Saison Card
Certificate findings for Saison Card
DomainSpoof matched these hostnames, from public certificate logs, to Saison Card's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 23 findings, grouped by hostname
- sajop.comListedListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 1 d ago
DetailsHide details for sajop.com
- Hostname
- sajop.com
- First seen
- 2026-11-04 17:36 UTC
- First published
- 2026-11-04 18:05 UTC
- Listing
- JPCERT/CC confirmed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Not resolving · checked 2026-11-05 10:30 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Cloudflare TLS Issuing ECC CA 4 · precertificateValid 2026-11-04 17:24 UTC to 2027-02-02 17:32 UTCLogged 2026-11-04 17:34 UTC in DigiCert Wyvern2027h1, entry 405,344,582SHA-256 2ee5f78eacc91ba8e7c2a47989eb83e08ac88b3acd72ea024f02d2a951789050Public key SHA-256 d87961a4e6afb9564123765fe2b6a27aaacd8252a612149567d242062280a4a8
- Brand
- Saison Card
- Domain
- sajop.com
- Registered
- 2026-11-04 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 18:05 UTC
- hzrve.com CN · AS136188 · NINGBO, ZHEJIANG Province, …ListedListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 2 d ago
DetailsHide details for hzrve.com
- Hostname
- hzrve.com
- First seen
- 2026-11-04 14:05 UTC
- First published
- 2026-11-04 14:35 UTC
- Listing
- JPCERT/CC confirmed it 2026-06-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 14:46 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-04 13:01 UTC to 2027-02-02 13:01 UTCLogged 2026-11-04 14:00 UTC in Google PlumbersArms2027h1, entry 609,806,080SHA-256 cfcd2f6653d2c32f7401c5142f3f95743f4f9cc51eee875130f3bac8cd52c945Public key SHA-256 b56af95930fcb8f16b50ec71f23f64dcde52e71c024cf8d2e47a8cfffa752679
- Brand
- Saison Card
- Addresses
- 183.136.138.170 · China · AS136188 CHINATELECOM-ZHEJIANG-NINGBO-IDC - NINGBO, ZHEJIANG Province, P.R.China.
- Domain
- hzrve.com
- Registered
- 2026-11-03 · July Name Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 14:35 UTC
- longyimodel.com GB · AS201106 · SPARTANHOST Spartan Host Ltd6 addressesListedListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 6 y ago
DetailsHide details for longyimodel.com
- Hostname
- longyimodel.com
- First seen
- 2026-11-04 08:21 UTC
- First published
- 2026-11-04 09:19 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 09:38 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-04 07:20 UTC to 2027-02-02 07:20 UTCLogged 2026-11-04 08:18 UTC in Google PlumbersArms2027h1, entry 605,447,523SHA-256 7fdeb236256480ffc65caff48d82d8f7e965ac27bbc31486ce3cc8676874be1bPublic key SHA-256 621b6d92ef48adbd49b558a0dfb6dd27a288d3c4afed9db3184d24feabb18458
- Brand
- Saison Card
- Addresses
- 217.114.47.147 · United Kingdom · AS201106 SPARTANHOST Spartan Host Ltd217.114.47.148 · United Kingdom · AS201106 SPARTANHOST Spartan Host Ltd217.114.47.149 · United Kingdom · AS201106 SPARTANHOST Spartan Host Ltd217.114.47.156 · United Kingdom · AS201106 SPARTANHOST Spartan Host Ltd217.114.47.157 · United Kingdom · AS201106 SPARTANHOST Spartan Host Ltd217.114.47.158 · United Kingdom · AS201106 SPARTANHOST Spartan Host Ltd
- Domain
- longyimodel.com
- Registered
- 2020-10-07 · Gname.com Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:42 UTC
- yemizhicheng.com US · AS18978 · Enzu IncListedListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 14 mo ago
DetailsHide details for yemizhicheng.com
- Hostname
- yemizhicheng.com
- First seen
- 2026-11-04 04:51 UTC
- First published
- 2026-11-04 05:23 UTC
- Listing
- JPCERT/CC confirmed it 2026-09-02 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 05:28 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-04 03:48 UTC to 2027-02-02 03:48 UTCLogged 2026-11-04 04:47 UTC in IPng Networks Gouda2027h1, entry 310,463,099SHA-256 32c37bc1d0ca1b04cf2bcb66e83297b2644a30c30b758b483b18091042e4227dPublic key SHA-256 d8e08936e2497ac3c3ae8e6e0c14c26bac6ea4537a6e9d5bfc0c0f09c7feddde
- Brand
- Saison Card
- Addresses
- 107.163.230.160 · United States · AS18978 ENZUINC-US - Enzu Inc
- Domain
- yemizhicheng.com
- Registered
- 2025-09-22 · Gname.com Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 04:58 UTC
- ldfvuar.infoListedListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 12 mo ago
DetailsHide details for ldfvuar.info
- Hostname
- ldfvuar.info
- First seen
- 2026-11-03 13:51 UTC
- First published
- 2026-11-03 14:30 UTC
- Listing
- JPCERT/CC confirmed it 2026-09-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Not resolving since 2026-11-03 · checked 2026-11-04 14:33 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-03 12:50 UTC to 2027-02-01 13:49 UTCLogged 2026-11-03 13:50 UTC in Google PlumbersArms2027h1, entry 591,722,476SHA-256 c5fdc1d9318bf72f2d932cadd282eb5ea56253ab0953714df5af02f1dea507c4Public key SHA-256 e1a944681142a0216b56650f918ddfc98d71fdeb08d36abca5a4a184c98843af
- Brand
- Saison Card
- Domain
- ldfvuar.info
- Registered
- 2025-11-13 · Chengdu West Dimension Digital Technology Co., Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 14:34 UTC
- nhzeopk.infoListedListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 12 mo ago
DetailsHide details for nhzeopk.info
- Hostname
- nhzeopk.info
- First seen
- 2026-11-03 11:41 UTC
- First published
- 2026-11-03 12:13 UTC
- Listing
- JPCERT/CC confirmed it 2026-09-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Not resolving since 2026-11-03 · checked 2026-11-04 12:24 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-03 10:37 UTC to 2027-02-01 11:35 UTCLogged 2026-11-03 11:37 UTC in Google PlumbersArms2027h1, entry 589,827,345SHA-256 76536ce9af8ce73a4390b0690ba366e9d545729f77ddc4799fdeb51a508673c4Public key SHA-256 e56177946732c834e3d2b60ff10b1a1029c062a04ebeadf9b9198f3340668e9a
- Brand
- Saison Card
- Domain
- nhzeopk.info
- Registered
- 2025-11-13 · Chengdu West Dimension Digital Technology Co., Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 12:16 UTC
- as9.mobi US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 2 d ago
DetailsHide details for as9.mobi
- Hostname
- as9.mobi
- First seen
- 2026-11-03 09:59 UTC
- First published
- 2026-11-03 11:04 UTC
- Listing
- JPCERT/CC confirmed it 2026-05-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 11:13 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-03 08:57 UTC to 2027-02-01 08:57 UTCLogged 2026-11-03 09:56 UTC in IPng Networks Gouda2027h1, entry 301,285,510SHA-256 33f9baf0f84c80800cfe2deb89a44fdcf1a3ee1ce65e5d2d32417d3cd1695c5cPublic key SHA-256 0f93b6f360f756ad1fc4039ad2155dda80c31157b84eab516b9642b6e289b2f5
- Brand
- Saison Card
- Addresses
- 104.21.4.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.154.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.4.140, 172.67.154.30): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- as9.mobi
- Registered
- 2026-11-03 · NameMart Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 11:04 UTC
- afomach.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 3 d ago
DetailsHide details for afomach.com
- Hostname
- afomach.com
- First seen
- 2026-11-02 10:51 UTC
- First published
- 2026-11-02 11:09 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 11:24 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-02 09:46 UTC to 2027-01-31 10:44 UTCLogged 2026-11-02 10:46 UTC in Google ParcelYard2027h1, entry 570,470,782SHA-256 12050e8e0dc00e2f98c3e0314622be7e559d2599ed74d73fd7d32a35fec8499dPublic key SHA-256 44622e54f0ddbe39836bc536bae85cc8ca4ba656729a782a38c9fd09a4edbc49
- Brand
- Saison Card
- Addresses
- 104.21.67.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.177.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.67.148, 172.67.177.90): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- afomach.com
- Registered
- 2026-11-02 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 12:16 UTC
- syyicaotang.comListedListed by JPCERT/CC as imitating SAISON CARDMX presentSPF missingDMARC policy noneRegistered 3 y ago
DetailsHide details for syyicaotang.com
- Hostname
- syyicaotang.com
- First seen
- 2026-11-02 08:26 UTC
- First published
- 2026-11-02 08:38 UTC
- Listing
- JPCERT/CC confirmed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Not resolving since 2026-11-02 · checked 2026-11-05 08:52 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Cloudflare TLS Issuing ECC CA 4 · precertificateValid 2026-11-02 08:15 UTC to 2027-01-31 08:23 UTCLogged 2026-11-02 08:25 UTC in Let's Encrypt Sycamore2027h1, entry 900,206,776SHA-256 fffdaf1acc3a23f9e50b5c9bb848ac93ea29caa925f7b8b18c3f4d771f5409f1Public key SHA-256 fee89aad1c91d1c20d85f3f93c6ec318ec85fccacb9f2d5b5264b7644ce3f314
- Brand
- Saison Card
- Domain
- syyicaotang.com
- Registered
- 2023-11-18 · Gname.com Pte. Ltd.
- MX
- Receives mail at receive.forge.rmta.net
- SPF
- Publishes no SPF record
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 08:54 UTC
- 92ti0v.info CN · AS132203 · Tencent Building, Kejizhong…ListedTencent CloudListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 12 mo ago
DetailsHide details for 92ti0v.info
- Hostname
- 92ti0v.info
- First seen
- 2026-11-01 10:26 UTC
- First published
- 2026-11-01 11:21 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 11:27 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Sectigo Public Server Authentication CA DV E36 · precertificateValid 2026-11-01 00:00 UTC to 2027-01-25 20:09 UTCLogged 2026-11-01 10:24 UTC in Geomys Tuscolo2027h1, entry 431,364,928SHA-256 3e107da9cc1c7967a8bd1512a6c9ba218114e06b3d5075b50f427610c8173258Public key SHA-256 9845d787785581d5cdefd17d5440d767025496478fed31d33ebea2e8b19ea751
- Brand
- Saison Card
- Addresses
- 43.129.217.56 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
- Tencent Cloud
- Tencent Cloud (43.129.217.56): a cloud provider. It rents servers and addresses to its customers.
- Domain
- 92ti0v.info
- Registered
- 2025-11-07 · Chengdu West Dimension Digital Technology Co., Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
- minixingwa.comListedListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 2 y ago
DetailsHide details for minixingwa.com
- Hostname
- minixingwa.com
- First seen
- 2026-10-31 15:16 UTC
- First published
- 2026-10-31 16:11 UTC
- Listing
- JPCERT/CC confirmed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTCPhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
- DNS
- Resolves · checked 2026-11-04 16:20 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-10-31 14:14 UTC to 2027-01-29 14:14 UTCLogged 2026-10-31 15:12 UTC in Google ParcelYard2027h1, entry 540,798,257SHA-256 04d1d9146c9849093239c3b8de2a6a48381fb8dc40530e6d6469b61296bb4651Public key SHA-256 3a4b55110279c4207d818021becc18a46dc6db871999faf6713a138a8f703241
- Brand
- Saison Card
- Domain
- minixingwa.com
- Registered
- 2024-10-05 · Gname.com Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 17:09 UTC
- boomermagonline.com US · AS14618 · Amazon.com, Inc.2 addressesListedAmazon Web ServicesListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 7 d ago
DetailsHide details for boomermagonline.com
- Hostname
- boomermagonline.com
- First seen
- 2026-10-29 13:36 UTC
- First published
- 2026-10-29 14:18 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Not resolving since 2026-11-03 · checked 2026-11-04 14:23 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-10-29 12:31 UTC to 2027-01-27 12:31 UTCLogged 2026-10-29 13:30 UTC in Google ParcelYard2027h1, entry 506,454,208SHA-256 4dab27ed562e0a06db5c1a421cb52ea63c87e3ff54154d09be468c2cedd1340fPublic key SHA-256 15b6b9d00b0e42d788c910cdc088540942da020d40e6f6873d4295c61a624490
- Brand
- Saison Card
- Addresses
- 44.208.83.180 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)54.84.240.235 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (44.208.83.180, 54.84.240.235): a cloud provider. It rents servers and addresses to its customers.
- Domain
- boomermagonline.com
- Registered
- 2026-10-29 · DropCatch.com 483 LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:42 UTC
- fptplus.com US · AS14618 · Amazon.com, Inc.2 addressesListedAmazon Web ServicesListed by JPCERT/CC as imitating SAISON CARDMX absentSPF -allDMARC missingRegistered 7 d ago
DetailsHide details for fptplus.com
- Hostname
- fptplus.com
- First seen
- 2026-10-29 13:20 UTC
- First published
- 2026-10-29 14:18 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 14:23 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-10-29 12:20 UTC to 2027-01-27 12:20 UTCLogged 2026-10-29 13:18 UTC in IPng Networks Gouda2027h1, entry 259,785,742SHA-256 c979a9df6ecd99a582be0cc05088d4a21f6b36835ed5bed161607100d4934406Public key SHA-256 3896c4fceb1c5d4b1fd4848aa7babc121169a1cbd63ca2885ab9b89ea18223b5
- Brand
- Saison Card
- Addresses
- 52.201.53.166 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)98.82.42.139 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (52.201.53.166, 98.82.42.139): a cloud provider. It rents servers and addresses to its customers.
- Domain
- fptplus.com
- Registered
- 2026-10-29 · DropCatch.com 1068 LLC
- MX
- Publishes no mail exchanger
- SPF
- SPF record with -all: other senders fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:42 UTC
- sasioncarid-aosheng.com CN · AS132203 · Tencent Building, Kejizhong…ListedTencent CloudListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 2 mo ago
DetailsHide details for sasioncarid-aosheng.com
- Hostname
- sasioncarid-aosheng.com
- First seen
- 2026-10-29 08:15 UTC
- First published
- 2026-10-29 08:49 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-27 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 09:04 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-10-29 07:12 UTC to 2027-01-27 07:12 UTCLogged 2026-10-29 08:10 UTC in DigiCert Sphinx2027h1, entry 303,868,944SHA-256 31e62b2742ed9ec5a2c9e67307fede7edffc9c33058c047c8dbe536f65a61d09Public key SHA-256 4cbedaf6d6a860470d57ae8a325cc1125e97f38ea1660b40928f47fb46f23e65
- Brand
- Saison Card
- Addresses
- 43.133.30.221 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
- Tencent Cloud
- Tencent Cloud (43.133.30.221): a cloud provider. It rents servers and addresses to its customers.
- Domain
- sasioncarid-aosheng.com
- Registered
- 2026-08-26 · Aceville Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 09:52 UTC
- sasioncarid-ingjianan.com CN · AS132203 · Tencent Building, Kejizhong…ListedTencent CloudListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 2 mo ago
DetailsHide details for sasioncarid-ingjianan.com
- Hostname
- sasioncarid-ingjianan.com
- First seen
- 2026-10-29 08:15 UTC
- First published
- 2026-10-29 08:49 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-28 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 09:04 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-10-29 07:12 UTC to 2027-01-27 07:12 UTCLogged 2026-10-29 08:11 UTC in Let's Encrypt Sycamore2027h1, entry 834,857,360SHA-256 2a6e8559327f5d42a29031bb9859f99745a53d1be2c5e6d06d4bd2ff1813be37Public key SHA-256 1e1b571cb0e021fe5b1fd07f607dcb5dd123901157d44f9529da0d41247f15de
- Brand
- Saison Card
- Addresses
- 43.133.30.221 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
- Tencent Cloud
- Tencent Cloud (43.133.30.221): a cloud provider. It rents servers and addresses to its customers.
- Domain
- sasioncarid-ingjianan.com
- Registered
- 2026-08-26 · Aceville Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 09:52 UTC
- sasioncarid-nroiyang.com US · AS396982 · Google LLCListedGoogle CloudListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 2 mo ago
DetailsHide details for sasioncarid-nroiyang.com
- Hostname
- sasioncarid-nroiyang.com
- First seen
- 2026-10-29 08:05 UTC
- First published
- 2026-10-29 08:49 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-27 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 09:04 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-10-29 07:04 UTC to 2027-01-27 07:04 UTCLogged 2026-10-29 08:03 UTC in Google ParcelYard2027h1, entry 502,192,128SHA-256 533a7eed94594edf47d2281942dfe2a7c1a6c10227b4ab8328a979271bf30c63Public key SHA-256 7b1af9f6772e4bda8c58caca407d9998b82ace620cb12b01ea238bb756331597
- Brand
- Saison Card
- Addresses
- 34.97.12.225 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)
- Google Cloud
- Google Cloud (34.97.12.225): a cloud provider. It rents servers and addresses to its customers.
- Domain
- sasioncarid-nroiyang.com
- Registered
- 2026-08-26 · Aceville Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 09:52 UTC
- bintory.com US · AS14618 · Amazon.com, Inc.2 addressesListedParking page · HugeDomainsListed by JPCERT/CC as imitating SAISON CARDMX absentSPF -allDMARC missingRegistered 8 d ago
DetailsHide details for bintory.com
- Hostname
- bintory.com
- First seen
- 2026-10-28 13:21 UTC
- First published
- 2026-10-28 14:10 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 14:21 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-10-28 12:20 UTC to 2027-01-26 12:20 UTCLogged 2026-10-28 13:19 UTC in DigiCert Sphinx2027h1, entry 294,831,804SHA-256 9c62258e11e6a01d4c05a81fd662d68bd75515d74bb81bbc3cd5b75471d3dd3fPublic key SHA-256 7dce23f1be95ce7f6f088b899163b880d5c83d56437f3122dbb5c7c47e97ef7d
- Brand
- Saison Card
- Addresses
- 13.223.25.84 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · HugeDomains (parking page)54.243.117.197 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · HugeDomains (parking page)
- Parking page · HugeDomains
- HugeDomains (13.223.25.84, 54.243.117.197): a parking service. It answers for names that are typically for sale or unused.
- Domain
- bintory.com
- Registered
- 2026-10-28 · DropCatch.com 1283 LLC
- MX
- Publishes no mail exchanger
- SPF
- SPF record with -all: other senders fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:42 UTC
- hockeygijon.com US · AS14618 · Amazon.com, Inc.2 addressesListedAmazon Web ServicesListed by JPCERT/CC as imitating SAISON CARDMX absentSPF -allDMARC missingRegistered 13 mo ago
DetailsHide details for hockeygijon.com
- Hostname
- hockeygijon.com
- First seen
- 2026-10-28 10:21 UTC
- First published
- 2026-10-28 11:02 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-31 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-04 11:08 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-10-28 09:16 UTC to 2027-01-26 09:16 UTCLogged 2026-10-28 10:15 UTC in DigiCert Wyvern2027h1, entry 332,634,526SHA-256 20b09f6fd721572874ab53654f6e61a1201538d1d4f22c1ffbda5589505c8178Public key SHA-256 99f6551fad5b27e0080405c599ad8866459e9ca572dcf76fa436c2549e407a7c
- Brand
- Saison Card
- Addresses
- 44.208.83.180 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)54.84.240.235 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (44.208.83.180, 54.84.240.235): a cloud provider. It rents servers and addresses to its customers.
- Domain
- hockeygijon.com
- Registered
- 2025-09-27 · DropCatch.com 1051 LLC
- MX
- Publishes no mail exchanger
- SPF
- SPF record with -all: other senders fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:42 UTC
- alcubic.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 2 mo ago
DetailsHide details for alcubic.com
- Hostname
- alcubic.com
- First seen
- 2026-10-28 07:25 UTC
- First published
- 2026-10-28 07:41 UTC
- Listing
- JPCERT/CC confirmed it 2026-06-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 09:05 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-10-28 06:22 UTC to 2027-01-26 06:22 UTCLogged 2026-10-28 07:20 UTC in IPng Networks Halloumi2027h1, entry 285,937,506SHA-256 5342868ff571cf6ed15e5ff78cb678aaa766de2e65c6d2c8e13bae93074ad86ePublic key SHA-256 bb012d9331a7f3db4bd4fd14bf5d5923019fbdf8354a2eb318aabebe3f838fbb
- Brand
- Saison Card
- Addresses
- 104.21.4.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.132.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.4.248, 172.67.132.167): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- alcubic.com
- Registered
- 2026-09-02 · Gname.com Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:42 UTC
- sasioncarid-kaofang.com CN · AS132203 · Tencent Building, Kejizhong…ListedTencent CloudListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 2 mo ago
DetailsHide details for sasioncarid-kaofang.com
- Hostname
- sasioncarid-kaofang.com
- First seen
- 2026-10-28 01:30 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-27 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 08:59 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Cloudflare TLS Issuing ECC CA 4 · precertificateValid 2026-10-28 01:16 UTC to 2027-01-22 16:33 UTCLogged 2026-10-28 01:26 UTC in DigiCert Wyvern2027h1, entry 327,381,949SHA-256 2ff2ca18e494b955a20436fac00426ac70bea33c3a13af92fd31c82469c13779Public key SHA-256 2547ed07ffefbd828aa87ec5314d5255b1575816b41c775e863395a842ea4bd8
- Brand
- Saison Card
- Addresses
- 43.133.30.221 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
- Tencent Cloud
- Tencent Cloud (43.133.30.221): a cloud provider. It rents servers and addresses to its customers.
- Domain
- sasioncarid-kaofang.com
- Registered
- 2026-08-26 · Aceville Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:34 UTC
- sasioncarid-mulator.com CN · AS132203 · Tencent Building, Kejizhong…ListedTencent CloudListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 2 mo ago
DetailsHide details for sasioncarid-mulator.com
- Hostname
- sasioncarid-mulator.com
- First seen
- 2026-10-28 01:15 UTC
- Listing
- JPCERT/CC confirmed it 2026-08-28 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 09:04 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Cloudflare TLS Issuing ECC CA 4 · precertificateValid 2026-10-28 01:00 UTC to 2027-01-22 16:23 UTCLogged 2026-10-28 01:10 UTC in DigiCert Wyvern2027h1, entry 327,191,656SHA-256 3919138be7132b597926f66aa906b7c249d52fb2b17c4deb0225c981dbcb7cdcPublic key SHA-256 68ccf580fc197d30ee0d1872f2ed2ef364dcd3afd90865269041c2363984640e
- Brand
- Saison Card
- Addresses
- 43.133.30.221 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
- Tencent Cloud
- Tencent Cloud (43.133.30.221): a cloud provider. It rents servers and addresses to its customers.
- Domain
- sasioncarid-mulator.com
- Registered
- 2026-08-26 · Aceville Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:34 UTC
- cwzxpx.com US · AS16509 · Amazon.com, Inc.ListedAmazon Web ServicesListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 18 mo ago
DetailsHide details for cwzxpx.com
- Hostname
- cwzxpx.com
- First seen
- 2026-10-27 14:05 UTC
- Listing
- JPCERT/CC confirmed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 09:00 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- We matched the new listing
- Certificate logged in CT
- Latest DNS check
- Certificate
- Issued by YR1Valid 2026-11-01 12:37 UTC to 2027-01-30 12:37 UTCLogged 2026-11-01 13:36 UTC in Let's Encrypt Willow2027h1, entry 880,676,114SHA-256 31a718ba6387830faff3df72fb745d203d1bdb121e578f54bff165ebb491d9e8Public key SHA-256 481b81923c7d41bbd6ecdc848016eb21c55209d674685cdc215be3213bc192c4
- Brand
- Saison Card
- Addresses
- 76.76.21.21 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (76.76.21.21): a cloud provider. It rents servers and addresses to its customers.
- Domain
- cwzxpx.com
- Registered
- 2025-05-24 · Gname.com Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:35 UTC
- eslmwl.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missingRegistered 7 y ago
DetailsHide details for eslmwl.com
- Hostname
- eslmwl.com
- First seen
- 2026-10-27 14:05 UTC
- Listing
- JPCERT/CC confirmed it 2026-05-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
- DNS
- Resolves · checked 2026-11-05 09:02 UTC
- Listed
- JPCERT/CC
- Confirmed by JPCERT/CC
- We matched the new listing
- Certificate logged in CT
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-10-29 08:28 UTC to 2027-01-27 08:28 UTCLogged 2026-10-29 09:27 UTC in Let's Encrypt Willow2027h1, entry 829,997,486SHA-256 0eb1449bbd966948257989ce12acffe36d3979e5f3cf03921fbd69ebcd6df7a2Public key SHA-256 3287a5c5ede899d632746e05aff4ada710e21a0aa7cefab6c7d79d3d19a9daea
- Brand
- Saison Card
- Addresses
- 104.21.27.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.142.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.27.145, 172.67.142.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- eslmwl.com
- Registered
- 2019-05-28 · Gname.com Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:35 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Saison Card when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

