to 2027-01-27 12:07 UTCLogged 2026-10-29 12:10 UTC in DigiCert Wyvern2027h1, entry 347,329,609SHA-256 382cb107e4f55ae49d4e6f821f26353e92ad04de04d6170c4e83bb8114cd5d6cPublic key SHA-256 487fbf5454aace12039d468464d30e63c24ca863f9d35cc0b15afca88bff5f66
- Brand
- JCB
- Addresses
- 104.21.63.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.172.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.63.219, 172.67.172.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- match-jingyu.com
- Registered
- 2026-08-31 · NameSilo, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:42 UTC
- xatzlgqe.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.ListedListed by JPCERT/CC as imitating JCBMX presentSPF missingDMARC missingRegistered 11 mo ago
DetailsHide details for xatzlgqe.icu
- Hostname
- xatzlgqe.icu
- First seen
- 2026-10-29 09:46 UTC
- First published
- 2026-10-29 09:51 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-03 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 10:02 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-10-29 08:43 UTC to 2027-01-27 08:43 UTCLogged 2026-10-29 09:42 UTC in Let's Encrypt Sycamore2027h1, entry 836,104,793SHA-256 2b9cce6326e25db87863cb2cf2f12f44f6798d323b9c96a18b35e351ebf502a5Public key SHA-256 43f4a487c464680bdb3a0bd93f81b38df57122d7e1dad6de85a079eebf4aa038
- Brand
- JCB
- Addresses
- 91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
- Domain
- xatzlgqe.icu
- Registered
- 2025-12-10 · Gname.com Pte. Ltd.
- MX
- Receives mail at mx.xatzlgqe.icu
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:42 UTC
- guangzhouchinas.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.ListedListed by JPCERT/CC as imitating JCBMX presentSPF missingDMARC missingRegistered 7 mo ago
DetailsHide details for guangzhouchinas.icu
- Hostname
- guangzhouchinas.icu
- First seen
- 2026-10-29 03:16 UTC
- First published
- 2026-10-29 03:36 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-03 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 03:42 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-10-29 02:12 UTC to 2027-01-27 02:12 UTCLogged 2026-10-29 03:11 UTC in DigiCert Wyvern2027h1, entry 342,348,317SHA-256 aedf0b5af0543befc2b3f50cab6e6aa6dd86346f65e940f3d7d4ac63fa0e8960Public key SHA-256 b583770c0e251b9d144d9ce8fc3757fd3b9505dbd6aae1e3360914bb4226c805
- Brand
- JCB
- Addresses
- 91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
- Domain
- guangzhouchinas.icu
- Registered
- 2026-04-15 · Gname.com Pte. Ltd.
- MX
- Receives mail at mx.guangzhouchinas.icu
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 04:10 UTC
- carolinamountaindog.com US · AS16509 · Amazon.com, Inc.3 addressesListedAmazon Web ServicesListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 8 d ago
DetailsHide details for carolinamountaindog.com
- Hostname
- carolinamountaindog.com
- First seen
- 2026-10-28 17:31 UTC
- First published
- 2026-10-28 18:18 UTC
- Listing
- JPCERT/CC confirmed it 2026-07-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Not resolving since 2026-10-28 · checked 2026-11-04 18:30 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-10-28 16:30 UTC to 2027-01-26 16:30 UTCLogged 2026-10-28 17:28 UTC in Google PlumbersArms2027h1, entry 492,848,816SHA-256 488eb8f9454660c18cac61ddd67d69ca100a941c7a49239a2c353edd1fcf9fe0Public key SHA-256 14554613e2db2fde0e0afd61e21b55340ddead897b7ef8cb13fbec1dcbdadd1e
- Brand
- JCB
- Addresses
- 207.207.210.23 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.36 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.50 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.23, 207.207.210.36, 207.207.210.50): a cloud provider. It rents servers and addresses to its customers.
- Domain
- carolinamountaindog.com
- Registered
- 2026-10-28 · Porkbun LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:42 UTC
- gzfhmk88.com DE · AS24940 · HETZNER-AS Hetzner Online G…ListedHetznerListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 2 y ago
DetailsHide details for gzfhmk88.com
- Hostname
- gzfhmk88.com
- First seen
- 2026-10-28 10:37 UTC
- First published
- 2026-10-28 11:02 UTC
- Listing
- JPCERT/CC confirmed it 2026-07-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 11:08 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-10-28 09:36 UTC to 2027-01-26 09:36 UTCLogged 2026-10-28 10:35 UTC in Google PlumbersArms2027h1, entry 487,484,587SHA-256 77ee4d0ca6aa3cc8d83a87a921dbf775e60ca9880c69a7896deeedfd8f3f522cPublic key SHA-256 3fd39cadc1c3d1826a8a52fddf5d10485a70e8174ee66d1d7ff90fd13f026ac0
- Brand
- JCB
- Addresses
- 195.201.59.25 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (195.201.59.25): a cloud provider. It rents servers and addresses to its customers.
- Domain
- gzfhmk88.com
- Registered
- 2024-08-12 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:42 UTC
- lipdk.com US · AS18978 · Enzu IncListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 49 d ago
DetailsHide details for lipdk.com
- Hostname
- lipdk.com
- First seen
- 2026-10-28 09:11 UTC
- First published
- 2026-10-28 10:00 UTC
- Listing
- JPCERT/CC confirmed it 2026-06-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 10:08 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-10-28 08:10 UTC to 2027-01-26 08:10 UTCLogged 2026-10-28 09:08 UTC in IPng Networks Halloumi2027h1, entry 286,789,344SHA-256 4d876073a140ca2ce5faffe64e631435eda06c80d5e75164bb5176773a54782cPublic key SHA-256 063ce0d7e499970291ef1324f0999aeea710dcdaf435f4eaf99de109bdb469d4
- Brand
- JCB
- Addresses
- 107.163.230.130 · United States · AS18978 ENZUINC-US - Enzu Inc
- Domain
- lipdk.com
- Registered
- 2026-09-17 · Gname 454 Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:42 UTC
- gengq1.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 28 d ago
DetailsHide details for gengq1.com
- Hostname
- gengq1.com
- First seen
- 2026-10-28 01:21 UTC
- Listing
- JPCERT/CC confirmed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 09:00 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Sectigo Public Server Authentication CA DV E36 · precertificateValid 2026-10-28 00:00 UTC to 2027-01-18 18:19 UTCLogged 2026-10-28 01:16 UTC in DigiCert Wyvern2027h1, entry 327,255,351SHA-256 7b165a3e96c3fbd67d16927269369fb4c67695f55b78f13b6aca037bedd0de7ePublic key SHA-256 551a00cecc439ef695625589019cacd45479b9f9cc59839aebda4b2797eb953b
- Brand
- JCB
- Addresses
- 104.21.65.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.140.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.65.38, 172.67.140.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- gengq1.com
- Registered
- 2026-10-08 · Gname 236 Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:34 UTC
- lzylwl.com HK · AS137951 · ASLINE LIMITEDListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 25 d ago
DetailsHide details for lzylwl.com
- Hostname
- lzylwl.com
- First seen
- 2026-10-27 17:15 UTC
- Listing
- JPCERT/CC confirmed it 2026-07-06 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 09:02 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR1Valid 2026-10-27 16:12 UTC to 2027-01-25 16:12 UTCLogged 2026-10-27 17:10 UTC in Google PlumbersArms2027h1, entry 475,404,774SHA-256 045af99d9a8922b689406d7ef1e5635c12d3baef448576a391e531916091c2dcPublic key SHA-256 d0d1454e6e895b91a1b839087f5c80c6e381e1931772a786ad3f6ee0ea7d07a2
- Brand
- JCB
- Addresses
- 168.76.213.103 · Hong Kong · AS137951 ASLINE-AS-AP - ASLINE LIMITED
- Domain
- lzylwl.com
- Registered
- 2026-10-11 · Key-Systems GmbH
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:34 UTC
- ldggqqk.com US · AS18978 · Enzu IncListedListed by JPCERT/CC as imitating JCBMX absentSPF missingDMARC missingRegistered 52 d ago
DetailsHide details for ldggqqk.com
- Hostname
- ldggqqk.com
- First seen
- 2026-10-27 14:05 UTC
- Listing
- JPCERT/CC confirmed it 2026-05-26 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 09:02 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- We matched the new listing
- Latest DNS check
- Brand
- JCB
- Addresses
- 107.163.230.3 · United States · AS18978 ENZUINC-US - Enzu Inc
- Domain
- ldggqqk.com
- Registered
- 2026-09-14 · TuringSign Inc. d/b/a Cosmotown
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:35 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches JCB when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

