Warner Bros. Discovery
Certificate findings for Warner Bros. Discovery
DomainSpoof matched these hostnames, from public certificate logs, to Warner Bros. Discovery's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 5 findings, grouped by hostname
- hbomax.com.ph US · AS23470 · ReliableSite.Net LLC2 addressesPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for hbomax.com.ph
- Hostname
- hbomax.com.ph
- First seen
- 2026-11-05 09:05 UTC
- First published
- 2026-10-28 07:41 UTC
- DNS
- Resolves · checked 2026-11-05 09:05 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.93.103.101.
- Phishing-host list fetched with the address
- Resolved to 172.93.103.101
- Brand
- Warner Bros. Discovery
- Addresses
- 172.93.103.101 · United States · AS23470 RELIABLESITE - ReliableSite.Net LLC212.92.105.195 · Netherlands · AS43350 NFORCE NForce Entertainment B.V.
- Domain
- hbomax.com.ph
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 11:04 UTC
- milano-cortina2026-hbomax.com FR · AS16276 · OVH OVH SASPhishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 10 mo ago
DetailsHide details for milano-cortina2026-hbomax.com
- Hostname
- milano-cortina2026-hbomax.com
- First seen
- 2026-11-03 02:06 UTC
- First published
- 2026-11-03 02:31 UTC
- DNS
- Resolves · checked 2026-11-05 02:45 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.91.236.255.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 51.91.236.255
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-03 01:06 UTC to 2027-02-01 01:06 UTCLogged 2026-11-03 02:04 UTC in Geomys Tuscolo2027h1, entry 452,789,414SHA-256 6a02c1c1aaf8a33b580d0710d08d9af8b15aa84cf02da57dfe68a25a691c6a4dPublic key SHA-256 2ba007c07a6dcbc9a5377d416c62c65a6c053be7bcccd68529080f44ea4e8f99
- Brand
- Warner Bros. Discovery
- Addresses
- 51.91.236.255 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
- OVH
- OVH (51.91.236.255): a cloud provider. It rents servers and addresses to its customers.
- Domain
- milano-cortina2026-hbomax.com
- Registered
- 2026-01-22 · OVH sas
- MX
- Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
- SPF
- SPF record with -all: other senders fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:41 UTC
- www.milano-cortina2026-hbomax.com FR · AS16276 · OVH OVH SASPhishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 10 mo ago
DetailsHide details for www.milano-cortina2026-hbomax.com
- Hostname
- www.milano-cortina2026-hbomax.com
- First seen
- 2026-11-03 00:57 UTC
- First published
- 2026-11-03 01:20 UTC
- DNS
- Resolves · checked 2026-11-05 01:34 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.91.236.255.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 51.91.236.255
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-02 23:57 UTC to 2027-01-31 23:57 UTCLogged 2026-11-03 00:55 UTC in Google ParcelYard2027h1, entry 581,358,108SHA-256 1a213701abb880752bf165fb45a60be6515f6931cd0680242700f547594895ffPublic key SHA-256 c303044e18f4a412c18f9a1d264ac9086f74ac3a43c70b0e7f8d2cf930065cf9
- Brand
- Warner Bros. Discovery
- Addresses
- 51.91.236.255 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
- OVH
- OVH (51.91.236.255): a cloud provider. It rents servers and addresses to its customers.
- Domain
- milano-cortina2026-hbomax.com
- Registered
- 2026-01-22 · OVH sas
- MX
- Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
- SPF
- SPF record with -all: other senders fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:41 UTC
- www.hbomax.ru RU · AS49505 · SELECTEL JSC SelectelPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for www.hbomax.ru
- Hostname
- www.hbomax.ru
- First seen
- 2026-10-27 14:11 UTC
- DNS
- Resolves · checked 2026-11-05 09:06 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.246.224.242.
- Phishing-host list fetched with the address
- Resolved to 188.246.224.242
- Latest DNS check
- Certificate
- Logged in IPng Networks Gouda2027h1, entry 238,535,948SHA-256 259a2b2a786d05d038b364ac389c164556a53e7c591b1b7c4d8f91980b03e729
- Brand
- Warner Bros. Discovery
- Addresses
- 188.246.224.242 · Russia · AS49505 SELECTEL JSC Selectel
- Domain
- hbomax.ru
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:31 UTC
- hbomax.ru RU · AS49505 · SELECTEL JSC SelectelPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for hbomax.ru
- Hostname
- hbomax.ru
- First seen
- 2026-10-27 14:11 UTC
- DNS
- Resolves · checked 2026-11-05 09:00 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.246.224.242.
- Phishing-host list fetched with the address
- Resolved to 188.246.224.242
- Latest DNS check
- Certificate
- Logged in IPng Networks Gouda2027h1, entry 238,535,948SHA-256 259a2b2a786d05d038b364ac389c164556a53e7c591b1b7c4d8f91980b03e729
- Brand
- Warner Bros. Discovery
- Addresses
- 188.246.224.242 · Russia · AS49505 SELECTEL JSC Selectel
- Domain
- hbomax.ru
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:31 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Warner Bros. Discovery when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

