PayPay

Payments & fintech Japanpaypay.ne.jpRank 67 of the most impersonated
Cert findings · 24 h
1
Cert findings · 7 days
15
5 reported or listed · 10 on phishing hosts
Registered lookalikes
91
5 listed by a source or an address list
Official domains
6
verified from PayPay's own sites and records

Certificate findings for PayPay

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to PayPay's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 16 findings, grouped by hostname

  1. gmdgyl.com US · AS18978 · Enzu Inc
    ListedListed by JPCERT/CC as imitating PayPayMX absentSPF missingDMARC missingRegistered 21 d ago
    DetailsHide
    Hostname
    gmdgyl.com
    First seen
    2026-11-04 18:46 UTC
    First published
    2026-11-04 20:01 UTC
    Listing
    JPCERT/CC confirmed it 2026-06-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-04 20:05 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-04 17:42 UTC to 2027-02-02 17:42 UTC
    Logged 2026-11-04 18:40 UTC in Google PlumbersArms2027h1, entry 613,295,367
    SHA-256 81cec3d76bcf84716cb133a9d1e3c4c98f2cbc8a5a5a0d6a6fde075bcdcf76e6
    Public key SHA-256 4d1fa9c875f021f915ba1515aea021177236600fcf17ba8f907aceb66e0303fe
    Brand
    PayPay
    Addresses
    107.163.230.142 · United States · AS18978 ENZUINC-US - Enzu Inc
    Domain
    gmdgyl.com
    Registered
    2026-10-15 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:01 UTC

    Suggest a correction

  2. zzadwy.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by JPCERT/CC as imitating PayPayMX absentSPF missingDMARC missingRegistered 38 d ago
    DetailsHide
    Hostname
    zzadwy.com
    First seen
    2026-11-03 09:38 UTC
    First published
    2026-11-03 09:58 UTC
    Listing
    JPCERT/CC confirmed it 2026-06-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-05 10:02 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-03 00:00 UTC to 2027-01-18 18:58 UTC
    Logged 2026-11-03 09:34 UTC in HARICA Selene2027h1, entry 46,073,447
    SHA-256 583c5d0f45aa11c42e7e830948b5c059f0277c66715f4f7d47f0d999913b9190
    Public key SHA-256 01995a5e8d92ff74955c1d1eeeaddc64eb16e0858d0965dff975efba507da85c
    Brand
    PayPay
    Addresses
    104.21.62.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.62.61, 172.67.220.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zzadwy.com
    Registered
    2026-09-28 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:59 UTC

    Suggest a correction

  3. blessch.com US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by JPCERT/CC as imitating PayPayMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    blessch.com
    First seen
    2026-11-02 21:05 UTC
    First published
    2026-11-02 22:16 UTC
    Listing
    JPCERT/CC confirmed it 2026-06-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-04 22:20 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-02 20:04 UTC to 2027-01-31 20:04 UTC
    Logged 2026-11-02 21:03 UTC in Google ParcelYard2027h1, entry 578,405,316
    SHA-256 1e22ef8600bc1a769e7ff720aac67c828d3b26635477b83357d0fef0aaf3da8c
    Public key SHA-256 c9d1dc283c0748db14db9515a9dac66d2e0589bada7aeb3d6fc6aec49002c912
    Brand
    PayPay
    Addresses
    44.232.173.249 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    52.40.42.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (44.232.173.249, 52.40.42.113): a cloud provider. It rents servers and addresses to its customers.
    Domain
    blessch.com
    Registered
    2024-07-10 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  4. www.paypay-europe.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 5 mo ago
    DetailsHide
    Hostname
    www.paypay-europe.com
    First seen
    2026-11-01 15:52 UTC
    First published
    2026-11-01 16:25 UTC
    DNS
    Resolves · checked 2026-11-04 16:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.142.10.5
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-01 14:51 UTC to 2027-01-30 14:51 UTC
    Logged 2026-11-01 15:49 UTC in IPng Networks Halloumi2027h1, entry 330,763,244
    SHA-256 113c980406f3860bf70b183077750567af37489e8a06ebe9c613413bdf81de01
    Public key SHA-256 5fb0063b55546e2a49a381e1a18547716294f4936148690ea294f515c7ee2a0f
    Brand
    PayPay
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    paypay-europe.com
    Registered
    2026-06-01 · Ultahost, Inc.
    MX
    Receives mail at paypay-europe.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  5. webmail.paypay-europe.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 5 mo ago
    DetailsHide
    Hostname
    webmail.paypay-europe.com
    First seen
    2026-11-01 15:52 UTC
    First published
    2026-11-01 16:25 UTC
    DNS
    Resolves · checked 2026-11-04 16:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.142.10.5
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-01 14:51 UTC to 2027-01-30 14:51 UTC
    Logged 2026-11-01 15:49 UTC in IPng Networks Halloumi2027h1, entry 330,763,244
    SHA-256 113c980406f3860bf70b183077750567af37489e8a06ebe9c613413bdf81de01
    Public key SHA-256 5fb0063b55546e2a49a381e1a18547716294f4936148690ea294f515c7ee2a0f
    Brand
    PayPay
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    paypay-europe.com
    Registered
    2026-06-01 · Ultahost, Inc.
    MX
    Receives mail at paypay-europe.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  6. webdisk.paypay-europe.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 5 mo ago
    DetailsHide
    Hostname
    webdisk.paypay-europe.com
    First seen
    2026-11-01 15:52 UTC
    First published
    2026-11-01 16:25 UTC
    DNS
    Resolves · checked 2026-11-04 16:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.142.10.5
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-01 14:51 UTC to 2027-01-30 14:51 UTC
    Logged 2026-11-01 15:49 UTC in IPng Networks Halloumi2027h1, entry 330,763,244
    SHA-256 113c980406f3860bf70b183077750567af37489e8a06ebe9c613413bdf81de01
    Public key SHA-256 5fb0063b55546e2a49a381e1a18547716294f4936148690ea294f515c7ee2a0f
    Brand
    PayPay
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    paypay-europe.com
    Registered
    2026-06-01 · Ultahost, Inc.
    MX
    Receives mail at paypay-europe.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  7. paypay-europe.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 5 mo ago
    DetailsHide
    Hostname
    paypay-europe.com
    First seen
    2026-11-01 15:52 UTC
    First published
    2026-11-01 16:25 UTC
    DNS
    Resolves · checked 2026-11-04 16:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.142.10.5
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-01 14:51 UTC to 2027-01-30 14:51 UTC
    Logged 2026-11-01 15:49 UTC in IPng Networks Halloumi2027h1, entry 330,763,244
    SHA-256 113c980406f3860bf70b183077750567af37489e8a06ebe9c613413bdf81de01
    Public key SHA-256 5fb0063b55546e2a49a381e1a18547716294f4936148690ea294f515c7ee2a0f
    Brand
    PayPay
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    paypay-europe.com
    Registered
    2026-06-01 · Ultahost, Inc.
    MX
    Receives mail at paypay-europe.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  8. mail.paypay-europe.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 5 mo ago
    DetailsHide
    Hostname
    mail.paypay-europe.com
    First seen
    2026-11-01 15:52 UTC
    First published
    2026-11-01 16:25 UTC
    DNS
    Resolves · checked 2026-11-04 16:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.142.10.5
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-01 14:51 UTC to 2027-01-30 14:51 UTC
    Logged 2026-11-01 15:49 UTC in IPng Networks Halloumi2027h1, entry 330,763,244
    SHA-256 113c980406f3860bf70b183077750567af37489e8a06ebe9c613413bdf81de01
    Public key SHA-256 5fb0063b55546e2a49a381e1a18547716294f4936148690ea294f515c7ee2a0f
    Brand
    PayPay
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    paypay-europe.com
    Registered
    2026-06-01 · Ultahost, Inc.
    MX
    Receives mail at paypay-europe.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  9. cpcontacts.paypay-europe.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 5 mo ago
    DetailsHide
    Hostname
    cpcontacts.paypay-europe.com
    First seen
    2026-11-01 15:52 UTC
    First published
    2026-11-01 16:25 UTC
    DNS
    Resolves · checked 2026-11-04 16:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.142.10.5
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-01 14:51 UTC to 2027-01-30 14:51 UTC
    Logged 2026-11-01 15:49 UTC in IPng Networks Halloumi2027h1, entry 330,763,244
    SHA-256 113c980406f3860bf70b183077750567af37489e8a06ebe9c613413bdf81de01
    Public key SHA-256 5fb0063b55546e2a49a381e1a18547716294f4936148690ea294f515c7ee2a0f
    Brand
    PayPay
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    paypay-europe.com
    Registered
    2026-06-01 · Ultahost, Inc.
    MX
    Receives mail at paypay-europe.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  10. cpcalendars.paypay-europe.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 5 mo ago
    DetailsHide
    Hostname
    cpcalendars.paypay-europe.com
    First seen
    2026-11-01 15:52 UTC
    First published
    2026-11-01 16:25 UTC
    DNS
    Resolves · checked 2026-11-04 16:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.142.10.5
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-01 14:51 UTC to 2027-01-30 14:51 UTC
    Logged 2026-11-01 15:49 UTC in IPng Networks Halloumi2027h1, entry 330,763,244
    SHA-256 113c980406f3860bf70b183077750567af37489e8a06ebe9c613413bdf81de01
    Public key SHA-256 5fb0063b55546e2a49a381e1a18547716294f4936148690ea294f515c7ee2a0f
    Brand
    PayPay
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    paypay-europe.com
    Registered
    2026-06-01 · Ultahost, Inc.
    MX
    Receives mail at paypay-europe.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  11. cpanel.paypay-europe.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 5 mo ago
    DetailsHide
    Hostname
    cpanel.paypay-europe.com
    First seen
    2026-11-01 15:52 UTC
    First published
    2026-11-01 16:25 UTC
    DNS
    Resolves · checked 2026-11-04 16:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.142.10.5
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-01 14:51 UTC to 2027-01-30 14:51 UTC
    Logged 2026-11-01 15:49 UTC in IPng Networks Halloumi2027h1, entry 330,763,244
    SHA-256 113c980406f3860bf70b183077750567af37489e8a06ebe9c613413bdf81de01
    Public key SHA-256 5fb0063b55546e2a49a381e1a18547716294f4936148690ea294f515c7ee2a0f
    Brand
    PayPay
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    paypay-europe.com
    Registered
    2026-06-01 · Ultahost, Inc.
    MX
    Receives mail at paypay-europe.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  12. autodiscover.paypay-europe.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 5 mo ago
    DetailsHide
    Hostname
    autodiscover.paypay-europe.com
    First seen
    2026-11-01 15:52 UTC
    First published
    2026-11-01 16:25 UTC
    DNS
    Resolves · checked 2026-11-04 16:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.142.10.5
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-01 14:51 UTC to 2027-01-30 14:51 UTC
    Logged 2026-11-01 15:49 UTC in IPng Networks Halloumi2027h1, entry 330,763,244
    SHA-256 113c980406f3860bf70b183077750567af37489e8a06ebe9c613413bdf81de01
    Public key SHA-256 5fb0063b55546e2a49a381e1a18547716294f4936148690ea294f515c7ee2a0f
    Brand
    PayPay
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    paypay-europe.com
    Registered
    2026-06-01 · Ultahost, Inc.
    MX
    Receives mail at paypay-europe.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  13. autoconfig.paypay-europe.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 5 mo ago
    DetailsHide
    Hostname
    autoconfig.paypay-europe.com
    First seen
    2026-11-01 15:52 UTC
    First published
    2026-11-01 16:25 UTC
    DNS
    Resolves · checked 2026-11-04 16:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.142.10.5
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-01 14:51 UTC to 2027-01-30 14:51 UTC
    Logged 2026-11-01 15:49 UTC in IPng Networks Halloumi2027h1, entry 330,763,244
    SHA-256 113c980406f3860bf70b183077750567af37489e8a06ebe9c613413bdf81de01
    Public key SHA-256 5fb0063b55546e2a49a381e1a18547716294f4936148690ea294f515c7ee2a0f
    Brand
    PayPay
    Addresses
    192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    paypay-europe.com
    Registered
    2026-06-01 · Ultahost, Inc.
    MX
    Receives mail at paypay-europe.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  14. yoov.shop CN · AS132203 · Tencent Building, Kejizhong…
    ListedTencent CloudListed by JPCERT/CC as imitating PayPayMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    yoov.shop
    First seen
    2026-10-31 15:20 UTC
    First published
    2026-10-31 16:11 UTC
    Listing
    JPCERT/CC confirmed it 2026-09-03 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-04 16:20 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-31 14:18 UTC to 2027-01-29 15:15 UTC
    Logged 2026-10-31 15:18 UTC in Geomys Tuscolo2027h1, entry 421,293,787
    SHA-256 fac74503b05b8a409442521385e040e684ec3e64f561019096e1af8a79240390
    Public key SHA-256 1c9b9b0cd9619d1b5f09985605d6abf8e610d7a7c06150e2801a897b516eaafc
    Brand
    PayPay
    Addresses
    43.160.225.83 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
    Tencent Cloud
    Tencent Cloud (43.160.225.83): a cloud provider. It rents servers and addresses to its customers.
    Domain
    yoov.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  15. fnowjehayqb.top US · AS979 · NetLab Global
    ListedListed by JPCERT/CC as imitating PayPayMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    fnowjehayqb.top
    First seen
    2026-10-30 04:26 UTC
    First published
    2026-10-30 04:55 UTC
    Listing
    JPCERT/CC confirmed it 2026-09-03 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-05 05:01 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-30 03:23 UTC to 2027-01-28 03:23 UTC
    Logged 2026-10-30 04:21 UTC in DigiCert Sphinx2027h1, entry 313,659,778
    SHA-256 43bde02ea8e2906b2b806c57a640dde580724221a8085ab9358752eb10861207
    Public key SHA-256 f03ed881cad2b61793e8db5d5ece867881c365701b779ce21866ceaf56cff9cd
    Brand
    PayPay
    Addresses
    154.36.188.52 · United States · AS979 NETLAB-SDN - NetLab Global
    Domain
    fnowjehayqb.top
    Registered
    2026-04-12 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  16. wwyuyin.com US · AS13335 · Cloudflare, Inc.10 addresses
    ListedCloudflareListed by JPCERT/CC as imitating PayPayMX absentSPF missingDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    wwyuyin.com
    First seen
    2026-10-27 14:05 UTC
    Listing
    JPCERT/CC confirmed it 2026-06-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. We matched the new listing
    3. Latest DNS check
    Brand
    PayPay
    Addresses
    104.16.141.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.16.147.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.17.19.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.40.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.88.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:8390::5981:fa04
    2606:4700:8ca0::2215:2a32
    2606:4700:8caf::ff03:5be8
    2606:4700:9a91::5a4c:9b70
    2a06:98c1:3112::79ef:7c1a
    Cloudflare
    Cloudflare (104.16.141.126, 104.16.147.158, 104.17.19.34, 104.18.40.23, 104.18.88.119): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wwyuyin.com
    Registered
    2021-07-27 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches PayPay when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Payments & fintech

All brands →