Robinhood

Investing United Statesrobinhood.comRank 183 of the most impersonated
Cert findings · 24 h
9
Cert findings · 7 days
36
29 reported or listed · 7 on phishing hosts
Registered lookalikes
315
34 listed by a source or an address list
Official domains
4
verified from Robinhood's own sites and records

Certificate findings for Robinhood

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Robinhood's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 46 findings, grouped by hostname

  1. login-robinhood-user.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    login-robinhood-user.pages.dev
    First seen
    2026-11-05 10:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 09:45 UTC to 2027-02-03 10:44 UTC
    Logged 2026-11-05 10:45 UTC in Google PlumbersArms2027h1, entry 624,825,566
    SHA-256 2fad22a83429c15c070c93b12330119287482c86a8748a71b7f5e878856935b2
    Public key SHA-256 a9e4cd4c257b683d27a9007f2de61b87472c3042afe6cbb8e1cf1feeb7b798a7
    Brand
    Robinhood
    Addresses
    172.66.44.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cd8
    2606:4700:310c::ac42:2f28
    Cloudflare
    Cloudflare (172.66.44.216, 172.66.47.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  2. robinhood-game.de NL · AS60781 · LEASEWEB-NL-AMS-01 LeaseWeb…2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    robinhood-game.de
    First seen
    2026-11-05 09:04 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 212.7.194.71.
    1. Phishing-host list fetched with the address
    2. Resolved to 212.7.194.71
    Brand
    Robinhood
    Addresses
    212.7.194.71 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
    212.7.194.53 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
    Domain
    robinhood-game.de
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  3. robinhood.ph US · AS23470 · ReliableSite.Net LLC2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    robinhood.ph
    First seen
    2026-11-05 09:02 UTC
    First published
    2026-10-28 05:36 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.93.103.100.
    1. Phishing-host list fetched with the address
    2. Resolved to 172.93.103.100
    Brand
    Robinhood
    Addresses
    172.93.103.100 · United States · AS23470 RELIABLESITE - ReliableSite.Net LLC
    212.92.105.196 · Netherlands · AS43350 NFORCE NForce Entertainment B.V.
    Domain
    robinhood.ph
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  4. rewards-robinhood.online SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    rewards-robinhood.online
    First seen
    2026-11-05 03:11 UTC
    First published
    2026-11-05 04:10 UTC
    DNS
    Resolves · checked 2026-11-05 04:12 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 02:09 UTC to 2027-02-03 02:09 UTC
    Logged 2026-11-05 03:07 UTC in Google ParcelYard2027h1, entry 618,892,323
    SHA-256 06081d293b3f9a495284a7497836717a0685515ae15337f81e922aee04f7fa58
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    Robinhood
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    rewards-robinhood.online
    Registered
    2026-11-04 · NameSilo, LLC
    MX
    Receives mail at mx1.titan.email, mx2.titan.email
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 05:26 UTC

    Suggest a correction

  5. docs-robinhood-lgn.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    docs-robinhood-lgn.pages.dev
    First seen
    2026-11-05 02:26 UTC
    First published
    2026-11-05 02:59 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 03:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 01:22 UTC to 2027-02-03 02:21 UTC
    Logged 2026-11-05 02:22 UTC in DigiCert Wyvern2027h1, entry 410,190,165
    SHA-256 2167d0bacd159de3ec02926db4d21b93a72681915ffea2a13b3a35d52cda0321
    Public key SHA-256 007fabc221b164fd4b7fb68941eadbf3347691e9023c594ae309774d08aeb7b7
    Brand
    Robinhood
    Addresses
    172.66.44.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cad
    2606:4700:310c::ac42:2f53
    Cloudflare
    Cloudflare (172.66.44.173, 172.66.47.83): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  6. get-robinhood.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    get-robinhood.pages.dev
    First seen
    2026-11-04 23:57 UTC
    First published
    2026-11-05 00:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:49 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-04 22:54 UTC to 2027-02-02 23:51 UTC
    Logged 2026-11-04 23:54 UTC in Let's Encrypt Sycamore2027h1, entry 949,593,299
    SHA-256 478f5bae050a60ccbb1e987fd3361fba3e108dc571d358b9f9a71ccb2fdedabd
    Public key SHA-256 60b0b87c9bdc3b241db774a509d0567a54ec9051c200ef276e6cf94de1ea3bb8
    Brand
    Robinhood
    Addresses
    172.66.44.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c38
    2606:4700:310c::ac42:2fc8
    Cloudflare
    Cloudflare (172.66.44.56, 172.66.47.200): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  7. 485129-robinhood.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    485129-robinhood.com
    First seen
    2026-11-04 23:26 UTC
    First published
    2026-11-05 00:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:49 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-04 23:13 UTC to 2027-02-02 19:43 UTC
    Logged 2026-11-04 23:23 UTC in DigiCert Wyvern2027h1, entry 408,498,031
    SHA-256 78d1b52bd1852475b1f0be8e547245691fa4b0c6f2f9da5c285c40f22fa0b72e
    Public key SHA-256 1f97b3004c3d80f972dd8842c69dcf58bbbbb70546615983cfbef63e29cb5a57
    Brand
    Robinhood
    Addresses
    104.21.71.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:4704
    2606:4700:3037::ac43:8d40
    Cloudflare
    Cloudflare (104.21.71.4, 172.67.141.64): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    485129-robinhood.com
    Registered
    2026-07-09 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:43 UTC

    Suggest a correction

  8. robinhood-login-org.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    robinhood-login-org.pages.dev
    First seen
    2026-11-04 12:31 UTC
    First published
    2026-11-04 13:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-04 11:27 UTC to 2027-02-02 12:25 UTC
    Logged 2026-11-04 12:27 UTC in Google ParcelYard2027h1, entry 608,286,837
    SHA-256 098c55d5fa60186daa58353de940eea951cc6f9b8de857274d03be580fa15bac
    Public key SHA-256 a2cc999a0f0fcbab70f729a61a5b1c5172edc9dfdfeaaac46684db39b60af3e2
    Brand
    Robinhood
    Addresses
    172.66.44.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cd8
    2606:4700:310c::ac42:2f28
    Cloudflare
    Cloudflare (172.66.44.216, 172.66.47.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  9. robinhood-web-login.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    robinhood-web-login.pages.dev
    First seen
    2026-11-04 11:15 UTC
    First published
    2026-11-04 11:54 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 12:10 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-04 10:11 UTC to 2027-02-02 11:10 UTC
    Logged 2026-11-04 11:11 UTC in Google PlumbersArms2027h1, entry 607,733,479
    SHA-256 861b934617fb960c67d5d3df081fc02a895569e868fe6f8ac381db3fdc81fafb
    Public key SHA-256 a3be220c633987a1b0bc4ea863ee8f75244cc04493d63f244f9d4c61f968fda5
    Brand
    Robinhood
    Addresses
    172.66.44.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cb1
    2606:4700:310c::ac42:2f4f
    Cloudflare
    Cloudflare (172.66.44.177, 172.66.47.79): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  10. secureportal-robinhood.com
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    secureportal-robinhood.com
    First seen
    2026-11-04 10:15 UTC
    First published
    2026-11-04 10:38 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-04 · checked 2026-11-05 10:49 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-04 09:13 UTC to 2027-02-02 09:13 UTC
    Logged 2026-11-04 10:12 UTC in IPng Networks Gouda2027h1, entry 313,152,221
    SHA-256 366b8c5bf9e81a99e7c77a80255a32b685bd61cacbe14b3743dc1f0d72d6d0c7
    Public key SHA-256 e57e72908f76f0fc6accb0ca590a5e3a83d40f10ede98e9796c90809c578492c
    Brand
    Robinhood
    Domain
    secureportal-robinhood.com
    Registered
    2026-05-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:19 UTC

    Suggest a correction

  11. robinhood.gifts DE · AS213230 · HETZNER-CLOUD2-AS Hetzner O…5 addresses
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    robinhood.gifts
    First seen
    2026-11-04 09:01 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.161.230.87.
    1. Phishing-host list fetched with the address
    2. Resolved to 5.161.230.87
    3. Latest DNS check
    Brand
    Robinhood
    Addresses
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
    Domain
    robinhood.gifts
    Registered
    2026-08-26 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  12. auths-robinhood-eng.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    auths-robinhood-eng.pages.dev
    First seen
    2026-11-04 08:21 UTC
    First published
    2026-11-04 09:19 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:38 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-04 07:18 UTC to 2027-02-02 08:16 UTC
    Logged 2026-11-04 08:18 UTC in Geomys Tuscolo2027h1, entry 470,563,674
    SHA-256 68e01b8c3e95fb2c98aac9b193ed271f6f2497b157d0a273430031460eedb4a4
    Public key SHA-256 3fe8a1710f2e9dba3f08bbe547e43eff03624c09ec2ee936ca20044a56f21d32
    Brand
    Robinhood
    Addresses
    172.66.45.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2d24
    2606:4700:310c::ac42:2edc
    Cloudflare
    Cloudflare (172.66.45.36, 172.66.46.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  13. pay.robinhoodus.news US · AS14618 · Amazon.com, Inc.2 addresses
    ReportedAmazon Web ServicesUnder robinhoodus.news, reported by PhishDestroyMX absentSPF missingDMARC quarantineRegistered 2 mo ago
    DetailsHide
    Hostname
    pay.robinhoodus.news
    First seen
    2026-11-04 02:00 UTC
    First published
    2026-11-04 03:04 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 03:17 UTC
    Reported
    PhishDestroy, listing robinhoodus.news and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by GoDaddy TLS Intermediate CA DV - R1v1 · precertificate
    Valid 2026-11-04 01:55 UTC to 2027-05-21 01:55 UTC
    Logged 2026-11-04 01:55 UTC in Google Argon2027h1, entry 850,595,768
    SHA-256 2be71c8899076723442b1d0dd6189c45ae8fb43b393a5fb65b040779ec7fd1b1
    Public key SHA-256 2dea7fd06a303fc138e63a71278584858a0bf3e57540078f6c4c261378e09e63
    PhishDestroy
    Brand
    Robinhood
    Addresses
    100.49.0.246 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    100.49.110.141 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (100.49.0.246, 100.49.110.141): a cloud provider. It rents servers and addresses to its customers.
    Domain
    robinhoodus.news
    Registered
    2026-09-04 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  14. www.pay.robinhoodus.news
    ReportedUnder robinhoodus.news, reported by PhishDestroyMX absentSPF missingDMARC quarantineRegistered 2 mo ago
    DetailsHide
    Hostname
    www.pay.robinhoodus.news
    First seen
    2026-11-04 02:00 UTC
    First published
    2026-11-04 03:04 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-04 · checked 2026-11-05 03:17 UTC
    Reported
    PhishDestroy, listing robinhoodus.news and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by GoDaddy TLS Intermediate CA DV - R1v1 · precertificate
    Valid 2026-11-04 01:55 UTC to 2027-05-21 01:55 UTC
    Logged 2026-11-04 01:55 UTC in Google Argon2027h1, entry 850,595,768
    SHA-256 2be71c8899076723442b1d0dd6189c45ae8fb43b393a5fb65b040779ec7fd1b1
    Public key SHA-256 2dea7fd06a303fc138e63a71278584858a0bf3e57540078f6c4c261378e09e63
    PhishDestroy
    Brand
    Robinhood
    Domain
    robinhoodus.news
    Registered
    2026-09-04 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  15. robinhood-distribution.com
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 13 d ago
    DetailsHide
    Hostname
    robinhood-distribution.com
    First seen
    2026-11-02 00:45 UTC
    First published
    2026-11-02 01:04 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-02 · checked 2026-11-05 01:09 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-02 00:00 UTC to 2027-01-22 18:19 UTC
    Logged 2026-11-02 00:40 UTC in Google ParcelYard2027h1, entry 563,571,168
    SHA-256 265a8d45b7507eb3215f95f518636253d254210efef939bcf69b6f11e4daa3bb
    Public key SHA-256 621fb909216aec7b034ef57e6900d537ec2a3af3a1d8ef612d5d6305397e98af
    Brand
    Robinhood
    Domain
    robinhood-distribution.com
    Registered
    2026-10-23 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  16. robinhood-chain-report.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    robinhood-chain-report.pages.dev
    First seen
    2026-11-01 16:21 UTC
    First published
    2026-11-01 16:55 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 17:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-01 15:15 UTC to 2027-01-30 16:14 UTC
    Logged 2026-11-01 16:15 UTC in IPng Networks Gouda2027h1, entry 286,818,947
    SHA-256 237d2cb588a92b4fac1685e858de7c0e77b73335c2d62e3a707889ac0359cac3
    Public key SHA-256 f47aa3f1f2a3b89c77f66f6547af4480edaa573e2a8f959e6e72d0717b38e7d4
    Brand
    Robinhood
    Addresses
    172.66.44.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cb2
    2606:4700:310c::ac42:2f4e
    Cloudflare
    Cloudflare (172.66.44.178, 172.66.47.78): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  17. faq-robinhood-lgn.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    faq-robinhood-lgn.pages.dev
    First seen
    2026-11-01 15:26 UTC
    First published
    2026-11-01 16:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 16:31 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-01 00:00 UTC to 2027-01-14 21:02 UTC
    Logged 2026-11-01 15:22 UTC in Geomys Tuscolo2027h1, entry 433,856,648
    SHA-256 04bfef8e26cb12808169f188ff4673709464a72ac17e4fc10c1a0aa798c789e1
    Public key SHA-256 c19edec53e0d7ef3333ca081c34e7137097423b49d855ddcc3ab7e6823aa28b6
    Brand
    Robinhood
    Addresses
    172.66.44.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c4c
    2606:4700:310c::ac42:2fb4
    Cloudflare
    Cloudflare (172.66.44.76, 172.66.47.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  18. robinhood-me.app US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    robinhood-me.app
    First seen
    2026-11-01 15:26 UTC
    First published
    2026-11-01 16:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 16:31 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-01 14:26 UTC to 2027-01-30 14:26 UTC
    Logged 2026-11-01 15:25 UTC in Google PlumbersArms2027h1, entry 557,663,670
    SHA-256 6a113e3873080bc1a18605547fcedfa5114cca43db07660d6347067b36dfc2df
    Public key SHA-256 b6949aff092b7c467c43d8a3535b002e7765c30205e64fb508c1c6141d6946bd
    Brand
    Robinhood
    Addresses
    216.150.1.193 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.150.16.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.150.1.193, 216.150.16.1): a cloud provider. It rents servers and addresses to its customers.
    Domain
    robinhood-me.app
    Registered
    2026-08-31 · Name.com, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  19. www.robinhood-group.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.robinhood-group.com
    First seen
    2026-11-01 15:06 UTC
    First published
    2026-11-01 15:18 UTC
    DNS
    Resolves · checked 2026-11-04 15:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-01 14:02 UTC to 2027-01-30 14:02 UTC
    Logged 2026-11-01 15:00 UTC in Google ParcelYard2027h1, entry 556,860,884
    SHA-256 097caf233a79b7d03c24aa3c7f46381127fd9d45839e38e416a3001bd09f81e3
    Public key SHA-256 7fa0c780e1743e0b16c4e5314c02e6adc303b9c0aef1a2227fe93a1e9f4d288a
    Brand
    Robinhood
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    robinhood-group.com
    Registered
    2026-02-25 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  20. robinhood-group.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    robinhood-group.com
    First seen
    2026-11-01 15:06 UTC
    First published
    2026-11-01 15:18 UTC
    DNS
    Resolves · checked 2026-11-04 15:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-01 14:02 UTC to 2027-01-30 14:02 UTC
    Logged 2026-11-01 15:00 UTC in Google ParcelYard2027h1, entry 556,860,884
    SHA-256 097caf233a79b7d03c24aa3c7f46381127fd9d45839e38e416a3001bd09f81e3
    Public key SHA-256 7fa0c780e1743e0b16c4e5314c02e6adc303b9c0aef1a2227fe93a1e9f4d288a
    Brand
    Robinhood
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    robinhood-group.com
    Registered
    2026-02-25 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  21. www.robinhood-me.app US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesUnder robinhood-me.app, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.robinhood-me.app
    First seen
    2026-11-01 08:00 UTC
    First published
    2026-11-01 09:09 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:21 UTC
    Listed
    MetaMask, listing robinhood-me.app and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-01 07:00 UTC to 2027-01-30 07:00 UTC
    Logged 2026-11-01 07:58 UTC in Google PlumbersArms2027h1, entry 552,910,495
    SHA-256 1719f55ad06d41e814163142f8b53a40082f5cb54b6c369f7ac15d5a2964a1f5
    Public key SHA-256 8e80f623f501c4396ead815555832d1b207517a36991ce88f53ce2a12a2b443e
    Brand
    Robinhood
    Addresses
    216.150.16.129 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.150.16.193 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.150.16.129, 216.150.16.193): a cloud provider. It rents servers and addresses to its customers.
    Domain
    robinhood-me.app
    Registered
    2026-08-31 · Name.com, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  22. robinhood-nft-test.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    robinhood-nft-test.pages.dev
    First seen
    2026-11-01 00:08 UTC
    First published
    2026-11-01 00:18 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:26 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-31 23:06 UTC to 2027-01-30 00:05 UTC
    Logged 2026-11-01 00:06 UTC in DigiCert Wyvern2027h1, entry 370,086,098
    SHA-256 74589d0033c7a31e4f84f6d851204525b872bdc1a9925b2154374aeb42b705c5
    Public key SHA-256 f668a568270cf2f408f3f4932aeb71e63eaad7612ec63ad70abf9ae081d71b80
    Brand
    Robinhood
    Addresses
    172.66.44.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2ce2
    2606:4700:310c::ac42:2f1e
    Cloudflare
    Cloudflare (172.66.44.226, 172.66.47.30): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  23. robinhoodwallethelp.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    robinhoodwallethelp.com
    First seen
    2026-10-31 14:26 UTC
    First published
    2026-10-31 15:06 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 15:14 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-10-31 00:00 UTC to 2027-01-17 07:26 UTC
    Logged 2026-10-31 14:24 UTC in DigiCert Sphinx2027h1, entry 322,960,594
    SHA-256 4064c2052d30dcd215d81c06fa39f5d757c1e2c113704eebd7810a2fa4cdbc89
    Public key SHA-256 5acab05363913c9de834c86a6490134d09b169f6f5c521eb0fcd97e9dcc11a92
    PhishDestroy
    Brand
    Robinhood
    Addresses
    104.21.41.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:a506
    2606:4700:3037::6815:298a
    Cloudflare
    Cloudflare (104.21.41.138, 172.67.165.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    robinhoodwallethelp.com
    Registered
    2026-01-20 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:08 UTC

    Suggest a correction

  24. gateway-robinhood.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    gateway-robinhood.com
    First seen
    2026-10-31 13:16 UTC
    First published
    2026-10-31 13:42 UTC
    DNS
    Resolves · checked 2026-11-04 13:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-31 12:14 UTC to 2027-01-29 12:14 UTC
    Logged 2026-10-31 13:12 UTC in Geomys Tuscolo2027h1, entry 420,185,094
    SHA-256 287b3835be6157491967a8168f6dabfff42225f2ef4c7f05b1e875aa34314b3e
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    Robinhood
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    gateway-robinhood.com
    Registered
    2026-06-15 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:34 UTC

    Suggest a correction

  25. sso-robinhood-login-us.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    sso-robinhood-login-us.pages.dev
    First seen
    2026-10-31 13:11 UTC
    First published
    2026-10-31 13:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-10-31 00:00 UTC to 2027-01-14 20:46 UTC
    Logged 2026-10-31 13:09 UTC in Let's Encrypt Willow2027h1, entry 864,715,981
    SHA-256 0458bed285e575ff4d958a3e6e8b59fe8f8934c38203c5071ded741383c32a29
    Public key SHA-256 e9fe5911b76ec31ff73a08e913162e055f3fd53a461e0502fcb2c6b4a3ae3d61
    Brand
    Robinhood
    Addresses
    172.66.44.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cae
    2606:4700:310c::ac42:2f52
    Cloudflare
    Cloudflare (172.66.44.174, 172.66.47.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  26. www.robinhood-globalpayroll-portal.com US · AS397273 · Render2 addresses
    ListedShared platform · RenderUnder robinhood-globalpayroll-portal.com, listed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 10 d ago
    DetailsHide
    Hostname
    www.robinhood-globalpayroll-portal.com
    First seen
    2026-10-31 11:36 UTC
    First published
    2026-10-31 11:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Checked · checked 2026-11-04 11:55 UTC
    Checks
    Overdue since 2026-11-03 11:55 UTC
    Listed
    MetaMask, listing robinhood-globalpayroll-portal.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-10-26 14:54 UTC to 2027-01-24 15:54 UTC
    Logged 2026-10-31 11:32 UTC in Google ParcelYard2027h1, entry 538,149,262
    SHA-256 82b5836c718957e3fe76f4edfa8d53f1109a256a278afb564fe60765282b60ac
    Public key SHA-256 8d110afe5e7c2e7d87d9dd2b05273f4c9ee3b1527dd2bf0a68569de8d390e558
    Brand
    Robinhood
    Addresses
    216.24.57.16 · United States · AS397273 RENDER - Render · Render (shared platform)
    216.24.57.18 · United States · AS397273 RENDER - Render · Render (shared platform)
    Shared platform · Render
    Render (216.24.57.16, 216.24.57.18): a shared platform front end. The address serves every app deployed on the platform.
    Domain
    robinhood-globalpayroll-portal.com
    Registered
    2026-10-26 · Wix.com Ltd.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-02 12:22 UTC

    Suggest a correction

  27. robinhood-us-app.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    robinhood-us-app.pages.dev
    First seen
    2026-10-30 13:46 UTC
    First published
    2026-10-30 13:53 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 14:01 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-30 12:43 UTC to 2027-01-28 13:40 UTC
    Logged 2026-10-30 13:43 UTC in Google ParcelYard2027h1, entry 523,312,970
    SHA-256 d8c5a979344b9b61d10f365321d53ba4d43e9b62aebf98b2bc77ee5f2ea22a52
    Public key SHA-256 f717f4b8588cda5e7fe86e55065ad63658c7fdf714919c426a26e1076f4b8100
    Brand
    Robinhood
    Addresses
    172.66.44.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c65
    2606:4700:310c::ac42:2f9b
    Cloudflare
    Cloudflare (172.66.44.101, 172.66.47.155): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  28. robinhood-us-apps.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    robinhood-us-apps.pages.dev
    First seen
    2026-10-30 12:15 UTC
    First published
    2026-10-30 12:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:02 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-30 11:12 UTC to 2027-01-28 12:10 UTC
    Logged 2026-10-30 12:12 UTC in Google PlumbersArms2027h1, entry 522,907,407
    SHA-256 5d6a8476d089e4a267ea8e12bb41ad1bd52592836a8189221bbc4108efdae9e4
    Public key SHA-256 461cbd38a9617e34c4cee7c9fe478d83af08191e1b3db81ccdcb7c9cedfbc109
    Brand
    Robinhood
    Addresses
    172.66.44.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c62
    2606:4700:310c::ac42:2f9e
    Cloudflare
    Cloudflare (172.66.44.98, 172.66.47.158): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  29. wel-robinhood-login.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    wel-robinhood-login.pages.dev
    First seen
    2026-10-30 11:46 UTC
    First published
    2026-10-30 12:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:02 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-30 10:46 UTC to 2027-01-28 11:43 UTC
    Logged 2026-10-30 11:46 UTC in DigiCert Wyvern2027h1, entry 360,105,639
    SHA-256 b10f73d3c47addf819fc29c8dc6a8a88d18a67c722ab7a32c6902dd3a5579e82
    Public key SHA-256 1324b118da75ebd024d65fa206a904843d918f6a5fa05ebceeebbb85d4c9e303
    Brand
    Robinhood
    Addresses
    172.66.44.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c6a
    2606:4700:310c::ac42:2f96
    Cloudflare
    Cloudflare (172.66.44.106, 172.66.47.150): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  30. 8-robinhood.pages.dev
    ListedListed by MetaMask
    DetailsHide
    Hostname
    8-robinhood.pages.dev
    First seen
    2026-10-30 11:41 UTC
    First published
    2026-10-30 11:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-10-30 · checked 2026-11-04 11:51 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-29 11:39 UTC to 2027-01-27 11:39 UTC
    Logged 2026-10-29 12:37 UTC in Google ParcelYard2027h1, entry 505,768,583
    SHA-256 35d5f0cb21027c3f5e9c8817fb3a41c3a270361e249a3645b300e37ac68652bd
    Public key SHA-256 c0d59c0a1df1801587a9c2005443a0a681b1b569beec7fa03dc41caacc8d223b
    Brand
    Robinhood

    Suggest a correction

  31. 9-robinhood.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    9-robinhood.pages.dev
    First seen
    2026-10-30 11:41 UTC
    First published
    2026-10-30 11:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 11:51 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-29 13:09 UTC to 2027-01-27 13:09 UTC
    Logged 2026-10-29 14:07 UTC in IPng Networks Halloumi2027h1, entry 301,618,963
    SHA-256 081691da08de2bc4c625646de07463dbb92ee45165f178824b09c26851ea0985
    Public key SHA-256 8c578e070e71a50a74cdd8db80f87346e8ae069962da17445d934e12c1ba8171
    Brand
    Robinhood
    Addresses
    172.66.44.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c7e
    2606:4700:310c::ac42:2f82
    Cloudflare
    Cloudflare (172.66.44.126, 172.66.47.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  32. distributions-robinhood.com
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 14 d ago
    DetailsHide
    Hostname
    distributions-robinhood.com
    First seen
    2026-10-30 11:37 UTC
    First published
    2026-10-30 11:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-10-30 · checked 2026-11-04 11:51 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-10-30 00:00 UTC to 2027-01-24 00:42 UTC
    Logged 2026-10-30 11:34 UTC in IPng Networks Gouda2027h1, entry 269,903,482
    SHA-256 2ee116670002ca5a150100f3ded75600ca99a7fa0b875ff08d00ed6bd5132708
    Public key SHA-256 c39973232bf15001dd96d840062afa59762dafa673f4707988f8aba8c98ec2e4
    Brand
    Robinhood
    Domain
    distributions-robinhood.com
    Registered
    2026-10-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  33. 6-robinhood.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    6-robinhood.pages.dev
    First seen
    2026-10-29 17:40 UTC
    First published
    2026-10-29 18:29 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:34 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-29 07:14 UTC to 2027-01-27 07:14 UTC
    Logged 2026-10-29 08:12 UTC in Google PlumbersArms2027h1, entry 502,994,122
    SHA-256 3c26fabea1df193fe0d472ce6f5905fa69597bde02c24bf8a7a7d60cb949d7b7
    Public key SHA-256 4777e88420b23f1894f74211c2bd159c272e2b73d5708e00fc7176926c8e372b
    Brand
    Robinhood
    Addresses
    172.66.44.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cbd
    2606:4700:310c::ac42:2f43
    Cloudflare
    Cloudflare (172.66.44.189, 172.66.47.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  34. robinhood-stockexchange.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    robinhood-stockexchange.com
    First seen
    2026-10-29 16:36 UTC
    First published
    2026-10-29 17:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 17:34 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-29 15:32 UTC to 2027-01-27 16:30 UTC
    Logged 2026-10-29 16:32 UTC in Let's Encrypt Willow2027h1, entry 835,585,894
    SHA-256 cecd5ee8e03bc92bf8ac9690f35eae939105ab7ef32de43b1d9f58758e2bcd1e
    Public key SHA-256 4a5d5c99d4709a44e91413b870cc79022b28be3a84972507449d717ff8638e42
    Brand
    Robinhood
    Addresses
    104.21.41.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:2938
    2606:4700:3037::ac43:bd74
    Cloudflare
    Cloudflare (104.21.41.56, 172.67.189.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    robinhood-stockexchange.com
    Registered
    2026-07-03 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  35. 5-robinhood.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    5-robinhood.pages.dev
    First seen
    2026-10-29 11:38 UTC
    First published
    2026-10-29 11:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-10-30 · checked 2026-11-04 12:02 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-28 17:24 UTC to 2027-01-26 17:24 UTC
    Logged 2026-10-28 18:22 UTC in Let's Encrypt Willow2027h1, entry 819,225,449
    SHA-256 94e089f4da8a51627675e9d58a411635d25362d238c984f3cf348e61faa61e2c
    Public key SHA-256 2358afa323248a0f1af878ee3b8fc3a8c01bb19b53eaec967eb0584aefd896d1
    Brand
    Robinhood
    Addresses
    172.66.45.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2d24
    2606:4700:310c::ac42:2edc
    Cloudflare
    Cloudflare (172.66.45.36, 172.66.46.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  36. app-robinhood-ixs.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    app-robinhood-ixs.pages.dev
    First seen
    2026-10-29 11:38 UTC
    First published
    2026-10-29 11:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 12:02 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-29 04:55 UTC to 2027-01-27 04:55 UTC
    Logged 2026-10-29 05:53 UTC in Let's Encrypt Sycamore2027h1, entry 833,073,613
    SHA-256 54feb2b3aa7c6972f70fcdd353bd88c01a19bfc2388094dfcebfc5b2a50d2cf3
    Public key SHA-256 7256fb740897fd669f4312d3bf09afcafde2ef08abc51be43efcf1d38d161c70
    Brand
    Robinhood
    Addresses
    172.66.44.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2ca6
    2606:4700:310c::ac42:2f5a
    Cloudflare
    Cloudflare (172.66.44.166, 172.66.47.90): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  37. 4-robinhood.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    4-robinhood.pages.dev
    First seen
    2026-10-28 23:38 UTC
    First published
    2026-10-29 00:30 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-10-30 · checked 2026-11-05 00:41 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-28 10:49 UTC to 2027-01-26 10:49 UTC
    Logged 2026-10-28 11:47 UTC in DigiCert Wyvern2027h1, entry 333,522,657
    SHA-256 9ec7368ff175efd35966f9765048abfd26cfdeec5d8dc7379422757c5ea54f5c
    Public key SHA-256 f30ad9b9bf887036e2d9f4767a4ecf7f28ff3c667884de8dab75bd4b84363dcb
    Brand
    Robinhood
    Addresses
    172.66.45.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2d16
    2606:4700:310c::ac42:2eea
    Cloudflare
    Cloudflare (172.66.45.22, 172.66.46.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  38. 3-robinhood.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    3-robinhood.pages.dev
    First seen
    2026-10-28 17:37 UTC
    First published
    2026-10-28 18:18 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-10-28 · checked 2026-11-04 18:30 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-28 07:13 UTC to 2027-01-26 07:13 UTC
    Logged 2026-10-28 08:11 UTC in Google PlumbersArms2027h1, entry 485,677,885
    SHA-256 012087779297b5c98664352772d9bec95777d089ab03eb9d8c331a52695bf76c
    Public key SHA-256 9412ef0c8de43bf5f4d99b67948e2fd91ee47b8a0f18cb06e664fd5dafe2d2cc
    Brand
    Robinhood
    Addresses
    172.66.44.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cd3
    2606:4700:310c::ac42:2f2d
    Cloudflare
    Cloudflare (172.66.44.211, 172.66.47.45): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  39. migration-robinhood.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    migration-robinhood.pages.dev
    First seen
    2026-10-28 17:37 UTC
    First published
    2026-10-28 18:18 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:30 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-28 13:50 UTC to 2027-01-26 13:50 UTC
    Logged 2026-10-28 14:49 UTC in Let's Encrypt Sycamore2027h1, entry 822,057,479
    SHA-256 012f9bc9811995fbd2eb82fae2d3c53e1f3c8f5d895ddcbbda8a0c9ffde52a38
    Public key SHA-256 19bf621c7f6d78fc17f285cec77d9d2e7f585bc9abc2d04ee49945187bc4bdb2
    Brand
    Robinhood
    Addresses
    172.66.44.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cd5
    2606:4700:310c::ac42:2f2b
    Cloudflare
    Cloudflare (172.66.44.213, 172.66.47.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  40. 2-robinhood.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    2-robinhood.pages.dev
    First seen
    2026-10-28 11:36 UTC
    First published
    2026-10-28 11:58 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-10-28 · checked 2026-11-04 12:09 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Certificate logged in CT
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-29 11:19 UTC to 2027-01-27 11:19 UTC
    Logged 2026-10-29 12:17 UTC in Google ParcelYard2027h1, entry 505,511,843
    SHA-256 10ee7cbd861a895df67af6a943f97d6f2551e80de6319ea7d8e3088ba8fe336b
    Public key SHA-256 08f7287137ff4b7bdaf8b54b6e071cd93990c8e4db8852d97e7f09631522170a
    Brand
    Robinhood
    Addresses
    172.66.44.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cd8
    2606:4700:310c::ac42:2f28
    Cloudflare
    Cloudflare (172.66.44.216, 172.66.47.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  41. web-robinhood.com RO · AS39287 · materialism Materialism s.r…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    web-robinhood.com
    First seen
    2026-10-28 10:16 UTC
    First published
    2026-10-28 11:02 UTC
    DNS
    Resolves · checked 2026-11-04 11:08 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.215.19.22.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.215.19.22
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-28 09:13 UTC to 2027-01-26 09:13 UTC
    Logged 2026-10-28 10:12 UTC in Google PlumbersArms2027h1, entry 487,191,959
    SHA-256 34eb104fca11250151cd1535b4fab6d1ed5d897eb06c6c165a9381df319763ee
    Public key SHA-256 5109a6c7c4fd8ded6c29a2f0041a677b01e782ca706bad7558cdf701c48f22a6
    Brand
    Robinhood
    Addresses
    95.215.19.22 · Romania · AS39287 materialism Materialism s.r.l.
    Domain
    web-robinhood.com
    Registered
    2026-03-03 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:35 UTC

    Suggest a correction

  42. my-account-robinhood-login.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    my-account-robinhood-login.pages.dev
    First seen
    2026-10-28 00:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-27 23:19 UTC to 2027-01-25 23:19 UTC
    Logged 2026-10-28 00:18 UTC in DigiCert Sphinx2027h1, entry 288,412,720
    SHA-256 428fa00f014d95da0918d20bf2e6700b376a01e613bd83acbddc79ce79d25e67
    Public key SHA-256 c598516be337a93fd0dba8c3f2b24890e8784a086a00e98e2580dc5646cdf220
    Brand
    Robinhood
    Addresses
    172.66.44.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c3b
    2606:4700:310c::ac42:2fc5
    Cloudflare
    Cloudflare (172.66.44.59, 172.66.47.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  43. claim-robinhood-rewards.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    claim-robinhood-rewards.com
    First seen
    2026-10-27 12:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched its certificate name
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 802,644,962
    SHA-256 bcd0c7397ad7032d84aaae43e22d1932d3c9a06f333300bec75bcf4bd4267aa3
    Brand
    Robinhood
    Addresses
    104.21.32.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:2047
    2606:4700:3033::ac43:b862
    Cloudflare
    Cloudflare (104.21.32.71, 172.67.184.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    claim-robinhood-rewards.com
    Registered
    2026-07-24 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:31 UTC

    Suggest a correction

  44. robinhood-ecosystem.xyz
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 11 d ago
    DetailsHide
    Hostname
    robinhood-ecosystem.xyz
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-10-28 · checked 2026-11-05 09:02 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Robinhood
    Domain
    robinhood-ecosystem.xyz
    Registered
    2026-10-25 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:28 UTC

    Suggest a correction

  45. robinhood-login-en-home.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    robinhood-login-en-home.pages.dev
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Certificate logged in CT
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-01 00:00 UTC to 2027-01-21 06:28 UTC
    Logged 2026-11-01 15:47 UTC in Geomys Tuscolo2027h1, entry 434,049,487
    SHA-256 120bbf9d9743147e339bf0a77f94e4b88c73e65c160d385f7b1d3cddfcec8f85
    Public key SHA-256 99eb5e9bbddfc8dd1ccc695cabd07a1ff76453fb641098c93885f80292160caa
    Brand
    Robinhood
    Addresses
    172.66.45.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2d1f
    2606:4700:310c::ac42:2ee1
    Cloudflare
    Cloudflare (172.66.45.31, 172.66.46.225): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  46. guard-robinhood.com SC · AS197170 · TECHTIES-AS TechTies Inc.
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 10 d ago
    DetailsHide
    Hostname
    guard-robinhood.com
    First seen
    2026-10-26 19:56 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 91.92.47.159.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 91.92.47.159
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 460,558,783
    SHA-256 6b84aad2d146eddfafe067c64cd2fdd48c50cc9895c2bc28dea00c97dc026bbb
    Brand
    Robinhood
    Addresses
    91.92.47.159 · Seychelles · AS197170 TECHTIES-AS TechTies Inc.
    Domain
    guard-robinhood.com
    Registered
    2026-10-26 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Robinhood when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Investing

All brands →