Minecraft

Gaming Swedenminecraft.netRank 121 of the most impersonated
Cert findings · 24 h
5
Cert findings · 7 days
32
28 on phishing hosts · 4 on Spamhaus DROP
Registered lookalikes
509
27 listed by a source or an address list
Official domains
3
verified from Minecraft's own sites and records

Certificate findings for Minecraft

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Minecraft's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 41 findings, grouped by hostname

  1. minecraft2.com US · AS46475 · Limestone Networks, Inc.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 16 y ago
    DetailsHide
    Hostname
    minecraft2.com
    First seen
    2026-11-05 08:59 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 69.162.80.53.
    1. Phishing-host list fetched with the address
    2. Resolved to 69.162.80.53
    Brand
    Minecraft
    Addresses
    69.162.80.53 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    69.162.80.51 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    Domain
    minecraft2.com
    Registered
    2010-09-21 · Media Elite Holdings Limited, S.A.
    MX
    Receives mail at mail.h-email.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  2. avp.base-minecraft.shop RU · AS215013 · YCCDN Yandex.Cloud LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    avp.base-minecraft.shop
    First seen
    2026-11-04 21:26 UTC
    First published
    2026-11-04 22:19 UTC
    DNS
    Resolves · checked 2026-11-04 22:27 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.72.112.1.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 188.72.112.1
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-04 20:23 UTC to 2027-02-02 20:23 UTC
    Logged 2026-11-04 21:22 UTC in Google ParcelYard2027h1, entry 614,771,356
    SHA-256 3941a7a2cb347fb569d385d0de8dc51b23ada1544671e13af869e9d62c4d0e3a
    Public key SHA-256 b2ffa5c9037fe32ed6048a69cba00cba616331ed530f8639ff5044825655c44c
    Brand
    Minecraft
    Addresses
    188.72.112.1 · Russia · AS215013 YCCDN Yandex.Cloud LLC
    Domain
    base-minecraft.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 21:28 UTC

    Suggest a correction

  3. cdn.aeza.server-for-minecraft.online RU · AS215013 · YCCDN Yandex.Cloud LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    cdn.aeza.server-for-minecraft.online
    First seen
    2026-11-04 18:45 UTC
    First published
    2026-11-04 18:52 UTC
    DNS
    Resolves · checked 2026-11-04 18:54 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.72.112.1.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 188.72.112.1
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-04 11:39 UTC to 2027-02-02 11:39 UTC
    Logged 2026-11-04 12:38 UTC in Let's Encrypt Willow2027h1, entry 932,311,040
    SHA-256 b555d5e5610cdc4a409021e6bf409908479d5e5416c3f09d440ff087cfa063c0
    Public key SHA-256 ca687ae2e799f7fce6a559af1f560eb36b149d7041ef497be3ff9ba96663ac16
    Brand
    Minecraft
    Addresses
    188.72.112.1 · Russia · AS215013 YCCDN Yandex.Cloud LLC
    Domain
    server-for-minecraft.online
    Registered
    2026-10-29 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:56 UTC

    Suggest a correction

  4. minecraft-db.ru RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    minecraft-db.ru
    First seen
    2026-11-04 17:16 UTC
    First published
    2026-11-04 18:05 UTC
    DNS
    Resolves · checked 2026-11-04 18:17 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-04 16:06 UTC to 2027-02-02 16:06 UTC
    Logged 2026-11-04 17:04 UTC in DigiCert Wyvern2027h1, entry 405,051,769
    SHA-256 32a00eae59f95998aced3886eeb6ae9bdfd2ae632557765e6c749e90f51cf91b
    Public key SHA-256 75822e5ff902bd5b266db4ddbcae4d2ca335c5ed26b924b96e7643da0e2d4790
    Brand
    Minecraft
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    minecraft-db.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  5. www.minecraft-db.ru RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.minecraft-db.ru
    First seen
    2026-11-04 17:05 UTC
    First published
    2026-11-04 18:05 UTC
    DNS
    Resolves · checked 2026-11-04 18:17 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-04 16:06 UTC to 2027-02-02 16:06 UTC
    Logged 2026-11-04 17:04 UTC in DigiCert Wyvern2027h1, entry 405,051,769
    SHA-256 32a00eae59f95998aced3886eeb6ae9bdfd2ae632557765e6c749e90f51cf91b
    Public key SHA-256 75822e5ff902bd5b266db4ddbcae4d2ca335c5ed26b924b96e7643da0e2d4790
    Brand
    Minecraft
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    minecraft-db.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  6. www.minecraft-money.mom DE · AS24940 · HETZNER-AS Hetzner Online G…
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    www.minecraft-money.mom
    First seen
    2026-11-04 01:16 UTC
    First published
    2026-11-04 01:42 UTC
    DNS
    Resolves · checked 2026-11-05 01:47 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.98.101.145.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.98.101.145
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-04 00:15 UTC to 2027-02-02 00:15 UTC
    Logged 2026-11-04 01:13 UTC in Google PlumbersArms2027h1, entry 600,386,650
    SHA-256 3b0d3f8f7de37a3713946125eadf6e039af1b9430f3f491cfbcae8c8c0af747f
    Public key SHA-256 658cb4ae46752ab5be2f944eb1954236743c0812d4ffa9a6f4ec09cd3ad7f10b
    Brand
    Minecraft
    Addresses
    91.98.101.145 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (91.98.101.145): a cloud provider. It rents servers and addresses to its customers.
    Domain
    minecraft-money.mom
    Registered
    2025-12-15 · Dynadot Inc
    MX
    Receives mail at mx.domainparking.de
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  7. minecraft-money.mom DE · AS24940 · HETZNER-AS Hetzner Online G…
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    minecraft-money.mom
    First seen
    2026-11-04 01:16 UTC
    First published
    2026-11-04 01:42 UTC
    DNS
    Resolves · checked 2026-11-05 01:47 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.98.101.145.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.98.101.145
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-04 00:15 UTC to 2027-02-02 00:15 UTC
    Logged 2026-11-04 01:13 UTC in Google PlumbersArms2027h1, entry 600,386,650
    SHA-256 3b0d3f8f7de37a3713946125eadf6e039af1b9430f3f491cfbcae8c8c0af747f
    Public key SHA-256 658cb4ae46752ab5be2f944eb1954236743c0812d4ffa9a6f4ec09cd3ad7f10b
    Brand
    Minecraft
    Addresses
    91.98.101.145 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (91.98.101.145): a cloud provider. It rents servers and addresses to its customers.
    Domain
    minecraft-money.mom
    Registered
    2025-12-15 · Dynadot Inc
    MX
    Receives mail at mx.domainparking.de
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  8. w02.minecraft247.ru MY · AS45839 · Shinjiru Technology Sdn Bhd
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    w02.minecraft247.ru
    First seen
    2026-11-03 16:42 UTC
    First published
    2026-11-03 17:06 UTC
    DNS
    Resolves · checked 2026-11-04 17:19 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 111.90.143.122.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 111.90.143.122
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-03 15:38 UTC to 2027-02-01 15:38 UTC
    Logged 2026-11-03 16:37 UTC in Google ParcelYard2027h1, entry 593,368,376
    SHA-256 09e730cc7767a9928ae937446e2052a35835590be5448e68218ac07b5f602e51
    Public key SHA-256 ea0c6b4d39278ff1bc2d926890f297eddaec1e148e087e3ff6e4b9b165078683
    Brand
    Minecraft
    Addresses
    111.90.143.122 · Malaysia · AS45839 SHINJIRU-MY-AS-AP - Shinjiru Technology Sdn Bhd
    Domain
    minecraft247.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  9. www.noreply-mojang.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    www.noreply-mojang.com
    First seen
    2026-11-03 11:11 UTC
    First published
    2026-11-03 12:13 UTC
    DNS
    Not resolving · checked 2026-11-05 06:45 UTC
    Checks
    Overdue since 2026-11-04 12:24 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    Certificate
    Issued by YE2
    Valid 2026-11-03 10:07 UTC to 2027-02-01 10:07 UTC
    Logged 2026-11-03 11:06 UTC in Google PlumbersArms2027h1, entry 589,406,744
    SHA-256 0a79e31dd673e8d759e8650e5b844f94741e0495eba4d955c42308b788c5c33c
    Public key SHA-256 13b984022a38d53a16d89f739af50b351d67f663bd64433ea53194d3343c38e5
    Brand
    Minecraft
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    noreply-mojang.com
    Registered
    2026-11-03 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 12:16 UTC

    Suggest a correction

  10. noreply-mojang.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    noreply-mojang.com
    First seen
    2026-11-03 11:11 UTC
    First published
    2026-11-03 12:13 UTC
    DNS
    Not resolving · checked 2026-11-05 06:45 UTC
    Checks
    Overdue since 2026-11-04 12:24 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    Certificate
    Issued by YE2
    Valid 2026-11-03 10:07 UTC to 2027-02-01 10:07 UTC
    Logged 2026-11-03 11:06 UTC in Google PlumbersArms2027h1, entry 589,406,744
    SHA-256 0a79e31dd673e8d759e8650e5b844f94741e0495eba4d955c42308b788c5c33c
    Public key SHA-256 13b984022a38d53a16d89f739af50b351d67f663bd64433ea53194d3343c38e5
    Brand
    Minecraft
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    noreply-mojang.com
    Registered
    2026-11-03 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 12:16 UTC

    Suggest a correction

  11. pro-minecraft.com DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…5 addresses
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    pro-minecraft.com
    First seen
    2026-11-03 08:51 UTC
    First published
    2026-11-03 09:58 UTC
    DNS
    Resolves · checked 2026-11-05 10:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.78.156.59.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 5.78.156.59
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-03 07:49 UTC to 2027-02-01 07:49 UTC
    Logged 2026-11-03 08:48 UTC in IPng Networks Halloumi2027h1, entry 346,346,170
    SHA-256 232f755b2b9174191689f18d558842dfe7b511dad358af6661f0ec06255b09f7
    Public key SHA-256 0f0f32a7193bb1bcd042cff0eaf169ebf53383a19b4d386accedcb873b978481
    Brand
    Minecraft
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
    Domain
    pro-minecraft.com
    Registered
    2026-11-02 · Domain Science Kutatasi Szolgaltato Korlatolt Felelossegu Tarsasag
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  12. minecraft.co.zw GB · AS48254 · TWENTYI 20i Limited
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missing
    DetailsHide
    Hostname
    minecraft.co.zw
    First seen
    2026-11-03 06:47 UTC
    First published
    2026-11-03 07:43 UTC
    DNS
    Resolves · checked 2026-11-05 07:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.151.30.174.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.151.30.174
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-03 05:44 UTC to 2027-02-01 05:44 UTC
    Logged 2026-11-03 06:43 UTC in IPng Networks Gouda2027h1, entry 299,795,841
    SHA-256 295231238af656f06040ed1b71056e3871ad191d007e210d41a8144bc9b107f2
    Public key SHA-256 81134bdfbc03bcd292efdbbcbce6f75d2c53af2839d4e8f0ebb198adf972469b
    Brand
    Minecraft
    Addresses
    185.151.30.174 · United Kingdom · AS48254 TWENTYI 20i Limited
    Domain
    minecraft.co.zw
    MX
    Receives mail at mx.stackmail.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  13. www.minecraft-cheats.de DE · AS24940 · HETZNER-AS Hetzner Online G…
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missing
    DetailsHide
    Hostname
    www.minecraft-cheats.de
    First seen
    2026-11-01 21:27 UTC
    First published
    2026-11-03 18:16 UTC
    DNS
    Resolves · checked 2026-11-04 18:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.98.101.145.
    1. Resolved to 91.98.101.145
    2. Phishing-host list fetched with the address
    3. Latest DNS check
    Brand
    Minecraft
    Addresses
    91.98.101.145 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (91.98.101.145): a cloud provider. It rents servers and addresses to its customers.
    Domain
    minecraft-cheats.de
    MX
    Receives mail at mx.domainparking.de
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:19 UTC

    Suggest a correction

  14. minecraft-cheats.de DE · AS24940 · HETZNER-AS Hetzner Online G…
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missing
    DetailsHide
    Hostname
    minecraft-cheats.de
    First seen
    2026-11-01 21:27 UTC
    First published
    2026-11-03 18:16 UTC
    DNS
    Resolves · checked 2026-11-04 18:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.98.101.145.
    1. Resolved to 91.98.101.145
    2. Phishing-host list fetched with the address
    3. Latest DNS check
    Brand
    Minecraft
    Addresses
    91.98.101.145 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (91.98.101.145): a cloud provider. It rents servers and addresses to its customers.
    Domain
    minecraft-cheats.de
    MX
    Receives mail at mx.domainparking.de
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:19 UTC

    Suggest a correction

  15. www.minecraft-mp3.ru RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.minecraft-mp3.ru
    First seen
    2026-11-01 17:52 UTC
    First published
    2026-11-01 18:03 UTC
    DNS
    Resolves · checked 2026-11-04 18:08 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-01 16:50 UTC to 2027-01-30 16:50 UTC
    Logged 2026-11-01 17:49 UTC in Geomys Tuscolo2027h1, entry 435,113,183
    SHA-256 8a1b202aa8024272476f4c4539daf10732fdfd9542dc6124ccaba3308237ab82
    Public key SHA-256 f1e8eea1b0c11c27c620c551e6d8e03884a4ee29df8ae61225a62fefbab416a2
    Brand
    Minecraft
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    minecraft-mp3.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:19 UTC

    Suggest a correction

  16. minecraft-mp3.ru RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    minecraft-mp3.ru
    First seen
    2026-11-01 17:52 UTC
    First published
    2026-11-01 18:03 UTC
    DNS
    Resolves · checked 2026-11-04 18:08 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-01 16:50 UTC to 2027-01-30 16:50 UTC
    Logged 2026-11-01 17:49 UTC in Geomys Tuscolo2027h1, entry 435,113,183
    SHA-256 8a1b202aa8024272476f4c4539daf10732fdfd9542dc6124ccaba3308237ab82
    Public key SHA-256 f1e8eea1b0c11c27c620c551e6d8e03884a4ee29df8ae61225a62fefbab416a2
    Brand
    Minecraft
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    minecraft-mp3.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:19 UTC

    Suggest a correction

  17. minecraft247.ru CA · AS11831 · eSecureData
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    minecraft247.ru
    First seen
    2026-10-31 14:36 UTC
    First published
    2026-10-31 15:06 UTC
    DNS
    Resolves · checked 2026-11-04 15:14 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 162.221.207.42.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 162.221.207.42
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-31 13:32 UTC to 2027-01-29 13:32 UTC
    Logged 2026-10-31 14:31 UTC in Google ParcelYard2027h1, entry 540,314,767
    SHA-256 8eae2f2f434e833bbfb590821de35783b3592284001780dfd7e9d4aeaf3533ca
    Public key SHA-256 91b69773c2813846b25c24a107d459483e86d02f68f07517e67c499e43cffea7
    Brand
    Minecraft
    Addresses
    162.221.207.42 · Canada · AS11831 ESECUREDATA - eSecureData
    Domain
    minecraft247.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  18. www.mojang-noreply.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 d ago
    DetailsHide
    Hostname
    www.mojang-noreply.com
    First seen
    2026-10-31 10:42 UTC
    First published
    2026-10-31 11:03 UTC
    DNS
    Not resolving since 2026-11-03 · checked 2026-11-04 11:10 UTC
    Checks
    Overdue since 2026-11-03 11:10 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 09:40 UTC to 2027-01-29 09:40 UTC
    Logged 2026-10-31 10:39 UTC in Let's Encrypt Sycamore2027h1, entry 869,905,011
    SHA-256 197a6d41fd7baf05b3135a944e015a5e4217806c0913035496853d434cb00e85
    Public key SHA-256 87371f5ff47a81014bb4c57d2e3348405c7e63dcc2401819805d2e7dda7df214
    Brand
    Minecraft
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    mojang-noreply.com
    Registered
    2026-10-31 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  19. mojang-noreply.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 d ago
    DetailsHide
    Hostname
    mojang-noreply.com
    First seen
    2026-10-31 10:42 UTC
    First published
    2026-10-31 11:03 UTC
    DNS
    Not resolving since 2026-11-03 · checked 2026-11-04 11:10 UTC
    Checks
    Overdue since 2026-11-03 11:10 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 09:40 UTC to 2027-01-29 09:40 UTC
    Logged 2026-10-31 10:39 UTC in Let's Encrypt Sycamore2027h1, entry 869,905,011
    SHA-256 197a6d41fd7baf05b3135a944e015a5e4217806c0913035496853d434cb00e85
    Public key SHA-256 87371f5ff47a81014bb4c57d2e3348405c7e63dcc2401819805d2e7dda7df214
    Brand
    Minecraft
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    mojang-noreply.com
    Registered
    2026-10-31 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  20. www.hosting-minecraft.cz PL · AS48707 · AS48707-OPS-PL AS48707 OPS …
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC rejectRegistered 21 mo ago
    DetailsHide
    Hostname
    www.hosting-minecraft.cz
    First seen
    2026-10-31 07:57 UTC
    First published
    2026-10-31 08:21 UTC
    DNS
    Resolves · checked 2026-11-05 08:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.253.212.22.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.253.212.22
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 06:54 UTC to 2027-01-29 06:54 UTC
    Logged 2026-10-31 07:53 UTC in Google ParcelYard2027h1, entry 535,611,415
    SHA-256 2e54a7b8501e05ed302c87a7421c58061e039c444cd1a7351c8bc1762dc032f7
    Public key SHA-256 520025290bbc443cfe36104306454bea7bc73446c7444b7f2da9de14258488b9
    Brand
    Minecraft
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    Domain
    hosting-minecraft.cz
    Registered
    2025-02-10 · Key-Systems GmbH
    MX
    Receives mail at blackhole.aftermarket.pl
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  21. hosting-minecraft.cz PL · AS48707 · AS48707-OPS-PL AS48707 OPS …
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC rejectRegistered 21 mo ago
    DetailsHide
    Hostname
    hosting-minecraft.cz
    First seen
    2026-10-31 07:57 UTC
    First published
    2026-10-31 08:21 UTC
    DNS
    Resolves · checked 2026-11-05 08:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.253.212.22.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.253.212.22
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 06:54 UTC to 2027-01-29 06:54 UTC
    Logged 2026-10-31 07:53 UTC in Google ParcelYard2027h1, entry 535,611,415
    SHA-256 2e54a7b8501e05ed302c87a7421c58061e039c444cd1a7351c8bc1762dc032f7
    Public key SHA-256 520025290bbc443cfe36104306454bea7bc73446c7444b7f2da9de14258488b9
    Brand
    Minecraft
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    Domain
    hosting-minecraft.cz
    Registered
    2025-02-10 · Key-Systems GmbH
    MX
    Receives mail at blackhole.aftermarket.pl
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  22. w05.minecraft247.ru MY · AS45839 · Shinjiru Technology Sdn Bhd
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    w05.minecraft247.ru
    First seen
    2026-10-31 06:32 UTC
    First published
    2026-11-01 02:59 UTC
    DNS
    Resolves · checked 2026-11-05 03:12 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 101.99.75.212.
    1. Resolved to 101.99.75.212
    2. Phishing-host list fetched with the address
    3. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 101.99.75.212.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 101.99.75.212
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-31 05:31 UTC to 2027-01-29 05:31 UTC
    Logged 2026-10-31 06:29 UTC in Geomys Tuscolo2027h1, entry 416,676,032
    SHA-256 24c1a6be70a2205f9e412bd7baa6b59d184eec6692eeb543df3debdaf8fcca65
    Public key SHA-256 3c0e68b765afd897cad0173e648ede3c6c50226834dc45de46587bedd80d1def
    Brand
    Minecraft
    Addresses
    101.99.75.212 · Malaysia · AS45839 SHINJIRU-MY-AS-AP - Shinjiru Technology Sdn Bhd
    Domain
    minecraft247.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  23. w06.minecraft247.ru MY · AS45839 · Shinjiru Technology Sdn Bhd
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    w06.minecraft247.ru
    First seen
    2026-10-31 02:21 UTC
    First published
    2026-10-31 02:53 UTC
    DNS
    Resolves · checked 2026-11-05 02:57 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 111.90.143.122.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 111.90.143.122
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-31 01:21 UTC to 2027-01-29 01:21 UTC
    Logged 2026-10-31 02:19 UTC in Let's Encrypt Sycamore2027h1, entry 864,875,183
    SHA-256 1e3d2a6890f880a7886ceb5398debaf20fea91f4d9a0923d853fc98ded9b117a
    Public key SHA-256 6e128023bd6fae79ea5a6777a5ab40ba15645da8e8300e5b4f59c246146274d6
    Brand
    Minecraft
    Addresses
    111.90.143.122 · Malaysia · AS45839 SHINJIRU-MY-AS-AP - Shinjiru Technology Sdn Bhd
    Domain
    minecraft247.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  24. q05.minecraft247.ru MY · AS45839 · Shinjiru Technology Sdn Bhd
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    q05.minecraft247.ru
    First seen
    2026-10-31 01:16 UTC
    First published
    2026-11-01 02:59 UTC
    DNS
    Resolves · checked 2026-11-05 01:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 101.99.75.212.
    1. Resolved to 101.99.75.212
    2. Phishing-host list fetched with the address
    3. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 101.99.75.212.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 101.99.75.212
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-31 00:15 UTC to 2027-01-29 00:15 UTC
    Logged 2026-10-31 01:14 UTC in Google ParcelYard2027h1, entry 531,477,607
    SHA-256 6bcbb9e01e4e57e1f18ac447345277a9dc38269f108be3164a31202bca0904d2
    Public key SHA-256 c98b593b1b84ba1b4bb4677d95cb5e0b66999b73343dcfef87ace95b237c0472
    Brand
    Minecraft
    Addresses
    101.99.75.212 · Malaysia · AS45839 SHINJIRU-MY-AS-AP - Shinjiru Technology Sdn Bhd
    Domain
    minecraft247.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  25. www.minecraft-downloads.net RU · AS50340 · SELECTEL-MSK JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 16 mo ago
    DetailsHide
    Hostname
    www.minecraft-downloads.net
    First seen
    2026-10-31 00:27 UTC
    First published
    2026-10-31 00:45 UTC
    DNS
    Resolves · checked 2026-11-05 00:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 217.168.244.119.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 217.168.244.119
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-30 23:22 UTC to 2027-01-28 23:22 UTC
    Logged 2026-10-31 00:20 UTC in Geomys Tuscolo2027h1, entry 413,800,419
    SHA-256 7012f175801ad5c970a6ab024962917f721e4489d460bb11d4b2aa8efe564eaf
    Public key SHA-256 e2723271c2d724152b9ac9b574d8ebd19505fb10b451d759471524296c6d6fca
    Brand
    Minecraft
    Addresses
    217.168.244.119 · Russia · AS50340 SELECTEL-MSK JSC Selectel
    Domain
    minecraft-downloads.net
    Registered
    2025-07-18 · Center of Ukrainian Internet Names (UKRNAMES)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  26. minecraft-downloads.net RU · AS50340 · SELECTEL-MSK JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 16 mo ago
    DetailsHide
    Hostname
    minecraft-downloads.net
    First seen
    2026-10-31 00:27 UTC
    First published
    2026-10-31 00:45 UTC
    DNS
    Resolves · checked 2026-11-05 00:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 217.168.244.119.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 217.168.244.119
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-30 23:22 UTC to 2027-01-28 23:22 UTC
    Logged 2026-10-31 00:20 UTC in Geomys Tuscolo2027h1, entry 413,800,419
    SHA-256 7012f175801ad5c970a6ab024962917f721e4489d460bb11d4b2aa8efe564eaf
    Public key SHA-256 e2723271c2d724152b9ac9b574d8ebd19505fb10b451d759471524296c6d6fca
    Brand
    Minecraft
    Addresses
    217.168.244.119 · Russia · AS50340 SELECTEL-MSK JSC Selectel
    Domain
    minecraft-downloads.net
    Registered
    2025-07-18 · Center of Ukrainian Internet Names (UKRNAMES)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  27. www.minecraft-game.net RU · AS50340 · SELECTEL-MSK JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 15 mo ago
    DetailsHide
    Hostname
    www.minecraft-game.net
    First seen
    2026-10-31 00:22 UTC
    First published
    2026-10-31 00:45 UTC
    DNS
    Resolves · checked 2026-11-05 00:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 217.168.244.119.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 217.168.244.119
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-30 23:21 UTC to 2027-01-28 23:21 UTC
    Logged 2026-10-31 00:20 UTC in DigiCert Sphinx2027h1, entry 319,866,458
    SHA-256 177ee3b19ab74cf84defb870ceb926103e4dfe35dee533a33083ad095ec327e5
    Public key SHA-256 68cf44d6db43a0c0fefc7a29d14753efdfcbe165648508856bdd553b71a67c6c
    Brand
    Minecraft
    Addresses
    217.168.244.119 · Russia · AS50340 SELECTEL-MSK JSC Selectel
    Domain
    minecraft-game.net
    Registered
    2025-07-31 · DomainContext, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  28. minecraft-game.net RU · AS50340 · SELECTEL-MSK JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 15 mo ago
    DetailsHide
    Hostname
    minecraft-game.net
    First seen
    2026-10-31 00:22 UTC
    First published
    2026-10-31 00:45 UTC
    DNS
    Resolves · checked 2026-11-05 00:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 217.168.244.119.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 217.168.244.119
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-30 23:21 UTC to 2027-01-28 23:21 UTC
    Logged 2026-10-31 00:20 UTC in DigiCert Sphinx2027h1, entry 319,866,458
    SHA-256 177ee3b19ab74cf84defb870ceb926103e4dfe35dee533a33083ad095ec327e5
    Public key SHA-256 68cf44d6db43a0c0fefc7a29d14753efdfcbe165648508856bdd553b71a67c6c
    Brand
    Minecraft
    Addresses
    217.168.244.119 · Russia · AS50340 SELECTEL-MSK JSC Selectel
    Domain
    minecraft-game.net
    Registered
    2025-07-31 · DomainContext, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  29. www.server-for-minecraft.online RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    www.server-for-minecraft.online
    First seen
    2026-10-30 08:16 UTC
    First published
    2026-10-30 08:40 UTC
    DNS
    Resolves · checked 2026-11-05 08:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-30 07:12 UTC to 2027-01-28 07:12 UTC
    Logged 2026-10-30 08:10 UTC in IPng Networks Halloumi2027h1, entry 310,429,346
    SHA-256 21728a4865d830a20ee73475e9426ac61d06c607fbc9e0a4b3ef2b8465e8dfa1
    Public key SHA-256 3b5ac4559f29125f390bf7ee168755f9839c66cc5403d034a2916ec30c7e8a92
    Brand
    Minecraft
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    server-for-minecraft.online
    Registered
    2026-10-29 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:56 UTC

    Suggest a correction

  30. server-for-minecraft.online RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    server-for-minecraft.online
    First seen
    2026-10-30 08:16 UTC
    First published
    2026-10-30 08:40 UTC
    DNS
    Resolves · checked 2026-11-05 08:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-30 07:12 UTC to 2027-01-28 07:12 UTC
    Logged 2026-10-30 08:10 UTC in IPng Networks Halloumi2027h1, entry 310,429,346
    SHA-256 21728a4865d830a20ee73475e9426ac61d06c607fbc9e0a4b3ef2b8465e8dfa1
    Public key SHA-256 3b5ac4559f29125f390bf7ee168755f9839c66cc5403d034a2916ec30c7e8a92
    Brand
    Minecraft
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    server-for-minecraft.online
    Registered
    2026-10-29 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:56 UTC

    Suggest a correction

  31. www.minecraft-android.ru RU · AS198610 · BEGET-AS Beget LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF all omittedDMARC missing
    DetailsHide
    Hostname
    www.minecraft-android.ru
    First seen
    2026-10-29 07:37 UTC
    First published
    2026-10-29 07:46 UTC
    DNS
    Resolves · checked 2026-11-05 07:51 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.130.41.59.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 45.130.41.59
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-29 06:37 UTC to 2027-01-27 06:37 UTC
    Logged 2026-10-29 07:35 UTC in Google ParcelYard2027h1, entry 501,847,057
    SHA-256 1a44cf798b6bd5b205e55b9f40d67041ed5a12cd57b83a31fe664010c78ad6ab
    Public key SHA-256 69a0e5e43691049e2e63b0490010d0bda7f0096a999324ae1cc80fcc96a5d6cf
    Brand
    Minecraft
    Addresses
    45.130.41.59 · Russia · AS198610 BEGET-AS Beget LLC
    Domain
    minecraft-android.ru
    MX
    Receives mail at mx1.beget.com, mx2.beget.com
    SPF
    SPF record without an "all" mechanism
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  32. minecraft-android.ru RU · AS198610 · BEGET-AS Beget LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF all omittedDMARC missing
    DetailsHide
    Hostname
    minecraft-android.ru
    First seen
    2026-10-29 07:37 UTC
    First published
    2026-10-29 07:46 UTC
    DNS
    Resolves · checked 2026-11-05 07:51 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.130.41.59.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 45.130.41.59
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-29 06:37 UTC to 2027-01-27 06:37 UTC
    Logged 2026-10-29 07:35 UTC in Google ParcelYard2027h1, entry 501,847,057
    SHA-256 1a44cf798b6bd5b205e55b9f40d67041ed5a12cd57b83a31fe664010c78ad6ab
    Public key SHA-256 69a0e5e43691049e2e63b0490010d0bda7f0096a999324ae1cc80fcc96a5d6cf
    Brand
    Minecraft
    Addresses
    45.130.41.59 · Russia · AS198610 BEGET-AS Beget LLC
    Domain
    minecraft-android.ru
    MX
    Receives mail at mx1.beget.com, mx2.beget.com
    SPF
    SPF record without an "all" mechanism
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  33. mail.minecraft-cn.net CN · AS24429 · Zhejiang Taobao Network Co.…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC quarantineRegistered 3 y ago
    DetailsHide
    Hostname
    mail.minecraft-cn.net
    First seen
    2026-10-28 20:57 UTC
    First published
    2026-10-28 21:24 UTC
    DNS
    Resolves · checked 2026-11-04 21:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 163.181.214.1.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 163.181.214.1
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-28 19:54 UTC to 2027-01-26 19:53 UTC
    Logged 2026-10-28 20:52 UTC in Let's Encrypt Willow2027h1, entry 821,021,118
    SHA-256 03229c8fef9ab5e867ff7723e1495f3a944daf9b19e15cff1646b7bdb3b3ce6b
    Public key SHA-256 8f42ca358066c13bed7385d3203c0c04ecf4845251aa193c162622129cc4e31a
    Brand
    Minecraft
    Addresses
    163.181.214.1 · China · AS24429 Taobao - Zhejiang Taobao Network Co.,Ltd
    Domain
    minecraft-cn.net
    Registered
    2024-04-09 · DNSPod, Inc.
    MX
    Receives mail at mx.minecraft-cn.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-04 23:22 UTC

    Suggest a correction

  34. pay.minecraft-mods.pro LV · AS211381 · PODAON Podaon SIA
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 11 y ago
    DetailsHide
    Hostname
    pay.minecraft-mods.pro
    First seen
    2026-10-28 07:52 UTC
    First published
    2026-10-28 08:43 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.137.181.162.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 188.137.181.162
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-28 06:48 UTC to 2027-01-26 06:48 UTC
    Logged 2026-10-28 07:46 UTC in DigiCert Sphinx2027h1, entry 292,162,405
    SHA-256 08a24848de51bb09b31b348302420898eb15576234d910158d195eabc06ce59a
    Public key SHA-256 4e2ee7a8c96967a63b287f205e401dce4246788100f37580c54341431f4ec41d
    Brand
    Minecraft
    Addresses
    188.137.181.162 · Latvia · AS211381 PODAON Podaon SIA
    Domain
    minecraft-mods.pro
    Registered
    2015-10-16 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at mx.yandex.net
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  35. files.minecraft-mods.pro LV · AS211381 · PODAON Podaon SIA
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 11 y ago
    DetailsHide
    Hostname
    files.minecraft-mods.pro
    First seen
    2026-10-28 07:46 UTC
    First published
    2026-10-28 08:43 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.137.181.162.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 188.137.181.162
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-28 06:46 UTC to 2027-01-26 06:46 UTC
    Logged 2026-10-28 07:45 UTC in IPng Networks Gouda2027h1, entry 245,823,791
    SHA-256 6750cab8080b9099b0ccb7095e295b3668c22a2f71b0c58b9c5115c22630f0d3
    Public key SHA-256 37109db2f277e8ad10f0be2da0f5bf5b35a5cc79ce337a1ed46c8330b15e7e03
    Brand
    Minecraft
    Addresses
    188.137.181.162 · Latvia · AS211381 PODAON Podaon SIA
    Domain
    minecraft-mods.pro
    Registered
    2015-10-16 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at mx.yandex.net
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  36. www.play-minecraft.com.ua UA · AS200000 · Ukraine-AS Hosting Ukraine …
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    www.play-minecraft.com.ua
    First seen
    2026-10-26 23:56 UTC
    DNS
    Resolves · checked 2026-11-05 09:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.206.200.104.
    1. Phishing-host list fetched with the address
    2. Resolved to 91.206.200.104
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 463,393,243
    SHA-256 b458a9062000629cc95131eb35f4cf448de07327f39032e9d49f31589ae73062
    Brand
    Minecraft
    Addresses
    91.206.200.104 · Ukraine · AS200000 Ukraine-AS Hosting Ukraine LTD
    Domain
    play-minecraft.com.ua
    Registered
    2023-11-15 · Hosting Ukraine LLC
    MX
    Receives mail at mx.ukraine.com.ua
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:25 UTC

    Suggest a correction

  37. play-minecraft.com.ua UA · AS200000 · Ukraine-AS Hosting Ukraine …
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    play-minecraft.com.ua
    First seen
    2026-10-26 23:56 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.206.200.104.
    1. Phishing-host list fetched with the address
    2. Resolved to 91.206.200.104
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 463,393,243
    SHA-256 b458a9062000629cc95131eb35f4cf448de07327f39032e9d49f31589ae73062
    Brand
    Minecraft
    Addresses
    91.206.200.104 · Ukraine · AS200000 Ukraine-AS Hosting Ukraine LTD
    Domain
    play-minecraft.com.ua
    Registered
    2023-11-15 · Hosting Ukraine LLC
    MX
    Receives mail at mx.ukraine.com.ua
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:25 UTC

    Suggest a correction

  38. www.minecraft-host.com NL · AS60781 · LEASEWEB-NL-AMS-01 LeaseWeb…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    www.minecraft-host.com
    First seen
    2026-10-26 19:06 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 87.236.102.46.
    1. Phishing-host list fetched with the address
    2. Resolved to 87.236.102.46
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Willow2027h1, entry 785,600,452
    SHA-256 6709f4af16a69c4e2055d4b080dd3d8d3f8e2f7d77e3073e59d3ccf96f5e9b3f
    Brand
    Minecraft
    Addresses
    87.236.102.46 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
    Domain
    minecraft-host.com
    Registered
    2022-10-14 · The Registrar Company B.V.
    MX
    Receives mail at mail.minecraft-host.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  39. minecraft-host.com NL · AS60781 · LEASEWEB-NL-AMS-01 LeaseWeb…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    minecraft-host.com
    First seen
    2026-10-26 19:06 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 87.236.102.46.
    1. Phishing-host list fetched with the address
    2. Resolved to 87.236.102.46
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Willow2027h1, entry 785,600,452
    SHA-256 6709f4af16a69c4e2055d4b080dd3d8d3f8e2f7d77e3073e59d3ccf96f5e9b3f
    Brand
    Minecraft
    Addresses
    87.236.102.46 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
    Domain
    minecraft-host.com
    Registered
    2022-10-14 · The Registrar Company B.V.
    MX
    Receives mail at mail.minecraft-host.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Minecraft when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Gaming

All brands →