Mercari

Marketplaces Japanmercari.comRank 158 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
7
7 reported or listed
Registered lookalikes
108
4 listed by a source or an address list
Official domains
4
verified from Mercari's own sites and records

Certificate findings for Mercari

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Mercari's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 13 findings, grouped by hostname

  1. zhihetailai.com
    ListedListed by JPCERT/CC as imitating メルカリMX absentSPF missingDMARC missingRegistered 8 d ago
    DetailsHide
    Hostname
    zhihetailai.com
    First seen
    2026-11-01 14:21 UTC
    First published
    2026-11-01 15:18 UTC
    Listing
    JPCERT/CC confirmed it 2026-07-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-04 15:31 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-01 14:05 UTC to 2027-01-30 14:14 UTC
    Logged 2026-11-01 14:15 UTC in Let's Encrypt Sycamore2027h1, entry 888,268,259
    SHA-256 7e22a125f672482161261e95813fb86f3aaa7bde39bed6238ee8ce38dcd32ec2
    Public key SHA-256 cb7d46935910954ed6941d4228c72f59d0876384b5a04c4fd2ae507e47f47c78
    Brand
    Mercari
    Domain
    zhihetailai.com
    Registered
    2026-10-28 · Gname 456 Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  2. store-leisusport.com US · AS54801 · Zillion Network Inc.
    ListedListed by JPCERT/CC as imitating メルカリMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    store-leisusport.com
    First seen
    2026-11-01 11:20 UTC
    First published
    2026-11-01 11:35 UTC
    Listing
    JPCERT/CC confirmed it 2026-06-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-04 11:40 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-01 10:21 UTC to 2027-01-30 10:21 UTC
    Logged 2026-11-01 11:19 UTC in Google PlumbersArms2027h1, entry 555,018,103
    SHA-256 afdbf4b765a8546a6e3ff97ab42c7a79e21d303fc1a09a921846faa5962414fa
    Public key SHA-256 5dd07a0209862487afef5b00c4116b2b92f461893acdf2a8dbc6ddd314c8f9bc
    Brand
    Mercari
    Addresses
    38.4.85.236 · United States · AS54801 ZILLION-NETWORK - Zillion Network Inc.
    Domain
    store-leisusport.com
    Registered
    2026-08-27 · Gransy, s.r.o.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  3. vantechinc.com HK · AS132839 · POWER LINE DATACENTER
    ListedListed by JPCERT/CC as imitating メルカリMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    vantechinc.com
    First seen
    2026-11-01 09:31 UTC
    First published
    2026-11-01 10:14 UTC
    Listing
    JPCERT/CC confirmed it 2026-07-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-05 10:21 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-01 08:27 UTC to 2027-01-30 08:27 UTC
    Logged 2026-11-01 09:26 UTC in DigiCert Wyvern2027h1, entry 372,592,267
    SHA-256 16e15cbc93491505c16c65545afb1b9999db406805c2c0e6f2e393a927d567ec
    Public key SHA-256 b922b2be912f36c7210f3d3fb09de5cd767856a16e17b77af9b1704123bbc3e1
    Brand
    Mercari
    Addresses
    154.201.188.203 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    vantechinc.com
    Registered
    2026-10-29 · Gname 295 Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  4. merckri.com HK · AS135377 · UCLOUD INFORMATION TECHNOLO…
    ListedListed by JPCERT/CC as imitating メルカリMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    merckri.com
    First seen
    2026-11-01 07:56 UTC
    First published
    2026-11-01 08:03 UTC
    Listing
    JPCERT/CC confirmed it 2026-06-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-05 08:08 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-01 06:53 UTC to 2027-01-30 06:53 UTC
    Logged 2026-11-01 07:51 UTC in Google ParcelYard2027h1, entry 552,288,747
    SHA-256 0a01a2ecd53af3530ef606b70bb515ef9d75f2c99ede1c7ab4b47d2b2b89565f
    Public key SHA-256 b00a3952dd48b50f900e4038e95661972033bbc7778fbe28d8e92e7489d04cff
    Brand
    Mercari
    Addresses
    45.43.60.241 · Hong Kong · AS135377 UCLOUD-HK-AS-AP - UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
    Domain
    merckri.com
    Registered
    2026-05-08 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  5. magnacoaster.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ListedParking page · ParkingCrew (Team Internet)Listed by JPCERT/CC as imitating メルカリMX absentSPF missingDMARC missingRegistered 6 d ago
    DetailsHide
    Hostname
    magnacoaster.com
    First seen
    2026-10-30 14:52 UTC
    First published
    2026-10-30 14:56 UTC
    Listing
    JPCERT/CC confirmed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-04 15:03 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-30 13:47 UTC to 2027-01-28 13:47 UTC
    Logged 2026-10-30 14:46 UTC in Let's Encrypt Sycamore2027h1, entry 857,163,366
    SHA-256 24c29963355a85b06355829de6c7ed54308d763e4955d6320add1e3cb7135a00
    Public key SHA-256 99d60e0de6c261797277b1abbbfd3c0852edce46b4c5f94b1c21b3f8f4dc0026
    Brand
    Mercari
    Addresses
    185.53.179.149 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.149): a parking service. It answers for names that are typically for sale or unused.
    Domain
    magnacoaster.com
    Registered
    2026-10-30 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  6. zjjzyxs.com
    ListedListed by JPCERT/CC as imitating メルカリMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    zjjzyxs.com
    First seen
    2026-10-30 08:05 UTC
    First published
    2026-10-30 08:40 UTC
    Listing
    JPCERT/CC confirmed it 2026-07-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-05 08:49 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-30 07:03 UTC to 2027-01-28 07:03 UTC
    Logged 2026-10-30 08:02 UTC in Google ParcelYard2027h1, entry 519,239,319
    SHA-256 104ab7f0a86f6460c05f34c67da108cc51300dfece78291287b893daec6a4dcb
    Public key SHA-256 a612ab3c32cd83cc50afd7cb60bcb843d93b6c0fa4c706b01c989187d87036a9
    Brand
    Mercari
    Domain
    zjjzyxs.com
    Registered
    2026-10-29 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  7. sjznbsl.com
    ListedListed by JPCERT/CC as imitating メルカリMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    sjznbsl.com
    First seen
    2026-10-30 07:50 UTC
    First published
    2026-10-30 08:40 UTC
    Listing
    JPCERT/CC confirmed it 2026-07-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-05 08:49 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-10-30 07:38 UTC to 2027-01-28 07:46 UTC
    Logged 2026-10-30 07:48 UTC in DigiCert Sphinx2027h1, entry 315,222,886
    SHA-256 1b947a6a1693770ab4990387d1211a4df11b5fa742e1eb314c0468a8ef71c04f
    Public key SHA-256 9fa83c551aa15f526d2401fdc91bd4172326b019eafd6fd670ed7dc7165d5bf0
    Brand
    Mercari
    Domain
    sjznbsl.com
    Registered
    2026-10-29 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  8. ycybz.com HK · AS135377 · UCLOUD INFORMATION TECHNOLO…
    ListedListed by JPCERT/CC as imitating メルカリMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    ycybz.com
    First seen
    2026-10-29 10:35 UTC
    First published
    2026-10-29 10:53 UTC
    Listing
    JPCERT/CC confirmed it 2026-09-28 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-04 11:02 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-29 09:32 UTC to 2027-01-27 09:32 UTC
    Logged 2026-10-29 10:31 UTC in HARICA Selene2027h1, entry 36,483,565
    SHA-256 263658eab0e581b1027520f00e317bfc7d79cdfca0de788a2f792e8cf3c08c47
    Public key SHA-256 7dba7bb6262664dcbd13657f0126b7a401f46816dff5088550becc80a1f3dc4f
    Brand
    Mercari
    Addresses
    152.32.201.222 · Hong Kong · AS135377 UCLOUD-HK-AS-AP - UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
    Domain
    ycybz.com
    Registered
    2025-11-16 · Gname 140 Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  9. xjhongtuo.com
    ListedListed by JPCERT/CC as imitating メルカリMX absentSPF missingDMARC missingRegistered 5 d ago
    DetailsHide
    Hostname
    xjhongtuo.com
    First seen
    2026-10-28 13:21 UTC
    First published
    2026-10-28 14:10 UTC
    Listing
    JPCERT/CC confirmed it 2026-07-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-04 14:21 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-28 12:21 UTC to 2027-01-26 12:21 UTC
    Logged 2026-10-28 13:19 UTC in Google ParcelYard2027h1, entry 488,879,391
    SHA-256 a69d323090053e5a7359e5d1385b0a100cac7e04b3c64aa977cdff886f8e1970
    Public key SHA-256 7bbdbb84d2ebc3bb6009cbf5e1dcb3f0271473af4da125b7e6ad8020c1ec4544
    Brand
    Mercari
    Domain
    xjhongtuo.com
    Registered
    2026-10-31 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  10. www.mercari.ru RU · AS49505 · SELECTEL JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.mercari.ru
    First seen
    2026-10-27 17:42 UTC
    DNS
    Resolves · checked 2026-11-05 09:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.246.224.242.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 188.246.224.242
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-27 16:40 UTC to 2027-01-25 16:40 UTC
    Logged 2026-10-27 17:39 UTC in Google PlumbersArms2027h1, entry 475,760,115
    SHA-256 1d998f5f936dbbaa0b80af763960484d932cac72f1bb2a9511b040903b0774a8
    Public key SHA-256 1464cc25408b4654b39ed03a234611c3375b86428e22af6852d3c349862cbb30
    Brand
    Mercari
    Addresses
    188.246.224.242 · Russia · AS49505 SELECTEL JSC Selectel
    Domain
    mercari.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:32 UTC

    Suggest a correction

  11. mercari.ru RU · AS49505 · SELECTEL JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    mercari.ru
    First seen
    2026-10-27 17:42 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.246.224.242.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 188.246.224.242
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-27 16:40 UTC to 2027-01-25 16:40 UTC
    Logged 2026-10-27 17:39 UTC in Google PlumbersArms2027h1, entry 475,760,115
    SHA-256 1d998f5f936dbbaa0b80af763960484d932cac72f1bb2a9511b040903b0774a8
    Public key SHA-256 1464cc25408b4654b39ed03a234611c3375b86428e22af6852d3c349862cbb30
    Brand
    Mercari
    Addresses
    188.246.224.242 · Russia · AS49505 SELECTEL JSC Selectel
    Domain
    mercari.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:32 UTC

    Suggest a correction

  12. seedwuhan.com US · AS14618 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by JPCERT/CC as imitating メルカリMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide
    Hostname
    seedwuhan.com
    First seen
    2026-10-27 14:05 UTC
    Listing
    JPCERT/CC confirmed it 2026-07-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Not resolving since 2026-10-31 · checked 2026-11-05 09:01 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Mercari
    Addresses
    44.208.83.180 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    54.84.240.235 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (44.208.83.180, 54.84.240.235): a cloud provider. It rents servers and addresses to its customers.
    Domain
    seedwuhan.com
    Registered
    2026-10-27 · DropCatch.com 1466 LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

  13. yanisheying.com US · AS14618 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by JPCERT/CC as imitating メルカリMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide
    Hostname
    yanisheying.com
    First seen
    2026-10-27 14:05 UTC
    Listing
    JPCERT/CC confirmed it 2026-07-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Not resolving since 2026-10-31 · checked 2026-11-05 09:05 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Mercari
    Addresses
    44.208.83.180 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    54.84.240.235 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (44.208.83.180, 54.84.240.235): a cloud provider. It rents servers and addresses to its customers.
    Domain
    yanisheying.com
    Registered
    2026-10-27 · DropCatch.com 1288 LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Mercari when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Marketplaces

All brands →