Samsung

Other South Koreasamsung.comRank 319 of the most impersonated
Cert findings · 24 h
8
Cert findings · 7 days
24
24 on phishing hosts
Registered lookalikes
283
33 listed by a source or an address list
Official domains
11
verified from Samsung's own sites and records

Certificate findings for Samsung

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Samsung's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 34 findings, grouped by hostname

  1. samsungsamsung.com US · AS30633 · Leaseweb USA, Inc.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    samsungsamsung.com
    First seen
    2026-11-05 09:04 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 23.105.175.17.
    1. Phishing-host list fetched with the address
    2. Resolved to 23.105.175.17
    Brand
    Samsung
    Addresses
    23.105.175.17 · United States · AS30633 LEASEWEB-USA-WDC - Leaseweb USA, Inc.
    23.105.175.15 · United States · AS30633 LEASEWEB-USA-WDC - Leaseweb USA, Inc.
    Domain
    samsungsamsung.com
    Registered
    2020-10-12 · Media Elite Holdings Limited, S.A.
    MX
    Receives mail at mail.h-email.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:26 UTC

    Suggest a correction

  2. smartthingssamsung.com NL · AS60781 · LEASEWEB-NL-AMS-01 LeaseWeb…2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    smartthingssamsung.com
    First seen
    2026-11-05 09:02 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 62.212.89.90.
    1. Phishing-host list fetched with the address
    2. Resolved to 62.212.89.90
    Brand
    Samsung
    Addresses
    62.212.89.90 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
    23.105.175.17 · United States · AS30633 LEASEWEB-USA-WDC - Leaseweb USA, Inc.
    Domain
    smartthingssamsung.com
    Registered
    2023-06-01 · Media Elite Holdings Limited, S.A.
    MX
    Receives mail at mail.h-email.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:26 UTC

    Suggest a correction

  3. samsung-compressors.com US · AS40244 · Turnkey Internet Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    samsung-compressors.com
    First seen
    2026-11-05 05:01 UTC
    DNS
    Resolves · checked 2026-11-05 05:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 199.193.114.45.
    1. Phishing-host list fetched with the address
    2. Resolved to 199.193.114.45
    Brand
    Samsung
    Addresses
    199.193.114.45 · United States · AS40244 TURNKEY-INTERNET - Turnkey Internet Inc.
    Domain
    samsung-compressors.com
    Registered
    2018-10-29 · Media Elite Holdings Limited, S.A.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:26 UTC

    Suggest a correction

  4. www.rem-samsung-official.ru RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.rem-samsung-official.ru
    First seen
    2026-11-04 20:02 UTC
    First published
    2026-11-04 21:09 UTC
    DNS
    Resolves · checked 2026-11-04 21:16 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 18:56 UTC to 2027-02-02 18:56 UTC
    Logged 2026-11-04 19:55 UTC in Google PlumbersArms2027h1, entry 614,168,724
    SHA-256 853afe6e593b5093e2e4dfe98dee4c185453266ead5663026a41c5c659e5f768
    Public key SHA-256 8b9468a9aa2706125632fd2ad88d1b28dd486f3cea77931ae218d1446bc8ad08
    Brand
    Samsung
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    rem-samsung-official.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:03 UTC

    Suggest a correction

  5. rem-samsung-official.ru RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    rem-samsung-official.ru
    First seen
    2026-11-04 20:02 UTC
    First published
    2026-11-04 21:09 UTC
    DNS
    Resolves · checked 2026-11-04 21:16 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 18:56 UTC to 2027-02-02 18:56 UTC
    Logged 2026-11-04 19:55 UTC in Google PlumbersArms2027h1, entry 614,168,724
    SHA-256 853afe6e593b5093e2e4dfe98dee4c185453266ead5663026a41c5c659e5f768
    Public key SHA-256 8b9468a9aa2706125632fd2ad88d1b28dd486f3cea77931ae218d1446bc8ad08
    Brand
    Samsung
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    rem-samsung-official.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:03 UTC

    Suggest a correction

  6. www.smartthingspro.com US · AS20473 · The Constant Company, LLC
    Phishing hostVultrAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 17 mo ago
    DetailsHide
    Hostname
    www.smartthingspro.com
    First seen
    2026-11-04 13:02 UTC
    First published
    2026-11-04 13:12 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 64.176.195.8.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 64.176.195.8
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
    Valid 2026-11-04 00:00 UTC to 2027-02-02 23:59 UTC
    Logged 2026-11-04 12:48 UTC in IPng Networks Halloumi2027h1, entry 361,432,825
    SHA-256 4f7e9066679d7066c51558cae8c1ea353dad6caa62996e9e900e9c893fc699c3
    Public key SHA-256 6df1783c4c29cd60241826509c2e401d1a0d5cde308be42847fc0b1ddbc898ef
    Brand
    Samsung
    Addresses
    64.176.195.8 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)
    Vultr
    Vultr (64.176.195.8): a cloud provider. It rents servers and addresses to its customers.
    Domain
    smartthingspro.com
    Registered
    2025-06-21 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:11 UTC

    Suggest a correction

  7. smartthingspro.com US · AS20473 · The Constant Company, LLC
    Phishing hostVultrAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 17 mo ago
    DetailsHide
    Hostname
    smartthingspro.com
    First seen
    2026-11-04 13:02 UTC
    First published
    2026-11-04 13:12 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 64.176.195.8.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 64.176.195.8
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2
    Valid 2026-11-04 00:00 UTC to 2027-02-02 23:59 UTC
    Logged 2026-11-04 12:48 UTC in DigiCert Wyvern2027h1, entry 402,621,433
    SHA-256 a7c0f567de26dbcd5c7d7c3772bec687a046739c6b9ee75ef0bc677cd9911adf
    Public key SHA-256 0e094a7b730e217173f2ec4ca12710b770e0537ce1193a3f02eaf3187f6aa45b
    Brand
    Samsung
    Addresses
    64.176.195.8 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)
    Vultr
    Vultr (64.176.195.8): a cloud provider. It rents servers and addresses to its customers.
    Domain
    smartthingspro.com
    Registered
    2025-06-21 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:11 UTC

    Suggest a correction

  8. samsungicloud.com NL · AS60781 · LEASEWEB-NL-AMS-01 LeaseWeb…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    samsungicloud.com
    First seen
    2026-11-04 12:02 UTC
    DNS
    Resolves · checked 2026-11-04 12:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 37.48.110.47.
    1. Phishing-host list fetched with the address
    2. Resolved to 37.48.110.47
    Brand
    Samsung
    Addresses
    37.48.110.47 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
    Domain
    samsungicloud.com
    Registered
    2018-10-05 · Media Elite Holdings Limited, S.A.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:30 UTC

    Suggest a correction

  9. samsunglogin.com NL · AS43350 · NFORCE NForce Entertainment…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 y ago
    DetailsHide
    Hostname
    samsunglogin.com
    First seen
    2026-11-04 09:01 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.247.182.243.
    1. Phishing-host list fetched with the address
    2. Resolved to 77.247.182.243
    3. Latest DNS check
    Brand
    Samsung
    Addresses
    77.247.182.243 · Netherlands · AS43350 NFORCE NForce Entertainment B.V.
    Domain
    samsunglogin.com
    Registered
    2020-01-13 · Media Elite Holdings Limited, S.A.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:26 UTC

    Suggest a correction

  10. loginsamsung.com US · AS40244 · Turnkey Internet Inc.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    loginsamsung.com
    First seen
    2026-11-04 08:16 UTC
    First published
    2026-11-04 08:03 UTC
    DNS
    Resolves · checked 2026-11-05 08:17 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 199.193.114.101.
    1. Phishing-host list fetched with the address
    2. Resolved to 199.193.114.101
    3. Latest DNS check
    Brand
    Samsung
    Addresses
    199.193.114.101 · United States · AS40244 TURNKEY-INTERNET - Turnkey Internet Inc.
    199.193.114.100 · United States · AS40244 TURNKEY-INTERNET - Turnkey Internet Inc.
    Domain
    loginsamsung.com
    Registered
    2025-10-28 · OnlineNIC, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:36 UTC

    Suggest a correction

  11. www.samsung-pay.icu SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    www.samsung-pay.icu
    First seen
    2026-11-04 05:58 UTC
    First published
    2026-11-04 06:49 UTC
    DNS
    Resolves · checked 2026-11-05 07:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-04 04:56 UTC to 2027-02-02 04:56 UTC
    Logged 2026-11-04 05:54 UTC in DigiCert Sphinx2027h1, entry 351,404,995
    SHA-256 229eded570378f666f40199fadfda36999531679f6888db05542b0a08df27aa7
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    Samsung
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    samsung-pay.icu
    Registered
    2026-11-03 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 05:03 UTC

    Suggest a correction

  12. samsung-pay.icu SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    samsung-pay.icu
    First seen
    2026-11-04 04:42 UTC
    First published
    2026-11-04 05:23 UTC
    DNS
    Resolves · checked 2026-11-05 05:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-04 03:41 UTC to 2027-02-02 03:41 UTC
    Logged 2026-11-04 04:39 UTC in IPng Networks Halloumi2027h1, entry 357,048,094
    SHA-256 13df69a57c6f5801fd0513cc8b68f823db8ea310b5ebc1d7ef30d7ce9bd27588
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    Samsung
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    samsung-pay.icu
    Registered
    2026-11-03 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 05:03 UTC

    Suggest a correction

  13. ru.samsung-th.me RU · AS215013 · YCCDN Yandex.Cloud LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    ru.samsung-th.me
    First seen
    2026-11-03 11:06 UTC
    First published
    2026-11-03 12:13 UTC
    DNS
    Resolves · checked 2026-11-04 12:24 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.72.112.1.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 188.72.112.1
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-03 10:03 UTC to 2027-02-01 10:03 UTC
    Logged 2026-11-03 11:01 UTC in Google ParcelYard2027h1, entry 588,891,428
    SHA-256 4ac0d7f0fa9a561719318a15dc9c3842d50e029eaf03ee0354385a2645b03093
    Public key SHA-256 d01862b4aefe4ec477ccfb8b34e8c596cdc71c1b9ce2658fcc6941c5290be8ec
    Brand
    Samsung
    Addresses
    188.72.112.1 · Russia · AS215013 YCCDN Yandex.Cloud LLC
    Domain
    samsung-th.me
    Registered
    2026-09-04 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 12:16 UTC

    Suggest a correction

  14. www.guide-de-noel-samsung.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    www.guide-de-noel-samsung.com
    First seen
    2026-11-01 23:47 UTC
    First published
    2026-11-01 23:56 UTC
    DNS
    Resolves · checked 2026-11-05 00:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.186.33.17.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.186.33.17
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-01 22:46 UTC to 2027-01-30 22:46 UTC
    Logged 2026-11-01 23:44 UTC in Let's Encrypt Sycamore2027h1, entry 894,232,288
    SHA-256 0ca09cfb9ce0ce586c2845429081da08f75f69d73b0b55b8d989e74dd17ad546
    Public key SHA-256 5e4d30d5115620c58cf7368b8c8863614178ef1f348219060cf81e6212cb27d6
    Brand
    Samsung
    Addresses
    213.186.33.17 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (213.186.33.17): a cloud provider. It rents servers and addresses to its customers.
    Domain
    guide-de-noel-samsung.com
    Registered
    2023-10-02 · OVH sas
    MX
    Receives mail at mx4.mail.ovh.net, mx3.mail.ovh.net
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  15. www.samsungcustomerservicesupport.in.sipbharatsolutions.in US · AS36352 · HostPapa
    Phishing hostSame certificateColoCrossingAddress hosted confirmed phishing in the last 48 h · Same certificate as samsungcustomerservicesupport.in, on a phishing host at 23.94.181.5MX presentSPF ~allDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    www.samsungcustomerservicesupport.in.sipbharatsolutions.in
    First seen
    2026-11-01 10:37 UTC
    First published
    2026-11-01 11:21 UTC
    DNS
    Resolves · checked 2026-11-04 11:27 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 23.94.181.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 23.94.181.5
    4. Latest DNS check
    Same certificate
    Same certificate as samsungcustomerservicesupport.in: on a phishing host at 23.94.181.5; a Samsung lookalike
    Hosting-alias name of samsungcustomerservicesupport.in
    Samsung appears in this hostname
    Resolved to 23.94.181.5, an address that hosted confirmed phishing
    Certificate 0e1af817ec035b91… · 2 domains on it · first seen 2026-11-01 10:37 UTC
    Certificate
    Issued by YR2
    Valid 2026-11-01 09:36 UTC to 2027-01-30 09:36 UTC
    Logged 2026-11-01 10:35 UTC in Google ParcelYard2027h1, entry 554,017,236
    SHA-256 0e1af817ec035b919cdc97729c59e2830adc72553223ef9d9beb9dcf45ea5544
    Public key SHA-256 07765f31cad7de6750db0c069c9683a6e99b3dd55907cd5bd3d48c5af448feb9
    Brand
    Samsung
    Addresses
    23.94.181.5 · United States · AS36352 AS-COLOCROSSING - HostPapa · ColoCrossing (shared hosting)
    ColoCrossing
    ColoCrossing (23.94.181.5): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    sipbharatsolutions.in
    Registered
    2018-10-20 · GoDaddy
    MX
    Receives mail at sipbharatsolutions.in
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  16. samsungcustomerservicesupport.in US · AS36352 · HostPapa3 addresses
    Phishing hostSame certificateColoCrossingAmazon Web ServicesAddress hosted confirmed phishing in the last 48 h · Same certificate as www.samsungcustomerservicesupport.in.sipbharatsolutions.in, on a phishing host at 23.94.181.5MX presentSPF ~allDMARC policy noneRegistered 12 mo ago
    DetailsHide
    Hostname
    samsungcustomerservicesupport.in
    First seen
    2026-11-01 10:37 UTC
    First published
    2026-11-01 11:21 UTC
    DNS
    Resolves · checked 2026-11-04 11:27 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 23.94.181.5.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 23.94.181.5
    4. Latest DNS check
    Same certificate
    Same certificate as www.samsungcustomerservicesupport.in.sipbharatsolutions.in: on a phishing host at 23.94.181.5; a Samsung lookalike
    Hosting-alias name of www.samsungcustomerservicesupport.in.sipbharatsolutions.in
    Samsung appears in this hostname
    Certificate 0e1af817ec035b91… · 2 domains on it · first seen 2026-11-01 10:37 UTC
    Certificate
    Issued by YR2
    Valid 2026-11-01 09:36 UTC to 2027-01-30 09:36 UTC
    Logged 2026-11-01 10:35 UTC in Google ParcelYard2027h1, entry 554,017,236
    SHA-256 0e1af817ec035b919cdc97729c59e2830adc72553223ef9d9beb9dcf45ea5544
    Public key SHA-256 07765f31cad7de6750db0c069c9683a6e99b3dd55907cd5bd3d48c5af448feb9
    Brand
    Samsung
    Addresses
    23.94.181.5 · United States · AS36352 AS-COLOCROSSING - HostPapa · ColoCrossing (shared hosting)
    13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    ColoCrossing
    ColoCrossing (23.94.181.5): shared web hosting and domain registration. One address typically serves many customer sites.
    Amazon Web Services
    Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
    Domain
    samsungcustomerservicesupport.in
    Registered
    2025-10-30 · GoDaddy
    MX
    Receives mail at samsungcustomerservicesupport.in
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  17. samsung-mobile-phones.online DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…5 addresses
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    samsung-mobile-phones.online
    First seen
    2026-10-31 02:36 UTC
    First published
    2026-10-31 02:53 UTC
    DNS
    Resolves · checked 2026-11-05 02:57 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.78.156.59.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 5.78.156.59
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 01:36 UTC to 2027-01-29 01:36 UTC
    Logged 2026-10-31 02:34 UTC in IPng Networks Halloumi2027h1, entry 317,723,606
    SHA-256 057f14427d066d35864cb5def894cf5b592f9a652791ad2c14dd4d743e546b89
    Public key SHA-256 e75a666dfe6f112e8d889acb870aab868a6f19474c6e65748b1fb3dfd842a249
    Brand
    Samsung
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
    Domain
    samsung-mobile-phones.online
    Registered
    2025-12-29 · VIRTUA DRUG Kutatási Szolgáltató Korlátolt Felelősségű Társaság
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  18. www.reparation-samsung-lyon.fr FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 9 y ago
    DetailsHide
    Hostname
    www.reparation-samsung-lyon.fr
    First seen
    2026-10-31 01:52 UTC
    First published
    2026-10-31 02:53 UTC
    DNS
    Resolves · checked 2026-11-05 02:57 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.165.53.185.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 188.165.53.185
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 00:49 UTC to 2027-01-29 00:49 UTC
    Logged 2026-10-31 01:47 UTC in IPng Networks Gouda2027h1, entry 274,694,631
    SHA-256 48e52e340f9e16fb383f383a2e44342c6098000fa4895d14603d5ea475f907aa
    Public key SHA-256 4d50422285118d6340ccc3688bdafbca71b0be9d10ce481cd7bd72093326c964
    Brand
    Samsung
    Addresses
    188.165.53.185 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (188.165.53.185): a cloud provider. It rents servers and addresses to its customers.
    Domain
    reparation-samsung-lyon.fr
    Registered
    2018-04-24 · OVH
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  19. guide-de-noel-samsung.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    guide-de-noel-samsung.com
    First seen
    2026-10-31 01:41 UTC
    First published
    2026-10-31 01:50 UTC
    DNS
    Resolves · checked 2026-11-05 01:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.186.33.17.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.186.33.17
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-31 00:38 UTC to 2027-01-29 00:38 UTC
    Logged 2026-10-31 01:36 UTC in Google PlumbersArms2027h1, entry 532,339,837
    SHA-256 b2da510f4aa924d95efb371356a60c144cf9719f12c4cb9f6648ed407367d8db
    Public key SHA-256 ebe6fe2c9479e8bb5e2451b3ba3dbc178636c93217163dd8f13ed5ae64582c2a
    Brand
    Samsung
    Addresses
    213.186.33.17 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (213.186.33.17): a cloud provider. It rents servers and addresses to its customers.
    Domain
    guide-de-noel-samsung.com
    Registered
    2023-10-02 · OVH sas
    MX
    Receives mail at mx4.mail.ovh.net, mx3.mail.ovh.net
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  20. reparation-samsung-lyon.fr FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 9 y ago
    DetailsHide
    Hostname
    reparation-samsung-lyon.fr
    First seen
    2026-10-31 00:32 UTC
    First published
    2026-10-31 00:45 UTC
    DNS
    Resolves · checked 2026-11-05 00:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.165.53.185.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 188.165.53.185
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-30 23:27 UTC to 2027-01-28 23:27 UTC
    Logged 2026-10-31 00:25 UTC in Google ParcelYard2027h1, entry 530,967,669
    SHA-256 1147a86dfc817cac69165766306a6d2837a3ae5c646e891f9611bc552a7a6b96
    Public key SHA-256 fb4807f1178427ca88476466f31673d107186f755db2dfeeecdd0ab0d379f02a
    Brand
    Samsung
    Addresses
    188.165.53.185 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (188.165.53.185): a cloud provider. It rents servers and addresses to its customers.
    Domain
    reparation-samsung-lyon.fr
    Registered
    2018-04-24 · OVH
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  21. led-samsung.ir IR · AS205585 · ARVANCLOUD-CDN-IR Noyan Abr…2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    led-samsung.ir
    First seen
    2026-10-30 02:21 UTC
    First published
    2026-10-30 02:55 UTC
    DNS
    Resolves · checked 2026-11-05 03:03 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.143.233.133.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.143.233.133
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-30 01:16 UTC to 2027-01-28 01:16 UTC
    Logged 2026-10-30 02:15 UTC in Google ParcelYard2027h1, entry 515,340,168
    SHA-256 2741df498122f4e2ae84722513650d1b542903b3340e6e6917a4c0ba9fb25b36
    Public key SHA-256 0de4d5aecd653ef7d0973f3a12fbc2c2c83e745f603afec4b5250382ae4a1824
    Brand
    Samsung
    Addresses
    185.143.233.133 · Iran · AS205585 ARVANCLOUD-CDN-IR Noyan Abr Arvan Co. ( Private Joint Stock)
    185.143.234.133 · Iran · AS205585 ARVANCLOUD-CDN-IR Noyan Abr Arvan Co. ( Private Joint Stock)
    Domain
    led-samsung.ir
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  22. www.spb-samsungstore.ru RU · AS198610 · BEGET-AS Beget LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.spb-samsungstore.ru
    First seen
    2026-10-29 11:47 UTC
    First published
    2026-10-29 11:56 UTC
    DNS
    Resolves · checked 2026-11-04 12:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.130.41.88.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 45.130.41.88
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-29 10:46 UTC to 2027-01-27 10:46 UTC
    Logged 2026-10-29 11:45 UTC in Let's Encrypt Willow2027h1, entry 831,858,411
    SHA-256 1ab009dfc75bfb2774d8ff17b5130f698e7cf77e66117c465ca5a15ad7f4bb6f
    Public key SHA-256 de292739481fff88487daec3d77bc936d7ea38c289e60619e9fc8e2e3d8ffb08
    Brand
    Samsung
    Addresses
    45.130.41.88 · Russia · AS198610 BEGET-AS Beget LLC
    Domain
    spb-samsungstore.ru
    MX
    Receives mail at mx1.timeweb.ru, mx2.timeweb.ru
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  23. www.samsungstore-spb.ru RU · AS198610 · BEGET-AS Beget LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.samsungstore-spb.ru
    First seen
    2026-10-29 11:47 UTC
    First published
    2026-10-29 11:56 UTC
    DNS
    Resolves · checked 2026-11-04 12:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.130.41.88.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 45.130.41.88
    Certificate
    Issued by YR2
    Valid 2026-10-29 10:46 UTC to 2027-01-27 10:46 UTC
    Logged 2026-10-29 11:45 UTC in Let's Encrypt Willow2027h1, entry 831,860,321
    SHA-256 3cf5c2ae723d3923516edf7afc6b840f328f0b30bfc004253f7e705bfa679175
    Public key SHA-256 59592b6195dac6706376962bcf790efaaff066e02efd958c10ac5cd5cd56d01f
    Brand
    Samsung
    Addresses
    45.130.41.88 · Russia · AS198610 BEGET-AS Beget LLC
    Domain
    samsungstore-spb.ru
    MX
    Receives mail at mx1.timeweb.ru, mx2.timeweb.ru
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  24. spb-samsungstore.ru RU · AS198610 · BEGET-AS Beget LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    spb-samsungstore.ru
    First seen
    2026-10-29 11:47 UTC
    First published
    2026-10-29 11:56 UTC
    DNS
    Resolves · checked 2026-11-04 12:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.130.41.88.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 45.130.41.88
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-29 10:46 UTC to 2027-01-27 10:46 UTC
    Logged 2026-10-29 11:45 UTC in Let's Encrypt Willow2027h1, entry 831,858,411
    SHA-256 1ab009dfc75bfb2774d8ff17b5130f698e7cf77e66117c465ca5a15ad7f4bb6f
    Public key SHA-256 de292739481fff88487daec3d77bc936d7ea38c289e60619e9fc8e2e3d8ffb08
    Brand
    Samsung
    Addresses
    45.130.41.88 · Russia · AS198610 BEGET-AS Beget LLC
    Domain
    spb-samsungstore.ru
    MX
    Receives mail at mx1.timeweb.ru, mx2.timeweb.ru
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  25. samsung-xpress-m2070.ru RU · AS49505 · SELECTEL JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    samsung-xpress-m2070.ru
    First seen
    2026-10-29 01:01 UTC
    First published
    2026-10-29 01:32 UTC
    DNS
    Checked · checked 2026-11-05 01:41 UTC
    Checks
    Overdue since 2026-11-02 01:39 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 94.26.255.20.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 94.26.255.20
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-29 00:00 UTC to 2027-01-27 00:00 UTC
    Logged 2026-10-29 00:59 UTC in DigiCert Wyvern2027h1, entry 341,214,144
    SHA-256 8c1a4b480df090234579fb49da150592ab091bf430d4cceac745286009c67cc4
    Public key SHA-256 95a0fb97999e4820556594337d77c51b7176032a4332645ac596f4e551029e28
    Brand
    Samsung
    Addresses
    94.26.255.20 · Russia · AS49505 SELECTEL JSC Selectel
    Domain
    samsung-xpress-m2070.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-01 02:58 UTC

    Suggest a correction

  26. samsung-scx3400.ru RU · AS49505 · SELECTEL JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    samsung-scx3400.ru
    First seen
    2026-10-29 01:01 UTC
    First published
    2026-10-29 01:32 UTC
    DNS
    Checked · checked 2026-11-05 01:41 UTC
    Checks
    Overdue since 2026-11-02 01:39 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 94.26.255.20.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 94.26.255.20
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-29 00:00 UTC to 2027-01-27 00:00 UTC
    Logged 2026-10-29 00:59 UTC in DigiCert Wyvern2027h1, entry 341,216,690
    SHA-256 3022446c14f9ad43085c4a9d59ab3fe702760ef27ec47a6a37ac7cf1cd7082e7
    Public key SHA-256 75cf01eb5e44af927abb365e36301a7415b3b279e639534159ce9f49db27ca15
    Brand
    Samsung
    Addresses
    94.26.255.20 · Russia · AS49505 SELECTEL JSC Selectel
    Domain
    samsung-scx3400.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-01 02:58 UTC

    Suggest a correction

  27. www.samsung-xpress-m2070.ru RU · AS49505 · SELECTEL JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.samsung-xpress-m2070.ru
    First seen
    2026-10-29 01:00 UTC
    First published
    2026-10-29 01:32 UTC
    DNS
    Checked · checked 2026-11-05 01:41 UTC
    Checks
    Overdue since 2026-11-02 01:39 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 94.26.255.20.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 94.26.255.20
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-29 00:00 UTC to 2027-01-27 00:00 UTC
    Logged 2026-10-29 00:59 UTC in DigiCert Wyvern2027h1, entry 341,214,144
    SHA-256 8c1a4b480df090234579fb49da150592ab091bf430d4cceac745286009c67cc4
    Public key SHA-256 95a0fb97999e4820556594337d77c51b7176032a4332645ac596f4e551029e28
    Brand
    Samsung
    Addresses
    94.26.255.20 · Russia · AS49505 SELECTEL JSC Selectel
    Domain
    samsung-xpress-m2070.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-01 02:58 UTC

    Suggest a correction

  28. www.samsung-scx3400.ru RU · AS49505 · SELECTEL JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.samsung-scx3400.ru
    First seen
    2026-10-29 01:00 UTC
    First published
    2026-10-29 01:32 UTC
    DNS
    Checked · checked 2026-11-05 01:41 UTC
    Checks
    Overdue since 2026-11-02 01:39 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 94.26.255.20.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 94.26.255.20
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-29 00:00 UTC to 2027-01-27 00:00 UTC
    Logged 2026-10-29 00:59 UTC in DigiCert Wyvern2027h1, entry 341,216,690
    SHA-256 3022446c14f9ad43085c4a9d59ab3fe702760ef27ec47a6a37ac7cf1cd7082e7
    Public key SHA-256 75cf01eb5e44af927abb365e36301a7415b3b279e639534159ce9f49db27ca15
    Brand
    Samsung
    Addresses
    94.26.255.20 · Russia · AS49505 SELECTEL JSC Selectel
    Domain
    samsung-scx3400.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-01 02:58 UTC

    Suggest a correction

  29. www.samsung-inc.com SG · AS63949 · Akamai Connected Cloud
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide
    Hostname
    www.samsung-inc.com
    First seen
    2026-10-28 10:32 UTC
    First published
    2026-10-28 11:02 UTC
    DNS
    Not resolving since 2026-10-29 · checked 2026-11-04 11:08 UTC
    Checks
    Overdue since 2026-10-29 11:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-28 09:28 UTC to 2027-01-26 09:28 UTC
    Logged 2026-10-28 10:26 UTC in IPng Networks Halloumi2027h1, entry 287,456,958
    SHA-256 03fc5d0204812f6efa45998c6690859131a799b35a92f63b3da1127eed5a3998
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    Samsung
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161): a cloud provider. It rents servers and addresses to its customers.
    Domain
    samsung-inc.com
    Registered
    2026-10-27 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:35 UTC

    Suggest a correction

  30. samsung-inc.com SG · AS63949 · Akamai Connected Cloud
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide
    Hostname
    samsung-inc.com
    First seen
    2026-10-28 10:06 UTC
    First published
    2026-10-28 11:02 UTC
    DNS
    Not resolving since 2026-10-29 · checked 2026-11-04 11:08 UTC
    Checks
    Overdue since 2026-10-29 11:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    Certificate
    Issued by YE1
    Valid 2026-10-28 09:04 UTC to 2027-01-26 09:04 UTC
    Logged 2026-10-28 10:02 UTC in Google PlumbersArms2027h1, entry 487,068,263
    SHA-256 2d20e36a36d2a0f091a0e1781093ed56ee825e304109faceda2e591ce90fba69
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    Samsung
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161): a cloud provider. It rents servers and addresses to its customers.
    Domain
    samsung-inc.com
    Registered
    2026-10-27 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:35 UTC

    Suggest a correction

  31. www.samsung21700.ru RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.samsung21700.ru
    First seen
    2026-10-27 10:37 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Resolved to 95.163.244.138
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 469,961,743
    SHA-256 4b6d67089576883d39855f25722454e1b254c84354388bc696f8e0c1163e5fa7
    Brand
    Samsung
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    samsung21700.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:30 UTC

    Suggest a correction

  32. samsung21700.ru RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    samsung21700.ru
    First seen
    2026-10-27 10:37 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Resolved to 95.163.244.138
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 469,961,743
    SHA-256 4b6d67089576883d39855f25722454e1b254c84354388bc696f8e0c1163e5fa7
    Brand
    Samsung
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    samsung21700.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:30 UTC

    Suggest a correction

  33. samsung-kopierer.de DE · AS8560 · IONOS-AS IONOS SE
    Phishing hostIONOSAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    samsung-kopierer.de
    First seen
    2026-10-27 06:00 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 217.160.0.29.
    1. Phishing-host list fetched with the address
    2. Resolved to 217.160.0.29
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 797,901,349
    SHA-256 4544e61cbf33cfbe94d697b72b9066d9781e1ec3fb5072f2aae5ee8b53acce14
    Brand
    Samsung
    Addresses
    217.160.0.29 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    IONOS
    IONOS (217.160.0.29): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    samsung-kopierer.de
    MX
    Receives mail at mx00.ionos.de, mx01.ionos.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 08:28 UTC

    Suggest a correction

  34. ricambi-samsung.com IT · AS31034 · ARUBA-ASN Aruba S.p.A.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 13 y ago
    DetailsHide
    Hostname
    ricambi-samsung.com
    First seen
    2026-10-26 04:32 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 62.149.189.55.
    1. Phishing-host list fetched with the address
    2. Resolved to 62.149.189.55
    3. Latest DNS check
    Certificate
    Logged in DigiCert Wyvern2027h1, entry 313,360,136
    SHA-256 4d53f8db4b1c329ab023cd3329b4b4ecfdec335248c637abbe5e1765f714c44e
    Brand
    Samsung
    Addresses
    62.149.189.55 · Italy · AS31034 ARUBA-ASN Aruba S.p.A.
    Domain
    ricambi-samsung.com
    Registered
    2013-12-17 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Samsung when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More monitored brands

All brands →