Luminus
Certificate findings for Luminus
DomainSpoof matched these hostnames, from public certificate logs, to Luminus's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 7 findings, grouped by hostname
- cpanel.luminusgroup.com.bd DE · AS24940 · HETZNER-AS Hetzner Online G…Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy none
DetailsHide details for cpanel.luminusgroup.com.bd
- Hostname
- cpanel.luminusgroup.com.bd
- First seen
- 2026-11-03 13:52 UTC
- First published
- 2026-11-03 14:30 UTC
- DNS
- Resolves · checked 2026-11-04 15:34 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.108.79.152.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 65.108.79.152
- Certificate
- Issued by YR1Valid 2026-11-03 12:51 UTC to 2027-02-01 12:51 UTCLogged 2026-11-03 13:49 UTC in Google PlumbersArms2027h1, entry 591,711,142SHA-256 3e56b66721f2ee71453a283c4538814f8b11b4c26f4cd57690cf8dc1eab7be53Public key SHA-256 c28cef1833eaf0f6888e542c9c9570e7e53fe6405cf631901fc5b145f32e6469
- Brand
- Luminus
- Addresses
- 65.108.79.152 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (65.108.79.152): a cloud provider. It rents servers and addresses to its customers.
- Domain
- luminusgroup.com.bd
- MX
- Receives mail at mx1.hostinger.com, mx2.hostinger.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-04 19:26 UTC
- luminusgroup.com.bd DE · AS24940 · HETZNER-AS Hetzner Online G…Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy none
DetailsHide details for luminusgroup.com.bd
- Hostname
- luminusgroup.com.bd
- First seen
- 2026-11-01 07:52 UTC
- First published
- 2026-10-31 14:27 UTC
- DNS
- Resolves · checked 2026-11-04 14:35 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.108.79.152.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 65.108.79.152
- Latest DNS check
- Certificate
- Issued by YR1 · precertificateValid 2026-11-01 06:50 UTC to 2027-01-30 06:50 UTCLogged 2026-11-01 07:49 UTC in Let's Encrypt Willow2027h1, entry 877,045,814SHA-256 0dc53965871f035d05227ed3760e8235d4d8fcab11c382aa32ed2de51d4b5b9bPublic key SHA-256 a28ae21d025ae00e6acaa6b8824427f367d2ffcb887b7b9ff1b0fba1ea000e24
- Brand
- Luminus
- Addresses
- 65.108.79.152 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (65.108.79.152): a cloud provider. It rents servers and addresses to its customers.
- Domain
- luminusgroup.com.bd
- MX
- Receives mail at mx1.hostinger.com, mx2.hostinger.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-04 19:26 UTC
- webdisk.luminusgroup.com.bd DE · AS24940 · HETZNER-AS Hetzner Online G…Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy none
DetailsHide details for webdisk.luminusgroup.com.bd
- Hostname
- webdisk.luminusgroup.com.bd
- First seen
- 2026-10-31 16:52 UTC
- First published
- 2026-10-31 17:58 UTC
- DNS
- Resolves · checked 2026-11-04 18:11 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.108.79.152.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 65.108.79.152
- Latest DNS check
- Certificate
- Issued by YR2 · precertificateValid 2026-10-31 15:51 UTC to 2027-01-29 15:51 UTCLogged 2026-10-31 16:49 UTC in Geomys Tuscolo2027h1, entry 422,160,815SHA-256 36e10170b31778cb06a408aae39a428b426a294bb9867e362a7f4a4c0c5c4756Public key SHA-256 982322a96f156379812368ca979b9c3939d5c811a3aa134b7c3a879df402b6f1
- Brand
- Luminus
- Addresses
- 65.108.79.152 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (65.108.79.152): a cloud provider. It rents servers and addresses to its customers.
- Domain
- luminusgroup.com.bd
- MX
- Receives mail at mx1.hostinger.com, mx2.hostinger.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-04 19:26 UTC
- www.luminus-services.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for www.luminus-services.com
- Hostname
- www.luminus-services.com
- First seen
- 2026-10-29 12:11 UTC
- First published
- 2026-10-29 13:15 UTC
- DNS
- Resolves · checked 2026-11-04 13:24 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 2.57.91.91
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-10-29 11:07 UTC to 2027-01-27 11:07 UTCLogged 2026-10-29 12:05 UTC in Google ParcelYard2027h1, entry 505,355,433SHA-256 3f3586da18990ccce110bbc45f3e46774b2638d8af5ecad2eafe435e52919fcdPublic key SHA-256 037558a0ee8c219231b4631614b880328ab1445f14c4268366d005b7d1e3d65f
- Brand
- Luminus
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- luminus-services.com
- Registered
- 2026-05-16 · HOSTINGER operations, UAB
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- luminus-services.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for luminus-services.com
- Hostname
- luminus-services.com
- First seen
- 2026-10-29 12:11 UTC
- First published
- 2026-10-29 13:15 UTC
- DNS
- Resolves · checked 2026-11-04 13:24 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 2.57.91.91
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-10-29 11:07 UTC to 2027-01-27 11:07 UTCLogged 2026-10-29 12:05 UTC in Google ParcelYard2027h1, entry 505,355,433SHA-256 3f3586da18990ccce110bbc45f3e46774b2638d8af5ecad2eafe435e52919fcdPublic key SHA-256 037558a0ee8c219231b4631614b880328ab1445f14c4268366d005b7d1e3d65f
- Brand
- Luminus
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- luminus-services.com
- Registered
- 2026-05-16 · HOSTINGER operations, UAB
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- www.insaver-luminus.de DE · AS3320 · DTAG Deutsche Telekom AGPhishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
DetailsHide details for www.insaver-luminus.de
- Hostname
- www.insaver-luminus.de
- First seen
- 2026-10-29 10:47 UTC
- First published
- 2026-10-29 10:53 UTC
- DNS
- Resolves · checked 2026-11-04 11:02 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 80.150.6.143.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 80.150.6.143
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-10-29 09:45 UTC to 2027-01-27 09:45 UTCLogged 2026-10-29 10:44 UTC in DigiCert Wyvern2027h1, entry 346,491,319SHA-256 6b306d6974f997598529e39b90ff4d534e00d9f15296d0250e466605cbc859c3Public key SHA-256 8538a00c9439031fadb787254d0248318fc2a89593d1254d21d3ea56f18eb57f
- Brand
- Luminus
- Addresses
- 80.150.6.143 · Germany · AS3320 DTAG Deutsche Telekom AG
- Domain
- insaver-luminus.de
- MX
- Receives mail at smtp-01.tld.t-online.de, smtp-02.tld.t-online.de
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
- insaver-luminus.de DE · AS3320 · DTAG Deutsche Telekom AGPhishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
DetailsHide details for insaver-luminus.de
- Hostname
- insaver-luminus.de
- First seen
- 2026-10-29 10:47 UTC
- First published
- 2026-10-29 10:53 UTC
- DNS
- Resolves · checked 2026-11-04 11:02 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 80.150.6.143.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 80.150.6.143
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-10-29 09:45 UTC to 2027-01-27 09:45 UTCLogged 2026-10-29 10:44 UTC in DigiCert Wyvern2027h1, entry 346,491,319SHA-256 6b306d6974f997598529e39b90ff4d534e00d9f15296d0250e466605cbc859c3Public key SHA-256 8538a00c9439031fadb787254d0248318fc2a89593d1254d21d3ea56f18eb57f
- Brand
- Luminus
- Addresses
- 80.150.6.143 · Germany · AS3320 DTAG Deutsche Telekom AG
- Domain
- insaver-luminus.de
- MX
- Receives mail at smtp-01.tld.t-online.de, smtp-02.tld.t-online.de
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Luminus when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

