Klimabonus

Government services Austriaklimabonus.gv.atRank 575 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
3
3 on Spamhaus DROP
Registered lookalikes
13
1 listed by a source or an address list
Official domains
4
verified from Klimabonus's own sites and records

Certificate findings for Klimabonus

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Klimabonus's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 3 findings, grouped by hostname

  1. at-klimabonus.net RU · AS200593 · PROSPERO-AS PROSPERO OOO
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    at-klimabonus.net
    First seen
    2026-11-03 16:52 UTC
    First published
    2026-11-03 17:06 UTC
    DNS
    Resolves · checked 2026-11-04 17:19 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 91.215.85.195.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.215.85.195
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL RSA DV SSL CA 2 · precertificate
    Valid 2026-11-03 00:00 UTC to 2027-02-01 23:59 UTC
    Logged 2026-11-03 16:47 UTC in Geomys Tuscolo2027h1, entry 461,587,960
    SHA-256 47ad2f356ae6ec24f77ab9b1aab69a14c312e6218df2d6c2b77e10790ee80d0d
    Public key SHA-256 b558a3fdf865cc3d5a88c6bfa9d3f2e71842a515b9b3f22caff180dbbca9e118
    Brand
    Klimabonus
    Addresses
    91.215.85.195 · Russia · AS200593 PROSPERO-AS PROSPERO OOO
    Domain
    at-klimabonus.net
    Registered
    2026-11-03 · Internet Domain Service BS Corp
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  2. www.at-klimabonus.com RU · AS200593 · PROSPERO-AS PROSPERO OOO
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    www.at-klimabonus.com
    First seen
    2026-11-03 08:46 UTC
    First published
    2026-11-03 09:58 UTC
    DNS
    Resolves · checked 2026-11-05 10:02 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 91.215.85.195.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.215.85.195
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL RSA DV SSL CA 2
    Valid 2026-11-03 00:00 UTC to 2027-02-01 23:59 UTC
    Logged 2026-11-03 08:44 UTC in Sectigo Monument2027h1, entry 38,438,218
    SHA-256 97651629cac45443ab5a77085fc5b17d0dd10bc835a9b687957a98ef703bc25b
    Public key SHA-256 e2c6fc96aa11fb129a5eab83cab280f32eed942fe5f6b942a9bc8f7ad5d8955d
    Brand
    Klimabonus
    Addresses
    91.215.85.195 · Russia · AS200593 PROSPERO-AS PROSPERO OOO
    Domain
    at-klimabonus.com
    Registered
    2026-11-02 · Internet Domain Service BS Corp
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  3. at-klimabonus.com RU · AS200593 · PROSPERO-AS PROSPERO OOO
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    at-klimabonus.com
    First seen
    2026-11-03 08:46 UTC
    First published
    2026-11-03 09:58 UTC
    DNS
    Resolves · checked 2026-11-05 10:02 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 91.215.85.195.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.215.85.195
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL RSA DV SSL CA 2 · precertificate
    Valid 2026-11-03 00:00 UTC to 2027-02-01 23:59 UTC
    Logged 2026-11-03 08:44 UTC in Geomys Tuscolo2027h1, entry 456,548,538
    SHA-256 34af2538a49124998a4ca4f4643b8e0e4813cb0a87ba7c750147f6adb1475c47
    Public key SHA-256 49d50ed5e3fcc6aeffb04c4c3421193d705a229bfd6139da994e87423c63e15c
    Brand
    Klimabonus
    Addresses
    91.215.85.195 · Russia · AS200593 PROSPERO-AS PROSPERO OOO
    Domain
    at-klimabonus.com
    Registered
    2026-11-02 · Internet Domain Service BS Corp
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Klimabonus when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Government services

All brands →