LinkedIn

Social media United Stateslinkedin.comRank 11 of the most impersonated
Cert findings · 24 h
18
Cert findings · 7 days
32
31 on phishing hosts · 1 on Spamhaus DROP
Registered lookalikes
326
54 listed by a source or an address list
Official domains
157
verified from LinkedIn's own sites and records

Certificate findings for LinkedIn

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to LinkedIn's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 43 findings, grouped by hostname

  1. www.ma-formation-linkedin.fr FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    www.ma-formation-linkedin.fr
    First seen
    2026-11-04 23:58 UTC
    First published
    2026-11-05 00:41 UTC
    DNS
    Resolves · checked 2026-11-05 00:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 145.239.37.162.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 145.239.37.162
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-04 22:55 UTC to 2027-02-02 22:55 UTC
    Logged 2026-11-04 23:54 UTC in Google PlumbersArms2027h1, entry 617,026,716
    SHA-256 29d20f3b2eabf5f2ac7bc9651dfe6535833d4420835b505156bc3f60eca16f32
    Public key SHA-256 40ec0a4c53e70cb82b10713169d5ba7c9d34e3eaa93b51c375da4eb3b3d7ee59
    Brand
    LinkedIn
    Addresses
    145.239.37.162 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (145.239.37.162): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ma-formation-linkedin.fr
    Registered
    2026-11-04 · OVH
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:41 UTC

    Suggest a correction

  2. ma-formation-linkedin.fr FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    ma-formation-linkedin.fr
    First seen
    2026-11-04 23:58 UTC
    First published
    2026-11-05 00:41 UTC
    DNS
    Resolves · checked 2026-11-05 00:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 145.239.37.162.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 145.239.37.162
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-04 22:55 UTC to 2027-02-02 22:55 UTC
    Logged 2026-11-04 23:54 UTC in Let's Encrypt Willow2027h1, entry 940,593,304
    SHA-256 1fff3f4dd916590f20dfa36813d1d78cb6d163fbdbddaab460716e21f27ace49
    Public key SHA-256 9b2970f73b027d1e09b1fa9a410ae82c4e320ce93e2650e25810194749ffd698
    Brand
    LinkedIn
    Addresses
    145.239.37.162 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (145.239.37.162): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ma-formation-linkedin.fr
    Registered
    2026-11-04 · OVH
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:41 UTC

    Suggest a correction

  3. www.linkedin-invoice-accounting.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    www.linkedin-invoice-accounting.com
    First seen
    2026-11-04 13:08 UTC
    First published
    2026-11-04 13:59 UTC
    DNS
    Resolves · checked 2026-11-04 14:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-04 12:05 UTC to 2027-02-02 12:05 UTC
    Logged 2026-11-04 13:03 UTC in Google ParcelYard2027h1, entry 608,741,175
    SHA-256 79a2ab03083e5effef1eed7ac3f090b7dc41e61c58b3a80c48e651bcd264f07f
    Public key SHA-256 05eb76b62aceaf028de9996cea316a89d00ddb65794e9b7ed40d7345ddc8b228
    Brand
    LinkedIn
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    linkedin-invoice-accounting.com
    Registered
    2026-11-04 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:59 UTC

    Suggest a correction

  4. linkedin-invoice-accounting.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    linkedin-invoice-accounting.com
    First seen
    2026-11-04 13:08 UTC
    First published
    2026-11-04 13:59 UTC
    DNS
    Resolves · checked 2026-11-04 14:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-04 12:05 UTC to 2027-02-02 12:05 UTC
    Logged 2026-11-04 13:03 UTC in Google ParcelYard2027h1, entry 608,741,175
    SHA-256 79a2ab03083e5effef1eed7ac3f090b7dc41e61c58b3a80c48e651bcd264f07f
    Public key SHA-256 05eb76b62aceaf028de9996cea316a89d00ddb65794e9b7ed40d7345ddc8b228
    Brand
    LinkedIn
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    linkedin-invoice-accounting.com
    Registered
    2026-11-04 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:59 UTC

    Suggest a correction

  5. www.customerservice-linkedin.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 2 mo ago
    DetailsHide
    Hostname
    www.customerservice-linkedin.com
    First seen
    2026-11-04 12:27 UTC
    First published
    2026-11-04 13:12 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.68.132.246.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 51.68.132.246
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-04 11:22 UTC to 2027-02-02 11:22 UTC
    Logged 2026-11-04 12:20 UTC in IPng Networks Gouda2027h1, entry 314,202,841
    SHA-256 96aa11dfaaf1c366ec7f99efe395a0ea4b60f4776b6474bdf89420281f354088
    Public key SHA-256 51ffc603efed73fa85a6fef957bc1aeee48beb4c255510665d5a5cb361842bc6
    Brand
    LinkedIn
    Addresses
    51.68.132.246 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.132.246): a cloud provider. It rents servers and addresses to its customers.
    Domain
    customerservice-linkedin.com
    Registered
    2026-09-04 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at customerservice-linkedin.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:12 UTC

    Suggest a correction

  6. webmail.customerservice-linkedin.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 2 mo ago
    DetailsHide
    Hostname
    webmail.customerservice-linkedin.com
    First seen
    2026-11-04 12:27 UTC
    First published
    2026-11-04 13:12 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.68.132.246.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 51.68.132.246
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-04 11:22 UTC to 2027-02-02 11:22 UTC
    Logged 2026-11-04 12:20 UTC in IPng Networks Gouda2027h1, entry 314,202,841
    SHA-256 96aa11dfaaf1c366ec7f99efe395a0ea4b60f4776b6474bdf89420281f354088
    Public key SHA-256 51ffc603efed73fa85a6fef957bc1aeee48beb4c255510665d5a5cb361842bc6
    Brand
    LinkedIn
    Addresses
    51.68.132.246 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.132.246): a cloud provider. It rents servers and addresses to its customers.
    Domain
    customerservice-linkedin.com
    Registered
    2026-09-04 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at customerservice-linkedin.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:12 UTC

    Suggest a correction

  7. webdisk.customerservice-linkedin.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 2 mo ago
    DetailsHide
    Hostname
    webdisk.customerservice-linkedin.com
    First seen
    2026-11-04 12:27 UTC
    First published
    2026-11-04 13:12 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.68.132.246.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 51.68.132.246
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-04 11:22 UTC to 2027-02-02 11:22 UTC
    Logged 2026-11-04 12:20 UTC in IPng Networks Gouda2027h1, entry 314,202,841
    SHA-256 96aa11dfaaf1c366ec7f99efe395a0ea4b60f4776b6474bdf89420281f354088
    Public key SHA-256 51ffc603efed73fa85a6fef957bc1aeee48beb4c255510665d5a5cb361842bc6
    Brand
    LinkedIn
    Addresses
    51.68.132.246 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.132.246): a cloud provider. It rents servers and addresses to its customers.
    Domain
    customerservice-linkedin.com
    Registered
    2026-09-04 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at customerservice-linkedin.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:12 UTC

    Suggest a correction

  8. mail.customerservice-linkedin.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 2 mo ago
    DetailsHide
    Hostname
    mail.customerservice-linkedin.com
    First seen
    2026-11-04 12:27 UTC
    First published
    2026-11-04 13:12 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.68.132.246.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 51.68.132.246
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-04 11:22 UTC to 2027-02-02 11:22 UTC
    Logged 2026-11-04 12:20 UTC in IPng Networks Gouda2027h1, entry 314,202,841
    SHA-256 96aa11dfaaf1c366ec7f99efe395a0ea4b60f4776b6474bdf89420281f354088
    Public key SHA-256 51ffc603efed73fa85a6fef957bc1aeee48beb4c255510665d5a5cb361842bc6
    Brand
    LinkedIn
    Addresses
    51.68.132.246 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.132.246): a cloud provider. It rents servers and addresses to its customers.
    Domain
    customerservice-linkedin.com
    Registered
    2026-09-04 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at customerservice-linkedin.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:12 UTC

    Suggest a correction

  9. customerservice-linkedin.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 2 mo ago
    DetailsHide
    Hostname
    customerservice-linkedin.com
    First seen
    2026-11-04 12:27 UTC
    First published
    2026-11-04 13:12 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.68.132.246.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 51.68.132.246
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-04 11:22 UTC to 2027-02-02 11:22 UTC
    Logged 2026-11-04 12:20 UTC in IPng Networks Gouda2027h1, entry 314,202,841
    SHA-256 96aa11dfaaf1c366ec7f99efe395a0ea4b60f4776b6474bdf89420281f354088
    Public key SHA-256 51ffc603efed73fa85a6fef957bc1aeee48beb4c255510665d5a5cb361842bc6
    Brand
    LinkedIn
    Addresses
    51.68.132.246 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.132.246): a cloud provider. It rents servers and addresses to its customers.
    Domain
    customerservice-linkedin.com
    Registered
    2026-09-04 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at customerservice-linkedin.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:12 UTC

    Suggest a correction

  10. cpcontacts.customerservice-linkedin.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 2 mo ago
    DetailsHide
    Hostname
    cpcontacts.customerservice-linkedin.com
    First seen
    2026-11-04 12:27 UTC
    First published
    2026-11-04 13:12 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.68.132.246.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 51.68.132.246
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-04 11:22 UTC to 2027-02-02 11:22 UTC
    Logged 2026-11-04 12:20 UTC in IPng Networks Gouda2027h1, entry 314,202,841
    SHA-256 96aa11dfaaf1c366ec7f99efe395a0ea4b60f4776b6474bdf89420281f354088
    Public key SHA-256 51ffc603efed73fa85a6fef957bc1aeee48beb4c255510665d5a5cb361842bc6
    Brand
    LinkedIn
    Addresses
    51.68.132.246 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.132.246): a cloud provider. It rents servers and addresses to its customers.
    Domain
    customerservice-linkedin.com
    Registered
    2026-09-04 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at customerservice-linkedin.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:12 UTC

    Suggest a correction

  11. cpcalendars.customerservice-linkedin.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 2 mo ago
    DetailsHide
    Hostname
    cpcalendars.customerservice-linkedin.com
    First seen
    2026-11-04 12:27 UTC
    First published
    2026-11-04 13:12 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.68.132.246.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 51.68.132.246
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-04 11:22 UTC to 2027-02-02 11:22 UTC
    Logged 2026-11-04 12:20 UTC in IPng Networks Gouda2027h1, entry 314,202,841
    SHA-256 96aa11dfaaf1c366ec7f99efe395a0ea4b60f4776b6474bdf89420281f354088
    Public key SHA-256 51ffc603efed73fa85a6fef957bc1aeee48beb4c255510665d5a5cb361842bc6
    Brand
    LinkedIn
    Addresses
    51.68.132.246 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.132.246): a cloud provider. It rents servers and addresses to its customers.
    Domain
    customerservice-linkedin.com
    Registered
    2026-09-04 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at customerservice-linkedin.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:12 UTC

    Suggest a correction

  12. cpanel.customerservice-linkedin.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 2 mo ago
    DetailsHide
    Hostname
    cpanel.customerservice-linkedin.com
    First seen
    2026-11-04 12:27 UTC
    First published
    2026-11-04 13:12 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.68.132.246.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 51.68.132.246
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-04 11:22 UTC to 2027-02-02 11:22 UTC
    Logged 2026-11-04 12:20 UTC in IPng Networks Gouda2027h1, entry 314,202,841
    SHA-256 96aa11dfaaf1c366ec7f99efe395a0ea4b60f4776b6474bdf89420281f354088
    Public key SHA-256 51ffc603efed73fa85a6fef957bc1aeee48beb4c255510665d5a5cb361842bc6
    Brand
    LinkedIn
    Addresses
    51.68.132.246 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.132.246): a cloud provider. It rents servers and addresses to its customers.
    Domain
    customerservice-linkedin.com
    Registered
    2026-09-04 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at customerservice-linkedin.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:12 UTC

    Suggest a correction

  13. mail.inv-linkedin.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 8 d ago
    DetailsHide
    Hostname
    mail.inv-linkedin.com
    First seen
    2026-11-04 12:20 UTC
    First published
    2026-11-04 13:12 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.68.132.246.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 51.68.132.246
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-04 11:07 UTC to 2027-02-02 11:07 UTC
    Logged 2026-11-04 12:05 UTC in Google ParcelYard2027h1, entry 607,999,723
    SHA-256 0d48123c1bd71c5d7b242e76d94957239ae92e078129ec4b9d72515b67484acc
    Public key SHA-256 dd72149fde5dfe3e5d1e737482d9d475a8a31020a73f6975ad2088ece1c9a281
    Brand
    LinkedIn
    Addresses
    51.68.132.246 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.132.246): a cloud provider. It rents servers and addresses to its customers.
    Domain
    inv-linkedin.com
    Registered
    2026-10-28 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at _dc-mx.32534fb664bd.inv-linkedin.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:12 UTC

    Suggest a correction

  14. inv-linkedin.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 8 d ago
    DetailsHide
    Hostname
    inv-linkedin.com
    First seen
    2026-11-04 12:20 UTC
    First published
    2026-11-04 13:12 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.68.132.246.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 51.68.132.246
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-04 11:07 UTC to 2027-02-02 11:07 UTC
    Logged 2026-11-04 12:05 UTC in Google ParcelYard2027h1, entry 607,999,723
    SHA-256 0d48123c1bd71c5d7b242e76d94957239ae92e078129ec4b9d72515b67484acc
    Public key SHA-256 dd72149fde5dfe3e5d1e737482d9d475a8a31020a73f6975ad2088ece1c9a281
    Brand
    LinkedIn
    Addresses
    51.68.132.246 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.132.246): a cloud provider. It rents servers and addresses to its customers.
    Domain
    inv-linkedin.com
    Registered
    2026-10-28 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at _dc-mx.32534fb664bd.inv-linkedin.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:12 UTC

    Suggest a correction

  15. cpcontacts.inv-linkedin.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 8 d ago
    DetailsHide
    Hostname
    cpcontacts.inv-linkedin.com
    First seen
    2026-11-04 12:20 UTC
    First published
    2026-11-04 13:12 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.68.132.246.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 51.68.132.246
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-04 11:07 UTC to 2027-02-02 11:07 UTC
    Logged 2026-11-04 12:05 UTC in Google ParcelYard2027h1, entry 607,999,723
    SHA-256 0d48123c1bd71c5d7b242e76d94957239ae92e078129ec4b9d72515b67484acc
    Public key SHA-256 dd72149fde5dfe3e5d1e737482d9d475a8a31020a73f6975ad2088ece1c9a281
    Brand
    LinkedIn
    Addresses
    51.68.132.246 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.132.246): a cloud provider. It rents servers and addresses to its customers.
    Domain
    inv-linkedin.com
    Registered
    2026-10-28 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at _dc-mx.32534fb664bd.inv-linkedin.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:12 UTC

    Suggest a correction

  16. cpcalendars.inv-linkedin.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 8 d ago
    DetailsHide
    Hostname
    cpcalendars.inv-linkedin.com
    First seen
    2026-11-04 12:20 UTC
    First published
    2026-11-04 13:12 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.68.132.246.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 51.68.132.246
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-04 11:07 UTC to 2027-02-02 11:07 UTC
    Logged 2026-11-04 12:05 UTC in Google ParcelYard2027h1, entry 607,999,723
    SHA-256 0d48123c1bd71c5d7b242e76d94957239ae92e078129ec4b9d72515b67484acc
    Public key SHA-256 dd72149fde5dfe3e5d1e737482d9d475a8a31020a73f6975ad2088ece1c9a281
    Brand
    LinkedIn
    Addresses
    51.68.132.246 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.132.246): a cloud provider. It rents servers and addresses to its customers.
    Domain
    inv-linkedin.com
    Registered
    2026-10-28 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at _dc-mx.32534fb664bd.inv-linkedin.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:12 UTC

    Suggest a correction

  17. cpanel.inv-linkedin.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 8 d ago
    DetailsHide
    Hostname
    cpanel.inv-linkedin.com
    First seen
    2026-11-04 12:20 UTC
    First published
    2026-11-04 13:12 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.68.132.246.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 51.68.132.246
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-04 11:07 UTC to 2027-02-02 11:07 UTC
    Logged 2026-11-04 12:05 UTC in Google ParcelYard2027h1, entry 607,999,723
    SHA-256 0d48123c1bd71c5d7b242e76d94957239ae92e078129ec4b9d72515b67484acc
    Public key SHA-256 dd72149fde5dfe3e5d1e737482d9d475a8a31020a73f6975ad2088ece1c9a281
    Brand
    LinkedIn
    Addresses
    51.68.132.246 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.132.246): a cloud provider. It rents servers and addresses to its customers.
    Domain
    inv-linkedin.com
    Registered
    2026-10-28 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at _dc-mx.32534fb664bd.inv-linkedin.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:12 UTC

    Suggest a correction

  18. pastdue-linkedin.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 8 d ago
    DetailsHide
    Hostname
    pastdue-linkedin.com
    First seen
    2026-11-04 11:24 UTC
    First published
    2026-11-04 11:54 UTC
    DNS
    Resolves · checked 2026-11-04 12:10 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.68.132.246.
    1. Certificate logged in CT
    2. Resolved to 51.68.132.246
    3. Phishing-host list fetched with the address
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-04 10:10 UTC to 2027-02-02 10:10 UTC
    Logged 2026-11-04 11:09 UTC in DigiCert Wyvern2027h1, entry 401,694,610
    SHA-256 c27d60b0d5e3ac4120b77a4dde7f3bf2baaa804baa7a5a4e63f53b0889a3a57e
    Public key SHA-256 28ac6f3fb1bcba1bca94f34f68587f9adfd084eb286c5dcbbc0a597269d91723
    Brand
    LinkedIn
    Addresses
    51.68.132.246 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.132.246): a cloud provider. It rents servers and addresses to its customers.
    Domain
    pastdue-linkedin.com
    Registered
    2026-10-28 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at pastduelinkedin-com01i.mail.protection.outlook.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:55 UTC

    Suggest a correction

  19. linkedin.cm US · AS46475 · Limestone Networks, Inc.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    linkedin.cm
    First seen
    2026-11-04 09:03 UTC
    First published
    2026-10-28 06:38 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 69.162.80.58.
    1. Phishing-host list fetched with the address
    2. Resolved to 69.162.80.58
    Brand
    LinkedIn
    Addresses
    69.162.80.58 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    69.162.80.53 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    Domain
    linkedin.cm
    Registered
    2018-09-05 · Netcom.cm Sarl
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  20. www.aca-linkedin.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    www.aca-linkedin.com
    First seen
    2026-11-03 13:52 UTC
    First published
    2026-11-03 14:30 UTC
    DNS
    Resolves · checked 2026-11-04 14:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-03 12:48 UTC to 2027-02-01 12:48 UTC
    Logged 2026-11-03 13:46 UTC in Google PlumbersArms2027h1, entry 591,673,591
    SHA-256 2a127547079aed5233b85a2a0680475accdf3bc16d310264c43d36e1433776cf
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    LinkedIn
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    aca-linkedin.com
    Registered
    2026-11-03 · NameSilo, LLC
    MX
    Receives mail at smtp.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:34 UTC

    Suggest a correction

  21. aca-linkedin.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    aca-linkedin.com
    First seen
    2026-11-03 13:46 UTC
    First published
    2026-11-03 14:30 UTC
    DNS
    Resolves · checked 2026-11-04 14:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-03 12:44 UTC to 2027-02-01 12:44 UTC
    Logged 2026-11-03 13:43 UTC in Geomys Tuscolo2027h1, entry 459,758,859
    SHA-256 06b92e5feb43a5512bc81a9cfbe9032ad7ede7df48e9a8694f87266d90d45f39
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    LinkedIn
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    aca-linkedin.com
    Registered
    2026-11-03 · NameSilo, LLC
    MX
    Receives mail at smtp.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:34 UTC

    Suggest a correction

  22. www.ame-linkedin.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.ame-linkedin.com
    First seen
    2026-11-02 21:51 UTC
    First published
    2026-11-02 22:16 UTC
    DNS
    Resolves · checked 2026-11-04 22:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-02 20:50 UTC to 2027-01-31 20:49 UTC
    Logged 2026-11-02 21:48 UTC in Google ParcelYard2027h1, entry 579,005,479
    SHA-256 1db950842d42ee4cf57829624abb8f2b008db1dbd4a526538a586a12a6b46a2a
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    LinkedIn
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ame-linkedin.com
    Registered
    2026-08-17 · NameSilo, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  23. auth.linkedin.1systemupdate.foo KN · AS402253 · SKN Subnet & Telecom Ltd
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF ~allSPF on Spamhaus DROPDMARC missingRegistered 18 d ago
    DetailsHide
    Hostname
    auth.linkedin.1systemupdate.foo
    First seen
    2026-11-02 16:11 UTC
    First published
    2026-11-02 16:54 UTC
    DNS
    Resolves · checked 2026-11-04 16:58 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 209.99.188.41.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 209.99.188.41
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-02 15:07 UTC to 2027-01-31 15:07 UTC
    Logged 2026-11-02 16:06 UTC in Google PlumbersArms2027h1, entry 575,252,108
    SHA-256 3fe10660fd1b3addb50469a8e4bc223ee7da61200f085a46d223451b01210782
    Public key SHA-256 2e45ecb2326fe3dbec132c1624cfada627619ca7635e6193322ce78e432c6c9c
    Brand
    LinkedIn
    Addresses
    209.99.188.41 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
    Domain
    1systemupdate.foo
    Registered
    2026-10-18 · Tucows Domains Inc
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    SPF listing
    The SPF record lists 209.99.188.41 as a sender. It is on Spamhaus DROP: hijacked or criminal networks.
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  24. www.bc-linkedin.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    www.bc-linkedin.com
    First seen
    2026-11-02 13:21 UTC
    First published
    2026-11-02 14:21 UTC
    DNS
    Resolves · checked 2026-11-04 14:41 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-02 12:20 UTC to 2027-01-31 12:20 UTC
    Logged 2026-11-02 13:18 UTC in IPng Networks Halloumi2027h1, entry 338,596,535
    SHA-256 54f06062064cf67b1eb45ee1d69cfec5418897eb845121a8494e1a14a087a5f8
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    LinkedIn
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    bc-linkedin.com
    Registered
    2026-11-02 · NameSilo, LLC
    MX
    Receives mail at smtp.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:34 UTC

    Suggest a correction

  25. bc-linkedin.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    bc-linkedin.com
    First seen
    2026-11-02 13:16 UTC
    First published
    2026-11-02 14:21 UTC
    DNS
    Resolves · checked 2026-11-04 14:41 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-02 12:16 UTC to 2027-01-31 12:16 UTC
    Logged 2026-11-02 13:15 UTC in Google PlumbersArms2027h1, entry 573,027,467
    SHA-256 03e184d77ead1a7415044ed93de66f762ea0efe6286df84f620c74e2e5da5f24
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    LinkedIn
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    bc-linkedin.com
    Registered
    2026-11-02 · NameSilo, LLC
    MX
    Receives mail at smtp.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:34 UTC

    Suggest a correction

  26. u-linkedin.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    u-linkedin.com
    First seen
    2026-11-02 09:42 UTC
    First published
    2026-11-02 09:49 UTC
    DNS
    Resolves · checked 2026-11-05 09:54 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-02 08:41 UTC to 2027-01-31 08:41 UTC
    Logged 2026-11-02 09:40 UTC in Let's Encrypt Sycamore2027h1, entry 901,169,164
    SHA-256 41953b9fbb386ad509288ea5ce5514b07b0e567704c6a22fd592c548b2277b88
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    LinkedIn
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    u-linkedin.com
    Registered
    2026-07-01 · NameSilo, LLC
    MX
    Receives mail at mx1.titan.email, mx2.titan.email
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  27. www.rec-linkedin.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.rec-linkedin.com
    First seen
    2026-11-02 03:52 UTC
    First published
    2026-11-02 04:28 UTC
    DNS
    Resolves · checked 2026-11-05 04:42 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-02 02:49 UTC to 2027-01-31 02:49 UTC
    Logged 2026-11-02 03:48 UTC in Google ParcelYard2027h1, entry 565,470,509
    SHA-256 3a27913400ea7377837a1708fc73a61f7793b9d26f61928bd3bac1490c1b2315
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    LinkedIn
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    rec-linkedin.com
    Registered
    2026-08-25 · NameSilo, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 05:03 UTC

    Suggest a correction

  28. www.invoicemembers-linkedin.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 5 d ago
    DetailsHide
    Hostname
    www.invoicemembers-linkedin.com
    First seen
    2026-10-31 17:36 UTC
    First published
    2026-10-31 17:58 UTC
    DNS
    Resolves · checked 2026-11-04 18:11 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 16:33 UTC to 2027-01-29 16:33 UTC
    Logged 2026-10-31 17:31 UTC in Let's Encrypt Sycamore2027h1, entry 874,622,673
    SHA-256 50ecabc83c956bd20347bb7c8253659102b363cae125010fec71a474cd2da7ee
    Public key SHA-256 dbadc671593e090a7eb7bca04b1f8ec4a993b321cf179750076bafe53b1c9785
    Brand
    LinkedIn
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    invoicemembers-linkedin.com
    Registered
    2026-10-31 · HOSTINGER operations, UAB
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  29. invoicemembers-linkedin.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 5 d ago
    DetailsHide
    Hostname
    invoicemembers-linkedin.com
    First seen
    2026-10-31 17:36 UTC
    First published
    2026-10-31 17:58 UTC
    DNS
    Resolves · checked 2026-11-04 18:11 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 16:33 UTC to 2027-01-29 16:33 UTC
    Logged 2026-10-31 17:31 UTC in Let's Encrypt Sycamore2027h1, entry 874,622,673
    SHA-256 50ecabc83c956bd20347bb7c8253659102b363cae125010fec71a474cd2da7ee
    Public key SHA-256 dbadc671593e090a7eb7bca04b1f8ec4a993b321cf179750076bafe53b1c9785
    Brand
    LinkedIn
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    invoicemembers-linkedin.com
    Registered
    2026-10-31 · HOSTINGER operations, UAB
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  30. membership-linkedin.com GB · AS52148 · ENIXLTD Enix Ltd
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentDMARC policy noneRegistered 7 mo ago
    DetailsHide
    Hostname
    membership-linkedin.com
    First seen
    2026-10-30 15:01 UTC
    First published
    2026-10-30 15:59 UTC
    DNS
    Resolves · checked 2026-11-04 16:12 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.204.209.31.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.204.209.31
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-30 13:59 UTC to 2027-01-28 13:59 UTC
    Logged 2026-10-30 14:58 UTC in Let's Encrypt Willow2027h1, entry 850,907,539
    SHA-256 427f818461e15d7267253415830c7a47d4309913185511fbc7a66746595b86f8
    Public key SHA-256 8712ba9290de1724d65ddef66a2d4c2873f3d1c72e208db247f8a8ad4175ee6e
    Brand
    LinkedIn
    Addresses
    91.204.209.31 · United Kingdom · AS52148 ENIXLTD Enix Ltd
    Domain
    membership-linkedin.com
    Registered
    2026-04-10 · Upperlink Limited
    MX
    Receives mail at membershiplinkedin-com02e.mail.protection.outlook.com
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  31. www.fin-linkedin.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 10 d ago
    DetailsHide
    Hostname
    www.fin-linkedin.com
    First seen
    2026-10-29 16:11 UTC
    First published
    2026-10-29 16:24 UTC
    DNS
    Resolves · checked 2026-11-04 16:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-29 15:09 UTC to 2027-01-27 15:09 UTC
    Logged 2026-10-29 16:07 UTC in Google PlumbersArms2027h1, entry 509,149,317
    SHA-256 5b9769f9de2855963948b6a55ee8ea71fa9ff39c11805acbbfbac97b7dc5c9b3
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    LinkedIn
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    fin-linkedin.com
    Registered
    2026-10-26 · NameSilo, LLC
    MX
    Receives mail at smtp.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  32. www.fs-linkedin.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.fs-linkedin.com
    First seen
    2026-10-29 14:53 UTC
    First published
    2026-10-29 15:21 UTC
    DNS
    Resolves · checked 2026-11-04 15:34 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-29 13:49 UTC to 2027-01-27 13:49 UTC
    Logged 2026-10-29 14:48 UTC in DigiCert Wyvern2027h1, entry 348,865,516
    SHA-256 2f67a387e8f312c7ed54b0367f3befbe71bc42c675e2945879097a60358b5b19
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    LinkedIn
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    fs-linkedin.com
    Registered
    2026-08-25 · NameSilo, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  33. www.linkedin-wanli.com US · AS393437 · KLAYER LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    www.linkedin-wanli.com
    First seen
    2026-10-29 06:32 UTC
    First published
    2026-10-31 07:18 UTC
    DNS
    Resolves · checked 2026-11-05 07:22 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 72.244.91.252.
    1. Resolved to 72.244.91.252
    2. Phishing-host list fetched with the address
    3. Latest DNS check
    Brand
    LinkedIn
    Addresses
    72.244.91.252 · United States · AS393437 KLAYER - KLAYER LLC
    Domain
    linkedin-wanli.com
    Registered
    2026-10-29 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  34. linkedin-wanli.com US · AS393437 · KLAYER LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    linkedin-wanli.com
    First seen
    2026-10-29 06:32 UTC
    First published
    2026-10-31 07:18 UTC
    DNS
    Resolves · checked 2026-11-05 07:22 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 72.244.91.252.
    1. Resolved to 72.244.91.252
    2. Phishing-host list fetched with the address
    3. Latest DNS check
    Brand
    LinkedIn
    Addresses
    72.244.91.252 · United States · AS393437 KLAYER - KLAYER LLC
    Domain
    linkedin-wanli.com
    Registered
    2026-10-29 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  35. linkedin-ai.fr FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 24 mo ago
    DetailsHide
    Hostname
    linkedin-ai.fr
    First seen
    2026-10-28 22:31 UTC
    First published
    2026-10-28 23:28 UTC
    DNS
    Resolves · checked 2026-11-04 23:41 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.91.236.255.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 51.91.236.255
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-28 21:28 UTC to 2027-01-26 21:28 UTC
    Logged 2026-10-28 22:26 UTC in Let's Encrypt Sycamore2027h1, entry 827,992,005
    SHA-256 09000d2dcbde3585b4244ae5cbcfc01d041e1d144aa12c0160fa263995cb657e
    Public key SHA-256 2bc1037dbeea63bd3bfde62f39083b9a23d063c6b5fc0d42fc6549ace6c33f12
    Brand
    LinkedIn
    Addresses
    51.91.236.255 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.91.236.255): a cloud provider. It rents servers and addresses to its customers.
    Domain
    linkedin-ai.fr
    Registered
    2024-11-24 · OVH
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:44 UTC

    Suggest a correction

  36. www.edw-linkedin.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 d ago
    DetailsHide
    Hostname
    www.edw-linkedin.com
    First seen
    2026-10-28 06:41 UTC
    First published
    2026-10-28 07:41 UTC
    DNS
    Resolves · checked 2026-11-05 09:07 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-28 05:38 UTC to 2027-01-26 05:38 UTC
    Logged 2026-10-28 06:36 UTC in Let's Encrypt Sycamore2027h1, entry 815,705,112
    SHA-256 d3a16782b52b2d29c307b623fb64cc81df95ee26aec58e6d776b15f84994085b
    Public key SHA-256 08ba38cacfe98aa8b956051d8f87519690c2304fddb50905a4d3a56aa5de370d
    Brand
    LinkedIn
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    edw-linkedin.com
    Registered
    2026-10-28 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  37. edw-linkedin.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 d ago
    DetailsHide
    Hostname
    edw-linkedin.com
    First seen
    2026-10-28 06:41 UTC
    First published
    2026-10-28 07:41 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-28 05:38 UTC to 2027-01-26 05:38 UTC
    Logged 2026-10-28 06:36 UTC in Let's Encrypt Sycamore2027h1, entry 815,705,112
    SHA-256 d3a16782b52b2d29c307b623fb64cc81df95ee26aec58e6d776b15f84994085b
    Public key SHA-256 08ba38cacfe98aa8b956051d8f87519690c2304fddb50905a4d3a56aa5de370d
    Brand
    LinkedIn
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    edw-linkedin.com
    Registered
    2026-10-28 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  38. www.linkedin-ai.fr FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 24 mo ago
    DetailsHide
    Hostname
    www.linkedin-ai.fr
    First seen
    2026-10-28 02:27 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.91.236.255.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 51.91.236.255
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-28 01:26 UTC to 2027-01-26 01:25 UTC
    Logged 2026-10-28 02:24 UTC in Geomys Tuscolo2027h1, entry 377,274,921
    SHA-256 0d3cce4c84ac54f1cfbd24be5f3ebdd3bfb2349deda69e355d5bd8134255a7fb
    Public key SHA-256 58b568b2bc3c16456e651a783f08037e298164d652d50287f3c36b2bf1171ee0
    Brand
    LinkedIn
    Addresses
    51.91.236.255 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.91.236.255): a cloud provider. It rents servers and addresses to its customers.
    Domain
    linkedin-ai.fr
    Registered
    2024-11-24 · OVH
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:44 UTC

    Suggest a correction

  39. fs-linkedin.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    fs-linkedin.com
    First seen
    2026-10-27 19:06 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-27 18:06 UTC to 2027-01-25 18:06 UTC
    Logged 2026-10-27 19:04 UTC in Google PlumbersArms2027h1, entry 476,834,232
    SHA-256 ea8d6349f947eadfd107e0fde2ccc828ac67e080a63aeecbc85f9e033263b04b
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    LinkedIn
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    fs-linkedin.com
    Registered
    2026-08-25 · NameSilo, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  40. verify-linkedin.click US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    verify-linkedin.click
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brand
    LinkedIn
    Addresses
    104.21.41.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:296f
    2606:4700:3037::ac43:a471
    Cloudflare
    Cloudflare (104.21.41.111, 172.67.164.113): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    verify-linkedin.click
    Registered
    2026-08-25 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:28 UTC

    Suggest a correction

  41. fin-linkedin.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 10 d ago
    DetailsHide
    Hostname
    fin-linkedin.com
    First seen
    2026-10-26 14:01 UTC
    DNS
    Resolves · checked 2026-11-05 09:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Resolved to 172.232.24.161
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 786,999,737
    SHA-256 9edd43ca8a680871fc3d14b0041532d4a92142caf1e809a57ff21e97b377c6e9
    Brand
    LinkedIn
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    fin-linkedin.com
    Registered
    2026-10-26 · NameSilo, LLC
    MX
    Receives mail at smtp.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  42. www.membreships-linkedin.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.membreships-linkedin.com
    First seen
    2026-10-26 05:06 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Resolved to 2.57.91.91
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 449,919,118
    SHA-256 182e3e6ef9b9f07fa373fabefc52cb2c6ada99e5656bec0164a0c1e20962e6af
    Brand
    LinkedIn
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    membreships-linkedin.com
    Registered
    2026-05-13 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  43. membreships-linkedin.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    membreships-linkedin.com
    First seen
    2026-10-26 05:06 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Resolved to 2.57.91.91
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 449,919,118
    SHA-256 182e3e6ef9b9f07fa373fabefc52cb2c6ada99e5656bec0164a0c1e20962e6af
    Brand
    LinkedIn
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    membreships-linkedin.com
    Registered
    2026-05-13 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches LinkedIn when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Social media

All brands →