Motor Vehicles Office (MVDIS)
Certificate findings for Motor Vehicles Office (MVDIS)
DomainSpoof matched these hostnames, from public certificate logs, to Motor Vehicles Office (MVDIS)'s name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 4 findings, grouped by hostname
- mvdis-gov-tw.icu DE · AS51167 · CONTABO Contabo GmbHListedContaboListed by NPA 165 (government and state-owned enterprises)MX presentSPF missingDMARC missingRegistered 11 mo ago
DetailsHide details for mvdis-gov-tw.icu
- Hostname
- mvdis-gov-tw.icu
- First seen
- 2026-11-01 15:46 UTC
- First published
- 2026-11-01 16:25 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 01:32 UTC
- DNS
- Resolves · checked 2026-11-04 16:31 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-01 14:46 UTC to 2027-01-30 14:46 UTCLogged 2026-11-01 15:44 UTC in DigiCert Wyvern2027h1, entry 374,180,636SHA-256 f8bad77c5f3f17c52930944d5746b699a482a0eac313aedc51e0b073c0d76ed7Public key SHA-256 c0c045a05cf28f101b45a57e722b8020d85cc74d1b12fe0b818d1898dd5949f4
- Brand
- Motor Vehicles Office (MVDIS)
- Addresses
- 213.199.63.58 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
- Contabo
- Contabo (213.199.63.58): a cloud provider. It rents servers and addresses to its customers.
- Domain
- mvdis-gov-tw.icu
- Registered
- 2025-12-03 · Dynadot Inc
- MX
- Receives mail at mail.mvdis-gov-tw.icu
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 00:55 UTC
- mvdis-tw.net US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by NPA 165 (government and state-owned enterprises)MX absentSPF missingDMARC missingRegistered 10 mo ago
DetailsHide details for mvdis-tw.net
- Hostname
- mvdis-tw.net
- First seen
- 2026-10-30 07:10 UTC
- First published
- 2026-10-30 07:37 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 01:32 UTC
- DNS
- Resolves · checked 2026-11-05 07:49 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-10-30 06:05 UTC to 2027-01-28 07:02 UTCLogged 2026-10-30 07:05 UTC in Geomys Tuscolo2027h1, entry 404,446,220SHA-256 198ab73ddc0f1056b1eabe9ec99da987c042ae3d354097edb59e629e3064f7b3Public key SHA-256 1677470b05c7fa5e7a4ff0223d06ca8c32d9da22a2ae8bda0d6302c1e5b54986
- Brand
- Motor Vehicles Office (MVDIS)
- Addresses
- 104.21.78.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.221.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::ac43:ddc22606:4700:3037::6815:4e7e
- Cloudflare
- Cloudflare (104.21.78.126, 172.67.221.194): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- mvdis-tw.net
- Registered
- 2026-01-07 · Gname.com Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 10:04 UTC
- mvdis-twv.vipListedListed by NPA 165 (government and state-owned enterprises)MX absentSPF missingDMARC missingRegistered 10 mo ago
DetailsHide details for mvdis-twv.vip
- Hostname
- mvdis-twv.vip
- First seen
- 2026-10-29 10:11 UTC
- First published
- 2026-10-29 10:53 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 01:32 UTC
- DNS
- Not resolving since 2026-10-29 · checked 2026-11-04 11:02 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-10-29 09:09 UTC to 2027-01-27 10:07 UTCLogged 2026-10-29 10:09 UTC in Geomys Tuscolo2027h1, entry 393,533,749SHA-256 1798959bc20089d309137adc4b53d4165802add5aa235625778ca31eba4ce5f1Public key SHA-256 e01145e6323b56000e076e737bb87188031a6059ebf1586effbef7f44cd24e30
- Brand
- Motor Vehicles Office (MVDIS)
- Domain
- mvdis-twv.vip
- Registered
- 2026-01-07 · Gname.com Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
- mvdis-twd.vipListedListed by NPA 165 (government and state-owned enterprises)MX absentSPF missingDMARC missingRegistered 10 mo ago
DetailsHide details for mvdis-twd.vip
- Hostname
- mvdis-twd.vip
- First seen
- 2026-10-29 06:36 UTC
- First published
- 2026-10-29 06:44 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 01:32 UTC
- DNS
- Not resolving since 2026-10-29 · checked 2026-11-05 06:51 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-10-29 05:31 UTC to 2027-01-27 06:27 UTCLogged 2026-10-29 06:31 UTC in DigiCert Sphinx2027h1, entry 303,001,920SHA-256 fb8f5cd5a2fcda247df4b0e14cd0bd3dd4c9dea813efcbc9d9e8e980bdfdff88Public key SHA-256 c782cf290e9a54ca3cb1a3762534e2a1c1b523c33b479c25c16627e0520458d9
- Brand
- Motor Vehicles Office (MVDIS)
- Domain
- mvdis-twd.vip
- Registered
- 2026-01-07 · Gname.com Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 10:04 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Motor Vehicles Office (MVDIS) when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

