Salesforce

Software & cloud United Statessalesforce.comRank 60 of the most impersonated
Cert findings · 24 h
11
Cert findings · 7 days
19
1 reported or listed · 6 on phishing hosts · 12 on Spamhaus DROP
Registered lookalikes
224
16 listed by a source or an address list
Official domains
84
verified from Salesforce's own sites and records

Certificate findings for Salesforce

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Salesforce's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 32 findings, grouped by hostname

  1. salesforce.com.mor-ralf.r.mail.leankoala.com FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 11 y ago
    DetailsHide
    Hostname
    salesforce.com.mor-ralf.r.mail.leankoala.com
    First seen
    2026-11-05 07:51 UTC
    First published
    2026-11-05 08:42 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-05 06:51 UTC to 2027-02-03 06:51 UTC
    Logged 2026-11-05 07:50 UTC in Google PlumbersArms2027h1, entry 622,525,033
    SHA-256 0beb802d266544326ac3b3224d0fa57c16e311241ade8c4917f59b4d6206eca8
    Public key SHA-256 32c3a0f315da77a11eaac3dfbd29afe7a878693cec709edf0e0789d15322029d
    Brand
    Salesforce
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS
    Domain
    leankoala.com
    Registered
    2016-03-15 · united-domains GmbH
    MX
    Receives mail at mx00.udag.de, mx01.udag.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  2. www.salesforce-org.com US · AS197769 · VPSDEDICATED-AS VPS Dedicat…2 addresses
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.salesforce-org.com
    First seen
    2026-11-05 03:03 UTC
    First published
    2026-10-30 02:55 UTC
    DNS
    Resolves · checked 2026-11-05 03:03 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 102.220.162.130.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 102.220.162.130
    Brand
    Salesforce
    Addresses
    102.220.162.130 · United States · AS197769 VPSDEDICATED-AS VPS Dedicated LLC
    176.120.22.241 · Russia · AS198953 proton66 Proton66 OOO
    Domain
    salesforce-org.com
    Registered
    2026-08-27 · OwnRegistrar, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  3. webmail.salesforce-org.com US · AS197769 · VPSDEDICATED-AS VPS Dedicat…2 addresses
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    webmail.salesforce-org.com
    First seen
    2026-11-05 03:03 UTC
    First published
    2026-10-30 02:55 UTC
    DNS
    Resolves · checked 2026-11-05 03:03 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 102.220.162.130.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 102.220.162.130
    Brand
    Salesforce
    Addresses
    102.220.162.130 · United States · AS197769 VPSDEDICATED-AS VPS Dedicated LLC
    176.120.22.241 · Russia · AS198953 proton66 Proton66 OOO
    Domain
    salesforce-org.com
    Registered
    2026-08-27 · OwnRegistrar, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  4. webdisk.salesforce-org.com US · AS197769 · VPSDEDICATED-AS VPS Dedicat…2 addresses
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    webdisk.salesforce-org.com
    First seen
    2026-11-05 03:03 UTC
    First published
    2026-10-30 02:55 UTC
    DNS
    Resolves · checked 2026-11-05 03:03 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 102.220.162.130.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 102.220.162.130
    Brand
    Salesforce
    Addresses
    102.220.162.130 · United States · AS197769 VPSDEDICATED-AS VPS Dedicated LLC
    176.120.22.241 · Russia · AS198953 proton66 Proton66 OOO
    Domain
    salesforce-org.com
    Registered
    2026-08-27 · OwnRegistrar, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  5. mail.salesforce-org.com US · AS197769 · VPSDEDICATED-AS VPS Dedicat…2 addresses
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    mail.salesforce-org.com
    First seen
    2026-11-05 03:03 UTC
    First published
    2026-10-30 02:55 UTC
    DNS
    Resolves · checked 2026-11-05 03:03 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 102.220.162.130.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 102.220.162.130
    Brand
    Salesforce
    Addresses
    102.220.162.130 · United States · AS197769 VPSDEDICATED-AS VPS Dedicated LLC
    176.120.22.241 · Russia · AS198953 proton66 Proton66 OOO
    Domain
    salesforce-org.com
    Registered
    2026-08-27 · OwnRegistrar, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  6. cpcontacts.salesforce-org.com US · AS197769 · VPSDEDICATED-AS VPS Dedicat…2 addresses
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    cpcontacts.salesforce-org.com
    First seen
    2026-11-05 03:03 UTC
    First published
    2026-10-30 02:55 UTC
    DNS
    Resolves · checked 2026-11-05 03:03 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 102.220.162.130.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 102.220.162.130
    Brand
    Salesforce
    Addresses
    102.220.162.130 · United States · AS197769 VPSDEDICATED-AS VPS Dedicated LLC
    176.120.22.241 · Russia · AS198953 proton66 Proton66 OOO
    Domain
    salesforce-org.com
    Registered
    2026-08-27 · OwnRegistrar, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  7. cpcalendars.salesforce-org.com US · AS197769 · VPSDEDICATED-AS VPS Dedicat…2 addresses
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    cpcalendars.salesforce-org.com
    First seen
    2026-11-05 03:03 UTC
    First published
    2026-10-30 02:55 UTC
    DNS
    Resolves · checked 2026-11-05 03:03 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 102.220.162.130.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 102.220.162.130
    Brand
    Salesforce
    Addresses
    102.220.162.130 · United States · AS197769 VPSDEDICATED-AS VPS Dedicated LLC
    176.120.22.241 · Russia · AS198953 proton66 Proton66 OOO
    Domain
    salesforce-org.com
    Registered
    2026-08-27 · OwnRegistrar, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  8. cpanel.salesforce-org.com US · AS197769 · VPSDEDICATED-AS VPS Dedicat…2 addresses
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    cpanel.salesforce-org.com
    First seen
    2026-11-05 03:03 UTC
    First published
    2026-10-30 02:55 UTC
    DNS
    Resolves · checked 2026-11-05 03:03 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 102.220.162.130.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 102.220.162.130
    Brand
    Salesforce
    Addresses
    102.220.162.130 · United States · AS197769 VPSDEDICATED-AS VPS Dedicated LLC
    176.120.22.241 · Russia · AS198953 proton66 Proton66 OOO
    Domain
    salesforce-org.com
    Registered
    2026-08-27 · OwnRegistrar, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  9. autodiscover.salesforce-org.com US · AS197769 · VPSDEDICATED-AS VPS Dedicat…2 addresses
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    autodiscover.salesforce-org.com
    First seen
    2026-11-05 03:03 UTC
    First published
    2026-10-30 02:55 UTC
    DNS
    Resolves · checked 2026-11-05 03:03 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 102.220.162.130.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 102.220.162.130
    Brand
    Salesforce
    Addresses
    102.220.162.130 · United States · AS197769 VPSDEDICATED-AS VPS Dedicated LLC
    176.120.22.241 · Russia · AS198953 proton66 Proton66 OOO
    Domain
    salesforce-org.com
    Registered
    2026-08-27 · OwnRegistrar, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  10. autoconfig.salesforce-org.com US · AS197769 · VPSDEDICATED-AS VPS Dedicat…2 addresses
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    autoconfig.salesforce-org.com
    First seen
    2026-11-05 03:03 UTC
    First published
    2026-10-30 02:55 UTC
    DNS
    Resolves · checked 2026-11-05 03:03 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 102.220.162.130.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 102.220.162.130
    Brand
    Salesforce
    Addresses
    102.220.162.130 · United States · AS197769 VPSDEDICATED-AS VPS Dedicated LLC
    176.120.22.241 · Russia · AS198953 proton66 Proton66 OOO
    Domain
    salesforce-org.com
    Registered
    2026-08-27 · OwnRegistrar, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  11. salesforce-org.com US · AS197769 · VPSDEDICATED-AS VPS Dedicat…2 addresses
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    salesforce-org.com
    First seen
    2026-11-05 02:04 UTC
    DNS
    Resolves · checked 2026-11-05 02:04 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 102.220.162.130.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 102.220.162.130
    Brand
    Salesforce
    Addresses
    102.220.162.130 · United States · AS197769 VPSDEDICATED-AS VPS Dedicated LLC
    176.120.22.241 · Russia · AS198953 proton66 Proton66 OOO
    Domain
    salesforce-org.com
    Registered
    2026-08-27 · OwnRegistrar, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  12. salesforcelogin.com NL · AS60781 · LEASEWEB-NL-AMS-01 LeaseWeb…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 19 y ago
    DetailsHide
    Hostname
    salesforcelogin.com
    First seen
    2026-11-04 09:03 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 212.7.194.71.
    1. Phishing-host list fetched with the address
    2. Resolved to 212.7.194.71
    3. Latest DNS check
    Brand
    Salesforce
    Addresses
    212.7.194.71 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
    Domain
    salesforcelogin.com
    Registered
    2008-02-20 · Media Elite Holdings Limited, S.A.
    MX
    Receives mail at mail.h-email.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  13. www.www.www.www.login-salesforce.campbell-road.com MY · AS45839 · Shinjiru Technology Sdn Bhd
    Spamhaus DROPAddress listed by Spamhaus DROPMX presentSPF -allDMARC missingRegistered 43 d ago
    DetailsHide
    Hostname
    www.www.www.www.login-salesforce.campbell-road.com
    First seen
    2026-11-03 17:57 UTC
    First published
    2026-11-03 18:16 UTC
    DNS
    Resolves · checked 2026-11-04 18:20 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 101.99.95.100.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 101.99.95.100
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-03 16:55 UTC to 2027-02-01 16:55 UTC
    Logged 2026-11-03 17:54 UTC in Google ParcelYard2027h1, entry 594,417,033
    SHA-256 008ccc192ac7217ccb2b6cb509ca0e071ffba802647104ac7302fe0f3b6d921d
    Public key SHA-256 5a912158321000dca3b94c7ef69e99d03976ef2c93e3f731e115632e25034b7d
    Brand
    Salesforce
    Addresses
    101.99.95.100 · Malaysia · AS45839 SHINJIRU-MY-AS-AP - Shinjiru Technology Sdn Bhd
    Domain
    campbell-road.com
    Registered
    2026-09-23 · Wild West Domains, LLC
    MX
    Receives mail at campbellroad-com02b.mail.protection.outlook.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:39 UTC

    Suggest a correction

  14. www.www.www.login-salesforce.campbell-road.com MY · AS45839 · Shinjiru Technology Sdn Bhd
    Spamhaus DROPAddress listed by Spamhaus DROPMX presentSPF -allDMARC missingRegistered 43 d ago
    DetailsHide
    Hostname
    www.www.www.login-salesforce.campbell-road.com
    First seen
    2026-11-03 17:57 UTC
    First published
    2026-11-03 18:16 UTC
    DNS
    Resolves · checked 2026-11-04 18:20 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 101.99.95.100.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 101.99.95.100
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-03 16:55 UTC to 2027-02-01 16:55 UTC
    Logged 2026-11-03 17:54 UTC in DigiCert Wyvern2027h1, entry 391,541,834
    SHA-256 6c06a8aeb5a7b9a00de8bf8e5330351a1998c0c6488666a31979ee34bca7efa9
    Public key SHA-256 7dddf81e44c9b1a84de1c0012e539087ed916352b7d0edf6181c36245a266f00
    Brand
    Salesforce
    Addresses
    101.99.95.100 · Malaysia · AS45839 SHINJIRU-MY-AS-AP - Shinjiru Technology Sdn Bhd
    Domain
    campbell-road.com
    Registered
    2026-09-23 · Wild West Domains, LLC
    MX
    Receives mail at campbellroad-com02b.mail.protection.outlook.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:39 UTC

    Suggest a correction

  15. www.salesforce-receivable.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.salesforce-receivable.com
    First seen
    2026-11-03 10:06 UTC
    First published
    2026-11-03 11:04 UTC
    DNS
    Resolves · checked 2026-11-04 11:13 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-03 09:05 UTC to 2027-02-01 09:05 UTC
    Logged 2026-11-03 10:04 UTC in Google ParcelYard2027h1, entry 588,078,254
    SHA-256 2a184029218b05b5a6dedfa9731a19af53c069691f7f2205f73836001625b48c
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    Salesforce
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    salesforce-receivable.com
    Registered
    2026-08-25 · NameSilo, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  16. www.salesforce-incoporation.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.salesforce-incoporation.com
    First seen
    2026-11-02 23:27 UTC
    First published
    2026-11-03 00:09 UTC
    DNS
    Resolves · checked 2026-11-05 00:16 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-02 22:25 UTC to 2027-01-31 22:25 UTC
    Logged 2026-11-02 23:23 UTC in Google PlumbersArms2027h1, entry 580,666,568
    SHA-256 762354d49019b7d1fff79b37eb10717d42f183ff89a9a00fc0c76c6198488ec1
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    Salesforce
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    salesforce-incoporation.com
    Registered
    2026-08-25 · NameSilo, LLC
    MX
    Receives mail at mx1.titan.email, mx2.titan.email
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  17. www.salesforceincs.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.salesforceincs.com
    First seen
    2026-11-02 03:26 UTC
    First published
    2026-11-02 04:28 UTC
    DNS
    Resolves · checked 2026-11-05 04:42 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-02 02:24 UTC to 2027-01-31 02:24 UTC
    Logged 2026-11-02 03:22 UTC in Let's Encrypt Sycamore2027h1, entry 896,830,760
    SHA-256 95c08d4293866d35d3a1b738a2874ece4f48da3b5acf4f9e7cd7aa0bac07a61e
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    Salesforce
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    salesforceincs.com
    Registered
    2026-08-23 · NameSilo, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  18. salesforce-support.net US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    salesforce-support.net
    First seen
    2026-11-02 01:10 UTC
    First published
    2026-11-02 02:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 02:20 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-02 00:07 UTC to 2027-01-31 01:04 UTC
    Logged 2026-11-02 01:06 UTC in IPng Networks Halloumi2027h1, entry 334,162,658
    SHA-256 36eea17cca2e8317a55de036885888797cce9bf22cff7af9e46175080737478f
    Public key SHA-256 7ac18ca0e996efbafeffc0544a49af049815a80d4de83cf4a7b7c9993c594d77
    Brand
    Salesforce
    Addresses
    104.21.77.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::ac43:d3e8
    2606:4700:3036::6815:4dd9
    Cloudflare
    Cloudflare (104.21.77.217, 172.67.211.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    salesforce-support.net
    Registered
    2026-09-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  19. salesforce-receivable.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    salesforce-receivable.com
    First seen
    2026-10-31 14:26 UTC
    First published
    2026-10-31 15:06 UTC
    DNS
    Resolves · checked 2026-11-04 15:14 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 13:25 UTC to 2027-01-29 13:25 UTC
    Logged 2026-10-31 14:23 UTC in Google PlumbersArms2027h1, entry 540,804,759
    SHA-256 3dffe1a7268b45f41a28e636927038ddc416cefbda7d06ec37e1f9a1d35b863d
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    Salesforce
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    salesforce-receivable.com
    Registered
    2026-08-25 · NameSilo, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  20. www.appexchange.salesforce.com.physicollege.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC policy noneRegistered 17 y ago
    DetailsHide
    Hostname
    www.appexchange.salesforce.com.physicollege.com
    First seen
    2026-10-29 09:37 UTC
    First published
    2026-10-29 09:51 UTC
    DNS
    Resolves · checked 2026-11-05 10:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 46.105.59.3.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 46.105.59.3
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-29 08:37 UTC to 2027-01-27 08:37 UTC
    Logged 2026-10-29 09:35 UTC in IPng Networks Gouda2027h1, entry 257,997,404
    SHA-256 38b6cf118ccc4fb7b37955a89e955e01cf1fb7c193ab64afdb301467285c42e9
    Public key SHA-256 857e8ac325d5d3e6a64f803831ed1a7de5ea4b28481f0f25046aa990bee775f5
    Brand
    Salesforce
    Addresses
    46.105.59.3 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (46.105.59.3): a cloud provider. It rents servers and addresses to its customers.
    Domain
    physicollege.com
    Registered
    2009-09-07 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at physicollege.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  21. appexchange.salesforce.com.physicollege.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC policy noneRegistered 17 y ago
    DetailsHide
    Hostname
    appexchange.salesforce.com.physicollege.com
    First seen
    2026-10-29 09:36 UTC
    First published
    2026-10-29 09:51 UTC
    DNS
    Resolves · checked 2026-11-05 10:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 46.105.59.3.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 46.105.59.3
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-29 08:37 UTC to 2027-01-27 08:37 UTC
    Logged 2026-10-29 09:35 UTC in IPng Networks Gouda2027h1, entry 257,997,404
    SHA-256 38b6cf118ccc4fb7b37955a89e955e01cf1fb7c193ab64afdb301467285c42e9
    Public key SHA-256 857e8ac325d5d3e6a64f803831ed1a7de5ea4b28481f0f25046aa990bee775f5
    Brand
    Salesforce
    Addresses
    46.105.59.3 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (46.105.59.3): a cloud provider. It rents servers and addresses to its customers.
    Domain
    physicollege.com
    Registered
    2009-09-07 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at physicollege.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  22. salesforce-incoporation.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    salesforce-incoporation.com
    First seen
    2026-10-28 15:57 UTC
    First published
    2026-10-28 16:14 UTC
    DNS
    Resolves · checked 2026-11-04 16:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-28 14:57 UTC to 2027-01-26 14:57 UTC
    Logged 2026-10-28 15:55 UTC in DigiCert Sphinx2027h1, entry 296,104,344
    SHA-256 7f0e7737767964de89630f87e40d41ab1f59c9e0a82e79032cec4076c5f3089e
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    Salesforce
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    salesforce-incoporation.com
    Registered
    2026-08-25 · NameSilo, LLC
    MX
    Receives mail at mx1.titan.email, mx2.titan.email
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  23. tech-salesforce.com US · AS31898 · Oracle Corporation
    ListedPhishing hostOracle CloudListed by MetaMask · Address hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC rejectRegistered 12 y ago
    DetailsHide
    Hostname
    tech-salesforce.com
    First seen
    2026-10-27 04:06 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 64.181.217.59.
    1. Phishing-host list fetched with the address
    2. Resolved to 64.181.217.59
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 466,188,618
    SHA-256 9b290576f3cd5367d06bebbe02fed8f768170ef054a47845d8f0fbb9a54427c8
    Brand
    Salesforce
    Addresses
    64.181.217.59 · United States · AS31898 ORACLE-BMC-31898 - Oracle Corporation · Oracle Cloud (cloud provider)
    Oracle Cloud
    Oracle Cloud (64.181.217.59): a cloud provider. It rents servers and addresses to its customers.
    Domain
    tech-salesforce.com
    Registered
    2015-01-23 · Cloudflare, Inc.
    MX
    Receives mail at mail.tech-salesforce.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 08:27 UTC

    Suggest a correction

  24. support-salesforce.com US · AS31898 · Oracle Corporation
    Phishing hostOracle CloudAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC rejectRegistered 12 y ago
    DetailsHide
    Hostname
    support-salesforce.com
    First seen
    2026-10-27 01:16 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 64.181.217.59.
    1. Phishing-host list fetched with the address
    2. Resolved to 64.181.217.59
    3. Latest DNS check
    Certificate
    Logged in IPng Networks Gouda2027h1, entry 234,668,355
    SHA-256 4893e34b025bac07f2d47d0ca2be8e0b1626226c68aaa299879842b1ebbb6876
    Brand
    Salesforce
    Addresses
    64.181.217.59 · United States · AS31898 ORACLE-BMC-31898 - Oracle Corporation · Oracle Cloud (cloud provider)
    Oracle Cloud
    Oracle Cloud (64.181.217.59): a cloud provider. It rents servers and addresses to its customers.
    Domain
    support-salesforce.com
    Registered
    2015-01-23 · Cloudflare, Inc.
    MX
    Receives mail at mail.support-salesforce.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 08:25 UTC

    Suggest a correction

  25. www.salesforcehub.shop RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.salesforcehub.shop
    First seen
    2026-10-26 23:11 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Resolved to 95.163.244.138
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 793,374,070
    SHA-256 4ad78e3e5a2aca06c357ea4a719ed43c0f62308a615cdc97060c2b7f4c273c93
    Brand
    Salesforce
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    salesforcehub.shop
    Registered
    2026-08-11 · Registrar of domain names REG.RU
    MX
    Receives mail at mx.notletters.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:25 UTC

    Suggest a correction

  26. salesforcehub.shop RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    salesforcehub.shop
    First seen
    2026-10-26 23:11 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Resolved to 95.163.244.138
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 793,374,070
    SHA-256 4ad78e3e5a2aca06c357ea4a719ed43c0f62308a615cdc97060c2b7f4c273c93
    Brand
    Salesforce
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    salesforcehub.shop
    Registered
    2026-08-11 · Registrar of domain names REG.RU
    MX
    Receives mail at mx.notletters.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:25 UTC

    Suggest a correction

  27. fo-salesforce.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    fo-salesforce.com
    First seen
    2026-10-26 22:47 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.135.23.164.
    1. Phishing-host list fetched with the address
    2. Resolved to 5.135.23.164
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Willow2027h1, entry 788,083,956
    SHA-256 41c5f498fd7551d06882b54c727496b4827da04b536f72a872c41fbdaa96f62e
    Brand
    Salesforce
    Addresses
    5.135.23.164 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (5.135.23.164): a cloud provider. It rents servers and addresses to its customers.
    Domain
    fo-salesforce.com
    Registered
    2026-06-04 · OVH sas
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:32 UTC

    Suggest a correction

  28. www.fo-salesforce.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    www.fo-salesforce.com
    First seen
    2026-10-26 18:06 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.135.23.164.
    1. Phishing-host list fetched with the address
    2. Resolved to 5.135.23.164
    3. Latest DNS check
    Certificate
    Logged in Geomys Tuscolo2027h1, entry 361,599,881
    SHA-256 49767987d48a2ad504aa6242736c394b16176a7d9d9e82f3b5e43d22fcca59c5
    Brand
    Salesforce
    Addresses
    5.135.23.164 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (5.135.23.164): a cloud provider. It rents servers and addresses to its customers.
    Domain
    fo-salesforce.com
    Registered
    2026-06-04 · OVH sas
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:32 UTC

    Suggest a correction

  29. mysalesforceteam.com VG · AS200313 · ProHoster-AS IT WEB LTD
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    mysalesforceteam.com
    First seen
    2026-10-26 16:16 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.212.129.226.
    1. Phishing-host list fetched with the address
    2. Resolved to 185.212.129.226
    3. Latest DNS check
    Certificate
    Logged in IPng Networks Gouda2027h1, entry 231,751,664
    SHA-256 f790939d834016a8f32649fcea507b2efef044d8637dc7105cb7f9cc9977cb46
    Brand
    Salesforce
    Addresses
    185.212.129.226 · British Virgin Islands · AS200313 ProHoster-AS IT WEB LTD
    Domain
    mysalesforceteam.com
    Registered
    2026-04-09 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:22 UTC

    Suggest a correction

  30. salesforceincs.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    salesforceincs.com
    First seen
    2026-10-26 14:37 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Resolved to 172.232.24.161
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Willow2027h1, entry 782,519,206
    SHA-256 2660b5da548e6d17c337932f9c21acfb9cb8fba4c3b07307997482da4e371fc0
    Brand
    Salesforce
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    salesforceincs.com
    Registered
    2026-08-23 · NameSilo, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  31. mc.salesforce.com.mor-ralf.r.mail.leankoala.com FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 11 y ago
    DetailsHide
    Hostname
    mc.salesforce.com.mor-ralf.r.mail.leankoala.com
    First seen
    2026-10-26 07:57 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Resolved to 172.246.243.65
    3. Latest DNS check
    Certificate
    Logged in IPng Networks Halloumi2027h1, entry 267,915,477
    SHA-256 7e3facf70e85c899c795e65566da61e435f786be13607a2561132ed3459cbc4a
    Brand
    Salesforce
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS
    Domain
    leankoala.com
    Registered
    2016-03-15 · united-domains GmbH
    MX
    Receives mail at mx00.udag.de, mx01.udag.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Salesforce when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Software & cloud

All brands →