Toyota

Automotive Japantoyota.com.auRank 292 of the most impersonated
Cert findings · 24 h
6
Cert findings · 7 days
31
3 reported or listed · 26 on phishing hosts · 2 on Spamhaus DROP
Registered lookalikes
191
6 listed by a source or an address list
Official domains
35
verified from Toyota's own sites and records

Certificate findings for Toyota

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Toyota's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 47 findings, grouped by hostname

  1. wwwtoyota.co.uk US · AS46475 · Limestone Networks, Inc.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 22 y ago
    DetailsHide
    Hostname
    wwwtoyota.co.uk
    First seen
    2026-11-05 09:04 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 69.162.80.61.
    1. Phishing-host list fetched with the address
    2. Resolved to 69.162.80.61
    Brand
    Toyota
    Addresses
    69.162.80.61 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    69.162.80.59 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    Domain
    wwwtoyota.co.uk
    Registered
    2004-05-26 · Internet Domain Services BS Corp t/a Internet.bs
    MX
    Receives mail at mail.h-email.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  2. toyotaconnect.com NL · AS60781 · LEASEWEB-NL-AMS-01 LeaseWeb…2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 14 y ago
    DetailsHide
    Hostname
    toyotaconnect.com
    First seen
    2026-11-05 09:01 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 212.7.194.71.
    1. Phishing-host list fetched with the address
    2. Resolved to 212.7.194.71
    Brand
    Toyota
    Addresses
    212.7.194.71 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
    69.162.80.58 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    Domain
    toyotaconnect.com
    Registered
    2012-08-05 · Media Elite Holdings Limited, S.A.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  3. tap-toyota.com.ph NL · AS43350 · NFORCE NForce Entertainment…2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tap-toyota.com.ph
    First seen
    2026-11-05 09:01 UTC
    First published
    2026-10-28 06:38 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 212.92.105.199.
    1. Phishing-host list fetched with the address
    2. Resolved to 212.92.105.199
    Brand
    Toyota
    Addresses
    212.92.105.199 · Netherlands · AS43350 NFORCE NForce Entertainment B.V.
    212.92.105.201 · Netherlands · AS43350 NFORCE NForce Entertainment B.V.
    Domain
    tap-toyota.com.ph
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  4. www.toyota308.digital BR · AS262287 · Latitude.sh LTDA
    Spamhaus DROPAddress listed by Spamhaus DROPMX presentMX on Spamhaus DROPSPF ~allSPF on Spamhaus DROPDMARC policy noneRegistered 2 mo ago
    DetailsHide
    Hostname
    www.toyota308.digital
    First seen
    2026-11-05 00:15 UTC
    First published
    2026-11-05 00:41 UTC
    DNS
    Resolves · checked 2026-11-05 00:49 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 95.169.180.54.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.169.180.54
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-04 23:15 UTC to 2027-02-02 23:15 UTC
    Logged 2026-11-05 00:14 UTC in Google ParcelYard2027h1, entry 616,902,694
    SHA-256 a60233c9820a5f826939f0e677bab09c4bcaa18c80aa76a02d71275e257d4be8
    Public key SHA-256 d6d0f879306deedad9a0925601ac2823a66637f85e2960db62a8bf64ca285d0e
    Brand
    Toyota
    Addresses
    95.169.180.54 · Brazil · AS262287 AS262287 - Latitude.sh LTDA
    Domain
    toyota308.digital
    Registered
    2026-08-25 · NameSilo, LLC
    MX
    Receives mail at toyota308.digital
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    MX listing
    Mail server toyota308.digital at 95.169.180.54 is on Spamhaus DROP: hijacked or criminal networks.
    SPF listing
    The SPF record lists 95.169.180.54 as a sender. It is on Spamhaus DROP: hijacked or criminal networks.
    Checked
    2026-11-05 02:33 UTC

    Suggest a correction

  5. toyota308.digital BR · AS262287 · Latitude.sh LTDA
    Spamhaus DROPAddress listed by Spamhaus DROPMX presentMX on Spamhaus DROPSPF ~allSPF on Spamhaus DROPDMARC policy noneRegistered 2 mo ago
    DetailsHide
    Hostname
    toyota308.digital
    First seen
    2026-11-05 00:15 UTC
    First published
    2026-11-05 00:41 UTC
    DNS
    Resolves · checked 2026-11-05 00:49 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 95.169.180.54.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.169.180.54
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-04 23:15 UTC to 2027-02-02 23:15 UTC
    Logged 2026-11-05 00:14 UTC in Google ParcelYard2027h1, entry 616,902,694
    SHA-256 a60233c9820a5f826939f0e677bab09c4bcaa18c80aa76a02d71275e257d4be8
    Public key SHA-256 d6d0f879306deedad9a0925601ac2823a66637f85e2960db62a8bf64ca285d0e
    Brand
    Toyota
    Addresses
    95.169.180.54 · Brazil · AS262287 AS262287 - Latitude.sh LTDA
    Domain
    toyota308.digital
    Registered
    2026-08-25 · NameSilo, LLC
    MX
    Receives mail at toyota308.digital
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    MX listing
    Mail server toyota308.digital at 95.169.180.54 is on Spamhaus DROP: hijacked or criminal networks.
    SPF listing
    The SPF record lists 95.169.180.54 as a sender. It is on Spamhaus DROP: hijacked or criminal networks.
    Checked
    2026-11-05 02:33 UTC

    Suggest a correction

  6. toyota-boshoku.eu CA · AS16686 · easyDNS Technologies, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missing
    DetailsHide
    Hostname
    toyota-boshoku.eu
    First seen
    2026-11-04 21:25 UTC
    First published
    2026-11-04 22:19 UTC
    DNS
    Resolves · checked 2026-11-04 22:27 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 64.68.200.44.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 64.68.200.44
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-04 20:12 UTC to 2027-02-02 21:12 UTC
    Logged 2026-11-04 21:12 UTC in IPng Networks Halloumi2027h1, entry 365,757,677
    SHA-256 32012ea398ccda794b71ade594fc7c489deba3af8f033e0fad3088ee4655e996
    Public key SHA-256 ca2942b1dccd1121199d0cb18b0ea4ed83ffa49d69c38bb27d881cdf1fb5edbb
    Brand
    Toyota
    Addresses
    64.68.200.44 · Canada · AS16686 EDNS - easyDNS Technologies, Inc.
    Domain
    toyota-boshoku.eu
    MX
    Receives mail at gw3018.fortimail.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 21:28 UTC

    Suggest a correction

  7. www.toyota-viljuskari.rs SE · AS39570 · LOOPIA Loopia AB
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.toyota-viljuskari.rs
    First seen
    2026-11-04 03:16 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 93.188.2.52.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 93.188.2.52
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-04 02:12 UTC to 2027-02-02 02:12 UTC
    Logged 2026-11-04 03:10 UTC in Let's Encrypt Sycamore2027h1, entry 933,559,717
    SHA-256 6eebbd7924f36230eec271cbe804abd2f34a83dbe4e1fb5fd33aa377ae950981
    Public key SHA-256 e2d99bde386e9a2e3f7faae5cefee862f13134ff0fb05c85cb0c9b3ba1a72954
    Brand
    Toyota
    Addresses
    93.188.2.52 · Sweden · AS39570 LOOPIA Loopia AB
    Domain
    toyota-viljuskari.rs
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:12 UTC

    Suggest a correction

  8. toyota-viljuskari.rs SE · AS39570 · LOOPIA Loopia AB
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    toyota-viljuskari.rs
    First seen
    2026-11-04 02:52 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 93.188.2.52.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 93.188.2.52
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-04 01:50 UTC to 2027-02-02 01:50 UTC
    Logged 2026-11-04 02:48 UTC in Google ParcelYard2027h1, entry 601,022,630
    SHA-256 039e1028a2ecf38381e79a239a399b766a9af5015f98c6e473826a151f93c4f6
    Public key SHA-256 57cd2c416b1216858a6f65f3fb095c7ee8600fe2bd76ba1ccb1cdccf1453aa9e
    Brand
    Toyota
    Addresses
    93.188.2.52 · Sweden · AS39570 LOOPIA Loopia AB
    Domain
    toyota-viljuskari.rs
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:12 UTC

    Suggest a correction

  9. www.toyota-weinandi.de DE · AS3320 · DTAG Deutsche Telekom AG
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.toyota-weinandi.de
    First seen
    2026-11-03 05:31 UTC
    First published
    2026-11-03 06:36 UTC
    DNS
    Resolves · checked 2026-11-05 06:39 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 80.150.6.143.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 80.150.6.143
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-03 04:27 UTC to 2027-02-01 04:27 UTC
    Logged 2026-11-03 05:25 UTC in IPng Networks Halloumi2027h1, entry 344,835,876
    SHA-256 84cdde1b2a9acf5cd958317fe16409282df7c76f08152353e33540a4316df3b2
    Public key SHA-256 0fe34b4aa3884d47b1f92dcec7d0e13e8729f6dae9646cba17fb5ac017de10d5
    Brand
    Toyota
    Addresses
    80.150.6.143 · Germany · AS3320 DTAG Deutsche Telekom AG
    Domain
    toyota-weinandi.de
    MX
    Receives mail at smtp-01.tld.t-online.de, smtp-02.tld.t-online.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  10. toyota-weinandi.de DE · AS3320 · DTAG Deutsche Telekom AG
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    toyota-weinandi.de
    First seen
    2026-11-03 05:31 UTC
    First published
    2026-11-03 06:36 UTC
    DNS
    Resolves · checked 2026-11-05 06:39 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 80.150.6.143.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 80.150.6.143
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-03 04:27 UTC to 2027-02-01 04:27 UTC
    Logged 2026-11-03 05:25 UTC in IPng Networks Halloumi2027h1, entry 344,835,876
    SHA-256 84cdde1b2a9acf5cd958317fe16409282df7c76f08152353e33540a4316df3b2
    Public key SHA-256 0fe34b4aa3884d47b1f92dcec7d0e13e8729f6dae9646cba17fb5ac017de10d5
    Brand
    Toyota
    Addresses
    80.150.6.143 · Germany · AS3320 DTAG Deutsche Telekom AG
    Domain
    toyota-weinandi.de
    MX
    Receives mail at smtp-01.tld.t-online.de, smtp-02.tld.t-online.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  11. www.toyota-kalla.de DE · AS3320 · DTAG Deutsche Telekom AG
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.toyota-kalla.de
    First seen
    2026-11-03 04:38 UTC
    First published
    2026-11-03 04:56 UTC
    DNS
    Resolves · checked 2026-11-05 05:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 80.150.6.143.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 80.150.6.143
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-03 03:33 UTC to 2027-02-01 03:33 UTC
    Logged 2026-11-03 04:32 UTC in Google ParcelYard2027h1, entry 583,776,694
    SHA-256 ae130e193e8f68d135eebdf460c7487092200276cfd4e58719e67f03712b1ba5
    Public key SHA-256 35211403e9dcf4a40ac1850b5cf52a286732b7e260bc4725cd6ba4abb4bec539
    Brand
    Toyota
    Addresses
    80.150.6.143 · Germany · AS3320 DTAG Deutsche Telekom AG
    Domain
    toyota-kalla.de
    MX
    Receives mail at smtp-01.tld.t-online.de, smtp-02.tld.t-online.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 05:03 UTC

    Suggest a correction

  12. toyota-kalla.de DE · AS3320 · DTAG Deutsche Telekom AG
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    toyota-kalla.de
    First seen
    2026-11-03 04:38 UTC
    First published
    2026-11-03 04:56 UTC
    DNS
    Resolves · checked 2026-11-05 05:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 80.150.6.143.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 80.150.6.143
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-03 03:33 UTC to 2027-02-01 03:33 UTC
    Logged 2026-11-03 04:32 UTC in Google ParcelYard2027h1, entry 583,776,694
    SHA-256 ae130e193e8f68d135eebdf460c7487092200276cfd4e58719e67f03712b1ba5
    Public key SHA-256 35211403e9dcf4a40ac1850b5cf52a286732b7e260bc4725cd6ba4abb4bec539
    Brand
    Toyota
    Addresses
    80.150.6.143 · Germany · AS3320 DTAG Deutsche Telekom AG
    Domain
    toyota-kalla.de
    MX
    Receives mail at smtp-01.tld.t-online.de, smtp-02.tld.t-online.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 05:03 UTC

    Suggest a correction

  13. www.toyota-aygo-motorschaden.de DE · AS3320 · DTAG Deutsche Telekom AG
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.toyota-aygo-motorschaden.de
    First seen
    2026-11-03 04:33 UTC
    First published
    2026-11-03 04:56 UTC
    DNS
    Resolves · checked 2026-11-05 05:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 80.150.6.143.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 80.150.6.143
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-03 03:29 UTC to 2027-02-01 03:29 UTC
    Logged 2026-11-03 04:28 UTC in Let's Encrypt Willow2027h1, entry 907,160,975
    SHA-256 5fccb18172a5810a7206ac9afea839a678ecf644502da929d655db02e7648b93
    Public key SHA-256 6919ba91b84fa7f0bf7ed47f2472907495a239995b775ec1cad9bd324633cb42
    Brand
    Toyota
    Addresses
    80.150.6.143 · Germany · AS3320 DTAG Deutsche Telekom AG
    Domain
    toyota-aygo-motorschaden.de
    MX
    Receives mail at smtp-01.tld.t-online.de, smtp-02.tld.t-online.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 05:03 UTC

    Suggest a correction

  14. toyota-aygo-motorschaden.de DE · AS3320 · DTAG Deutsche Telekom AG
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    toyota-aygo-motorschaden.de
    First seen
    2026-11-03 04:33 UTC
    First published
    2026-11-03 04:56 UTC
    DNS
    Resolves · checked 2026-11-05 05:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 80.150.6.143.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 80.150.6.143
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-03 03:29 UTC to 2027-02-01 03:29 UTC
    Logged 2026-11-03 04:28 UTC in Let's Encrypt Willow2027h1, entry 907,160,975
    SHA-256 5fccb18172a5810a7206ac9afea839a678ecf644502da929d655db02e7648b93
    Public key SHA-256 6919ba91b84fa7f0bf7ed47f2472907495a239995b775ec1cad9bd324633cb42
    Brand
    Toyota
    Addresses
    80.150.6.143 · Germany · AS3320 DTAG Deutsche Telekom AG
    Domain
    toyota-aygo-motorschaden.de
    MX
    Receives mail at smtp-01.tld.t-online.de, smtp-02.tld.t-online.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 05:03 UTC

    Suggest a correction

  15. www.toyota-bacninh3s.com VN · AS135905 · VIETNAM POSTS AND TELECOMMU…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 y ago
    DetailsHide
    Hostname
    www.toyota-bacninh3s.com
    First seen
    2026-11-03 04:17 UTC
    First published
    2026-11-03 04:56 UTC
    DNS
    Resolves · checked 2026-11-05 05:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 103.57.221.26.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 103.57.221.26
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-03 03:14 UTC to 2027-02-01 03:13 UTC
    Logged 2026-11-03 04:12 UTC in IPng Networks Gouda2027h1, entry 298,934,418
    SHA-256 3be7cfedbd39e37b779b77b206cf73d8d9f4125c522acccc23f3c425cfc45397
    Public key SHA-256 d335800c21af280b09cb07ca4f1476704ac8efb1954f04f0f2e98a7305312440
    Brand
    Toyota
    Addresses
    103.57.221.26 · Vietnam · AS135905 VNPT-AS-VN - VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
    Domain
    toyota-bacninh3s.com
    Registered
    2019-11-06 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 05:03 UTC

    Suggest a correction

  16. toyota-bacninh3s.com VN · AS135905 · VIETNAM POSTS AND TELECOMMU…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 y ago
    DetailsHide
    Hostname
    toyota-bacninh3s.com
    First seen
    2026-11-03 04:17 UTC
    First published
    2026-11-03 04:56 UTC
    DNS
    Resolves · checked 2026-11-05 05:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 103.57.221.26.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 103.57.221.26
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-03 03:14 UTC to 2027-02-01 03:13 UTC
    Logged 2026-11-03 04:12 UTC in IPng Networks Gouda2027h1, entry 298,934,418
    SHA-256 3be7cfedbd39e37b779b77b206cf73d8d9f4125c522acccc23f3c425cfc45397
    Public key SHA-256 d335800c21af280b09cb07ca4f1476704ac8efb1954f04f0f2e98a7305312440
    Brand
    Toyota
    Addresses
    103.57.221.26 · Vietnam · AS135905 VNPT-AS-VN - VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
    Domain
    toyota-bacninh3s.com
    Registered
    2019-11-06 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 05:03 UTC

    Suggest a correction

  17. www.toyota-bz3x.pro RU · AS9123 · TimeWeb-AS JSC "TIMEWEB"
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 37 d ago
    DetailsHide
    Hostname
    www.toyota-bz3x.pro
    First seen
    2026-11-02 11:01 UTC
    First published
    2026-11-02 11:09 UTC
    DNS
    Resolves · checked 2026-11-04 11:24 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 92.53.96.201.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 92.53.96.201
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-02 09:58 UTC to 2027-01-31 09:58 UTC
    Logged 2026-11-02 10:56 UTC in Google ParcelYard2027h1, entry 570,620,257
    SHA-256 de8e3c0f2882adf8cef422255047de4ff93e2b521c224af4affc5bfe6fb27b7c
    Public key SHA-256 2933fe2fd1211bc0a05cc12f382289ed9fa3285429dbdfb536d476e11ced49e2
    Brand
    Toyota
    Addresses
    92.53.96.201 · Russia · AS9123 TimeWeb-AS JSC "TIMEWEB"
    Domain
    toyota-bz3x.pro
    Registered
    2026-09-29 · Registrar of Domain Names REG.RU LLC
    MX
    Receives mail at mx1.timeweb.ru, mx2.timeweb.ru
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 02:32 UTC

    Suggest a correction

  18. toyota-bz3x.pro RU · AS9123 · TimeWeb-AS JSC "TIMEWEB"
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 37 d ago
    DetailsHide
    Hostname
    toyota-bz3x.pro
    First seen
    2026-11-02 11:01 UTC
    First published
    2026-11-02 11:09 UTC
    DNS
    Resolves · checked 2026-11-04 11:24 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 92.53.96.201.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 92.53.96.201
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-02 09:58 UTC to 2027-01-31 09:58 UTC
    Logged 2026-11-02 10:56 UTC in Google ParcelYard2027h1, entry 570,620,257
    SHA-256 de8e3c0f2882adf8cef422255047de4ff93e2b521c224af4affc5bfe6fb27b7c
    Public key SHA-256 2933fe2fd1211bc0a05cc12f382289ed9fa3285429dbdfb536d476e11ced49e2
    Brand
    Toyota
    Addresses
    92.53.96.201 · Russia · AS9123 TimeWeb-AS JSC "TIMEWEB"
    Domain
    toyota-bz3x.pro
    Registered
    2026-09-29 · Registrar of Domain Names REG.RU LLC
    MX
    Receives mail at mx1.timeweb.ru, mx2.timeweb.ru
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 02:32 UTC

    Suggest a correction

  19. toyota-wroclaw.pl PL · AS60713 · TARRCI-AS EXEA Sp. z o.o.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC rejectRegistered 17 y ago
    DetailsHide
    Hostname
    toyota-wroclaw.pl
    First seen
    2026-10-31 19:21 UTC
    First published
    2026-10-31 20:09 UTC
    DNS
    Resolves · checked 2026-11-04 20:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 193.239.44.104.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 193.239.44.104
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-31 18:16 UTC to 2027-01-29 18:16 UTC
    Logged 2026-10-31 19:15 UTC in Google PlumbersArms2027h1, entry 544,354,475
    SHA-256 b62ef986412f5432a62ee45e5e7575942747042fac6c2c3f82ea30e18971e285
    Public key SHA-256 e0beb6da8418aafef9ce160b68e4ec6dcfc1c993c506690c193a8f4ad5f5c73a
    Brand
    Toyota
    Addresses
    193.239.44.104 · Poland · AS60713 TARRCI-AS EXEA Sp. z o.o.
    Domain
    toyota-wroclaw.pl
    Registered
    2009-12-16 · Domena.pl sp. z o.o.
    MX
    Receives mail at mx01.agnat.pl
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-04 20:39 UTC

    Suggest a correction

  20. toyota-wroclaw-pl.beep.pl PL · AS60713 · TARRCI-AS EXEA Sp. z o.o.
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    toyota-wroclaw-pl.beep.pl
    First seen
    2026-10-31 19:16 UTC
    First published
    2026-10-31 20:09 UTC
    DNS
    Resolves · checked 2026-11-04 20:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 193.239.44.104.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 193.239.44.104
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-31 18:13 UTC to 2027-01-29 18:13 UTC
    Logged 2026-10-31 19:11 UTC in DigiCert Wyvern2027h1, entry 368,689,778
    SHA-256 0daf1ae029bbc729edf5cb389ce0a44fe60e6ef4ba6c73c35a51c33e32598dc8
    Public key SHA-256 b1b646c492e3b0ca7a136bcddebf289240b13e0bb2843ea58cc8aad8d0d71c0e
    Brand
    Toyota
    Addresses
    193.239.44.104 · Poland · AS60713 TARRCI-AS EXEA Sp. z o.o.

    Suggest a correction

  21. www.toyota-fs.ie FR · AS24935 · ATE-AS Eurofiber France SAS
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.toyota-fs.ie
    First seen
    2026-10-30 22:57 UTC
    First published
    2026-10-30 23:53 UTC
    DNS
    Resolves · checked 2026-11-04 23:58 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.26.106.234.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.26.106.234
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-30 21:54 UTC to 2027-01-28 21:54 UTC
    Logged 2026-10-30 22:52 UTC in Google ParcelYard2027h1, entry 529,975,140
    SHA-256 0b1c82e1c4320027653ffc2a1484bcc3841e7724cc024dc258aca0c9c918b9bd
    Public key SHA-256 c438d451669fa1cb857ce0b72bd81cc95f623188dc267e982fbdb74b897b12f0
    Brand
    Toyota
    Addresses
    185.26.106.234 · France · AS24935 ATE-AS Eurofiber France SAS
    Domain
    toyota-fs.ie
    MX
    Receives mail at mx1.netim.net, mx2.netim.net
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  22. toyota303.org US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    toyota303.org
    First seen
    2026-10-30 21:56 UTC
    First published
    2026-10-30 22:50 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 22:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-10-30 00:00 UTC to 2027-01-21 17:55 UTC
    Logged 2026-10-30 21:52 UTC in DigiCert Sphinx2027h1, entry 319,329,898
    SHA-256 bd6bc14b395f919ee1e50a6022902ea1f824a48cb2402501f948291ad55e32d3
    Public key SHA-256 159789a6f791b815d079705c65e67606bc7f538feadf29a57a6c3a0b5ae1574b
    PhishDestroy
    Brand
    Toyota
    Addresses
    104.21.78.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:d803
    2606:4700:3035::6815:4e2a
    Cloudflare
    Cloudflare (104.21.78.42, 172.67.216.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    toyota303.org
    Registered
    2025-12-02 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  23. www.toyota-pecas.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    www.toyota-pecas.com
    First seen
    2026-10-30 19:06 UTC
    First published
    2026-10-30 19:10 UTC
    DNS
    Resolves · checked 2026-11-04 19:15 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-30 18:06 UTC to 2027-01-28 18:06 UTC
    Logged 2026-10-30 19:04 UTC in Let's Encrypt Willow2027h1, entry 853,661,300
    SHA-256 0f0b5ca5127c7779132eaef68c4828738a47cf917e13db148c59cf364a382738
    Public key SHA-256 101a6505d96d89a83ea198acf4a76cd30e244331c4868e3d2d1f8f3a37212cfc
    Brand
    Toyota
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    toyota-pecas.com
    Registered
    2026-02-23 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:39 UTC

    Suggest a correction

  24. toyota-pecas.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    toyota-pecas.com
    First seen
    2026-10-30 19:05 UTC
    First published
    2026-10-30 19:10 UTC
    DNS
    Resolves · checked 2026-11-04 19:15 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-30 18:06 UTC to 2027-01-28 18:06 UTC
    Logged 2026-10-30 19:04 UTC in Let's Encrypt Willow2027h1, entry 853,661,300
    SHA-256 0f0b5ca5127c7779132eaef68c4828738a47cf917e13db148c59cf364a382738
    Public key SHA-256 101a6505d96d89a83ea198acf4a76cd30e244331c4868e3d2d1f8f3a37212cfc
    Brand
    Toyota
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    toyota-pecas.com
    Registered
    2026-02-23 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:39 UTC

    Suggest a correction

  25. toyota303.net GB · AS212238 · CDNEXT Datacamp Limited3 addresses
    ReportedPhishing hostReported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    toyota303.net
    First seen
    2026-10-30 13:16 UTC
    First published
    2026-10-30 13:53 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 14:01 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.111.111.155.
    1. Phishing-host list fetched with the address
    2. Resolved to 185.111.111.155
    3. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-30 12:15 UTC to 2027-01-28 12:15 UTC
    Logged 2026-10-30 13:13 UTC in Let's Encrypt Willow2027h1, entry 849,771,291
    SHA-256 9dab48e7d67fbae5d7e2ba13e82fddc8a05b62aad18502a2a5da65c895695f71
    Public key SHA-256 03f5fe4021d9dc06ada10c63c17b04a1bcdcbf38f1135294d2a4ee30316667d4
    PhishDestroy
    Brand
    Toyota
    Addresses
    185.111.111.155 · United Kingdom · AS212238 CDNEXT Datacamp Limited
    185.111.111.156 · United Kingdom · AS212238 CDNEXT Datacamp Limited
    185.111.111.157 · United Kingdom · AS212238 CDNEXT Datacamp Limited
    Domain
    toyota303.net
    Registered
    2025-12-02 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  26. www.toyota303.net GB · AS60068 · CDN77 Datacamp Limited2 addresses
    ReportedUnder toyota303.net, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    www.toyota303.net
    First seen
    2026-10-30 13:16 UTC
    First published
    2026-10-30 13:53 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 14:01 UTC
    Reported
    PhishDestroy, listing toyota303.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-30 12:15 UTC to 2027-01-28 12:15 UTC
    Logged 2026-10-30 13:13 UTC in Let's Encrypt Sycamore2027h1, entry 856,114,686
    SHA-256 4556d40617faeb970194fa4a6dd648ab8dd0e4c1be761225c5bfdcbd3bbd9359
    Public key SHA-256 4899cc11ada4c698a17acc15596efbaa34f5c55b82be67b03c87d130084d8af9
    PhishDestroy
    Brand
    Toyota
    Addresses
    37.19.207.37 · United Kingdom · AS60068 CDN77 Datacamp Limited
    2a02:6ea0:e237::1503:1
    Domain
    toyota303.net
    Registered
    2025-12-02 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  27. www.toyota-td.co.jp JP · AS7506 · GMO Internet, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.toyota-td.co.jp
    First seen
    2026-10-30 13:06 UTC
    First published
    2026-10-30 13:53 UTC
    DNS
    Resolves · checked 2026-11-04 14:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 118.27.125.210.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 118.27.125.210
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-30 12:05 UTC to 2027-01-28 12:05 UTC
    Logged 2026-10-30 13:03 UTC in Google PlumbersArms2027h1, entry 523,502,138
    SHA-256 2fe9e3274e2df679071901e7df0338a191208f04b5effd33d1328e8e5272a229
    Public key SHA-256 7c4c24be1e63fd7dec5cbe5796316336433742f03032c41475fff95f45039360
    Brand
    Toyota
    Addresses
    118.27.125.210 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Domain
    toyota-td.co.jp
    MX
    Receives mail at mx01.lolipop.jp
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  28. toyota-td.co.jp JP · AS7506 · GMO Internet, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    toyota-td.co.jp
    First seen
    2026-10-30 13:06 UTC
    First published
    2026-10-30 13:53 UTC
    DNS
    Resolves · checked 2026-11-04 14:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 118.27.125.210.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 118.27.125.210
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-30 12:05 UTC to 2027-01-28 12:05 UTC
    Logged 2026-10-30 13:03 UTC in Google PlumbersArms2027h1, entry 523,502,138
    SHA-256 2fe9e3274e2df679071901e7df0338a191208f04b5effd33d1328e8e5272a229
    Public key SHA-256 7c4c24be1e63fd7dec5cbe5796316336433742f03032c41475fff95f45039360
    Brand
    Toyota
    Addresses
    118.27.125.210 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Domain
    toyota-td.co.jp
    MX
    Receives mail at mx01.lolipop.jp
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  29. www.toyota-shishimai.club JP · AS7506 · GMO Internet, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 2 y ago
    DetailsHide
    Hostname
    www.toyota-shishimai.club
    First seen
    2026-10-30 11:22 UTC
    First published
    2026-10-30 13:53 UTC
    DNS
    Resolves · checked 2026-11-04 14:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 118.27.125.216.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 118.27.125.216
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-30 10:20 UTC to 2027-01-28 10:20 UTC
    Logged 2026-10-30 11:18 UTC in Geomys Tuscolo2027h1, entry 406,767,280
    SHA-256 1ffd7cd23bc2c1f4f99edba8999044b3c3af4351c87e2ade051e3f642d44df3c
    Public key SHA-256 0878a9bc3ad87bb2532b8e35679341b68cdd98ee58f73cf0a1d75a898e0acac8
    Brand
    Toyota
    Addresses
    118.27.125.216 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Domain
    toyota-shishimai.club
    Registered
    2024-08-19 · GMO Internet, Inc. d/b/a Onamae.com
    MX
    Receives mail at mx01.lolipop.jp
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  30. toyota-shishimai.club JP · AS7506 · GMO Internet, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 2 y ago
    DetailsHide
    Hostname
    toyota-shishimai.club
    First seen
    2026-10-30 11:22 UTC
    First published
    2026-10-30 13:53 UTC
    DNS
    Resolves · checked 2026-11-04 14:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 118.27.125.216.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 118.27.125.216
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-30 10:20 UTC to 2027-01-28 10:20 UTC
    Logged 2026-10-30 11:18 UTC in Geomys Tuscolo2027h1, entry 406,767,280
    SHA-256 1ffd7cd23bc2c1f4f99edba8999044b3c3af4351c87e2ade051e3f642d44df3c
    Public key SHA-256 0878a9bc3ad87bb2532b8e35679341b68cdd98ee58f73cf0a1d75a898e0acac8
    Brand
    Toyota
    Addresses
    118.27.125.216 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Domain
    toyota-shishimai.club
    Registered
    2024-08-19 · GMO Internet, Inc. d/b/a Onamae.com
    MX
    Receives mail at mx01.lolipop.jp
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  31. www.xn--toyota-stfold-follo-17b.no NO · AS12996 · DOMENESHOP Domeneshop AS
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 12 y ago
    DetailsHide
    Hostname
    www.xn--toyota-stfold-follo-17b.no
    First seen
    2026-10-29 02:42 UTC
    First published
    2026-10-29 03:36 UTC
    DNS
    Resolves · checked 2026-11-05 03:42 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 194.63.248.52.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 194.63.248.52
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-29 01:37 UTC to 2027-01-27 01:37 UTC
    Logged 2026-10-29 02:35 UTC in IPng Networks Halloumi2027h1, entry 295,838,289
    SHA-256 156fdb91c75d391372d9289d8523d7aaaa885cce2f63b8afa46b21588dbf3bf9
    Public key SHA-256 e462231f342d37595ea7edbc33759b059b68ec39f9ac1c327b92cecff8e591e9
    Brand
    Toyota
    Addresses
    194.63.248.52 · Norway · AS12996 DOMENESHOP Domeneshop AS
    Domain
    xn--toyota-stfold-follo-17b.no
    Registered
    2015-02-26 · Domeneshop AS
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:44 UTC

    Suggest a correction

  32. www.toyota303.site US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareUnder toyota303.site, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    www.toyota303.site
    First seen
    2026-10-29 00:11 UTC
    First published
    2026-10-29 00:30 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:41 UTC
    Reported
    PhishDestroy, listing toyota303.site and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-28 23:07 UTC to 2027-01-26 23:07 UTC
    Logged 2026-10-29 00:06 UTC in Let's Encrypt Willow2027h1, entry 823,349,092
    SHA-256 50c2e20e387e8746dc0e3ab98883d00fb02823f3bc0a2b2050491bd2eadfd7c7
    Public key SHA-256 30f990e797b10a0dcd1f4c3e825da34cea2f67f9b9890ad39b919a99d34c4c8b
    PhishDestroy
    Brand
    Toyota
    Addresses
    104.21.87.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:5713
    2606:4700:3035::ac43:a8a8
    Cloudflare
    Cloudflare (104.21.87.19, 172.67.168.168): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    toyota303.site
    Registered
    2026-01-08 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

  33. www.toyota-life.cz CZ · AS15685 · CASABLANCA-AS CASABLANCA IN…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF all omittedDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    www.toyota-life.cz
    First seen
    2026-10-28 23:16 UTC
    First published
    2026-10-28 23:28 UTC
    DNS
    Resolves · checked 2026-11-04 23:41 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.78.104.3.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.78.104.3
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-28 22:14 UTC to 2027-01-26 22:14 UTC
    Logged 2026-10-28 23:12 UTC in Google PlumbersArms2027h1, entry 497,034,443
    SHA-256 55a49436fc4612dbf766d38c1769f927da0fcf09cf8dd5805ffbcf525bcab183
    Public key SHA-256 48c50972ad3c33caf58bffb797c0e971a19bff924f9ed75224ec224fd7c09431
    Brand
    Toyota
    Addresses
    77.78.104.3 · Czechia · AS15685 CASABLANCA-AS CASABLANCA INT a.s.
    Domain
    toyota-life.cz
    Registered
    2020-06-22 · Gransy s.r.o.
    MX
    Receives mail at mail.toyota-life.cz
    SPF
    SPF record without an "all" mechanism
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  34. toyota-life.cz CZ · AS15685 · CASABLANCA-AS CASABLANCA IN…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF all omittedDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    toyota-life.cz
    First seen
    2026-10-28 23:16 UTC
    First published
    2026-10-28 23:28 UTC
    DNS
    Resolves · checked 2026-11-04 23:41 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.78.104.3.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.78.104.3
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-28 22:14 UTC to 2027-01-26 22:14 UTC
    Logged 2026-10-28 23:12 UTC in Google PlumbersArms2027h1, entry 497,034,443
    SHA-256 55a49436fc4612dbf766d38c1769f927da0fcf09cf8dd5805ffbcf525bcab183
    Public key SHA-256 48c50972ad3c33caf58bffb797c0e971a19bff924f9ed75224ec224fd7c09431
    Brand
    Toyota
    Addresses
    77.78.104.3 · Czechia · AS15685 CASABLANCA-AS CASABLANCA INT a.s.
    Domain
    toyota-life.cz
    Registered
    2020-06-22 · Gransy s.r.o.
    MX
    Receives mail at mail.toyota-life.cz
    SPF
    SPF record without an "all" mechanism
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  35. newsletter.toyota-classic-parts.de SE · AS1299 · TWELVE99 Arelion Sweden AB
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC reject
    DetailsHide
    Hostname
    newsletter.toyota-classic-parts.de
    First seen
    2026-10-28 14:52 UTC
    First published
    2026-10-28 15:12 UTC
    DNS
    Resolves · checked 2026-11-04 15:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.154.150.15.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.154.150.15
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-28 13:48 UTC to 2027-01-26 13:48 UTC
    Logged 2026-10-28 14:46 UTC in DigiCert Sphinx2027h1, entry 295,574,712
    SHA-256 479377e8fd2bf1acd5ea1568a12c5145b338a1962d98852eefe3ce83d77c962e
    Public key SHA-256 00097cc9e4304f25d600cf2cd0de86d9752f3ab02b76ac7202821670cbef6372
    Brand
    Toyota
    Addresses
    185.154.150.15 · Sweden · AS1299 TWELVE99 Arelion Sweden AB
    Domain
    toyota-classic-parts.de
    MX
    Receives mail at smtpin.rzone.de
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  36. check-toyota.ru RU · AS8342 · RTCOMM-AS JSC RTComm.RU
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    check-toyota.ru
    First seen
    2026-10-28 08:05 UTC
    First published
    2026-10-28 08:43 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 217.107.219.102.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 217.107.219.102
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-28 07:05 UTC to 2027-01-26 07:05 UTC
    Logged 2026-10-28 08:03 UTC in IPng Networks Gouda2027h1, entry 245,947,895
    SHA-256 04f2e5fa11735f8203185b527e1e77a13eede935fa1f32782793aad3c9fa8050
    Public key SHA-256 d33320a41b1b63cfcda0d6eb73aad89e06c4f42a93024fa5139fa64f2b583de1
    Brand
    Toyota
    Addresses
    217.107.219.102 · Russia · AS8342 RTCOMM-AS JSC RTComm.RU
    Domain
    check-toyota.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  37. www.harga-toyota-makassar.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 11 y ago
    DetailsHide
    Hostname
    www.harga-toyota-makassar.com
    First seen
    2026-10-27 20:06 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-27 19:05 UTC to 2027-01-25 19:05 UTC
    Logged 2026-10-27 20:03 UTC in Google PlumbersArms2027h1, entry 477,541,985
    SHA-256 a15b6d6a01d841b37552bad8fb04f7dd5de4bf10d3b3209664774e31e2e41070
    Public key SHA-256 d1e4ea4e205fae987c83c12e0b2b0be30213ac7b8b4c2c73d4e2ee532c655617
    Brand
    Toyota
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    harga-toyota-makassar.com
    Registered
    2015-12-17 · Tucows Domains Inc.
    MX
    Receives mail at mx1.hostinger.co.id
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:34 UTC

    Suggest a correction

  38. harga-toyota-makassar.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 11 y ago
    DetailsHide
    Hostname
    harga-toyota-makassar.com
    First seen
    2026-10-27 20:06 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-27 19:05 UTC to 2027-01-25 19:05 UTC
    Logged 2026-10-27 20:03 UTC in Google PlumbersArms2027h1, entry 477,541,985
    SHA-256 a15b6d6a01d841b37552bad8fb04f7dd5de4bf10d3b3209664774e31e2e41070
    Public key SHA-256 d1e4ea4e205fae987c83c12e0b2b0be30213ac7b8b4c2c73d4e2ee532c655617
    Brand
    Toyota
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    harga-toyota-makassar.com
    Registered
    2015-12-17 · Tucows Domains Inc.
    MX
    Receives mail at mx1.hostinger.co.id
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:34 UTC

    Suggest a correction

  39. www.toyota-follo.no NO · AS12996 · DOMENESHOP Domeneshop AS
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC policy noneRegistered 11 y ago
    DetailsHide
    Hostname
    www.toyota-follo.no
    First seen
    2026-10-27 19:16 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 194.63.248.52.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 194.63.248.52
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-27 18:16 UTC to 2027-01-25 18:16 UTC
    Logged 2026-10-27 19:14 UTC in Google PlumbersArms2027h1, entry 476,952,407
    SHA-256 c9d4ab0850a00558d55711ce545ba0bebf50ceb416bd89ed5142ada275fd61ab
    Public key SHA-256 eddad267c04888a09dc756d94c81344b65a34043a8f96900642fa6d7a6219102
    Brand
    Toyota
    Addresses
    194.63.248.52 · Norway · AS12996 DOMENESHOP Domeneshop AS
    Domain
    toyota-follo.no
    Registered
    2015-07-01 · Domeneshop AS
    MX
    Receives mail at mailgw01.isphuset.no
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 08:33 UTC

    Suggest a correction

  40. www.toyota-ostfold-follo.no NO · AS12996 · DOMENESHOP Domeneshop AS
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 12 y ago
    DetailsHide
    Hostname
    www.toyota-ostfold-follo.no
    First seen
    2026-10-27 15:12 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 194.63.248.52.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 194.63.248.52
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-27 14:08 UTC to 2027-01-25 14:08 UTC
    Logged 2026-10-27 15:06 UTC in Google ParcelYard2027h1, entry 473,120,671
    SHA-256 52c8930b810f16095a40155e40ad595b395422aad085e41ccba707f8aca53e56
    Public key SHA-256 2afbde49a7022a6abdf2ce16a5844f7035ca9cfa3f756a06e13de03564eb8e51
    Brand
    Toyota
    Addresses
    194.63.248.52 · Norway · AS12996 DOMENESHOP Domeneshop AS
    Domain
    toyota-ostfold-follo.no
    Registered
    2015-02-26 · Domeneshop AS
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:32 UTC

    Suggest a correction

  41. www.toyota24.ru RU · AS49505 · SELECTEL JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.toyota24.ru
    First seen
    2026-10-27 10:47 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.246.224.242.
    1. Phishing-host list fetched with the address
    2. Resolved to 188.246.224.242
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 470,034,475
    SHA-256 7edc44fd24ba1035e0b6b03925cb0642b41eeec865ede66b67b211c6e1d05150
    Brand
    Toyota
    Addresses
    188.246.224.242 · Russia · AS49505 SELECTEL JSC Selectel
    Domain
    toyota24.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:30 UTC

    Suggest a correction

  42. toyota24.ru RU · AS49505 · SELECTEL JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    toyota24.ru
    First seen
    2026-10-27 10:47 UTC
    DNS
    Resolves · checked 2026-11-05 09:07 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.246.224.242.
    1. Phishing-host list fetched with the address
    2. Resolved to 188.246.224.242
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 470,034,475
    SHA-256 7edc44fd24ba1035e0b6b03925cb0642b41eeec865ede66b67b211c6e1d05150
    Brand
    Toyota
    Addresses
    188.246.224.242 · Russia · AS49505 SELECTEL JSC Selectel
    Domain
    toyota24.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:30 UTC

    Suggest a correction

  43. kuzov-toyota-pro.ru RU · AS8342 · RTCOMM-AS JSC RTComm.RU
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    kuzov-toyota-pro.ru
    First seen
    2026-10-27 08:27 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 217.107.219.102.
    1. Phishing-host list fetched with the address
    2. Resolved to 217.107.219.102
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 799,491,069
    SHA-256 3257b23cd6a9d369ad2d71c63e88ed7224695940eeff61cc2c9b1937afc98768
    Brand
    Toyota
    Addresses
    217.107.219.102 · Russia · AS8342 RTCOMM-AS JSC RTComm.RU
    Domain
    kuzov-toyota-pro.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:29 UTC

    Suggest a correction

  44. toyota-servis-expert.ru RU · AS8342 · RTCOMM-AS JSC RTComm.RU
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    toyota-servis-expert.ru
    First seen
    2026-10-27 08:07 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 217.107.219.102.
    1. Phishing-host list fetched with the address
    2. Resolved to 217.107.219.102
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 468,111,370
    SHA-256 a90dcc926a4bfce97d4d924594b0537092957b9873231b2d7d09cdfa82d70a74
    Brand
    Toyota
    Addresses
    217.107.219.102 · Russia · AS8342 RTCOMM-AS JSC RTComm.RU
    Domain
    toyota-servis-expert.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:29 UTC

    Suggest a correction

  45. toyota-cikupa.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 8 y ago
    DetailsHide
    Hostname
    toyota-cikupa.com
    First seen
    2026-10-26 09:47 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 15.235.219.232.
    1. Phishing-host list fetched with the address
    2. Resolved to 15.235.219.232
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Willow2027h1, entry 779,455,484
    SHA-256 1b19bd04126429e52d299bb24df30855a2759e07f57e5b0d93a27e2dde3c4870
    Brand
    Toyota
    Addresses
    15.235.219.232 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.235.219.232): a cloud provider. It rents servers and addresses to its customers.
    Domain
    toyota-cikupa.com
    Registered
    2019-03-19 · CV. Rumahweb Indonesia
    MX
    Receives mail at toyota-cikupa.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  46. toyota303.site US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    toyota303.site
    First seen
    2026-10-26 07:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. We matched its certificate name
    3. Latest DNS check
    Certificate
    Logged in Google Argon2027h1, entry 706,256,354
    SHA-256 9e77aa2bdd0730fa6022d1ceacae7858c8d3caebddd54d416b9a71597e0265e7
    PhishDestroy
    Brand
    Toyota
    Addresses
    104.21.87.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:5713
    2606:4700:3035::ac43:a8a8
    Cloudflare
    Cloudflare (104.21.87.19, 172.67.168.168): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    toyota303.site
    Registered
    2026-01-08 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Toyota when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Automotive

All brands →