Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-05 14:17 UTC
Certificate-log entries · 24 h
331.5M
from 84 distinct feeds
Unique certificates · 24 h
34.9M
each reviewed
Names resolved · 24 h
21.6M
15.8M with an address
Findings · 24 h
5,579
219 of 1,061 brands targeted

2,869 hostnames from the last 24 hours.

  1. www.norvelpoint.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder norvelpoint.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.norvelpoint.com
    First seen
    2026-11-05 09:00 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    CERT Polska listed it 2026-07-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    PhishDestroy: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    CERT Polska, listing norvelpoint.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:57 UTC to 2027-02-03 08:57 UTC
    Logged 2026-11-05 08:57 UTC in Google PlumbersArms2027h1, entry 623,383,070
    SHA-256 7afddac5d06d9625fb6a33fa3adb31c20a78341e8a0c14654dfb199b047fb9cb
    Public key SHA-256 7b82782933909f5338daa62ea9fd6d84f4d88064662a80a5d0112c56cb822550
    Addresses
    104.18.2.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.2.225): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    norvelpoint.com
    Registered
    2026-07-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:50 UTC

    Suggest a correction

  2. 30-governance-orbio.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    30-governance-orbio.pages.dev
    First seen
    2026-11-05 08:57 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Not resolving · checked 2026-11-05 14:01 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 07:55 UTC to 2027-02-03 07:55 UTC
    Logged 2026-11-05 08:53 UTC in DigiCert Sphinx2027h1, entry 365,035,729
    SHA-256 94432c9f23d1d6f1594218ecbc92dfdc540b66a2154da72a8cecea8f4b3f9f0d
    Public key SHA-256 2929b5fb8ee2b0dc328c0b26275653d9b07b33a662fb8aa3d999f32ce18e399e
    Addresses
    172.66.44.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.174, 172.66.47.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  3. ackermann.saldiora.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder saldiora.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    ackermann.saldiora.com
    First seen
    2026-11-05 08:57 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    CERT Polska listed it 2026-05-27 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    CERT Polska, listing saldiora.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-05 07:53 UTC to 2027-02-03 08:52 UTC
    Logged 2026-11-05 08:53 UTC in DigiCert Sphinx2027h1, entry 365,035,875
    SHA-256 7a3fb7b63e3794c3e0b233c18fa225d0d3a28e6e4b645ad0596330a2588b2e30
    Public key SHA-256 db246fd9189d6b7a61459e51bb5f0bef2523bca9c585ab1dbb8c1d9d0ac8f130
    Addresses
    104.21.58.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.184, 172.67.206.62): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    saldiora.com
    Registered
    2026-04-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 07:46 UTC

    Suggest a correction

  4. app-eulerfinance.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    app-eulerfinance.com
    First seen
    2026-11-05 08:57 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 07:57 UTC to 2027-02-03 07:57 UTC
    Logged 2026-11-05 08:55 UTC in Google PlumbersArms2027h1, entry 623,356,073
    SHA-256 59eee8902fb8d24f022f81f8be043d7c3b24eea6218da3eed2a40ce4b585b54e
    Public key SHA-256 dc46ea14b9a3ede490fcfcc302bf0d57bf430f9989d42ea9325f95ac42e543af
    Addresses
    104.21.8.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.68, 172.67.138.163): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    app-eulerfinance.com
    Registered
    2026-04-30 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:50 UTC

    Suggest a correction

  5. huasu01.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    huasu01.shop
    First seen
    2026-11-05 08:57 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 07:56 UTC to 2027-02-03 07:56 UTC
    Logged 2026-11-05 08:55 UTC in IPng Networks Gouda2027h1, entry 322,772,879
    SHA-256 538f669777a804abdcdf2db4880dd8ad1c0dbb075dd2a52e9ecdc31d44cb4508
    Public key SHA-256 8dc83d601acfaebc04de0402384f57cdfb97149749225ca1e9a451ba57408120
    Addresses
    104.21.50.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.198.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.5, 172.67.198.177): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    huasu01.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:00 UTC

    Suggest a correction

  6. hyper-lend.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    hyper-lend.net
    First seen
    2026-11-05 08:57 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:54 UTC to 2027-02-03 08:52 UTC
    Logged 2026-11-05 08:54 UTC in Let's Encrypt Sycamore2027h1, entry 956,401,088
    SHA-256 6074f3c41a8534b1cc82c3f78d751f743d29f658912fc1c22f661633be68ef15
    Public key SHA-256 9beb8ea4d70932ccdfb5d910720ec74e3eb441b831efac237f37c483b6cdbff5
    Addresses
    104.21.71.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.226, 172.67.150.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hyper-lend.net
    Registered
    2026-04-30 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:50 UTC

    Suggest a correction

  7. k3-capital.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    k3-capital.net
    First seen
    2026-11-05 08:57 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 07:57 UTC to 2027-02-03 07:57 UTC
    Logged 2026-11-05 08:55 UTC in Google ParcelYard2027h1, entry 622,953,425
    SHA-256 5dcaaee22de2bdf9880c3ce479066528fa11d56e1cd9adf5aa70dbaabf685a87
    Public key SHA-256 456deada1cb3560917f5c5ccac30dd4a637bba337d55d0fe4a705fd6ca48c21f
    PhishDestroy
    Addresses
    104.21.77.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.40, 172.67.204.70): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    k3-capital.net
    Registered
    2026-04-30 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:50 UTC

    Suggest a correction

  8. mellow-protocol.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    mellow-protocol.com
    First seen
    2026-11-05 08:57 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 07:54 UTC to 2027-02-03 07:54 UTC
    Logged 2026-11-05 08:53 UTC in Let's Encrypt Willow2027h1, entry 947,209,806
    SHA-256 c33d05fcc295d932347ea24c5f4628cc60bbc0d7922e2fde12858cc5e978ac08
    Public key SHA-256 25e77c472ef6655d10e9bd7a2202193d260e31fd46878177b95d1a46b86f54a5
    Addresses
    104.21.34.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.125, 172.67.205.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mellow-protocol.com
    Registered
    2026-04-30 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:50 UTC

    Suggest a correction

  9. nanovitalabs-rewards.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    nanovitalabs-rewards.xyz
    First seen
    2026-11-05 08:57 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 07:56 UTC to 2027-02-03 07:56 UTC
    Logged 2026-11-05 08:54 UTC in Google PlumbersArms2027h1, entry 623,341,142
    SHA-256 1153e2c5a515bcfa6f73d541a38f07750c755c14e4c9c9c651fdd8d429f4852a
    Public key SHA-256 ec4a459246d9a90e6ea690a75bf2f580b65c6d5aee7740c20f78fb158a84a2e9
    Addresses
    104.21.63.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.30, 172.67.142.171): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nanovitalabs-rewards.xyz
    Registered
    2026-05-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:49 UTC

    Suggest a correction

  10. norvelpoint.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    norvelpoint.com
    First seen
    2026-11-05 08:57 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    CERT Polska listed it 2026-07-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    PhishDestroy: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 05:34 UTC to 2026-12-06 06:34 UTC
    Logged 2026-11-05 08:52 UTC in DigiCert Wyvern2026h2, entry 2,205,535,055
    SHA-256 308bd6e90a218486f0238ed54c0f8c64dd580b17a76c01f32d7cfaa0e46fe6a4
    Public key SHA-256 079d740ea9ab48124d3a1e2649f265c2d0e30cf7f0b727392e5c430b22ac8294
    Addresses
    104.18.2.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.2.225): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    norvelpoint.com
    Registered
    2026-07-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:50 UTC

    Suggest a correction

  11. riseupengine.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    riseupengine.digital
    First seen
    2026-11-05 08:57 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    CERT Polska listed it 2026-05-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 07:54 UTC to 2027-02-03 07:54 UTC
    Logged 2026-11-05 08:52 UTC in Google ParcelYard2027h1, entry 622,917,840
    SHA-256 0548c8e2db3917ccc062276e339351bdf303c8c6a7b5061d90be37fdeee63cd8
    Public key SHA-256 53f831e6175210717c780afd8053c7bf320d42ec32018d9b4c1c66eb462c078f
    Addresses
    104.21.19.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.148, 172.67.186.132): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    riseupengine.digital
    Registered
    2026-05-11 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:49 UTC

    Suggest a correction

  12. signalatera.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    signalatera.com
    First seen
    2026-11-05 08:57 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:52 UTC to 2027-02-03 08:50 UTC
    Logged 2026-11-05 08:52 UTC in IPng Networks Halloumi2027h1, entry 371,961,026
    SHA-256 85fb02dd78794dbaff4be3d7a36f5b6a64b061bfb233c835965a207e3a4756c2
    Public key SHA-256 f197b4c9d2a68a412247e8dd3256e746b06180cc325b3cd38d4a014c518046fc
    PhishDestroy
    Addresses
    104.21.47.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.77, 172.67.170.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    signalatera.com
    Registered
    2025-11-11 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:50 UTC

    Suggest a correction

  13. started-ledger-live-download-eng.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesLedger
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    started-ledger-live-download-eng.pages.dev
    First seen
    2026-11-05 08:57 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:54 UTC to 2027-02-03 08:53 UTC
    Logged 2026-11-05 08:54 UTC in IPng Networks Halloumi2027h1, entry 371,985,592
    SHA-256 e8e2a164e6beafa7f8a43053267d57d3e78a91697e462d3b468a6a650db267a2
    Public key SHA-256 8059d684378c1e013499dd42e120d2bdddc7e566d1ba35356dbabf29ffd6e34a
    Brand
    Ledger
    Addresses
    172.66.45.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.218 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2d26
    2606:4700:310c::ac42:2eda
    Cloudflare
    Cloudflare (172.66.45.38, 172.66.46.218): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  14. swellnetwork.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    swellnetwork.net
    First seen
    2026-11-05 08:57 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 08:44 UTC to 2027-02-03 08:52 UTC
    Logged 2026-11-05 08:54 UTC in DigiCert Wyvern2027h1, entry 413,697,232
    SHA-256 498ff3b2458ea42e362a4fe745cf4dbac13c49fb99972e5c57791e9137b20909
    Public key SHA-256 cca037064f0a39098fc600ef9347857cb02ae0ee716d37470a53114f4a9d6878
    Addresses
    104.21.55.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.50, 172.67.144.210): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    swellnetwork.net
    Registered
    2026-04-30 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:50 UTC

    Suggest a correction

  15. uncx-network.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    uncx-network.net
    First seen
    2026-11-05 08:57 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 07:55 UTC to 2027-02-03 07:55 UTC
    Logged 2026-11-05 08:54 UTC in Google PlumbersArms2027h1, entry 623,336,040
    SHA-256 5cc4fc2708212b1a999dad5338631b30b855dd856915b980ed4d45295979ccb6
    Public key SHA-256 a554739d0a1edd7cca5ad034533e31d96c43383499debf1987e4b42b57eed7ec
    Addresses
    104.21.43.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.79, 172.67.175.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    uncx-network.net
    Registered
    2026-04-30 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:50 UTC

    Suggest a correction

  16. 29-governance-orbio.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    29-governance-orbio.pages.dev
    First seen
    2026-11-05 08:51 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Not resolving · checked 2026-11-05 14:01 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 08:37 UTC to 2027-02-03 08:45 UTC
    Logged 2026-11-05 08:47 UTC in DigiCert Sphinx2027h1, entry 364,999,266
    SHA-256 081e5ecfe30303707a5489a41f0e5aa977e2d84962b67433cf45d02b09c82636
    Public key SHA-256 f25dc108ff7ff6729a44ace4c892ef27f5b09c0158cc495dbe5af83aa1e3f9ec
    Addresses
    172.66.44.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.106, 172.66.47.150): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  17. intro-binance.com.cn US · AS13335 · Cloudflare, Inc.4 addressesBinance
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    intro-binance.com.cn
    First seen
    2026-11-05 08:51 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-05 00:00 UTC to 2027-02-01 13:50 UTC
    Logged 2026-11-05 08:50 UTC in IPng Networks Halloumi2027h1, entry 371,950,859
    SHA-256 c69a44382cbe91d277dbd14c48f9100034f0c66df9d2d00c4b356b47fdaf2980
    Public key SHA-256 aed55c92b83903fb94e567879f4011db7364d79d35fc14c02a3efe739a3df1ff
    Brand
    Binance
    Addresses
    104.21.66.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:a066
    2606:4700:3036::6815:4288
    Cloudflare
    Cloudflare (104.21.66.136, 172.67.160.102): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    intro-binance.com.cn
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  18. neurotrade-ai.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    neurotrade-ai.live
    First seen
    2026-11-05 08:51 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 07:50 UTC to 2027-02-03 07:50 UTC
    Logged 2026-11-05 08:49 UTC in Google PlumbersArms2027h1, entry 623,280,016
    SHA-256 51ea68972237706db4e07b3428e7194cb2fda84a8e44c8211b745d6430accebb
    Public key SHA-256 7aa3a0e4fd253aae43c0ee67ef6077d8fd64428829d31b6dbd8e5e1008e122e6
    Addresses
    104.21.60.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.60.220, 172.67.201.240): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    neurotrade-ai.live
    Registered
    2026-05-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:49 UTC

    Suggest a correction

  19. portal-ether.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    portal-ether.xyz
    First seen
    2026-11-05 08:51 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-05 00:00 UTC to 2027-02-02 16:09 UTC
    Logged 2026-11-05 08:49 UTC in Let's Encrypt Sycamore2027h1, entry 956,339,812
    SHA-256 92840175da2ba72555c48bb1067c24510e9ca5a119a131fe882fca5353410300
    Public key SHA-256 6763f5397b21063bc3e5aa67f08c8cc62fd1d963f1b7f6bbc35e7e8a7a268435
    PhishDestroy
    Addresses
    104.21.84.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.127, 172.67.193.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    portal-ether.xyz
    Registered
    2026-03-18 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  20. strombitpuls-com.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    strombitpuls-com.pages.dev
    First seen
    2026-11-05 08:51 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    CERT Polska listed it 2026-09-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 07:51 UTC to 2027-02-03 07:51 UTC
    Logged 2026-11-05 08:50 UTC in Google ParcelYard2027h1, entry 622,889,611
    SHA-256 eea4fe3ff4d5924067e855a12b32aba8bf607950ebb71437c599bc366484991c
    Public key SHA-256 5cd0be97dd7ba9283391152077946fd8ec563c36c00444cd2b928da297e8d71f
    Addresses
    172.66.45.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.8, 172.66.46.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  21. www.gjzzzzag.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder gjzzzzag.shop, listed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.gjzzzzag.shop
    First seen
    2026-11-05 08:51 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    CERT Polska listed it 2026-09-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    CERT Polska, listing gjzzzzag.shop and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:48 UTC to 2027-02-03 08:47 UTC
    Logged 2026-11-05 08:48 UTC in Geomys Tuscolo2027h1, entry 484,475,110
    SHA-256 5a81facd4b522718e63e8b1f652c7295f17f7481293739121d7d777d1260db01
    Public key SHA-256 bcd1712be20173b881e4cd34b596b3fd465c819123e9149f7e33465115c31432
    Addresses
    104.17.177.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.17.177.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gjzzzzag.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:55 UTC

    Suggest a correction

  22. zenlaunch.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    zenlaunch.app
    First seen
    2026-11-05 08:51 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:47 UTC to 2027-02-03 08:43 UTC
    Logged 2026-11-05 08:47 UTC in Google PlumbersArms2027h1, entry 623,257,342
    SHA-256 4325ca742616e3decc170282e4122e8ea02916a322b0607d5c2309976f9093f3
    Public key SHA-256 4b7edfc6ff58850a29c33678aec639206f2a7edbf3879425b9bbedf768938412
    PhishDestroy
    Addresses
    104.21.30.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.30.96, 172.67.172.183): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zenlaunch.app
    Registered
    2026-01-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:48 UTC

    Suggest a correction

  23. beautw.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC quarantineRegistered 23 mo ago
    DetailsHide
    Hostname
    beautw.com
    First seen
    2026-11-05 08:46 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:41 UTC to 2027-02-03 08:40 UTC
    Logged 2026-11-05 08:41 UTC in Geomys Tuscolo2027h1, entry 484,405,589
    SHA-256 5899ed887209c4a30d10902d49df34fdd698f0476146f97216e109d37947166a
    Public key SHA-256 7a88721255d3a718de20e74708cbedea00bcae6b58925b3983166551429c730b
    Addresses
    104.21.39.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.117, 172.67.145.44): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    beautw.com
    Registered
    2024-12-02 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-05 09:50 UTC

    Suggest a correction

  24. governance-mancer.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 10 d ago
    DetailsHide
    Hostname
    governance-mancer.icu
    First seen
    2026-11-05 08:46 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-05 00:00 UTC to 2027-02-01 12:43 UTC
    Logged 2026-11-05 08:41 UTC in Google Argon2027h1, entry 872,270,714
    SHA-256 110a06efd752477c78487affd18a18535a9fdc6bb47627943236446275a6ed01
    Public key SHA-256 96d12df176b06770523701ede4f13f0104f90934640e04d3f58b81e0dab35155
    Addresses
    104.21.82.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.231, 172.67.208.132): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    governance-mancer.icu
    Registered
    2026-10-26 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:49 UTC

    Suggest a correction

  25. gt-cfx.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    gt-cfx.com
    First seen
    2026-11-05 08:46 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:44 UTC to 2027-02-03 08:41 UTC
    Logged 2026-11-05 08:44 UTC in Google PlumbersArms2027h1, entry 623,219,537
    SHA-256 e3b09386695b35f63cea65cc56a36043a5cf445b625bdee0cf1d4c70e7c5d724
    Public key SHA-256 3c5c2f9b6beb6ae383a86f942d495cc71224e5c25fbdeda260501b37ce29d240
    Addresses
    104.21.6.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.233, 172.67.135.114): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gt-cfx.com
    Registered
    2026-09-07 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:50 UTC

    Suggest a correction

  26. gtcfx-pro.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    gtcfx-pro.com
    First seen
    2026-11-05 08:46 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:43 UTC to 2027-02-03 08:42 UTC
    Logged 2026-11-05 08:43 UTC in DigiCert Sphinx2027h1, entry 364,983,249
    SHA-256 37d6e56271734eb4ad18edb52bb503e94ecc9be7d15d6fd0666c243d735d4a41
    Public key SHA-256 1fd860a875816935ba04e9e9df0551eed1f74d9351f4442bc4ad8c4ff9cdab84
    Addresses
    104.21.63.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.229, 172.67.172.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gtcfx-pro.com
    Registered
    2026-09-07 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:50 UTC

    Suggest a correction

  27. gtcfxdirect.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    gtcfxdirect.com
    First seen
    2026-11-05 08:46 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:43 UTC to 2027-02-03 08:41 UTC
    Logged 2026-11-05 08:43 UTC in IPng Networks Halloumi2027h1, entry 371,898,590
    SHA-256 ac39ac70191834962d6ac6fba9fe223c9eb39f275ba2535b88dc91b56274ce52
    Public key SHA-256 aba2c3e6dd550b52d069ed0a72a1368c3c1788ae6c4d367b5e1fe4ed7079f2e8
    Addresses
    104.21.42.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.95, 172.67.204.187): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gtcfxdirect.com
    Registered
    2026-09-07 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:50 UTC

    Suggest a correction

  28. midnignt.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    midnignt.com
    First seen
    2026-11-05 08:46 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-05 00:00 UTC to 2027-02-02 14:25 UTC
    Logged 2026-11-05 08:44 UTC in Sectigo Statue2027h1, entry 61,982,378
    SHA-256 882a9a21863055441943e40d40a02f3f0cbbe307780d8454f16df8456bad009a
    Public key SHA-256 87239693170d960f7ff6d844eed5f64ce7df48b905cbe8d8092afca0327bd13d
    Addresses
    104.21.36.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.233, 172.67.200.205): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    midnignt.com
    Registered
    2026-08-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:50 UTC

    Suggest a correction

  29. nesthavenstudio.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    nesthavenstudio.site
    First seen
    2026-11-05 08:46 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    CERT Polska listed it 2026-10-29 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-05 00:00 UTC to 2027-02-01 12:56 UTC
    Logged 2026-11-05 08:43 UTC in Geomys Tuscolo2027h1, entry 484,423,217
    SHA-256 420017ad6ecd6b5f88599daa025e70b1521a98104b4a5d0ee22c0de351729025
    Public key SHA-256 26821b0435d2f775abde51b831e7760c39714f54ed75bd39f24efca9352f6b55
    Addresses
    104.21.74.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.74.48, 172.67.155.61): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nesthavenstudio.site
    Registered
    2026-01-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:49 UTC

    Suggest a correction

  30. shoesme-nl.deal-vera.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder deal-vera.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    shoesme-nl.deal-vera.com
    First seen
    2026-11-05 08:46 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    CERT Polska listed it 2026-10-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    CERT Polska, listing deal-vera.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-05 07:42 UTC to 2027-02-03 08:41 UTC
    Logged 2026-11-05 08:42 UTC in Geomys Tuscolo2027h1, entry 484,420,152
    SHA-256 a750bf67a3e5398a3b0cd51d191cff631082b0fd8a2c46df089eef769e8e4084
    Public key SHA-256 edadc82783c2c159b3ffaf365330a01305e6016d45b662146bf1480e9f44b4da
    Addresses
    104.18.13.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.13.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    deal-vera.com
    Registered
    2026-08-18 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  31. sokig.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    sokig.online
    First seen
    2026-11-05 08:46 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:41 UTC to 2027-02-03 08:39 UTC
    Logged 2026-11-05 08:41 UTC in Google ParcelYard2027h1, entry 622,780,267
    SHA-256 8bd0eaa96ff0b6ef3de78f1cba809996d87f3c894efa4d327f8609c951bc946e
    Public key SHA-256 05e13892d92bbef172001df3ff4a57612cff6337ca6273f6f679c900384dc7fd
    Addresses
    104.21.91.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.101, 172.67.215.154): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sokig.online
    Registered
    2025-11-15 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:49 UTC

    Suggest a correction

  32. trendyol0.xyz US · AS13335 · Cloudflare, Inc.4 addressesTrendyol
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    trendyol0.xyz
    First seen
    2026-11-05 08:46 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    USOM listed it 2026-07-28 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 14:15 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:43 UTC to 2027-02-03 08:42 UTC
    Logged 2026-11-05 08:43 UTC in Google ParcelYard2027h1, entry 622,811,699
    SHA-256 c5082cfe2b4a1c16b1863b931ae6ea5bd6ccc14663aa415171f3c0d2b4ab1c9a
    Public key SHA-256 6e9ee5a467f94730cdc76cb14394338bac2329115abb8f1bbed72961af84ca30
    Brand
    Trendyol
    Addresses
    104.21.36.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:c5ed
    2606:4700:3032::6815:24b0
    Cloudflare
    Cloudflare (104.21.36.176, 172.67.197.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trendyol0.xyz
    Registered
    2026-07-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:49 UTC

    Suggest a correction

  33. fazuboe.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    fazuboe.pro
    First seen
    2026-11-05 08:41 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    CERT Polska listed it 2026-07-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:36 UTC to 2027-02-03 08:34 UTC
    Logged 2026-11-05 08:36 UTC in IPng Networks Halloumi2027h1, entry 371,826,384
    SHA-256 79fa6a3a4d7c0aff6eddcb63330c3c9c85b4318d04b526858687115d3c5428ba
    Public key SHA-256 5d2ce42118fcd35ed1a9cd50d7ff31d03f4a7dc719974aecbff6ff0091fc40ba
    Addresses
    104.21.92.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.139, 172.67.194.137): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fazuboe.pro
    Registered
    2026-07-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:49 UTC

    Suggest a correction

  34. gtcfxfx.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    gtcfxfx.com
    First seen
    2026-11-05 08:41 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:38 UTC to 2027-02-03 08:36 UTC
    Logged 2026-11-05 08:38 UTC in IPng Networks Halloumi2027h1, entry 371,842,679
    SHA-256 513ceb25ebf05e02d4e044a21f37a73ab6f3017a2b708387f68eb2b9b473c7d6
    Public key SHA-256 17f8f8906d7327fe9351d1e95b253b80755ac1937bef7a6f8527ed8b811d816b
    Addresses
    104.21.45.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.45.73, 172.67.211.18): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gtcfxfx.com
    Registered
    2026-09-07 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:51 UTC

    Suggest a correction

  35. gundemnokta.world US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    gundemnokta.world
    First seen
    2026-11-05 08:41 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    USOM listed it 2026-07-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 14:15 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:39 UTC to 2027-02-03 08:37 UTC
    Logged 2026-11-05 08:39 UTC in Google ParcelYard2027h1, entry 622,748,134
    SHA-256 18dc2b9bab57561964ee3f00d547732034f57d132d9456c6f615e8071132d86f
    Public key SHA-256 60103bfb478afaaaa004bec783b7512dd03d8b49b06e1b7607039e87b9d9f415
    Addresses
    104.21.66.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.66.151, 172.67.205.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gundemnokta.world
    Registered
    2026-07-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:49 UTC

    Suggest a correction

  36. hzlnsdanismanlk.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX presentSPF ~allDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    hzlnsdanismanlk.com
    First seen
    2026-11-05 08:41 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    USOM listed it 2026-09-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 14:15 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:39 UTC to 2027-02-03 08:36 UTC
    Logged 2026-11-05 08:39 UTC in Geomys Tuscolo2027h1, entry 484,384,046
    SHA-256 f4c4796580747afb38eba711012ab0fe7e206587e7419d85352fad4078bfcc03
    Public key SHA-256 7ad4a7d518759eb4996eaa1f3f141722025e311ade0361f1427a6d4561df9279
    Addresses
    104.21.6.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.103, 172.67.134.183): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hzlnsdanismanlk.com
    Registered
    2026-09-07 · Turkticaret.net Yazilim Hizmetleri Sanayi ve Ticaret A.S.
    MX
    Receives mail at mx.turkticaret.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:51 UTC

    Suggest a correction

  37. valuentice.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 24 d ago
    DetailsHide
    Hostname
    valuentice.net
    First seen
    2026-11-05 08:41 UTC
    First published
    2026-11-05 09:50 UTC
    Listing
    CERT Polska listed it 2026-10-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 09:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-05 00:00 UTC to 2027-02-01 12:03 UTC
    Logged 2026-11-05 08:36 UTC in Google PlumbersArms2027h1, entry 623,108,249
    SHA-256 461a2bddd06c156053c151618be1890648ca588ea8b4746bc93a7b99d98911fc
    Public key SHA-256 ea761c8f280f6341e9213fdad56cf398c3cbdef9b731138f654713f8c9700621
    Addresses
    104.21.4.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.231, 172.67.132.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    valuentice.net
    Registered
    2026-10-12 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:51 UTC

    Suggest a correction

  38. app-spectrafinance.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    app-spectrafinance.com
    First seen
    2026-11-05 08:36 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 07:33 UTC to 2027-02-03 07:33 UTC
    Logged 2026-11-05 08:31 UTC in Google PlumbersArms2027h1, entry 623,053,725
    SHA-256 7a0c5283f4abfafcb97fe22248ca332fddf0c226908bbfe78034d8c6d9adb26b
    Public key SHA-256 851e705b59bb585f050015647b54e1751df3f056a8dbdb59d6b489427b0dc643
    Addresses
    104.21.73.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.110, 172.67.161.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    app-spectrafinance.com
    Registered
    2026-04-30 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:40 UTC

    Suggest a correction

  39. eobuwie-sportshoes.shop US · AS13335 · Cloudflare, Inc.eobuwie
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 15 d ago
    DetailsHide
    Hostname
    eobuwie-sportshoes.shop
    First seen
    2026-11-05 08:36 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    CERT Polska listed it 2026-10-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-05 00:00 UTC to 2027-02-01 11:10 UTC
    Logged 2026-11-05 08:30 UTC in Sectigo Elephant2027h1, entry 727,575,021
    SHA-256 3583e760fbecbf10351a3a3186a57f92aa691874acdd2f6c8bea14720e125fa8
    Public key SHA-256 e51c3b1225e6d3c60eb81dc0a14dcef3b81040ad977be6755f6ffc40ff77edf5
    Brand
    eobuwie
    Addresses
    104.16.211.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.16.211.68): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eobuwie-sportshoes.shop
    Registered
    2026-10-21 · Dynadot Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:40 UTC

    Suggest a correction

  40. hfekjqwmf.monster US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    hfekjqwmf.monster
    First seen
    2026-11-05 08:36 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:35 UTC to 2027-02-03 08:33 UTC
    Logged 2026-11-05 08:35 UTC in Google ParcelYard2027h1, entry 622,698,076
    SHA-256 ef56d0e2d1d5ac3d2d37deffbf8a3ed57fe6e8e7eee668739a7e06b8f92a1d49
    Public key SHA-256 61addeecdb011d1c9fed8b3fa2eba3ea1f029a304228b04a81908b4b1cdb2783
    Addresses
    104.21.15.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.15.186, 172.67.163.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hfekjqwmf.monster
    Registered
    2026-07-10 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:42 UTC

    Suggest a correction

  41. hh1565.com US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    hh1565.com
    First seen
    2026-11-05 08:36 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:35 UTC to 2027-02-03 08:33 UTC
    Logged 2026-11-05 08:35 UTC in Google PlumbersArms2027h1, entry 623,097,049
    SHA-256 7b5cc31c07124461b9e6a4e03e1032b328c9c59926507b42b849368d0737f589
    Public key SHA-256 c8c4559ba0fb22082307fa61ebea6ccbc53a13f1e20db681d3c82b82b985968f
    PhishDestroy
    Addresses
    23.145.152.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (23.145.152.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hh1565.com
    Registered
    2021-06-02 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:42 UTC

    Suggest a correction

  42. ifnbenwns.monster US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ifnbenwns.monster
    First seen
    2026-11-05 08:36 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:34 UTC to 2027-02-03 08:31 UTC
    Logged 2026-11-05 08:34 UTC in Google ParcelYard2027h1, entry 622,682,339
    SHA-256 dd2251ba0477f7a0363de4888a41ad0e60b3ae00545fc6595eeab1bdedf05074
    Public key SHA-256 9c2bcfc469cea02455e3c8c388aaa330462442fa86b1f81654a976644b4019be
    Addresses
    104.21.13.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.13.68, 172.67.154.240): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ifnbenwns.monster
    Registered
    2026-07-10 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:42 UTC

    Suggest a correction

  43. kupikod2.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 16 d ago
    DetailsHide
    Hostname
    kupikod2.com
    First seen
    2026-11-05 08:36 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-26 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-05 00:00 UTC to 2027-01-28 21:17 UTC
    Logged 2026-11-05 08:35 UTC in Let's Encrypt Willow2027h1, entry 946,988,128
    SHA-256 1a9b471a3134871c26c4ab8815a888e3e46485e18b7d575b58a67e9f35184f37
    Public key SHA-256 b8c94f151a5fcafda6d862b2b4609a3a11d6511a2cc6425c7cd86c04569a5229
    PhishDestroy
    Addresses
    104.21.18.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.87, 172.67.181.131): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kupikod2.com
    Registered
    2026-10-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:42 UTC

    Suggest a correction

  44. relaysan.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    relaysan.com
    First seen
    2026-11-05 08:36 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-05 00:00 UTC to 2027-01-26 19:02 UTC
    Logged 2026-11-05 08:31 UTC in Geomys Tuscolo2027h1, entry 484,298,337
    SHA-256 27611db7c7b1881bac950efc86e679fe353f47be149a2d872774e8063c0c4eed
    Public key SHA-256 b494dec7d78c754afefde5c3f0d438d632ffbea569ca85825f9c2598a2870a20
    PhishDestroy
    Addresses
    104.21.41.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.41.161, 172.67.148.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    relaysan.com
    Registered
    2026-10-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:40 UTC

    Suggest a correction

  45. votes-hyperecosystem.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    votes-hyperecosystem.xyz
    First seen
    2026-11-05 08:36 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-05 00:00 UTC to 2027-02-01 11:27 UTC
    Logged 2026-11-05 08:32 UTC in Google PlumbersArms2027h1, entry 623,069,485
    SHA-256 4f7e54989402dcea33fb9baeaa14a49c8e65000a7dd53a87d0c26a73d8c05087
    Public key SHA-256 92e12a24465201ac66a19dac4c1dd567ff54fa01048ccc6faa28dfe581f50630
    Addresses
    104.21.23.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.23.104, 172.67.210.126): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    votes-hyperecosystem.xyz
    Registered
    2026-10-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:42 UTC

    Suggest a correction

  46. 25-governance-orbio.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    25-governance-orbio.pages.dev
    First seen
    2026-11-05 08:31 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Not resolving · checked 2026-11-05 12:47 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:27 UTC to 2027-02-03 08:25 UTC
    Logged 2026-11-05 08:27 UTC in Let's Encrypt Sycamore2027h1, entry 956,052,199
    SHA-256 4d68ac616911286e12077017fb24db9faebe5b0f8da05340219361026f6ff628
    Public key SHA-256 6fed3f03c3a01f6e2ba315e4715b7fcbb76796b85742bbfd30ffda57e167c61d
    Addresses
    172.66.44.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.93, 172.66.47.163): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  47. aizo.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    aizo.eu.cc
    First seen
    2026-11-05 08:31 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    CERT Polska listed it 2026-09-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-05 07:27 UTC to 2027-02-03 08:25 UTC
    Logged 2026-11-05 08:29 UTC in Let's Encrypt Sycamore2027h1, entry 956,069,155
    SHA-256 a29fe3a51bf6b574d09dc005a6f706c721279ffe7c0d045ba1a74f292ff22811
    Public key SHA-256 2ab799067bbe10a0c02d14dd8c021e6d12d7ffde9b06c060ccc0ad75101905f3
    Addresses
    104.21.48.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.48.20, 172.67.176.5): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  48. arvenoluxe-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 53 d ago
    DetailsHide
    Hostname
    arvenoluxe-ai.com
    First seen
    2026-11-05 08:31 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    CERT Polska listed it 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-05 00:00 UTC to 2027-02-01 09:37 UTC
    Logged 2026-11-05 08:26 UTC in Geomys Tuscolo2027h1, entry 484,250,397
    SHA-256 2100d053968302ff8de17ba99af62d7a010bda0fcd747507dd4cb3d749d31e73
    Public key SHA-256 892907a1f288284f463936ffa3d24d36df19c1f9c5e9bc8b68bc1a965fff4023
    Addresses
    104.21.63.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.75, 172.67.170.69): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    arvenoluxe-ai.com
    Registered
    2026-09-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  49. assets-ledger.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    assets-ledger.com
    First seen
    2026-11-05 08:31 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 07:27 UTC to 2027-02-03 07:27 UTC
    Logged 2026-11-05 08:25 UTC in Google PlumbersArms2027h1, entry 622,975,467
    SHA-256 62145d19a16641080bc2127d50ef929b2d69327d496007d6b29736cf48bb57aa
    Public key SHA-256 fb575b2f099ea17bdf2f3058cca9522cada3c3c71cda584b5ef8c00ca8c4fbbc
    Addresses
    104.21.8.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.70, 172.67.156.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    assets-ledger.com
    Registered
    2026-05-12 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  50. belmont-btc365.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    belmont-btc365.live
    First seen
    2026-11-05 08:31 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 07:27 UTC to 2027-02-03 07:27 UTC
    Logged 2026-11-05 08:25 UTC in Let's Encrypt Sycamore2027h1, entry 956,023,568
    SHA-256 1236c752951be7c6565376f43253c419ac23538b9ee9098a5ee1e635ebcbeb22
    Public key SHA-256 3ef10733e48bca9b4baf04395055c9283bab7fac76b110b9188cc8e372ce180f
    Addresses
    104.21.61.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.61.59, 172.67.206.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    belmont-btc365.live
    Registered
    2026-05-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  51. coinexes.us US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    coinexes.us
    First seen
    2026-11-05 08:31 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:26 UTC to 2027-02-03 08:25 UTC
    Logged 2026-11-05 08:26 UTC in Let's Encrypt Willow2027h1, entry 946,873,814
    SHA-256 493b5b3ab280d890834d8a5b2218d633cef5f86c324585dadfd63c75955d5439
    Public key SHA-256 e0e0a18ef5d2854d9d7a6d29558db3ea3e760dc8834a108ab1c79e37447ba296
    Addresses
    104.21.38.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.47, 172.67.219.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    coinexes.us
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:34 UTC

    Suggest a correction

  52. en-download-ledgrr.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    en-download-ledgrr.pages.dev
    First seen
    2026-11-05 08:31 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:26 UTC to 2027-02-03 08:23 UTC
    Logged 2026-11-05 08:26 UTC in Google PlumbersArms2027h1, entry 622,983,946
    SHA-256 c9f6f19dc4963cd730461f2f387520682c2cfafbdcec5d06bc2c107529c98d50
    Public key SHA-256 8a922ac6419ce504dc1b1afc8165349399590a34f2e64c7251200f92ca41764f
    Addresses
    172.66.44.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.173, 172.66.47.83): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  53. fabdesign30.fr US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 23 d ago
    DetailsHide
    Hostname
    fabdesign30.fr
    First seen
    2026-11-05 08:31 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-05 00:00 UTC to 2027-02-02 10:50 UTC
    Logged 2026-11-05 08:28 UTC in Let's Encrypt Willow2027h1, entry 946,899,639
    SHA-256 c232a84aabb484bae787d1108434ab8b4646d9043a731f139efc7b50545d768c
    Public key SHA-256 592bf0fec7ee106800547b0cfa0c4912e769bb0f12373e8c842c9a3f3b2a76d5
    PhishDestroy
    Addresses
    104.21.93.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.93.18, 172.67.202.181): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fabdesign30.fr
    Registered
    2026-10-13 · Hosting Concepts B.V. d/b/a Openprovider
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  54. mindnetwork-xyz.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    mindnetwork-xyz.pages.dev
    First seen
    2026-11-05 08:31 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 07:29 UTC to 2027-02-03 07:29 UTC
    Logged 2026-11-05 08:27 UTC in IPng Networks Gouda2027h1, entry 322,615,766
    SHA-256 b41ff4627890c949d675b3bcf53139bcb39ac512d0bfcab5da58cfb54eb73e23
    Public key SHA-256 cb85b626e4f93012415f977915cf935e0ca2f2ca8849a0eaafd3cd9667a8bfe4
    Addresses
    172.66.44.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.113, 172.66.47.143): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  55. mytrixhalogpt.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    mytrixhalogpt.com
    First seen
    2026-11-05 08:31 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    CERT Polska listed it 2026-07-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:29 UTC to 2027-02-03 08:27 UTC
    Logged 2026-11-05 08:29 UTC in Google ParcelYard2027h1, entry 622,624,592
    SHA-256 e18c885e31d253c15812ff5b2829e2240921a4f9d6b2ae5e0855893cf51847f1
    Public key SHA-256 117e62018945542565468120b10bc2f3c47552d0981ecaea0f0f84a2f474ef0c
    Addresses
    104.21.42.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.203, 172.67.210.15): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mytrixhalogpt.com
    Registered
    2025-11-15 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  56. roollxwin.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    roollxwin.com
    First seen
    2026-11-05 08:31 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 07:30 UTC to 2027-02-03 07:30 UTC
    Logged 2026-11-05 08:28 UTC in Google ParcelYard2027h1, entry 622,613,634
    SHA-256 ad0d3407c8be020e0cec67e2cb22bcb149faa9cd7a2061db5d667a3d6b07a140
    Public key SHA-256 d108cb6146be38c5972e2c0b9999d302818072aba5c3628047bc34a06582a806
    PhishDestroy
    Addresses
    104.21.2.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.112, 172.67.129.30): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    roollxwin.com
    Registered
    2026-05-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  57. sp19ct7-murem-biz-dafek-lonis.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    sp19ct7-murem-biz-dafek-lonis.pages.dev
    First seen
    2026-11-05 08:31 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 14:18 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:25 UTC to 2027-02-03 08:24 UTC
    Logged 2026-11-05 08:25 UTC in IPng Networks Halloumi2027h1, entry 371,724,505
    SHA-256 61db662648fa7451839a0087a6b2ee4ad5217ecde55d8271fba7f2eb85efc608
    Public key SHA-256 ae811675f51314d9d2795018a0ce414fa655ba79c46783dba55b6606cf7f5568
    PhishTank
    PhishTank report #9479580
    Addresses
    172.66.44.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.103, 172.66.47.153): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  58. ukwillowfieldhub.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ukwillowfieldhub.com
    First seen
    2026-11-05 08:31 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    CERT Polska listed it 2026-07-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:27 UTC to 2027-02-03 08:24 UTC
    Logged 2026-11-05 08:27 UTC in Let's Encrypt Willow2027h1, entry 946,878,552
    SHA-256 2f27c1d4e09d149ddd475adbd059e804abf0ea5264d434a49e8f1c33c66291bd
    Public key SHA-256 527499890c8a5c3189a67b3fc70843727c2d725e9532357963dd87d9ae1dbe50
    Addresses
    104.21.67.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.45, 172.67.212.206): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ukwillowfieldhub.com
    Registered
    2026-07-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  59. vrtn.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    vrtn.eu.cc
    First seen
    2026-11-05 08:31 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    CERT Polska listed it 2026-09-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:28 UTC to 2027-02-03 08:26 UTC
    Logged 2026-11-05 08:28 UTC in Google ParcelYard2027h1, entry 622,616,452
    SHA-256 169840ef141e2183dd18ee96231fec8eea5f1c8380920f4b4f948761b4a67cec
    Public key SHA-256 987a780ee68e6646ac4d707a89fc86d1b3e2b63bab0f5027dca8f646ee484c4c
    Addresses
    104.21.79.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.69, 172.67.169.61): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  60. 24-governance-orbio.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    24-governance-orbio.pages.dev
    First seen
    2026-11-05 08:26 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Not resolving · checked 2026-11-05 12:47 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 07:24 UTC to 2027-02-03 07:24 UTC
    Logged 2026-11-05 08:22 UTC in Google ParcelYard2027h1, entry 622,530,923
    SHA-256 02d8d7265a87ee93b6c03f72949ad7eb2ee9c02e21a2fbdca5882e5157266a01
    Public key SHA-256 32850b7c3f8996ad1aeb167b908959f1e0c60ca58b7775bad7976fe539d960c9
    Addresses
    172.66.44.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.92, 172.66.47.164): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  61. algolux.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    algolux.net
    First seen
    2026-11-05 08:26 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    CERT Polska listed it 2026-09-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:25 UTC to 2027-02-03 08:22 UTC
    Logged 2026-11-05 08:25 UTC in Geomys Tuscolo2027h1, entry 484,237,056
    SHA-256 f88887827752859215ea90c26d837dfd6b45d576f0330cf0bc211272bc2764a5
    Public key SHA-256 b7e738dfd13dca35198089f47bda94f6e2311ce7a709e48c3d25a35e3b79acc9
    Addresses
    104.21.53.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.6, 172.67.206.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    algolux.net
    Registered
    2026-09-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  62. bravesto.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bravesto.shop
    First seen
    2026-11-05 08:26 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    CERT Polska listed it 2026-05-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:23 UTC to 2027-02-03 08:23 UTC
    Logged 2026-11-05 08:23 UTC in DigiCert Sphinx2027h1, entry 364,799,610
    SHA-256 125e5bc20b7d0ad8d1d0d443d984bf32c8c7897c15dec16b71abdbebc4982a4d
    Public key SHA-256 d45724b3a951ffa4c13b779cc19ae80b5dae8a813879330a938ad067e533a3a7
    Addresses
    104.18.20.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.20.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bravesto.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:29 UTC

    Suggest a correction

  63. crosocs.cc US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 22 d ago
    DetailsHide
    Hostname
    crosocs.cc
    First seen
    2026-11-05 08:26 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    CERT Polska listed it 2026-10-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-05 00:00 UTC to 2027-01-28 18:50 UTC
    Logged 2026-11-05 08:24 UTC in Let's Encrypt Sycamore2027h1, entry 956,007,508
    SHA-256 6795ca9a62bd5fb0f3c3b17a5801c92306486bb347cf96425e60f9daa2c50433
    Public key SHA-256 147158a7bdeeb7bd59d36a10c10a0ed67ba421bac1d2af5054b9ba37cc7186e3
    Addresses
    104.19.221.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.19.221.20): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    crosocs.cc
    Registered
    2026-10-14 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  64. grassfoundations.io US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    grassfoundations.io
    First seen
    2026-11-05 08:26 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-05 00:00 UTC to 2027-02-02 20:14 UTC
    Logged 2026-11-05 08:22 UTC in Geomys Trastevere2027h1, entry 29,454,593
    SHA-256 8b80955088d1a32c623229002b39121ae25780f7e6c80eaedcea761606e3425a
    Public key SHA-256 9c6aa8287320c60049b3ba20869b716c4905eb782a185be52e27d11549f18f1b
    Addresses
    104.21.90.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.197, 172.67.160.219): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    grassfoundations.io
    Registered
    2026-02-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  65. hepcc.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    hepcc.online
    First seen
    2026-11-05 08:26 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:25 UTC to 2027-02-03 08:23 UTC
    Logged 2026-11-05 08:25 UTC in Google PlumbersArms2027h1, entry 622,968,609
    SHA-256 929b50a02b6abcf7832c49f530e127c31013185de989bc58dc3413d5f249066d
    Public key SHA-256 6248c1b5680f78bf733f301a26e73684c7835c5e6d939d641aa3ef56472e1b36
    Addresses
    104.21.37.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.152, 172.67.209.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hepcc.online
    Registered
    2025-11-15 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  66. lebiretatoru.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 23 d ago
    DetailsHide
    Hostname
    lebiretatoru.com
    First seen
    2026-11-05 08:26 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    CERT Polska listed it 2026-10-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-05 00:00 UTC to 2027-02-02 17:00 UTC
    Logged 2026-11-05 08:22 UTC in DigiCert Wyvern2027h1, entry 413,417,566
    SHA-256 05b9a860e8bc8124b6d958a97b0071f6a09b02fbe34f0ab9d783d7246a0b6312
    Public key SHA-256 d590388928d67180fbbb3ef77bf3a5c3d684ead85ddd66194b391e67c28f63e9
    Addresses
    104.21.77.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.67, 172.67.205.36): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lebiretatoru.com
    Registered
    2026-10-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:42 UTC

    Suggest a correction

  67. sovereignyieldex.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 15 d ago
    DetailsHide
    Hostname
    sovereignyieldex.com
    First seen
    2026-11-05 08:26 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    CERT Polska listed it 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-05 00:00 UTC to 2027-02-01 09:23 UTC
    Logged 2026-11-05 08:24 UTC in Geomys Tuscolo2027h1, entry 484,231,674
    SHA-256 71f81ccfb4bd68c735aa1d4f44ec2bee3152488faf80083cc40b83afd5b01e3f
    Public key SHA-256 642c2be38020e7efa4dd1d159efbe8e7684166922b3217220c2e76b27724e56f
    Addresses
    104.21.69.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.45, 172.67.204.85): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sovereignyieldex.com
    Registered
    2026-10-21 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:42 UTC

    Suggest a correction

  68. sp19ct7-muref-biz-sarek-dovil.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    sp19ct7-muref-biz-sarek-dovil.pages.dev
    First seen
    2026-11-05 08:26 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 14:18 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:22 UTC to 2027-02-03 08:20 UTC
    Logged 2026-11-05 08:22 UTC in Google ParcelYard2027h1, entry 622,530,863
    SHA-256 3b678895c063cac09ab7a610e2d95caa9fa585da4517439134adfa9e8e10cf97
    Public key SHA-256 8468d97d38f062c8841d2a9991a760edaa7d60035dd858833c97a960b96a335d
    PhishTank
    PhishTank report #9479578
    Addresses
    172.66.44.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.78, 172.66.47.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  69. tf-hk.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    tf-hk.com
    First seen
    2026-11-05 08:26 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:22 UTC to 2027-02-03 08:20 UTC
    Logged 2026-11-05 08:22 UTC in Geomys Tuscolo2027h1, entry 484,210,789
    SHA-256 33c611600a02ccc506b8ddd2fa80aea8d4bc0db30f76f31ea25d100f682172ce
    Public key SHA-256 8f21c41c96466f8688c5bf6a602da8a9afb6ac455c770b3436efe606ec1d6acd
    Addresses
    104.21.38.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.76, 172.67.220.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tf-hk.com
    Registered
    2026-09-07 · Internet Domain Service BS Corp
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:42 UTC

    Suggest a correction

  70. 23-governance-orbio.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    23-governance-orbio.pages.dev
    First seen
    2026-11-05 08:21 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Not resolving · checked 2026-11-05 12:47 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 08:07 UTC to 2027-02-03 08:15 UTC
    Logged 2026-11-05 08:17 UTC in DigiCert Wyvern2027h1, entry 413,362,838
    SHA-256 1f1e4ce49c34dc16645b96f2d224467760dbf631c3d3d69a428f25b59552524d
    Public key SHA-256 f7b5084605c29ca7cf5f3999bfd3d1fdc174745e3f98af83e6b724d37fdf2653
    Addresses
    172.66.44.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.139, 172.66.47.117): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  71. api.truenorthtradingplatform-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 21 mo ago
    DetailsHide
    Hostname
    api.truenorthtradingplatform-com.financecryptoworld.com
    First seen
    2026-11-05 08:21 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 04:24 UTC to 2026-12-06 05:24 UTC
    Logged 2026-11-05 08:18 UTC in DigiCert Wyvern2026h2, entry 2,205,487,848
    SHA-256 84c3013f7d12eafa4838a657c53eecc784f7a0992c855340886d703e299b91ae
    Public key SHA-256 ca6402680fb7165925b5b236aadcfeaafd7cac85c97476e0a4afe04390ded6b5
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  72. qhdjaz.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    qhdjaz.online
    First seen
    2026-11-05 08:21 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-05 00:00 UTC to 2027-02-03 05:17 UTC
    Logged 2026-11-05 08:16 UTC in Let's Encrypt Willow2027h1, entry 946,719,246
    SHA-256 4f67c3c4779153f77cdd83b98dc4c7834754fdbb540c1fbb1569d1b54ce3970c
    Public key SHA-256 b4d2f4bf725d7dfc1276f24d50461fabdfe025357582aa4e634adf765e3158d9
    Addresses
    104.21.36.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.76, 172.67.190.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qhdjaz.online
    Registered
    2026-06-04 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  73. slon-zerkalo-kraken.ru US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    slon-zerkalo-kraken.ru
    First seen
    2026-11-05 08:21 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 07:21 UTC to 2027-02-03 07:21 UTC
    Logged 2026-11-05 08:19 UTC in Google ParcelYard2027h1, entry 622,490,711
    SHA-256 95d0ca5da388d30e270571fbe17152d500cecfbc3e4be789ef7f4bd64a77e623
    Public key SHA-256 37e74a54c739b06427d225acac9023620ce16c45136d6210ff3a7901c45e6ac2
    PhishDestroy
    Addresses
    104.21.7.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.7.114, 172.67.130.51): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    slon-zerkalo-kraken.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:25 UTC

    Suggest a correction

  74. www.tectonicfinance.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder tectonicfinance.net, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.tectonicfinance.net
    First seen
    2026-11-05 08:21 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask, listing tectonicfinance.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 07:16 UTC to 2027-02-03 07:16 UTC
    Logged 2026-11-05 08:15 UTC in Google ParcelYard2027h1, entry 622,433,987
    SHA-256 44b73aca58d7ae9c64a2a8052516571f4927588e329211aaea510c1d31cb5cac
    Public key SHA-256 c42fc1e7253ddf20d82d322b9a895e2d02750a99fb2e0f89c934e6bc51e1f441
    Addresses
    104.21.16.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.59, 172.67.166.167): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tectonicfinance.net
    Registered
    2026-04-14 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:33 UTC

    Suggest a correction

  75. www.termmax.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder termmax.org, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.termmax.org
    First seen
    2026-11-05 08:21 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask, listing termmax.org and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 07:17 UTC to 2027-02-03 07:17 UTC
    Logged 2026-11-05 08:15 UTC in Geomys Tuscolo2027h1, entry 484,145,926
    SHA-256 86d0fefd2467320a54464a6d9942523e186e2f5cd011e8acac9e7bf38ff4aa68
    Public key SHA-256 8d4d5ee702d14dfaeb29a192a77759167a2e0c634355dc522f26cf96b0042b42
    Addresses
    104.21.18.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.163, 172.67.182.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    termmax.org
    Registered
    2026-04-14 · Atak Domain Bilgi Teknolojileri A._.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:31 UTC

    Suggest a correction

  76. www.veno-finance.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder veno-finance.net, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.veno-finance.net
    First seen
    2026-11-05 08:21 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask, listing veno-finance.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 07:19 UTC to 2027-02-03 07:19 UTC
    Logged 2026-11-05 08:18 UTC in Google ParcelYard2027h1, entry 622,468,377
    SHA-256 86e03e49c51210f9f29c3414de390b263d912793e06896fbde822c4c339e8d0c
    Public key SHA-256 c0114e56fb6626ac1f714b959c6a6950a54c21d245ea5574d2858f5551cd9bc2
    Addresses
    104.21.69.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.190 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.113, 172.67.207.190): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    veno-finance.net
    Registered
    2026-04-14 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:33 UTC

    Suggest a correction

  77. www.vesper-finance.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder vesper-finance.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.vesper-finance.com
    First seen
    2026-11-05 08:21 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · delisted on 2026-11-05
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask, listing vesper-finance.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 07:20 UTC to 2027-02-03 07:20 UTC
    Logged 2026-11-05 08:18 UTC in IPng Networks Halloumi2027h1, entry 371,646,252
    SHA-256 46e5749b7c3de50cfd77d90225d732f93e1e4d9033e0f818d332aff3de9f22ab
    Public key SHA-256 678a54cd4c50d05af9e2f394fde6b0ba464d7f9bb98c6a98116059784e6e621c
    Addresses
    104.21.53.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.45, 172.67.208.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vesper-finance.com
    Registered
    2026-04-13 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:19 UTC

    Suggest a correction

  78. calderwyn-7di.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    calderwyn-7di.pages.dev
    First seen
    2026-11-05 08:16 UTC
    First published
    2026-11-04 18:52 UTC
    Listing
    CERT Polska listed it 2026-11-04 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    PhishTank: first observed in the feed 2026-11-05 · still listed at the last successful feed check 2026-11-05 14:18 UTC
    DNS
    Resolves · checked 2026-11-04 18:54 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishTank feed
    4. We matched the new listing
    Certificate
    Issued by YE1
    Valid 2026-11-04 06:17 UTC to 2027-02-02 06:17 UTC
    Logged 2026-11-04 07:16 UTC in Google PlumbersArms2027h1, entry 604,659,937
    SHA-256 0b073be641569ba265fefb9c4217c5a28cced1164148ceaaae866a62443aa8df
    Public key SHA-256 e0ce224c95c1e7a1a94434dee3640b1e3fb086054481d5e0cc65fb9cedde26dc
    PhishTank
    PhishTank report #9554724
    Addresses
    172.66.45.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2d06
    2606:4700:310c::ac42:2efa
    Cloudflare
    Cloudflare (172.66.45.6, 172.66.46.250): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  79. 22-governance-orbio.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    22-governance-orbio.pages.dev
    First seen
    2026-11-05 08:15 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Not resolving · checked 2026-11-05 12:47 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 08:02 UTC to 2027-02-03 08:10 UTC
    Logged 2026-11-05 08:12 UTC in Let's Encrypt Willow2027h1, entry 946,675,877
    SHA-256 1e4e34c8fb186d7c0e8cce4ebd3bdb13e41253ab9a417977c4437358ab7e54ca
    Public key SHA-256 4dbe01d79019d0ff8e7a2f28860eb04a440bb724df79468aaacff63b774a5d8a
    Addresses
    172.66.45.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.26, 172.66.46.230): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  80. matbet756.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    matbet756.icu
    First seen
    2026-11-05 08:15 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 04:35 UTC to 2026-12-06 05:33 UTC
    Logged 2026-11-05 08:14 UTC in DigiCert Wyvern2026h2, entry 2,205,482,817
    SHA-256 7403241f65827daa7e83167a72d0555a174faaa17b66470ae030773f18f613ea
    Public key SHA-256 b1107b43e5f474a3a3ede3fafd18de2bf5c7a13bf49b0e507d181152ee6ae817
    PhishDestroy
    Addresses
    104.21.54.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.145, 172.67.139.102): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    matbet756.icu
    Registered
    2026-07-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  81. the-bergsignalgpt.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    the-bergsignalgpt.com
    First seen
    2026-11-05 08:15 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    CERT Polska listed it 2026-09-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:13 UTC to 2027-02-03 08:12 UTC
    Logged 2026-11-05 08:13 UTC in Let's Encrypt Sycamore2027h1, entry 955,846,149
    SHA-256 759efa2e497ec80f72f71ef85e13c73914d0e8fe4ee5b6f8a84bc6272a6cffe1
    Public key SHA-256 1a2212b5fa8af7ad23a6b15a48aff5b59da6cb4789cd6bd81f7a63b9a8e2c331
    Addresses
    104.21.8.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.139, 172.67.139.132): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    the-bergsignalgpt.com
    Registered
    2026-09-07 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:42 UTC

    Suggest a correction

  82. usdt-eth99.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    usdt-eth99.com
    First seen
    2026-11-05 08:15 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-05 00:00 UTC to 2027-02-01 07:23 UTC
    Logged 2026-11-05 08:15 UTC in IPng Networks Halloumi2027h1, entry 371,612,888
    SHA-256 0f9bebfbfc937fe101b3f65bf2f97553ee41126241e06b9fece46008e47f5183
    Public key SHA-256 3162942f6b9615c07547ee517f1feac05a525b7d8ff60e30f4613467a4cc7cdb
    PhishDestroy
    Addresses
    104.21.84.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.7, 172.67.184.132): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    usdt-eth99.com
    Registered
    2025-12-07 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:42 UTC

    Suggest a correction

  83. vbucksis.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    vbucksis.com
    First seen
    2026-11-05 08:15 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:14 UTC to 2027-02-03 08:12 UTC
    Logged 2026-11-05 08:14 UTC in Google ParcelYard2027h1, entry 622,427,271
    SHA-256 c888d7d5ad5ccaaa0e10ca8749dec0398531d0bd1e228015b16fe20fe681e5b0
    Public key SHA-256 a8b0345516f5e622bdce288cfce4df025cff3a6a43439fa7db658fbbf7d331e7
    Addresses
    104.21.42.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.109, 172.67.161.162): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vbucksis.com
    Registered
    2026-07-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:42 UTC

    Suggest a correction

  84. www.arcinvestor.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder arcinvestor.xyz, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    www.arcinvestor.xyz
    First seen
    2026-11-05 08:15 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Reported
    PhishDestroy, listing arcinvestor.xyz and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:11 UTC to 2027-02-03 08:11 UTC
    Logged 2026-11-05 08:11 UTC in Google PlumbersArms2027h1, entry 622,792,089
    SHA-256 40d3f0f7c2d284d631d3014a7aca99b389fdf13ec9c51a8b1d56c5011ab7db5b
    Public key SHA-256 ac53cf4840b58c26da90a0789519dd1355516d3bd2d89e0c003b75c9dd7de49b
    PhishDestroy
    Addresses
    104.21.73.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.168, 172.67.146.74): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    arcinvestor.xyz
    Registered
    2026-09-07 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  85. www.sparkdexapp.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder sparkdexapp.net, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.sparkdexapp.net
    First seen
    2026-11-05 08:15 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask, listing sparkdexapp.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 07:13 UTC to 2027-02-03 07:13 UTC
    Logged 2026-11-05 08:12 UTC in DigiCert Wyvern2027h1, entry 413,299,846
    SHA-256 371a07a869f724755c1d579d2b57622ee7198016f6b2bb0375ba4504cc74b5a7
    Public key SHA-256 e2149a675cb9ab328468de8f64972aafdf3abd3021104eb7326ced775cfff89d
    Addresses
    104.21.73.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.120, 172.67.162.72): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sparkdexapp.net
    Registered
    2026-04-13 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:19 UTC

    Suggest a correction

  86. www.summer-fi.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder summer-fi.net, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.summer-fi.net
    First seen
    2026-11-05 08:15 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask, listing summer-fi.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 07:14 UTC to 2027-02-03 07:14 UTC
    Logged 2026-11-05 08:13 UTC in IPng Networks Halloumi2027h1, entry 371,597,296
    SHA-256 1c7ded0a264403b7ee88c89cd175d4fdc489e38502bdb975a0ae880e68f29eb8
    Public key SHA-256 9f2597dd472608f44be6de947411668cd89caa411821e9f291d4f82c5e6585d0
    Addresses
    104.21.46.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.24, 172.67.222.160): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    summer-fi.net
    Registered
    2026-04-14 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:33 UTC

    Suggest a correction

  87. www.superbridge-app.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder superbridge-app.net, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.superbridge-app.net
    First seen
    2026-11-05 08:15 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · delisted on 2026-11-05
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask, listing superbridge-app.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 07:15 UTC to 2027-02-03 07:15 UTC
    Logged 2026-11-05 08:13 UTC in DigiCert Wyvern2027h1, entry 413,318,934
    SHA-256 23dbb0c39aa7b14e087c0688ced244f03c4fcb54f4cdfb1e649a2dc4bb3538a0
    Public key SHA-256 a789ab1334a9147918d75c2a8c30038a214f98bb377a36f14fb1139e66438711
    Addresses
    104.21.40.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.220, 172.67.157.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    superbridge-app.net
    Registered
    2026-04-14 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:33 UTC

    Suggest a correction

  88. www.team-finance.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder team-finance.org, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.team-finance.org
    First seen
    2026-11-05 08:15 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask, listing team-finance.org and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 07:16 UTC to 2027-02-03 07:16 UTC
    Logged 2026-11-05 08:14 UTC in IPng Networks Gouda2027h1, entry 322,516,974
    SHA-256 c6659a588b8e5012a450710216e221f4e0f6e9e4b8659f78c8f8236aad21d4d5
    Public key SHA-256 a7f7a8d128bb3e7c83ff6429cd5cd5cc33918beb3194e8c2c2605a9b59c9fd90
    Addresses
    104.21.83.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.215, 172.67.182.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    team-finance.org
    Registered
    2026-04-14 · Atak Domain Bilgi Teknolojileri A._.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:31 UTC

    Suggest a correction

  89. ykmprm.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    ykmprm.shop
    First seen
    2026-11-05 08:15 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:13 UTC to 2027-02-03 08:12 UTC
    Logged 2026-11-05 08:14 UTC in DigiCert Sphinx2027h1, entry 364,700,621
    SHA-256 1ef985c7d7bd4aea75479e3844d340fb18564f8b20006be1345123e87e01c6c4
    Public key SHA-256 27725bff65c6424b8d400e23f130e5d8fd98a79aa0fee29170d1b1b0793191a6
    Addresses
    104.21.31.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.31.137, 172.67.176.217): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ykmprm.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  90. 21-governance-orbio.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    21-governance-orbio.pages.dev
    First seen
    2026-11-05 08:10 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Not resolving · checked 2026-11-05 12:47 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 07:08 UTC to 2027-02-03 07:08 UTC
    Logged 2026-11-05 08:06 UTC in Let's Encrypt Willow2027h1, entry 946,590,695
    SHA-256 4d3861b5d96c205f56d78948e834523fb212421142bd26a4f3c3c99dbe310f5f
    Public key SHA-256 36c59a46fd22e35b5b163879f3a4a32998474fa3b4cfc45e8ed08ef549a24aaf
    Addresses
    172.66.44.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.92, 172.66.47.164): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  91. edenautoecole.fr US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    edenautoecole.fr
    First seen
    2026-11-05 08:10 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-05 00:00 UTC to 2027-02-02 01:00 UTC
    Logged 2026-11-05 08:06 UTC in Sectigo Statue2027h1, entry 61,608,218
    SHA-256 ba1cfc0d70b223097952e355131b22864129ce79fdbb473cd98cf9ef97933c23
    Public key SHA-256 c16edc28e214b87454def3ae5df7dbe90044c7cb01a07a55c1be3106ed66f979
    PhishDestroy
    Addresses
    104.21.9.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.159.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.114, 172.67.159.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    edenautoecole.fr
    Registered
    2026-03-08 · Hosting Concepts B.V. d/b/a Openprovider
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:12 UTC

    Suggest a correction

  92. pollygon.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    pollygon.digital
    First seen
    2026-11-05 08:10 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:08 UTC to 2027-02-03 08:06 UTC
    Logged 2026-11-05 08:08 UTC in Let's Encrypt Willow2027h1, entry 946,619,791
    SHA-256 74b6afa4d8092311455e88a2c6ae4a37ffe838d59d59ec5b254bf07d12c6890b
    Public key SHA-256 3f6bfa4a5e54e564936351b5b0c757dddaf613312d6cca44dd125dae699fd6d8
    Addresses
    104.21.23.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.23.112, 172.67.210.207): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pollygon.digital
    Registered
    2026-09-07 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:12 UTC

    Suggest a correction

  93. swap.alphapepe.io US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder alphapepe.io, reported by PhishDestroyMX presentSPF -allDMARC policy noneRegistered 18 mo ago
    DetailsHide
    Hostname
    swap.alphapepe.io
    First seen
    2026-11-05 08:10 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Reported
    PhishDestroy, listing alphapepe.io and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 07:10 UTC to 2027-02-03 07:10 UTC
    Logged 2026-11-05 08:09 UTC in Geomys Tuscolo2027h1, entry 484,078,973
    SHA-256 7d227a21aa340c1c88069fef7945d75b4d136d55b79a5daa4147c32c26e8cad6
    Public key SHA-256 c9707ffea7963f6b6289305a44cc897e53fea02c9af8d1a7bb55832d85bccbc0
    PhishDestroy
    Addresses
    104.21.16.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.215, 172.67.215.244): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    alphapepe.io
    Registered
    2025-05-10 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Receives mail at alphapepe-io.mail.protection.outlook.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  94. www.layer-bank.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder layer-bank.net, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.layer-bank.net
    First seen
    2026-11-05 08:10 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask, listing layer-bank.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 07:06 UTC to 2027-02-03 07:06 UTC
    Logged 2026-11-05 08:05 UTC in Google ParcelYard2027h1, entry 622,311,548
    SHA-256 b0b4fae37cdc1620fd387f6b2e29309f68148be98ced9d7fb94c0715522e1c5a
    Public key SHA-256 281f3c83e7df9c82797f70c4008abc04a3735d8e11d131337905c7acbefa5409
    Addresses
    104.21.95.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.31, 172.67.142.162): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    layer-bank.net
    Registered
    2026-04-14 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:33 UTC

    Suggest a correction

  95. www.mantle-bridge.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder mantle-bridge.org, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.mantle-bridge.org
    First seen
    2026-11-05 08:10 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask, listing mantle-bridge.org and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 07:08 UTC to 2027-02-03 07:08 UTC
    Logged 2026-11-05 08:06 UTC in Geomys Tuscolo2027h1, entry 484,056,148
    SHA-256 387733b324a51fdff673c64342ddafb633ac555cb5b81c8b9ad8d57902bf2176
    Public key SHA-256 81665109799e3d61aa5279a28dd742045fdb07e01619e8f479931f4298bad4e3
    Addresses
    104.21.75.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.16, 172.67.166.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mantle-bridge.org
    Registered
    2026-04-13 · Atak Domain Bilgi Teknolojileri A._.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:19 UTC

    Suggest a correction

  96. www.merchant-moe.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder merchant-moe.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.merchant-moe.com
    First seen
    2026-11-05 08:10 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask, listing merchant-moe.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 07:08 UTC to 2027-02-03 07:08 UTC
    Logged 2026-11-05 08:07 UTC in Google PlumbersArms2027h1, entry 622,736,520
    SHA-256 123a4247c61a06b80183e79527a4c0cd12c41de042c2970400dbba56b93bceaa
    Public key SHA-256 dd102c1e0a18abd251d1abf6a25d0330689bac44b52a0e855216be348fdbed4e
    Addresses
    104.21.82.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.239, 172.67.209.74): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    merchant-moe.com
    Registered
    2026-04-13 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:19 UTC

    Suggest a correction

  97. www.olympusdao-v2.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder olympusdao-v2.net, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.olympusdao-v2.net
    First seen
    2026-11-05 08:10 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · delisted on 2026-11-05
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask, listing olympusdao-v2.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 07:09 UTC to 2027-02-03 07:09 UTC
    Logged 2026-11-05 08:07 UTC in DigiCert Wyvern2027h1, entry 413,253,592
    SHA-256 561c7d5fe3bcce7a35e2e47679151d21bf70bdef29cd0a5ad01f91b904ebd22b
    Public key SHA-256 97e86298f75ec3c530a0d0bcc8dba884e9ccd30eed264fed15f1fbfa66610c13
    Addresses
    104.21.68.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.6, 172.67.184.29): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    olympusdao-v2.net
    Registered
    2026-04-13 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:19 UTC

    Suggest a correction

  98. www.rheafinance.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder rheafinance.net, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.rheafinance.net
    First seen
    2026-11-05 08:10 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · delisted on 2026-11-05
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask, listing rheafinance.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 07:11 UTC to 2027-02-03 07:11 UTC
    Logged 2026-11-05 08:09 UTC in DigiCert Wyvern2027h1, entry 413,272,394
    SHA-256 14f4add6ec44b36ee846d8fe62e11d29cbd8af60d0520f01e3602943db88fcba
    Public key SHA-256 3018ce25107e59f8486512a5712df629134842ccc0fd6bfb2b5a05086018d1c1
    Addresses
    104.21.36.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.130, 172.67.194.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rheafinance.net
    Registered
    2026-04-14 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:33 UTC

    Suggest a correction

  99. dolbo-job-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    dolbo-job-ai.com
    First seen
    2026-11-05 08:05 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    CERT Polska listed it 2026-09-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 12:17 UTC
    PhishDestroy: first observed in the feed 2026-10-26 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 07:06 UTC to 2027-02-03 07:06 UTC
    Logged 2026-11-05 08:04 UTC in Google ParcelYard2027h1, entry 622,302,396
    SHA-256 4463d977847cee786ee1ec0b213c3d18fc0cbf5b9ebbd5a272facf9c165f1f34
    Public key SHA-256 8159101e56ac7f9214d80912b379b22cebd3916e60c224f7d4696f0dfd2ba1f6
    Addresses
    104.21.36.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.149, 172.67.195.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dolbo-job-ai.com
    Registered
    2026-05-12 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:42 UTC

    Suggest a correction

  100. logn-teerzr-io-eng.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    logn-teerzr-io-eng.pages.dev
    First seen
    2026-11-05 08:05 UTC
    First published
    2026-11-05 08:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:45 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 07:01 UTC to 2027-02-03 07:58 UTC
    Logged 2026-11-05 08:01 UTC in Google PlumbersArms2027h1, entry 622,662,130
    SHA-256 2d95fa08c2f3b7151b5b035d1ffef6311eb59fd6b707c1dc722c9b26c0f34412
    Public key SHA-256 ffc132076c98d70802aba6016392c785e52c26498952a42aaba52326861d9f0b
    Addresses
    172.66.44.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.60, 172.66.47.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

Showing 901–1,000 of 2,869 hostnames.Back to the start
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources