Zelle
Certificate findings for Zelle
DomainSpoof matched these hostnames, from public certificate logs, to Zelle's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 14 findings, grouped by hostname
- zellepayonline.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 3 mo ago
DetailsHide details for zellepayonline.com
- Hostname
- zellepayonline.com
- First seen
- 2026-11-01 15:06 UTC
- First published
- 2026-11-01 15:18 UTC
- DNS
- Resolves · checked 2026-11-04 15:31 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 2.57.91.91
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-01 14:05 UTC to 2027-01-30 14:05 UTCLogged 2026-11-01 15:04 UTC in Geomys Tuscolo2027h1, entry 433,696,633SHA-256 3be571ed9dfbc7d990e2b18b82340e6a2e7ce4c4456f8a9f863cbb5c246e1832Public key SHA-256 6f98a18ef7a35114a70244669c049b25d0ed7f20659cbb1f3e4fa39be739aec1
- Brand
- Zelle
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- zellepayonline.com
- Registered
- 2026-08-10 · HOSTINGER operations, UAB
- MX
- Receives mail at mx1.hostinger.com, mx2.hostinger.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-04 16:53 UTC
- www.zellepayonline.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 3 mo ago
DetailsHide details for www.zellepayonline.com
- Hostname
- www.zellepayonline.com
- First seen
- 2026-11-01 15:06 UTC
- First published
- 2026-11-01 15:18 UTC
- DNS
- Resolves · checked 2026-11-04 15:31 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 2.57.91.91
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-01 14:05 UTC to 2027-01-30 14:05 UTCLogged 2026-11-01 15:04 UTC in Geomys Tuscolo2027h1, entry 433,696,633SHA-256 3be571ed9dfbc7d990e2b18b82340e6a2e7ce4c4456f8a9f863cbb5c246e1832Public key SHA-256 6f98a18ef7a35114a70244669c049b25d0ed7f20659cbb1f3e4fa39be739aec1
- Brand
- Zelle
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- zellepayonline.com
- Registered
- 2026-08-10 · HOSTINGER operations, UAB
- MX
- Receives mail at mx1.hostinger.com, mx2.hostinger.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-04 16:53 UTC
- www.service-zellepay.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
DetailsHide details for www.service-zellepay.com
- Hostname
- www.service-zellepay.com
- First seen
- 2026-11-01 07:06 UTC
- First published
- 2026-11-01 08:03 UTC
- DNS
- Resolves · checked 2026-11-05 08:08 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 192.142.10.5
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-01 06:03 UTC to 2027-01-30 06:03 UTCLogged 2026-11-01 07:02 UTC in Google ParcelYard2027h1, entry 551,775,558SHA-256 7c6e764a9d4dbe498ecc3fde6370e4d919bff2b4b5466966fdc21302cc2b212aPublic key SHA-256 5040c516dba7a389d01da515a21befa01b7c58ba56ce6f3968ea811a07707bb6
- Brand
- Zelle
- Addresses
- 192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- Domain
- service-zellepay.com
- Registered
- 2026-05-09 · Gname.com Pte. Ltd.
- MX
- Receives mail at service-zellepay.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 08:54 UTC
- webmail.service-zellepay.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
DetailsHide details for webmail.service-zellepay.com
- Hostname
- webmail.service-zellepay.com
- First seen
- 2026-11-01 07:06 UTC
- First published
- 2026-11-01 08:03 UTC
- DNS
- Resolves · checked 2026-11-05 08:08 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 192.142.10.5
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-01 06:03 UTC to 2027-01-30 06:03 UTCLogged 2026-11-01 07:02 UTC in Google ParcelYard2027h1, entry 551,775,558SHA-256 7c6e764a9d4dbe498ecc3fde6370e4d919bff2b4b5466966fdc21302cc2b212aPublic key SHA-256 5040c516dba7a389d01da515a21befa01b7c58ba56ce6f3968ea811a07707bb6
- Brand
- Zelle
- Addresses
- 192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- Domain
- service-zellepay.com
- Registered
- 2026-05-09 · Gname.com Pte. Ltd.
- MX
- Receives mail at service-zellepay.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 08:54 UTC
- webdisk.service-zellepay.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
DetailsHide details for webdisk.service-zellepay.com
- Hostname
- webdisk.service-zellepay.com
- First seen
- 2026-11-01 07:06 UTC
- First published
- 2026-11-01 08:03 UTC
- DNS
- Resolves · checked 2026-11-05 08:08 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 192.142.10.5
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-01 06:03 UTC to 2027-01-30 06:03 UTCLogged 2026-11-01 07:02 UTC in Google ParcelYard2027h1, entry 551,775,558SHA-256 7c6e764a9d4dbe498ecc3fde6370e4d919bff2b4b5466966fdc21302cc2b212aPublic key SHA-256 5040c516dba7a389d01da515a21befa01b7c58ba56ce6f3968ea811a07707bb6
- Brand
- Zelle
- Addresses
- 192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- Domain
- service-zellepay.com
- Registered
- 2026-05-09 · Gname.com Pte. Ltd.
- MX
- Receives mail at service-zellepay.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 08:54 UTC
- service-zellepay.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
DetailsHide details for service-zellepay.com
- Hostname
- service-zellepay.com
- First seen
- 2026-11-01 07:06 UTC
- First published
- 2026-11-01 08:03 UTC
- DNS
- Resolves · checked 2026-11-05 08:08 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 192.142.10.5
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-01 06:03 UTC to 2027-01-30 06:03 UTCLogged 2026-11-01 07:02 UTC in Google ParcelYard2027h1, entry 551,775,558SHA-256 7c6e764a9d4dbe498ecc3fde6370e4d919bff2b4b5466966fdc21302cc2b212aPublic key SHA-256 5040c516dba7a389d01da515a21befa01b7c58ba56ce6f3968ea811a07707bb6
- Brand
- Zelle
- Addresses
- 192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- Domain
- service-zellepay.com
- Registered
- 2026-05-09 · Gname.com Pte. Ltd.
- MX
- Receives mail at service-zellepay.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 08:54 UTC
- mail.service-zellepay.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
DetailsHide details for mail.service-zellepay.com
- Hostname
- mail.service-zellepay.com
- First seen
- 2026-11-01 07:06 UTC
- First published
- 2026-11-01 08:03 UTC
- DNS
- Resolves · checked 2026-11-05 08:08 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 192.142.10.5
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-01 06:03 UTC to 2027-01-30 06:03 UTCLogged 2026-11-01 07:02 UTC in Google ParcelYard2027h1, entry 551,775,558SHA-256 7c6e764a9d4dbe498ecc3fde6370e4d919bff2b4b5466966fdc21302cc2b212aPublic key SHA-256 5040c516dba7a389d01da515a21befa01b7c58ba56ce6f3968ea811a07707bb6
- Brand
- Zelle
- Addresses
- 192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- Domain
- service-zellepay.com
- Registered
- 2026-05-09 · Gname.com Pte. Ltd.
- MX
- Receives mail at service-zellepay.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 08:54 UTC
- cpcontacts.service-zellepay.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
DetailsHide details for cpcontacts.service-zellepay.com
- Hostname
- cpcontacts.service-zellepay.com
- First seen
- 2026-11-01 07:06 UTC
- First published
- 2026-11-01 08:03 UTC
- DNS
- Resolves · checked 2026-11-05 08:08 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 192.142.10.5
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-01 06:03 UTC to 2027-01-30 06:03 UTCLogged 2026-11-01 07:02 UTC in Google ParcelYard2027h1, entry 551,775,558SHA-256 7c6e764a9d4dbe498ecc3fde6370e4d919bff2b4b5466966fdc21302cc2b212aPublic key SHA-256 5040c516dba7a389d01da515a21befa01b7c58ba56ce6f3968ea811a07707bb6
- Brand
- Zelle
- Addresses
- 192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- Domain
- service-zellepay.com
- Registered
- 2026-05-09 · Gname.com Pte. Ltd.
- MX
- Receives mail at service-zellepay.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 08:54 UTC
- cpcalendars.service-zellepay.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
DetailsHide details for cpcalendars.service-zellepay.com
- Hostname
- cpcalendars.service-zellepay.com
- First seen
- 2026-11-01 07:06 UTC
- First published
- 2026-11-01 08:03 UTC
- DNS
- Resolves · checked 2026-11-05 08:08 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 192.142.10.5
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-01 06:03 UTC to 2027-01-30 06:03 UTCLogged 2026-11-01 07:02 UTC in Google ParcelYard2027h1, entry 551,775,558SHA-256 7c6e764a9d4dbe498ecc3fde6370e4d919bff2b4b5466966fdc21302cc2b212aPublic key SHA-256 5040c516dba7a389d01da515a21befa01b7c58ba56ce6f3968ea811a07707bb6
- Brand
- Zelle
- Addresses
- 192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- Domain
- service-zellepay.com
- Registered
- 2026-05-09 · Gname.com Pte. Ltd.
- MX
- Receives mail at service-zellepay.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 08:54 UTC
- cpanel.service-zellepay.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
DetailsHide details for cpanel.service-zellepay.com
- Hostname
- cpanel.service-zellepay.com
- First seen
- 2026-11-01 07:06 UTC
- First published
- 2026-11-01 08:03 UTC
- DNS
- Resolves · checked 2026-11-05 08:08 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 192.142.10.5
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-01 06:03 UTC to 2027-01-30 06:03 UTCLogged 2026-11-01 07:02 UTC in Google ParcelYard2027h1, entry 551,775,558SHA-256 7c6e764a9d4dbe498ecc3fde6370e4d919bff2b4b5466966fdc21302cc2b212aPublic key SHA-256 5040c516dba7a389d01da515a21befa01b7c58ba56ce6f3968ea811a07707bb6
- Brand
- Zelle
- Addresses
- 192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- Domain
- service-zellepay.com
- Registered
- 2026-05-09 · Gname.com Pte. Ltd.
- MX
- Receives mail at service-zellepay.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 08:54 UTC
- autodiscover.service-zellepay.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
DetailsHide details for autodiscover.service-zellepay.com
- Hostname
- autodiscover.service-zellepay.com
- First seen
- 2026-11-01 07:05 UTC
- First published
- 2026-11-01 08:03 UTC
- DNS
- Resolves · checked 2026-11-05 08:08 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 192.142.10.5
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-01 06:03 UTC to 2027-01-30 06:03 UTCLogged 2026-11-01 07:02 UTC in Google ParcelYard2027h1, entry 551,775,558SHA-256 7c6e764a9d4dbe498ecc3fde6370e4d919bff2b4b5466966fdc21302cc2b212aPublic key SHA-256 5040c516dba7a389d01da515a21befa01b7c58ba56ce6f3968ea811a07707bb6
- Brand
- Zelle
- Addresses
- 192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- Domain
- service-zellepay.com
- Registered
- 2026-05-09 · Gname.com Pte. Ltd.
- MX
- Receives mail at service-zellepay.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 08:54 UTC
- autoconfig.service-zellepay.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
DetailsHide details for autoconfig.service-zellepay.com
- Hostname
- autoconfig.service-zellepay.com
- First seen
- 2026-11-01 07:05 UTC
- First published
- 2026-11-01 08:03 UTC
- DNS
- Resolves · checked 2026-11-05 08:08 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.10.5.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 192.142.10.5
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-01 06:03 UTC to 2027-01-30 06:03 UTCLogged 2026-11-01 07:02 UTC in Google ParcelYard2027h1, entry 551,775,558SHA-256 7c6e764a9d4dbe498ecc3fde6370e4d919bff2b4b5466966fdc21302cc2b212aPublic key SHA-256 5040c516dba7a389d01da515a21befa01b7c58ba56ce6f3968ea811a07707bb6
- Brand
- Zelle
- Addresses
- 192.142.10.5 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- Domain
- service-zellepay.com
- Registered
- 2026-05-09 · Gname.com Pte. Ltd.
- MX
- Receives mail at service-zellepay.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-05 08:54 UTC
- zellepay.cloud CY · AS47583 · AS-HOSTINGER Hostinger Inte…Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 9 mo ago
DetailsHide details for zellepay.cloud
- Hostname
- zellepay.cloud
- First seen
- 2026-10-26 04:08 UTC
- DNS
- Resolves · checked 2026-11-05 09:05 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
- Phishing-host list fetched with the address
- Resolved to 2.57.91.91
- Latest DNS check
- Certificate
- Logged in Google PlumbersArms2027h1, entry 450,094,028SHA-256 3a06bb24aa263f2226d64adae1363c5b2184589155745fee0092c15f00f2e751
- Brand
- Zelle
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- zellepay.cloud
- Registered
- 2026-02-19 · HOSTINGER operations, UAB
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:23 UTC
- www.zellepay.cloud CY · AS47583 · AS-HOSTINGER Hostinger Inte…Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 9 mo ago
DetailsHide details for www.zellepay.cloud
- Hostname
- www.zellepay.cloud
- First seen
- 2026-10-26 04:08 UTC
- DNS
- Resolves · checked 2026-11-05 09:05 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
- Phishing-host list fetched with the address
- Resolved to 2.57.91.91
- Latest DNS check
- Certificate
- Logged in Google PlumbersArms2027h1, entry 450,094,028SHA-256 3a06bb24aa263f2226d64adae1363c5b2184589155745fee0092c15f00f2e751
- Brand
- Zelle
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- zellepay.cloud
- Registered
- 2026-02-19 · HOSTINGER operations, UAB
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:23 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Zelle when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

