Lazada
Certificate findings for Lazada
DomainSpoof matched these hostnames, from public certificate logs, to Lazada's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 9 findings, grouped by hostname
- lazada88.ph US · AS23470 · ReliableSite.Net LLC2 addressesPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for lazada88.ph
- Hostname
- lazada88.ph
- First seen
- 2026-11-05 09:02 UTC
- First published
- 2026-10-28 05:36 UTC
- DNS
- Resolves · checked 2026-11-05 09:02 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.93.103.100.
- Phishing-host list fetched with the address
- Resolved to 172.93.103.100
- Brand
- Lazada
- Addresses
- 172.93.103.100 · United States · AS23470 RELIABLESITE - ReliableSite.Net LLC212.92.105.203 · Netherlands · AS43350 NFORCE NForce Entertainment B.V.
- Domain
- lazada88.ph
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:54 UTC
- www.lazada88id.com US · AS22612 · Namecheap, Inc.Phishing hostNamecheapAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missingRegistered 6 mo ago
DetailsHide details for www.lazada88id.com
- Hostname
- www.lazada88id.com
- First seen
- 2026-11-05 01:55 UTC
- First published
- 2026-11-05 02:59 UTC
- DNS
- Resolves · checked 2026-11-05 03:11 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 66.29.148.152.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 66.29.148.152
- Latest DNS check
- Certificate
- Issued by YR1 · precertificateValid 2026-11-05 00:48 UTC to 2027-02-03 00:48 UTCLogged 2026-11-05 01:47 UTC in Geomys Tuscolo2027h1, entry 480,585,244SHA-256 442084c513d6ada344567bc8d07dddfbc4237c2d2381a761dd4ce49cdb06eb35Public key SHA-256 84bbc9b72520917e5ac7ac7e572818c67af03eb005bac558e2945a944e437d1b
- Brand
- Lazada
- Addresses
- 66.29.148.152 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (66.29.148.152): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- lazada88id.com
- Registered
- 2026-05-07 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 03:00 UTC
- lazada88id.com US · AS22612 · Namecheap, Inc.Phishing hostNamecheapAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missingRegistered 6 mo ago
DetailsHide details for lazada88id.com
- Hostname
- lazada88id.com
- First seen
- 2026-11-05 01:55 UTC
- First published
- 2026-11-05 02:59 UTC
- DNS
- Resolves · checked 2026-11-05 03:11 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 66.29.148.152.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 66.29.148.152
- Latest DNS check
- Certificate
- Issued by YR1 · precertificateValid 2026-11-05 00:48 UTC to 2027-02-03 00:48 UTCLogged 2026-11-05 01:47 UTC in Geomys Tuscolo2027h1, entry 480,585,244SHA-256 442084c513d6ada344567bc8d07dddfbc4237c2d2381a761dd4ce49cdb06eb35Public key SHA-256 84bbc9b72520917e5ac7ac7e572818c67af03eb005bac558e2945a944e437d1b
- Brand
- Lazada
- Addresses
- 66.29.148.152 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (66.29.148.152): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- lazada88id.com
- Registered
- 2026-05-07 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 03:00 UTC
- lazada.site DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…5 addressesPhishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 10 mo ago
DetailsHide details for lazada.site
- Hostname
- lazada.site
- First seen
- 2026-11-03 19:52 UTC
- First published
- 2026-11-03 20:36 UTC
- DNS
- Resolves · checked 2026-11-04 20:44 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.78.156.59.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 5.78.156.59
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-03 18:51 UTC to 2027-02-01 18:51 UTCLogged 2026-11-03 19:50 UTC in Google PlumbersArms2027h1, entry 596,482,133SHA-256 5b54c7e39716c4dd6d48c36d3225cffe3d56bc64b443d1e53105a5d7b16e75c5Public key SHA-256 0f0f32a7193bb1bcd042cff0eaf169ebf53383a19b4d386accedcb873b978481
- Brand
- Lazada
- Addresses
- 5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
- Domain
- lazada.site
- Registered
- 2025-12-27 · VIRTUA DRUG Kutatási Szolgáltató Korlátolt Felelősségű Társaság
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 20:39 UTC
- r.notice.lazada-ss1.online FR · AS200484 · SENDINBLUE-ASN Sendinblue S…Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC policy noneRegistered 8 mo ago
DetailsHide details for r.notice.lazada-ss1.online
- Hostname
- r.notice.lazada-ss1.online
- First seen
- 2026-11-03 09:20 UTC
- First published
- 2026-11-03 09:58 UTC
- DNS
- Resolves · checked 2026-11-05 10:02 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 172.246.243.65
- Latest DNS check
- Certificate
- Issued by YR1Valid 2026-11-03 08:18 UTC to 2027-02-01 08:18 UTCLogged 2026-11-03 09:16 UTC in Google ParcelYard2027h1, entry 587,402,390SHA-256 c9d70c6f1da0b6ab522af8e3d726263addef1b216c44558babee25fc7561e95aPublic key SHA-256 2534f1730ec26a25e80a38520642add05f1231a89aa65bc6c1ec67a8c90f1d0c
- Brand
- Lazada
- Addresses
- 172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS
- Domain
- lazada-ss1.online
- Registered
- 2026-03-02 · GoDaddy.com, LLC
- MX
- Receives mail at mail.shxcyc.com
- SPF
- SPF record with -all: other senders fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 09:59 UTC
- r.notice.lazada-ss1.space FR · AS200484 · SENDINBLUE-ASN Sendinblue S…Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC policy noneRegistered 7 mo ago
DetailsHide details for r.notice.lazada-ss1.space
- Hostname
- r.notice.lazada-ss1.space
- First seen
- 2026-11-03 08:06 UTC
- First published
- 2026-11-03 08:50 UTC
- DNS
- Resolves · checked 2026-11-05 09:02 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 172.246.243.65
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-03 07:06 UTC to 2027-02-01 07:06 UTCLogged 2026-11-03 08:05 UTC in Google PlumbersArms2027h1, entry 586,852,173SHA-256 9061f163410bfcfada08061e60b13a7a2a91f5011e61d4137c8216d2cd0a7772Public key SHA-256 595f1237ada6f586dd7b7438a175758eca6852f84758dc5e144cbb7eed4907fa
- Brand
- Lazada
- Addresses
- 172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS
- Domain
- lazada-ss1.space
- Registered
- 2026-04-02 · GoDaddy.com, LLC
- MX
- Receives mail at mail.shxcyc.com
- SPF
- SPF record with -all: other senders fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 08:54 UTC
- r.notice.lazada-ss1.xyz FR · AS200484 · SENDINBLUE-ASN Sendinblue S…Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC policy noneRegistered 7 mo ago
DetailsHide details for r.notice.lazada-ss1.xyz
- Hostname
- r.notice.lazada-ss1.xyz
- First seen
- 2026-11-03 07:42 UTC
- First published
- 2026-11-03 08:50 UTC
- DNS
- Resolves · checked 2026-11-05 09:02 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 172.246.243.65
- Latest DNS check
- Certificate
- Issued by YR1 · precertificateValid 2026-11-03 06:40 UTC to 2027-02-01 06:40 UTCLogged 2026-11-03 07:38 UTC in IPng Networks Gouda2027h1, entry 300,172,633SHA-256 0aecceb4ee60abe24310917e6fa695ea73dcb5ff2641f0eed27cda2e9db609f9Public key SHA-256 8aace6280534d13ba7a66bee8a86309c6e9141550c4e9e372163d830f2b79e03
- Brand
- Lazada
- Addresses
- 172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS
- Domain
- lazada-ss1.xyz
- Registered
- 2026-04-02 · GoDaddy.com, LLC
- MX
- Receives mail at mail.shxcyc.com
- SPF
- SPF record with -all: other senders fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 08:54 UTC
- www.lazada.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC rejectRegistered 3 mo ago
DetailsHide details for www.lazada.pl
- Hostname
- www.lazada.pl
- First seen
- 2026-10-26 13:21 UTC
- DNS
- Resolves · checked 2026-11-05 09:06 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.253.212.22.
- Phishing-host list fetched with the address
- Resolved to 185.253.212.22
- Latest DNS check
- Certificate
- Logged in Google ParcelYard2027h1, entry 455,028,866SHA-256 c6a1f20c0cb45733208860b3fa6278907812f4a033e66e562bc055bbddbface3
- Brand
- Lazada
- Addresses
- 185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
- Domain
- lazada.pl
- Registered
- 2026-07-26 · Aftermarket.pl Limited
- MX
- Receives mail at blackhole.aftermarket.pl
- SPF
- SPF record with -all: other senders fail
- DMARC
- DMARC policy p=reject
- Checked
- 2026-11-05 08:23 UTC
- lazada.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC rejectRegistered 3 mo ago
DetailsHide details for lazada.pl
- Hostname
- lazada.pl
- First seen
- 2026-10-26 13:21 UTC
- DNS
- Resolves · checked 2026-11-05 09:04 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.253.212.22.
- Phishing-host list fetched with the address
- Resolved to 185.253.212.22
- Latest DNS check
- Certificate
- Logged in Google ParcelYard2027h1, entry 455,028,866SHA-256 c6a1f20c0cb45733208860b3fa6278907812f4a033e66e562bc055bbddbface3
- Brand
- Lazada
- Addresses
- 185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
- Domain
- lazada.pl
- Registered
- 2026-07-26 · Aftermarket.pl Limited
- MX
- Receives mail at blackhole.aftermarket.pl
- SPF
- SPF record with -all: other senders fail
- DMARC
- DMARC policy p=reject
- Checked
- 2026-11-05 08:23 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Lazada when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

