@nifty

Telecom & ISP Japannifty.comRank 671 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
2
2 on phishing hosts
Registered lookalikes
184
18 listed by a source or an address list
Official domains
2
verified from @nifty's own sites and records

Certificate findings for @nifty

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to @nifty's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 2 findings, grouped by hostname

  1. www.suport.nifty.com-support-member.man1oganilir.sch.id ID · AS135444 · PT Ikubaru Indonesia
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    www.suport.nifty.com-support-member.man1oganilir.sch.id
    First seen
    2026-11-01 09:21 UTC
    First published
    2026-11-01 10:14 UTC
    DNS
    Resolves · checked 2026-11-05 10:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 103.74.5.64.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 103.74.5.64
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-01 08:20 UTC to 2027-01-30 08:20 UTC
    Logged 2026-11-01 09:18 UTC in IPng Networks Gouda2027h1, entry 284,655,745
    SHA-256 344fb7d3074d234770e4c5a9e74266aed29ea2325bd15feb2c77f0a00cc0028d
    Public key SHA-256 1cd5562879fe1bf9c1179462b4d35b2834ad5bf5441128e3ae7608953db55abb
    Brand
    @nifty
    Addresses
    103.74.5.64 · Indonesia · AS135444 IDNIC-IKUBARU-AS-ID - PT Ikubaru Indonesia
    Domain
    man1oganilir.sch.id
    Registered
    2021-05-04 · PT JC Indonesia
    MX
    Receives mail at ardman1oganilir-my-id.mail.protection.outlook.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  2. suport.nifty.com-support-member.man1oganilir.sch.id ID · AS135444 · PT Ikubaru Indonesia
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    suport.nifty.com-support-member.man1oganilir.sch.id
    First seen
    2026-11-01 09:21 UTC
    First published
    2026-11-01 10:14 UTC
    DNS
    Resolves · checked 2026-11-05 10:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 103.74.5.64.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 103.74.5.64
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-01 08:20 UTC to 2027-01-30 08:20 UTC
    Logged 2026-11-01 09:18 UTC in IPng Networks Gouda2027h1, entry 284,655,745
    SHA-256 344fb7d3074d234770e4c5a9e74266aed29ea2325bd15feb2c77f0a00cc0028d
    Public key SHA-256 1cd5562879fe1bf9c1179462b4d35b2834ad5bf5441128e3ae7608953db55abb
    Brand
    @nifty
    Addresses
    103.74.5.64 · Indonesia · AS135444 IDNIC-IKUBARU-AS-ID - PT Ikubaru Indonesia
    Domain
    man1oganilir.sch.id
    Registered
    2021-05-04 · PT JC Indonesia
    MX
    Receives mail at ardman1oganilir-my-id.mail.protection.outlook.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches @nifty when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Telecom & ISP

All brands →