KDDI

Telecom & ISP Japankddi.comRank 215 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
0
Registered lookalikes
147
11 listed by a source or an address list
Official domains
24
verified from KDDI's own sites and records

Certificate findings for KDDI

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to KDDI's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 6 findings, grouped by hostname

  1. ezatxph.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by JPCERT/CC as imitating auMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    ezatxph.info
    First seen
    2026-10-29 07:36 UTC
    First published
    2026-10-29 07:46 UTC
    Listing
    JPCERT/CC confirmed it 2026-05-07 · first observed in the feed 2026-10-27 · listing window ended 2026-11-03
    DNS
    Resolves · checked 2026-11-05 07:51 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-29 06:34 UTC to 2027-01-27 06:34 UTC
    Logged 2026-10-29 07:32 UTC in Geomys Tuscolo2027h1, entry 392,094,782
    SHA-256 14c0ebd4482b29d66891400ae0beaa7339b184dbd2785e1a9dd760973e6a525b
    Public key SHA-256 fd938264945326c3eaffa8fa0b0b3c1c38899ee3090952aea3a84a64ca0abeb9
    Brand
    KDDI
    Addresses
    104.21.49.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.49.52, 172.67.141.141): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ezatxph.info
    Registered
    2025-11-13 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:42 UTC

    Suggest a correction

  2. vgrfecp.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by JPCERT/CC as imitating auMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    vgrfecp.info
    First seen
    2026-10-29 03:31 UTC
    First published
    2026-10-29 03:36 UTC
    Listing
    JPCERT/CC confirmed it 2026-05-07 · first observed in the feed 2026-10-27 · listing window ended 2026-11-03
    DNS
    Resolves · checked 2026-11-05 03:42 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-29 02:29 UTC to 2027-01-27 02:29 UTC
    Logged 2026-10-29 03:28 UTC in Geomys Tuscolo2027h1, entry 390,080,245
    SHA-256 1f00025a3b33f046d2b582d0fd71f0eea49881f4942f373994a6681296adbf7c
    Public key SHA-256 ccd24d418511c913f014083a98eea066e2b407c969eaa04b6ee02c73f460837e
    Brand
    KDDI
    Addresses
    104.21.19.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.159, 172.67.186.243): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vgrfecp.info
    Registered
    2025-11-13 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:10 UTC

    Suggest a correction

  3. fashpnn.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by JPCERT/CC as imitating auMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    fashpnn.info
    First seen
    2026-10-28 18:31 UTC
    First published
    2026-10-28 19:20 UTC
    Listing
    JPCERT/CC confirmed it 2026-05-07 · first observed in the feed 2026-10-27 · listing window ended 2026-11-03
    DNS
    Resolves · checked 2026-11-04 19:31 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-28 17:28 UTC to 2027-01-26 17:28 UTC
    Logged 2026-10-28 18:27 UTC in Google ParcelYard2027h1, entry 492,941,993
    SHA-256 7d638dfb1239e701b99a4f213b5f211713b60e3422c47869947f0e5a5ffb2602
    Public key SHA-256 813a75d13e97387c79b51163533a99843d6f1d81d233da64292061cecf109375
    Brand
    KDDI
    Addresses
    104.21.35.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.35.22, 172.67.211.158): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fashpnn.info
    Registered
    2025-11-13 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  4. vmsuzid.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by JPCERT/CC as imitating auMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    vmsuzid.info
    First seen
    2026-10-28 15:31 UTC
    First published
    2026-10-28 16:14 UTC
    Listing
    JPCERT/CC confirmed it 2026-05-07 · first observed in the feed 2026-10-27 · listing window ended 2026-11-03
    DNS
    Resolves · checked 2026-11-04 16:21 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-28 14:29 UTC to 2027-01-26 14:29 UTC
    Logged 2026-10-28 15:28 UTC in Google ParcelYard2027h1, entry 490,580,639
    SHA-256 98c817f8a2affda5b25b6d4739fdb07692ea44c211ceb54aed9402c45e048caa
    Public key SHA-256 6c197b02b9133a4a19582a0ba34c660d3738123738be4ff40bd2fde6b198d792
    Brand
    KDDI
    Addresses
    104.21.76.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.242, 172.67.202.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vmsuzid.info
    Registered
    2025-11-13 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  5. ozxkjvu.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by JPCERT/CC as imitating auMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    ozxkjvu.info
    First seen
    2026-10-28 12:52 UTC
    First published
    2026-10-28 13:04 UTC
    Listing
    JPCERT/CC confirmed it 2026-05-07 · first observed in the feed 2026-10-27 · listing window ended 2026-11-03
    DNS
    Resolves · checked 2026-11-04 13:20 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-28 11:50 UTC to 2027-01-26 11:50 UTC
    Logged 2026-10-28 12:49 UTC in Let's Encrypt Willow2027h1, entry 814,809,967
    SHA-256 3c1afc91e014121ce4a8c63f21c20e2c067154588207db6ed0c48e01a0e0e067
    Public key SHA-256 7e762512a148ea196f4d754348db19dbe1b3209fd9dd9b6464642af3dcc562f5
    Brand
    KDDI
    Addresses
    104.21.87.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.87.97, 172.67.169.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ozxkjvu.info
    Registered
    2025-11-13 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  6. qewvvtw.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by JPCERT/CC as imitating auMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    qewvvtw.info
    First seen
    2026-10-28 11:51 UTC
    First published
    2026-10-28 11:58 UTC
    Listing
    JPCERT/CC confirmed it 2026-05-07 · first observed in the feed 2026-10-27 · listing window ended 2026-11-03
    DNS
    Resolves · checked 2026-11-04 12:09 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-28 10:50 UTC to 2027-01-26 10:50 UTC
    Logged 2026-10-28 11:48 UTC in Google PlumbersArms2027h1, entry 488,404,337
    SHA-256 03bccd01b5d7e44e1bfbb734e231421b1d35d97c795f817eb515f7348603ca80
    Public key SHA-256 8af176d4d6e4e8e88466fd13feb6abd07fb3d2c979cd5d2ef2a630d9eea323e3
    Brand
    KDDI
    Addresses
    104.21.1.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.1.140, 172.67.129.104): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qewvvtw.info
    Registered
    2025-11-13 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches KDDI when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Telecom & ISP

All brands →