Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-05 16:37 UTC
Certificate-log entries · 24 h
330.9M
from 84 distinct feeds
Unique certificates · 24 h
35.2M
each reviewed
Names resolved · 24 h
22.0M
16.2M with an address
Findings · 24 h
5,708
222 of 1,061 brands targeted

5,122 hostnames from the last 24 hours.

  1. sp19ct7-furex-biz-kalem-voris.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    sp19ct7-furex-biz-kalem-voris.pages.dev
    First seen
    2026-11-05 13:15 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 15:48 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:14 UTC to 2027-02-03 13:14 UTC
    Logged 2026-11-05 13:14 UTC in Google PlumbersArms2027h1, entry 626,755,575
    SHA-256 67bf82c823c2a743d75a0d902b57a65383ebd69405a2c148c935eaaa0fde6387
    Public key SHA-256 12efd46f1b00a64a7245b72329d7ad0acd0390448618695b3853e6c3b2f4b364
    PhishTank
    PhishTank report #9479506
    Addresses
    172.66.44.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.131, 172.66.47.125): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  2. texefmzqxl.club US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    texefmzqxl.club
    First seen
    2026-11-05 13:15 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-06-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:14 UTC to 2027-02-03 12:14 UTC
    Logged 2026-11-05 13:13 UTC in Google ParcelYard2027h1, entry 626,347,904
    SHA-256 dc1cd505cd9c1adefcf807739418439b2e8f20757c2fc0002ced12af487a18da
    Public key SHA-256 7f2c2c61b52ed4db218d62b53f3c31618156644c91cc38ce39878add0c1cbe96
    Addresses
    104.21.21.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.21.167, 172.67.199.161): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    texefmzqxl.club
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:17 UTC

    Suggest a correction

  3. turotnba.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    turotnba.shop
    First seen
    2026-11-05 13:15 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:14 UTC to 2027-02-03 13:12 UTC
    Logged 2026-11-05 13:14 UTC in Google PlumbersArms2027h1, entry 626,758,512
    SHA-256 abffff1383aa4aa98bfa8fe50d6187ef6e36bcf37c3ae8ebabfb6a45863a8d96
    Public key SHA-256 29b35cdd10bbb8b6ce2a43b12bd980f7fe5ec55537955bdf48190ff203ffa53b
    Addresses
    104.21.76.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.108, 172.67.193.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    turotnba.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:17 UTC

    Suggest a correction

  4. ultra-rercal.com
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    ultra-rercal.com
    First seen
    2026-11-05 13:15 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Not resolving · checked 2026-11-05 16:35 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 13:03 UTC to 2027-02-03 13:10 UTC
    Logged 2026-11-05 13:13 UTC in DigiCert Wyvern2027h1, entry 416,234,621
    SHA-256 1ff95a23de1488752e09ed1bd6aeeb62b9aebced4d64e3226299353a5f7ae756
    Public key SHA-256 c5cd93f6e5b95646135ad3a7688951f7e16dc5bdbda47d2d4dd78f545ddf9c93
    Domain
    ultra-rercal.com
    Registered
    2026-08-31 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  5. vexaluniqo.gifts US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    vexaluniqo.gifts
    First seen
    2026-11-05 13:15 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    USOM listed it 2026-07-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:45 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-05 12:12 UTC to 2027-02-03 13:09 UTC
    Logged 2026-11-05 13:12 UTC in Sectigo Elephant2027h1, entry 730,960,428
    SHA-256 0dcf6855bb0ea05d78802a4f2c047948fc387c29f5e948262fee69e31fabd5ab
    Public key SHA-256 64d74f6e7e1edbfb69d31d05bbc006b6d046862b0545118c0769a8c82bb85b48
    Addresses
    104.21.10.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.134, 172.67.131.123): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vexaluniqo.gifts
    Registered
    2026-07-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:24 UTC

    Suggest a correction

  6. web3-staking.top US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    web3-staking.top
    First seen
    2026-11-05 13:15 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:13 UTC to 2027-02-03 12:13 UTC
    Logged 2026-11-05 13:11 UTC in Google PlumbersArms2027h1, entry 626,724,537
    SHA-256 06344f663369a81251b476a1f67b8aea817143a43622c11228f10bbdcb0d7717
    Public key SHA-256 dc8063e7169f2a3872e90c20d1001785dcbb4bf4ed11dbc94803fb2aa14c1ba4
    PhishDestroy
    Addresses
    104.21.73.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.220, 172.67.150.86): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    web3-staking.top
    Registered
    2026-03-05 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:17 UTC

    Suggest a correction

  7. web3verselab.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    web3verselab.top
    First seen
    2026-11-05 13:15 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:14 UTC to 2027-02-03 13:12 UTC
    Logged 2026-11-05 13:14 UTC in Google PlumbersArms2027h1, entry 626,767,204
    SHA-256 1a7bdb449903ec477f8904af28e8bf892a05dfcd5c8340d98122bebd64b703f9
    Public key SHA-256 4089f9c3307906954c866953ea48672857f7e071a36d8ec3c6d456a3c5134a12
    Addresses
    104.21.16.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.39, 172.67.166.22): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    web3verselab.top
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:17 UTC

    Suggest a correction

  8. www.argo.zenavlico.cyou TJ · AS208885 · NFS-AS Noyobzoda Faridduni …
    ListedUnder zenavlico.cyou, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    www.argo.zenavlico.cyou
    First seen
    2026-11-05 13:15 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-05-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska, listing zenavlico.cyou and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:15 UTC to 2027-02-03 12:15 UTC
    Logged 2026-11-05 13:14 UTC in IPng Networks Halloumi2027h1, entry 374,425,817
    SHA-256 38b4979ce7507a948d5018afaa004c8d27f91076041339ee7faa856fbc401d84
    Public key SHA-256 248045da7b7ba06dea8be8e687616ec83a3c778a329abb8a66c33d01a68cc1cb
    Addresses
    95.85.244.13 · Tajikistan · AS208885 NFS-AS Noyobzoda Faridduni Saidilhom
    Domain
    zenavlico.cyou
    Registered
    2026-01-26 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  9. artlina.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    artlina.net
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:07 UTC to 2027-02-03 12:07 UTC
    Logged 2026-11-05 13:05 UTC in Google PlumbersArms2027h1, entry 626,637,629
    SHA-256 5d78e3fe62339c6b75c9e2c71575c45527b60b5f7de2f35503bbe6d24fdee72d
    Public key SHA-256 6694443908c69f7442c447a4e806e225b5d5d2a83934cc7c438e4934cea7968b
    PhishDestroy
    Addresses
    104.21.44.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.44.249, 172.67.206.153): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    artlina.net
    Registered
    2026-03-14 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:17 UTC

    Suggest a correction

  10. aurora-nu-invest.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    aurora-nu-invest.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:10 UTC to 2027-02-03 12:10 UTC
    Logged 2026-11-05 13:08 UTC in Let's Encrypt Sycamore2027h1, entry 959,940,689
    SHA-256 5131d16a35669dc91015e7e391bb13d95399a7f1db879286cc7d4cf424abf507
    Public key SHA-256 5b167912f1eb531268b1172d527bd349c74cdb6e69742b734d34e7f714900d77
    Addresses
    104.21.4.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.107, 172.67.131.254): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aurora-nu-invest.com
    Registered
    2026-11-03 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  11. bereketinvest.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 48 d ago
    DetailsHide
    Hostname
    bereketinvest.sbs
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 12:59 UTC to 2027-02-03 13:07 UTC
    Logged 2026-11-05 13:09 UTC in DigiCert Sphinx2027h1, entry 367,345,165
    SHA-256 17654e3182b47fe0a66116b573f9edaaceda9c57944408dc2c07ea6627ed6d73
    Public key SHA-256 0f914163e28b9c4b4ce942dbb8ac6b1a72a95a72af57d34d7d966c7d02012de7
    Addresses
    104.21.59.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.12 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.106, 172.67.223.12): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bereketinvest.sbs
    Registered
    2026-09-18 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  12. betglimera.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF ~allDMARC rejectRegistered 59 d ago
    DetailsHide
    Hostname
    betglimera.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:10 UTC to 2027-02-03 13:08 UTC
    Logged 2026-11-05 13:10 UTC in Geomys Tuscolo2027h1, entry 487,135,452
    SHA-256 fc787a67dd32682866f9062665b89b9b81e21b501f7f248b8a84199fece0161e
    Public key SHA-256 c090053e31656ee7747e1b56704287c23d665ef22c9a35723befc60c47a84fde
    Addresses
    104.21.30.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.30.7, 172.67.150.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    betglimera.com
    Registered
    2026-09-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  13. binariumxd.com SC · AS209101 · ipvendettainc IP Vendetta I…
    ReportedReported by PhishDestroyMX presentSPF -allDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    binariumxd.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 12:10 UTC to 2027-02-03 12:10 UTC
    Logged 2026-11-05 13:09 UTC in Let's Encrypt Willow2027h1, entry 950,676,506
    SHA-256 90ea9c33dba54bac3c40b0cdae35ecc4d200c79197c65c922105753a6e6f0155
    Public key SHA-256 1e3eb8f19ee1f211f7dab52fc89d008fa220fd01c2db96d05ec97482a3456d32
    PhishDestroy
    Addresses
    94.154.172.39 · Seychelles · AS209101 ipvendettainc IP Vendetta Inc.
    Domain
    binariumxd.com
    Registered
    2026-04-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Receives mail at mail.binariumxd.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  14. calm-passages.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    calm-passages.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-05-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 11:28 UTC to 2026-12-06 12:28 UTC
    Logged 2026-11-05 13:08 UTC in Google ParcelYard2026h2, entry 1,640,745,107
    SHA-256 56e04089525315a47318e02db7a902cef3b7f7e4756d6ed7cad52c2be49f290c
    Public key SHA-256 459d90829f7892874b4d0f42d7c3e9c59c3cad05717a7f2097aca53889ff1e97
    Addresses
    104.21.4.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.219, 172.67.132.135): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    calm-passages.com
    Registered
    2025-12-04 · Porkbun LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  15. claimairdrop-standx.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    claimairdrop-standx.live
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 12:57 UTC to 2027-02-03 13:05 UTC
    Logged 2026-11-05 13:07 UTC in DigiCert Wyvern2027h1, entry 416,181,390
    SHA-256 a5d0cca9a32c20d89b9dbb03b1fbee6cf913b2c50872a5abd00f3f16a88cd96c
    Public key SHA-256 748cb20fc67cf0d121dc97bd35e50f9e769ab4f5ae8a4ee48e47b1ac6a6e4b3e
    Addresses
    104.21.64.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.64.234, 172.67.137.179): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    claimairdrop-standx.live
    Registered
    2026-11-03 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:24 UTC

    Suggest a correction

  16. connect.bayoubyte.org BD · AS153568 · NEW DHAKA HARDWARE
    ReportedUnder bayoubyte.org, reported by PhishDestroyMX presentMX on Spamhaus DROPSPF ~allSPF on Spamhaus DROPDMARC quarantineRegistered 13 mo ago
    DetailsHide
    Hostname
    connect.bayoubyte.org
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy, listing bayoubyte.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 12:07 UTC to 2027-02-03 12:07 UTC
    Logged 2026-11-05 13:06 UTC in IPng Networks Gouda2027h1, entry 324,442,552
    SHA-256 0f235510e643ba5fe733b971c0e1f970b67b1a77440ae53a0566c62ab1a319b6
    Public key SHA-256 b258b3693350729752ea556cbeb7b86670e5500bd957dede1104a3c104ae194d
    PhishDestroy
    Addresses
    163.61.188.2 · Bangladesh · AS153568 NEWDHAKAHARDWARE-AS-AP - NEW DHAKA HARDWARE
    Domain
    bayoubyte.org
    Registered
    2025-10-02 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at bayoubyte.org
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    MX listing
    Mail server bayoubyte.org at 163.61.188.2 is on Spamhaus DROP: hijacked or criminal networks.
    SPF listing
    The SPF record lists 163.61.188.2 as a sender. It is on Spamhaus DROP: hijacked or criminal networks.
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  17. coxenergaesp.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    coxenergaesp.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:09 UTC to 2027-02-03 12:09 UTC
    Logged 2026-11-05 13:08 UTC in Google PlumbersArms2027h1, entry 626,670,649
    SHA-256 1f19637e083d6833260b46f37bd7ac07e4046033028f85d0700d696f1ae11a69
    Public key SHA-256 5ca7b07354e6001d42dcb8c7d2f615638faa41ae71032afe8ef063e70b05f4e7
    Addresses
    104.21.94.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.94.102, 172.67.222.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    coxenergaesp.com
    Registered
    2026-10-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  18. cpiolnro.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    cpiolnro.shop
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:09 UTC to 2027-02-03 13:08 UTC
    Logged 2026-11-05 13:09 UTC in Google ParcelYard2027h1, entry 626,299,913
    SHA-256 4de9ba8d042c9a3faaca2782bf74f1c5ae457d53606471eb7b4654ccaf9f468d
    Public key SHA-256 66cc22c122b34a2a417f5726fee660a7c7786ed9253ec369821a3dbc8f57df6e
    Addresses
    104.21.28.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.231, 172.67.147.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cpiolnro.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:17 UTC

    Suggest a correction

  19. cresta-patrimenza.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    cresta-patrimenza.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 12:09 UTC to 2027-02-03 12:09 UTC
    Logged 2026-11-05 13:08 UTC in Geomys Tuscolo2027h1, entry 487,116,782
    SHA-256 b652f2a843c55cd5002f1afd1db49417c29a71638972321c8357fedb6c660c18
    Public key SHA-256 870784ebf52c9c40b315faf9c8ead68a89f293b7af52db6d43583a52697acc74
    Addresses
    104.21.13.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.198.208 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.13.78, 172.67.198.208): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cresta-patrimenza.com
    Registered
    2026-10-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  20. deep-yieldstead.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    deep-yieldstead.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:08 UTC to 2027-02-03 12:08 UTC
    Logged 2026-11-05 13:07 UTC in IPng Networks Halloumi2027h1, entry 374,364,669
    SHA-256 0ca4a5582b715d98ea916b1d49f5ff7bedbd261c22e67fe9d9dfb4cceeb71efa
    Public key SHA-256 14dc38d23d9f3657701231d526e43919b87ead4fae7be063039e9aac468eb81f
    Addresses
    104.21.23.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.23.62, 172.67.209.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    deep-yieldstead.com
    Registered
    2026-10-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  21. deft-tradevoran.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 16 d ago
    DetailsHide
    Hostname
    deft-tradevoran.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:07 UTC to 2027-02-03 13:05 UTC
    Logged 2026-11-05 13:07 UTC in IPng Networks Halloumi2027h1, entry 374,370,515
    SHA-256 8e011874ae099f3652b7c29b3dbd1e38d937f6a5283aca144502db8597a14703
    Public key SHA-256 fac0868b88865e5d921283ed65afbeb2482a8c20dd516d63083454aaef37a206
    Addresses
    104.21.1.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.1.179, 172.67.129.175): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    deft-tradevoran.com
    Registered
    2026-10-20 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  22. destradeai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 44 d ago
    DetailsHide
    Hostname
    destradeai.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:07 UTC to 2027-02-03 12:07 UTC
    Logged 2026-11-05 13:06 UTC in Google ParcelYard2027h1, entry 626,250,824
    SHA-256 8002316b16aca6fa85bc5eb0892c82f90a444cd862dbf3f97716747bf0ce6464
    Public key SHA-256 024b224fd1175647251e9c0e773bf7efaaf248e6327d79a0bb6a206ce2e5981e
    Addresses
    104.21.43.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.186, 172.67.184.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    destradeai.com
    Registered
    2026-09-22 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  23. dovizieria-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    dovizieria-ai.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:09 UTC to 2027-02-03 12:09 UTC
    Logged 2026-11-05 13:08 UTC in Google PlumbersArms2027h1, entry 626,675,700
    SHA-256 17bf6d3dd5b717eaca0a288fa2d7957b5d60a1d5849b14482803e26198812c35
    Public key SHA-256 39ebcb80efeeca161712f98c69013a11bc8a4bd9cfa3fea4a6bd21e15bbbea73
    Addresses
    104.21.49.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.49.204, 172.67.167.25): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dovizieria-ai.com
    Registered
    2026-10-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  24. duru-nemaransal.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    duru-nemaransal.net
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:09 UTC to 2027-02-03 12:09 UTC
    Logged 2026-11-05 13:07 UTC in Google PlumbersArms2027h1, entry 626,664,930
    SHA-256 15b96d7a988878c848053126a0e816cc847651fdc1f6d36d8910ac4d1ae9bb34
    Public key SHA-256 42015ada64932cec76c466c44efc46e42a0790d1b55ba75ae51ac1c3a7d2ceb6
    Addresses
    104.21.17.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.116, 172.67.175.200): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    duru-nemaransal.net
    Registered
    2026-10-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  25. eiafd-83rfv-8cicw-wgo-e5t.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    eiafd-83rfv-8cicw-wgo-e5t.pages.dev
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 15:48 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 12:56 UTC to 2027-02-03 13:01 UTC
    Logged 2026-11-05 13:06 UTC in DigiCert Sphinx2027h1, entry 367,308,999
    SHA-256 b9403faf7ceb4abad65881907f4a5f8b73190926372ad3339480579986a567c3
    Public key SHA-256 89e276368e9dba7be64663f8ca8426190a8dc55ab6563929d59ce4b1047782da
    PhishTank
    PhishTank report #9479354
    Addresses
    172.66.44.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.213, 172.66.47.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  26. eivisshopping.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    eivisshopping.online
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:06 UTC to 2027-02-03 12:06 UTC
    Logged 2026-11-05 13:05 UTC in Google PlumbersArms2027h1, entry 626,630,741
    SHA-256 07d6da194e0a739fe808fdaed3a8049616ad8b61cebd50af9e6be17fd1b98ff0
    Public key SHA-256 96556ba1da5ab9e1320fd670240f01540af01c92c0390bc22f5d2f9865612497
    Addresses
    104.21.18.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.224, 172.67.183.217): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eivisshopping.online
    Registered
    2026-05-12 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  27. gecas.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (phishing site)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    gecas.cc
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:08 UTC to 2027-02-03 13:07 UTC
    Logged 2026-11-05 13:08 UTC in Geomys Tuscolo2027h1, entry 487,124,577
    SHA-256 29d7ff1a5cfe8a7131e34de5bfe2dae0af59fdc9c676a01073e99091580274b9
    Public key SHA-256 bc5d523941860cab335cc497f47f929ca94061d71de990fba7524bbcea46f969
    Addresses
    104.21.64.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.64.230, 172.67.137.147): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gecas.cc
    Registered
    2026-09-07 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:21 UTC

    Suggest a correction

  28. girtrustlt.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 29 d ago
    DetailsHide
    Hostname
    girtrustlt.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 12:56 UTC to 2027-02-03 13:04 UTC
    Logged 2026-11-05 13:06 UTC in Let's Encrypt Sycamore2027h1, entry 959,910,872
    SHA-256 6af954f414d5708e1bfe2e51e003f96d8a919f512c7f40f34c1601c3d4eb350c
    Public key SHA-256 2c847f6983d459c074d26c3a0096dad107e5e5f7cfcb2d0cf989065986ddfa61
    Addresses
    104.21.32.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.32.168, 172.67.153.19): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    girtrustlt.com
    Registered
    2026-10-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  29. hyrorevionypro-de.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    hyrorevionypro-de.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:10 UTC to 2027-02-03 12:10 UTC
    Logged 2026-11-05 13:08 UTC in Let's Encrypt Willow2027h1, entry 950,667,317
    SHA-256 1cb33198146024a28c4f52d8b565de5a86c1350d5b1ef4237d368ef49c64b0a6
    Public key SHA-256 18f180aed267c1ebd6ad6118ddd0f8af0e7e518c7d14f16dd9dd76ef701277e2
    Addresses
    104.21.71.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.138, 172.67.145.102): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hyrorevionypro-de.com
    Registered
    2026-10-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  30. inter-swift.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 36 d ago
    DetailsHide
    Hostname
    inter-swift.net
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:07 UTC to 2027-02-03 12:07 UTC
    Logged 2026-11-05 13:06 UTC in Google PlumbersArms2027h1, entry 626,647,462
    SHA-256 81132883143e54037ebac2c26fac64dff501ef3937ecc3d601582c8af5c534fe
    Public key SHA-256 76d6eec06b53940bfd71dbb1cdf9e7bcf68290c63cf4a17ac6a2a46e2221c96a
    Addresses
    104.21.58.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.210, 172.67.164.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    inter-swift.net
    Registered
    2026-09-30 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  31. ksbjhfk.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 16 d ago
    DetailsHide
    Hostname
    ksbjhfk.net
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:09 UTC to 2027-02-03 12:09 UTC
    Logged 2026-11-05 13:08 UTC in Google PlumbersArms2027h1, entry 626,674,796
    SHA-256 01f89c68af8b917bd5b222798e7bed12798c159e065f1f3fa94c77a3e77feaef
    Public key SHA-256 380a263e60380cfbbe5875da0d5b7898674ed48ccce93df1af542d71fb18f893
    Addresses
    104.21.91.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.205, 172.67.179.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ksbjhfk.net
    Registered
    2026-10-20 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  32. kuzeytr.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX presentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    kuzeytr.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    USOM listed it 2026-09-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:45 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 10:28 UTC to 2026-12-06 11:27 UTC
    Logged 2026-11-05 13:06 UTC in DigiCert Wyvern2026h2, entry 2,205,936,717
    SHA-256 506489da0acb916b67f3fc509da88e9720cae70dbc6749a16700b78c8a6a1b64
    Public key SHA-256 32cf7c335af287091904aa46ea5a4b09623b1bc362cdafa8875a20ce577de9f5
    Addresses
    104.21.3.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.184, 172.67.131.22): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kuzeytr.com
    Registered
    2026-08-14 · Dynadot Inc
    MX
    Receives mail at smtp.google.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  33. lucrantai-it.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    lucrantai-it.net
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:09 UTC to 2027-02-03 12:09 UTC
    Logged 2026-11-05 13:08 UTC in IPng Networks Gouda2027h1, entry 324,456,215
    SHA-256 766dca65def2257d1043f0eed220fc9826854f4f92ebd5717331cbcc8b2ae6d8
    Public key SHA-256 2030b2223f5bc50907c9685d5326cc957e3328e1efc70567806bc277c1e05948
    Addresses
    104.21.75.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.107, 172.67.221.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lucrantai-it.net
    Registered
    2026-09-03 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  34. luohuaniuniu.cyou CN · AS45102 · Alibaba (US) Technology Co.…
    ListedAlibaba CloudListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    luohuaniuniu.cyou
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-05 12:07 UTC to 2027-02-03 12:07 UTC
    Logged 2026-11-05 13:06 UTC in DigiCert Wyvern2027h1, entry 416,172,381
    SHA-256 12cd99cbd125da180e7fd85d492e11327d3a20cf4cc53946011ac76910c8ed9e
    Public key SHA-256 e76de13c33a32e84a4c5bcae1308d10e9758fd4d7611ad8f8f0bec765ae2d2ca
    Addresses
    47.252.7.112 · China · AS45102 ALIBABA-CN-NET - Alibaba (US) Technology Co., Ltd. · Alibaba Cloud (cloud provider)
    Alibaba Cloud
    Alibaba Cloud (47.252.7.112): a cloud provider. It rents servers and addresses to its customers.
    Domain
    luohuaniuniu.cyou
    Registered
    2026-07-01 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  35. nitivalia-pt.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 35 d ago
    DetailsHide
    Hostname
    nitivalia-pt.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:06 UTC to 2027-02-03 12:06 UTC
    Logged 2026-11-05 13:05 UTC in Google PlumbersArms2027h1, entry 626,631,629
    SHA-256 1272fc215d8781a395a7ce50557a3854815170a54715e293e38a879910263673
    Public key SHA-256 9cc67b0b6e01cfe1d1367217bf78e4381ccb0a8e642f57212e54f585ce04b180
    Addresses
    104.21.40.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.34, 172.67.174.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nitivalia-pt.com
    Registered
    2026-10-01 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:25 UTC

    Suggest a correction

  36. orven-logrel.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    orven-logrel.net
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:09 UTC to 2027-02-03 12:09 UTC
    Logged 2026-11-05 13:08 UTC in IPng Networks Gouda2027h1, entry 324,456,236
    SHA-256 9938f6ad558a4e34bf63201bbd391430ae494fbfb1d3420008a40b5d07356fc6
    Public key SHA-256 48a24acbbb3d0fc0c889bc76e573082e82725f2d99877d9dc6f4a7c2ba64142d
    Addresses
    104.21.13.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.214 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.13.107, 172.67.199.214): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    orven-logrel.net
    Registered
    2026-10-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  37. patrevance-fr.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 d ago
    DetailsHide
    Hostname
    patrevance-fr.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:09 UTC to 2027-02-03 12:09 UTC
    Logged 2026-11-05 13:08 UTC in Google ParcelYard2027h1, entry 626,279,467
    SHA-256 98ad407f07966df8f15a87d07f3e16e8fef41394f8a1f6fd01eb23c9ccbd54b6
    Public key SHA-256 96669dc78ceac5ba4a5efbfa0e2de9f5c08eee8c90b08a6fba3a373bbe43b1ae
    Addresses
    104.21.91.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.247, 172.67.182.211): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    patrevance-fr.com
    Registered
    2026-10-30 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  38. photon-ai-es.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    photon-ai-es.net
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:08 UTC to 2027-02-03 12:08 UTC
    Logged 2026-11-05 13:07 UTC in Google ParcelYard2027h1, entry 626,264,144
    SHA-256 26cc732d5c3bc7ae4fdd8a892a5258496ebdd8fe92b3c027583b2d380e6e8949
    Public key SHA-256 078d495afba1c74a6e07d89803729aa16395016a6e9be9da2fc3b9c5cbca4e2f
    Addresses
    104.21.76.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.225, 172.67.201.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    photon-ai-es.net
    Registered
    2026-10-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  39. provechalvoes.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    provechalvoes.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:10 UTC to 2027-02-03 12:10 UTC
    Logged 2026-11-05 13:09 UTC in Google ParcelYard2027h1, entry 626,294,802
    SHA-256 0d077a3aad68e5ec57e757dbb5a145be806f39ef810dbb2a453898438fc0cdb1
    Public key SHA-256 82fc23ade9cd8eb402c614c69363afe6bd11ea3416810761b80a30a5b1ea5b71
    Addresses
    104.21.50.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.10 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.197, 172.67.210.10): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    provechalvoes.com
    Registered
    2026-11-02 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  40. reklam-kurasi.online SC · AS403005 · Blatant
    ListedListed by USOMMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    reklam-kurasi.online
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    USOM listed it 2026-08-26 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:45 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 12:58 UTC to 2027-02-03 13:03 UTC
    Logged 2026-11-05 13:08 UTC in DigiCert Wyvern2027h1, entry 416,188,031
    SHA-256 1a821897514f889667e8c7e296bea1833ff91d1ad12921470f19e508325e22e4
    Public key SHA-256 1a51bfadf50f788bc3402686c86e39d57578bc1133d2b41031dd520eebad1f21
    Addresses
    64.89.160.46 · Seychelles · AS403005 BLATANTHOST - Blatant
    Domain
    reklam-kurasi.online
    Registered
    2026-08-25 · Unstoppable Domains, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  41. rewadcxa.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    rewadcxa.xyz
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-05 00:00 UTC to 2027-02-03 06:15 UTC
    Logged 2026-11-05 13:05 UTC in DigiCert Sphinx2027h1, entry 367,304,112
    SHA-256 537188c4190578f4b75498cbb5b4869baba99006d379e3f0f99724f275a3cc55
    Public key SHA-256 c02762835f19d92ffbf6b00c78b105618f068154cf87f311c4bef1c5ddc631a8
    Addresses
    104.21.91.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.31, 172.67.165.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rewadcxa.xyz
    Registered
    2026-02-27 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  42. scellerance-ch.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    scellerance-ch.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:09 UTC to 2027-02-03 13:07 UTC
    Logged 2026-11-05 13:09 UTC in Let's Encrypt Sycamore2027h1, entry 959,957,622
    SHA-256 d04d3b7dc911cc9420b23cf991e07022a50b7e34da8bed5ef27622fda916436d
    Public key SHA-256 5c653255de8200ff0aab2f471a4fae9faca57be1461bfc8737e729141efffda1
    Addresses
    104.21.52.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.52.92, 172.67.197.144): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    scellerance-ch.com
    Registered
    2026-11-02 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  43. sharestead-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    sharestead-ai.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:10 UTC to 2027-02-03 12:09 UTC
    Logged 2026-11-05 13:08 UTC in Google ParcelYard2027h1, entry 626,283,573
    SHA-256 575c0d00539ca48241ba69ce0d6099d89cd69b669267854e13d41720e0e4360d
    Public key SHA-256 f8ac875bb1da470c42c1fbc78ce6f9f756ab737256cb0f54d0ce2e6452cdd539
    Addresses
    104.21.89.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.130, 172.67.189.72): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sharestead-ai.com
    Registered
    2026-11-02 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  44. sparelsik-se.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 16 d ago
    DetailsHide
    Hostname
    sparelsik-se.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:07 UTC to 2027-02-03 13:05 UTC
    Logged 2026-11-05 13:07 UTC in Google ParcelYard2027h1, entry 626,272,754
    SHA-256 3adeb5f9dee5c25e24f32f89d18abe551ec29c12b45317e95b8e7c9fa92f87a0
    Public key SHA-256 14434a1595fe538e05120dbb4f91baf26ed427db26ac029d8bf539f799336cde
    Addresses
    104.21.61.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.61.125, 172.67.210.131): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sparelsik-se.com
    Registered
    2026-10-20 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  45. sscalping.vip MY · AS139923 · ABCCLOUD SDN.BHD.
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    sscalping.vip
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:10 UTC to 2027-02-03 12:10 UTC
    Logged 2026-11-05 13:09 UTC in Google PlumbersArms2027h1, entry 626,691,198
    SHA-256 41882fcb5856aa9237b43e5fbb9277b99684a5f5a2cb1a3102ea311b39424839
    Public key SHA-256 4c4c670629636b172ea87a8e99a00afd72b979ba91a9e9b4209f8876b39417fc
    PhishDestroy
    Addresses
    102.204.222.8 · Malaysia · AS139923 ABCCLOUDSDNBHD-AS-AP - ABCCLOUD SDN.BHD.
    Domain
    sscalping.vip
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:17 UTC

    Suggest a correction

  46. staerkvaekstelse.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 29 d ago
    DetailsHide
    Hostname
    staerkvaekstelse.net
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:07 UTC to 2027-02-03 12:07 UTC
    Logged 2026-11-05 13:06 UTC in Google ParcelYard2027h1, entry 626,255,171
    SHA-256 471946c8488a399afa62ec10a78bac796b2695f3721c110e63c2d370c4018f85
    Public key SHA-256 3e519c7b1e420e6e992d7349b235744a0a667c39d80660fcb288c35b6596741a
    Addresses
    104.21.67.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.72, 172.67.217.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    staerkvaekstelse.net
    Registered
    2026-10-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  47. stats.socialvisor.ru RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardUnder socialvisor.ru, reported by PhishDestroyMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    stats.socialvisor.ru
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy, listing socialvisor.ru and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-05 12:06 UTC to 2027-02-03 12:06 UTC
    Logged 2026-11-05 13:05 UTC in Let's Encrypt Willow2027h1, entry 950,615,452
    SHA-256 95c0b1f8a6133fab1a987cee653e89a15bcbdfb5b748ee3b38f22f2bd1c4e2b2
    Public key SHA-256 5cbcce2c6ae49eecc23bc0b55caea7b79e68f8a3564cd7df9d2eb7f224fda9a4
    PhishDestroy
    Addresses
    91.215.41.91 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (91.215.41.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    socialvisor.ru
    MX
    Receives mail at emx.mail.ru
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  48. steuruck-holdings-de.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    steuruck-holdings-de.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:08 UTC to 2027-02-03 13:06 UTC
    Logged 2026-11-05 13:08 UTC in Google ParcelYard2027h1, entry 626,285,185
    SHA-256 143cf0bcea430eb62eecc7e634bea47527db34eecf737b6add99c5a50a6de2f3
    Public key SHA-256 629a55f8f004a657c28aeeed1c86a5088d669f88de3fcf27573e625a8d85cf04
    Addresses
    104.21.37.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.60, 172.67.205.2): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    steuruck-holdings-de.com
    Registered
    2026-11-03 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  49. sushiswap.me US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    sushiswap.me
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 12:59 UTC to 2027-02-03 13:05 UTC
    Logged 2026-11-05 13:09 UTC in DigiCert Wyvern2027h1, entry 416,210,816
    SHA-256 283f977ac53f7535acdd517347a8907f42945bd76e7f43b92cf47107ba8448df
    Public key SHA-256 24e4fa73a6aff561aa2cd3c84fabf71e232de7f016d2996eda887763b6159a48
    PhishDestroy
    Addresses
    104.21.56.208 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.208, 172.67.136.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sushiswap.me
    Registered
    2026-03-18 · Cloudflare, Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:24 UTC

    Suggest a correction

  50. titrelisure-ch.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    titrelisure-ch.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 12:08 UTC to 2027-02-03 12:08 UTC
    Logged 2026-11-05 13:06 UTC in DigiCert Wyvern2027h1, entry 416,178,557
    SHA-256 8c54c4b0bfbbd0746824ec981483fc8df1de2009d2267ca2c592bc055e2951ab
    Public key SHA-256 7daaa901a008ccd3e2a175e7b16756c357874e76789ad7a24adac946b182572d
    Addresses
    104.21.40.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.190 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.111, 172.67.150.190): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    titrelisure-ch.com
    Registered
    2026-10-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  51. toquenaro.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    toquenaro.net
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:09 UTC to 2027-02-03 13:07 UTC
    Logged 2026-11-05 13:09 UTC in Let's Encrypt Sycamore2027h1, entry 959,958,176
    SHA-256 1b4d04e849022193cc8f794826aee6860d7b7c33993bfe0bad6409971329f79f
    Public key SHA-256 bd1b04454ec9a3352f9801eb48abb49ece529612851e6e1683697b0e11d2e54c
    Addresses
    104.21.75.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.45, 172.67.213.193): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    toquenaro.net
    Registered
    2026-11-02 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  52. traldo-capitanza.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    traldo-capitanza.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:07 UTC to 2027-02-03 13:05 UTC
    Logged 2026-11-05 13:07 UTC in DigiCert Wyvern2027h1, entry 416,186,697
    SHA-256 2250d20ea60144f25f6a574df751c6ce3f403a0afe4ade0cb4b52f8d909b00a6
    Public key SHA-256 17cf78d3c53dfe630cbfcd27fb7d7e01b5aa3e4c114172bdd5a563b7fd73213a
    Addresses
    104.21.34.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.122, 172.67.204.198): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    traldo-capitanza.com
    Registered
    2026-10-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  53. trocadaria-pt.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 20 d ago
    DetailsHide
    Hostname
    trocadaria-pt.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:08 UTC to 2027-02-03 12:08 UTC
    Logged 2026-11-05 13:06 UTC in DigiCert Wyvern2027h1, entry 416,176,180
    SHA-256 52f74ef6071d3b742ffbab86dc5aa580a021a21f60178ff4d81169d25185ab25
    Public key SHA-256 eca1abb79921ceec5b8efb7ab4f9635a51003f58f07b26c97b55ce17930bb535
    Addresses
    104.21.74.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.159.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.74.155, 172.67.159.216): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trocadaria-pt.com
    Registered
    2026-10-16 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  54. valimorica-es.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 10 d ago
    DetailsHide
    Hostname
    valimorica-es.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:09 UTC to 2027-02-03 13:05 UTC
    Logged 2026-11-05 13:09 UTC in DigiCert Sphinx2027h1, entry 367,338,897
    SHA-256 2c2e117306c5f1940f05370ce8811acd5a1365c76b4fd5fc8b1bb1fa7c2a48e1
    Public key SHA-256 199afe9603303327965faaae06f34e133cf0616506439c9ba18f46d7310ab324
    Addresses
    104.21.6.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.181, 172.67.135.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    valimorica-es.com
    Registered
    2026-10-26 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  55. vantera-oxilan-mx.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    vantera-oxilan-mx.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:08 UTC to 2027-02-03 13:05 UTC
    Logged 2026-11-05 13:08 UTC in DigiCert Wyvern2027h1, entry 416,193,902
    SHA-256 24585d5e0028f49f9316f4db81db9a06eb4c9b74062e3c434e64a792a7dc9dc1
    Public key SHA-256 66cf94e7c9a7c9bb74d8db4670ad7484b73b3ee073636151448dcbce8320114f
    Addresses
    104.21.35.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.35.87, 172.67.216.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vantera-oxilan-mx.com
    Registered
    2026-10-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  56. vestagioren-gb.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 20 d ago
    DetailsHide
    Hostname
    vestagioren-gb.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:08 UTC to 2027-02-03 12:08 UTC
    Logged 2026-11-05 13:06 UTC in Google PlumbersArms2027h1, entry 626,654,618
    SHA-256 12b59ab60bda7a1fa0a5de65c2f67f0699f67cabe3ef7653d6be25605bef27ff
    Public key SHA-256 9e8c90b7a02780dcc73f369a5738c7838bb4ff9cde0839280d6997175425a443
    Addresses
    104.21.24.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.209, 172.67.220.205): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vestagioren-gb.com
    Registered
    2026-10-16 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  57. vestodigitalplatform.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 15 d ago
    DetailsHide
    Hostname
    vestodigitalplatform.net
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:09 UTC to 2027-02-03 12:09 UTC
    Logged 2026-11-05 13:07 UTC in Geomys Tuscolo2027h1, entry 487,115,800
    SHA-256 15fc84b90a1ece75e618b625dd8ba9096e6774d1f8458f4fb9769a4fbe2361df
    Public key SHA-256 efeb3d327ec70fe1747c6e05b6f021b7c69025952b7cdc12e00090e5cca752b5
    Addresses
    104.21.9.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.231, 172.67.161.99): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vestodigitalplatform.net
    Registered
    2026-10-21 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  58. voreclano-it.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 d ago
    DetailsHide
    Hostname
    voreclano-it.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:08 UTC to 2027-02-03 13:06 UTC
    Logged 2026-11-05 13:08 UTC in Google ParcelYard2027h1, entry 626,279,051
    SHA-256 0b63008f1b216fb67af3aa09178581b2bbf9534663a7c01c45052f79e887a1b3
    Public key SHA-256 833dc06a7b06d59453a34d569a840b97a8dd6f20edd175c631fc4686f56113c4
    Addresses
    104.21.39.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.138, 172.67.146.24): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    voreclano-it.com
    Registered
    2026-10-30 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  59. wavestatix-nl.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 28 d ago
    DetailsHide
    Hostname
    wavestatix-nl.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:08 UTC to 2027-02-03 12:08 UTC
    Logged 2026-11-05 13:06 UTC in IPng Networks Gouda2027h1, entry 324,445,585
    SHA-256 719208a05935ccd5a603d90e4ef529463c1c7ae3ab8368db9e71273bf20faf41
    Public key SHA-256 42433b9d45e2381690d2888aa89ace40572ee22448a7c1f4dbcfd1f0ba517380
    Addresses
    104.21.26.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.26.83, 172.67.135.183): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wavestatix-nl.com
    Registered
    2026-10-08 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  60. werkly.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC policy noneRegistered 6 mo ago
    DetailsHide
    Hostname
    werkly.org
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 12:10 UTC to 2027-02-03 12:10 UTC
    Logged 2026-11-05 13:09 UTC in Geomys Tuscolo2027h1, entry 487,126,988
    SHA-256 2ae6de7bb2a90991017e4be9cb95f4b0f28bc36e37fa30c21bb97f113431f87b
    Public key SHA-256 4be25db67539b30a62d1d1d446db749f2970474f34b2d8be2948a8531bd634a8
    Addresses
    104.21.95.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.248, 172.67.171.228): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    werkly.org
    Registered
    2026-05-11 · Key-Systems GmbH
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  61. www.bitmcx.com HK · AS152194 · CTG Server Limited
    ListedUnder bitmcx.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 24 mo ago
    DetailsHide
    Hostname
    www.bitmcx.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: observed back in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 11:51 UTC · listed 2 times
    Earlier listing periods: 2026-10-27 to 2026-10-28 (1 day)
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask, listing bitmcx.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-05 12:08 UTC to 2027-02-03 12:08 UTC
    Logged 2026-11-05 13:06 UTC in Geomys Tuscolo2027h1, entry 487,103,197
    SHA-256 a342228aca0820d30fbc2bcc854d1ae68b22a1fb572399b345fa7628e76ac465
    Public key SHA-256 d0f26545c15347edbe23c6bb565e32481c55cc5c93a71002de19b6805fa776ad
    Addresses
    134.122.200.26 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Domain
    bitmcx.com
    Registered
    2024-11-22 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:32 UTC

    Suggest a correction

  62. www.connect.bayoubyte.org BD · AS153568 · NEW DHAKA HARDWARE
    ReportedUnder bayoubyte.org, reported by PhishDestroyMX presentMX on Spamhaus DROPSPF ~allSPF on Spamhaus DROPDMARC quarantineRegistered 13 mo ago
    DetailsHide
    Hostname
    www.connect.bayoubyte.org
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy, listing bayoubyte.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 12:07 UTC to 2027-02-03 12:07 UTC
    Logged 2026-11-05 13:06 UTC in IPng Networks Gouda2027h1, entry 324,442,552
    SHA-256 0f235510e643ba5fe733b971c0e1f970b67b1a77440ae53a0566c62ab1a319b6
    Public key SHA-256 b258b3693350729752ea556cbeb7b86670e5500bd957dede1104a3c104ae194d
    PhishDestroy
    Addresses
    163.61.188.2 · Bangladesh · AS153568 NEWDHAKAHARDWARE-AS-AP - NEW DHAKA HARDWARE
    Domain
    bayoubyte.org
    Registered
    2025-10-02 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at bayoubyte.org
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    MX listing
    Mail server bayoubyte.org at 163.61.188.2 is on Spamhaus DROP: hijacked or criminal networks.
    SPF listing
    The SPF record lists 163.61.188.2 as a sender. It is on Spamhaus DROP: hijacked or criminal networks.
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  63. www.ichvk.ezgateway.net US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    www.ichvk.ezgateway.net
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:45 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:07 UTC to 2027-02-03 13:06 UTC
    Logged 2026-11-05 13:07 UTC in Let's Encrypt Willow2027h1, entry 950,648,681
    SHA-256 8f78079d4bc6bc1c79014f0ef375a69bea1c146bc1b22790ccb9b1ba67c5f0f8
    Public key SHA-256 7c04b96e999864aa30a4c36835e0a4c540b2146fb1511f78d837c1b093e37eca
    Addresses
    172.67.165.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.67.165.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  64. www.marketsmindmomentum.com.zurifinance.org US · AS53667 · FranTech Solutions
    ReportedUnder zurifinance.org, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 10 d ago
    DetailsHide
    Hostname
    www.marketsmindmomentum.com.zurifinance.org
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy, listing zurifinance.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 12:09 UTC to 2027-02-03 12:09 UTC
    Logged 2026-11-05 13:07 UTC in DigiCert Sphinx2027h1, entry 367,326,700
    SHA-256 50d54a980be6fefe3e92fe0d516318c5e1075461d3aa06fccd1050b935208faf
    Public key SHA-256 fcf6fee97d4d1613f0d2fd896037b38261d906a712e677983c3350087d6f7447
    PhishDestroy
    Addresses
    198.251.83.106 · United States · AS53667 PONYNET - FranTech Solutions
    Domain
    zurifinance.org
    Registered
    2026-10-26 · Spaceship, Inc.
    MX
    Receives mail at zurifinance.org
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 09:59 UTC

    Suggest a correction

  65. xunchi01.buzz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    xunchi01.buzz
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 10:16 UTC to 2026-12-06 11:16 UTC
    Logged 2026-11-05 13:08 UTC in DigiCert Wyvern2026h2, entry 2,205,939,641
    SHA-256 66108a405ac8184246f46b0893f119d915f0798417cb3d518bf7037dd5ac5ec6
    Public key SHA-256 676a62310014293ca12fab313c1b4bdc52c0664157c55ad0c2760e07b9258b2f
    Addresses
    104.21.46.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.117, 172.67.138.76): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xunchi01.buzz
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:17 UTC

    Suggest a correction

  66. yuce-mizandanim.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    yuce-mizandanim.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:09 UTC to 2027-02-03 12:09 UTC
    Logged 2026-11-05 13:08 UTC in Google PlumbersArms2027h1, entry 626,675,799
    SHA-256 1fe9e3174d22268da59cbd154102ab1e3c34e9f547f6508743e2534554c57f4e
    Public key SHA-256 08d857b34000360cf01c4091a60dbbf93c738c795e9dcbb547b870ef19df3b76
    Addresses
    104.21.11.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.11.155, 172.67.166.97): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    yuce-mizandanim.com
    Registered
    2026-11-02 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  67. zervanero-es.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    zervanero-es.com
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:09 UTC to 2027-02-03 12:09 UTC
    Logged 2026-11-05 13:08 UTC in Google PlumbersArms2027h1, entry 626,672,902
    SHA-256 3954b2d9a14b0a59cc3576afa497223ac6c1bf1fa095b44084252091ec00c9e1
    Public key SHA-256 91db0ace5cf8a721d246abf09d30bd2306f049c806499f03c5976ee3fd4b9b8f
    Addresses
    104.21.89.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.133, 172.67.189.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zervanero-es.com
    Registered
    2026-11-02 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:26 UTC

    Suggest a correction

  68. zju3-qckln-mw1e-e4p2-24zw.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    zju3-qckln-mw1e-e4p2-24zw.pages.dev
    First seen
    2026-11-05 13:10 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 15:48 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 12:55 UTC to 2027-02-03 13:01 UTC
    Logged 2026-11-05 13:05 UTC in DigiCert Sphinx2027h1, entry 367,307,902
    SHA-256 74bfe2c2f7a4298a41e7a99cff14d3673c3b686e209b29e526f7ddd82ee85114
    Public key SHA-256 5cd611dae9b37baa6e26096a5343415450239738f488ff2e394c4f819f8e4854
    PhishTank
    PhishTank report #9479699
    Addresses
    172.66.44.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.58, 172.66.47.198): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  69. 582949-ledger.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    582949-ledger.com
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:02 UTC to 2027-02-03 12:02 UTC
    Logged 2026-11-05 13:01 UTC in Google PlumbersArms2027h1, entry 626,572,827
    SHA-256 ecaaacbc6e0c587e54d5882d17e5095e626df1fb612e871bbf406580703c6468
    Public key SHA-256 05edbc40d00d14beab99d068e9cc82238d45869307e6d7f1c369395fd9450715
    Addresses
    104.21.46.245 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.245, 172.67.169.135): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    582949-ledger.com
    Registered
    2026-05-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  70. aavepools.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    aavepools.xyz
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:02 UTC to 2027-02-03 13:00 UTC
    Logged 2026-11-05 13:02 UTC in DigiCert Wyvern2027h1, entry 416,130,852
    SHA-256 e8bec6774c7d393e3341e5c242189c0fb0d5a43824192bf80c360ce1821b80a6
    Public key SHA-256 7c2e621c537f82e897a4da5aca286b299cc73dda54f287e80920fb28d1751804
    PhishDestroy
    Addresses
    104.21.45.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.105 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.45.58, 172.67.210.105): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aavepools.xyz
    Registered
    2025-11-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  71. actob.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MODA (one-page scam site)MX absentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    actob.top
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    Reported to MODA 2024-01-02 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:46 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    MODA
    1. Reported to MODA
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 12:51 UTC to 2027-02-03 12:57 UTC
    Logged 2026-11-05 13:01 UTC in DigiCert Wyvern2027h1, entry 416,111,896
    SHA-256 330bf717b1b082cf50cf69c8a50821f1863d54072f5d179c4bd18719101c43ff
    Public key SHA-256 77ddaaf6e5e6939fb307dd6bbc6e0e296c2eac44fc2dc0cdb8caf1f5452473dc
    Addresses
    104.21.16.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.91, 172.67.167.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    actob.top
    Registered
    2023-12-26 · 成都西维数码科技有限公司
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  72. auth-ledger-livee.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesLedger
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    auth-ledger-livee.pages.dev
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:03 UTC to 2027-02-03 13:02 UTC
    Logged 2026-11-05 13:04 UTC in Google ParcelYard2027h1, entry 626,218,559
    SHA-256 26c44193409d602c554332337590e79af4751e7c8ad43df4d4b01f471dc9b40d
    Public key SHA-256 6cc9608c94bb654fe0c2ee2252be142f694234ffe7a531cbd36472fa8072fc95
    Brand
    Ledger
    Addresses
    172.66.44.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c99
    2606:4700:310c::ac42:2f67
    Cloudflare
    Cloudflare (172.66.44.153, 172.66.47.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  73. basejci.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    basejci.com
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 12:50 UTC to 2027-02-03 12:56 UTC
    Logged 2026-11-05 13:00 UTC in DigiCert Sphinx2027h1, entry 367,254,064
    SHA-256 1e522378573944ffd9becef64f9e0997a9ad34a682568fc84af44d3ad2ff5f63
    Public key SHA-256 86090e6db8f50b8378d568d488c8bcbeb496ee817dfb98cb750806d8d0848a09
    Addresses
    104.21.53.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.176, 172.67.215.213): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    basejci.com
    Registered
    2026-07-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  74. binanceclub.com.cn HK · AS153494 · XRUI TECHNOLOGY LIMITED
    ListedListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    binanceclub.com.cn
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    PhishDestroy: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:01 UTC to 2027-02-03 12:01 UTC
    Logged 2026-11-05 13:00 UTC in Google PlumbersArms2027h1, entry 626,559,091
    SHA-256 9b031895e94a46427ac424b01cf348215de6cc08a2bf3dea18e807da40a9df04
    Public key SHA-256 348b5e161de27d860b3722b9277a2fb094acaca6aad3c5b2a4872b5ac799eabd
    Addresses
    43.239.165.12 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
    Domain
    binanceclub.com.cn
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 07:23 UTC

    Suggest a correction

  75. bluefen.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 11 d ago
    DetailsHide
    Hostname
    bluefen.org
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    CERT Polska listed it 2026-10-26 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-05 00:00 UTC to 2027-02-02 16:23 UTC
    Logged 2026-11-05 13:04 UTC in Sectigo Statue2027h1, entry 64,043,590
    SHA-256 667aae281047d38843286d1e295751be93895c29ba414341815f9a0ad6bff82f
    Public key SHA-256 6b899d3eb50827272e47b5d6a45b7adb7b2a9867b87c7e7b6116a9829f137352
    Addresses
    104.21.82.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.81, 172.67.155.58): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bluefen.org
    Registered
    2026-10-25 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  76. eoxhebdoa.shop CN · AS132203 · Tencent Building, Kejizhong…
    ListedTencent CloudListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    eoxhebdoa.shop
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:04 UTC to 2027-02-03 13:03 UTC
    Logged 2026-11-05 13:04 UTC in Let's Encrypt Willow2027h1, entry 950,610,200
    SHA-256 95de65a8b8c3476c18565045d4d48ad923b280757d354c6c03d74ae6567e9e87
    Public key SHA-256 81edc081d0414580f48248a1b2b0a5a0a42657c26ca4e795b3b2853d78a22191
    Addresses
    43.154.192.95 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
    Tencent Cloud
    Tencent Cloud (43.154.192.95): a cloud provider. It rents servers and addresses to its customers.
    Domain
    eoxhebdoa.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:06 UTC

    Suggest a correction

  77. fejix.com US · AS14618 · Amazon.com, Inc.2 addresses
    ReportedAmazon Web ServicesReported by PhishDestroyMX absentSPF -allDMARC missingRegistered today
    DetailsHide
    Hostname
    fejix.com
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:01 UTC to 2027-02-03 12:01 UTC
    Logged 2026-11-05 13:00 UTC in TrustAsia Luoshu2027, entry 543,317,772
    SHA-256 8559a3bd0461b8c8fcdb0cfc0646c46eb2a5024cbbf2b41c67f13b8698f5c999
    Public key SHA-256 50927b177e28ce1e108159305e6ad3da58ed5f445e4816aeb24acacf7795516e
    PhishDestroy
    Addresses
    44.208.83.180 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    54.84.240.235 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (44.208.83.180, 54.84.240.235): a cloud provider. It rents servers and addresses to its customers.
    Domain
    fejix.com
    Registered
    2026-11-05 · DropCatch.com 930 LLC
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  78. fuse-tower.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    fuse-tower.com
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    CERT Polska listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:00 UTC to 2027-02-03 12:58 UTC
    Logged 2026-11-05 13:00 UTC in Google PlumbersArms2027h1, entry 626,560,696
    SHA-256 17e634483e8d35e93da0054a87c2d58f3a17106b704dce7657378defa4dabfa8
    Public key SHA-256 474dd0e1e42fbd09ba85c0b07a5b29b934897a36aa0e06f27ca98c0013e449a2
    Addresses
    104.21.60.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.60.203, 172.67.201.71): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fuse-tower.com
    Registered
    2025-12-04 · Porkbun LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  79. havan-investimentos-sa.pro NL · AS62370 · Snel Snel.com B.V.Havan
    ListedPhishing hostListed by CERT Polska · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    havan-investimentos-sa.pro
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    CERT Polska listed it 2026-09-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    PhishDestroy: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.62.58.179.
    1. Phishing-host list fetched with the address
    2. Resolved to 185.62.58.179
    3. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:03 UTC to 2027-02-03 13:02 UTC
    Logged 2026-11-05 13:03 UTC in DigiCert Wyvern2027h1, entry 416,137,581
    SHA-256 a1fdb863545537e97bf91d6cbaf3824402f1d14b0c756f6d4d4d2981e345412a
    Public key SHA-256 293b577666dea06ec7da8c4b686aa9fd00450fe784c2655b2440bd0b2c12cee7
    Brand
    Havan
    Addresses
    185.62.58.179 · Netherlands · AS62370 Snel Snel.com B.V.
    Domain
    havan-investimentos-sa.pro
    Registered
    2026-09-07 · NETIM SAS
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:06 UTC

    Suggest a correction

  80. integriorb.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    integriorb.com
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    CERT Polska listed it 2026-09-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 12:53 UTC to 2027-02-03 12:59 UTC
    Logged 2026-11-05 13:03 UTC in DigiCert Sphinx2027h1, entry 367,276,716
    SHA-256 fea5e3e5203520db3083314897d53f363608286611a11d083902b96bf513eb13
    Public key SHA-256 446ff8ef206cd2e08607481dc1150cc8c58360da358ae88556045f54dd984aeb
    Addresses
    104.21.58.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.15, 172.67.197.51): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    integriorb.com
    Registered
    2026-09-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  81. kaio.lat US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    kaio.lat
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:02 UTC to 2027-02-03 12:02 UTC
    Logged 2026-11-05 13:01 UTC in Google ParcelYard2027h1, entry 626,177,018
    SHA-256 1a8f05ef24067b48567a161fd0cb66207b1656ce799fbe57657c6f3c4a2e236e
    Public key SHA-256 17fa4c5c50b85c714d33855c800428bfd6caed6bf49b1228b15d6cdb41a9494b
    Addresses
    104.21.88.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.88.254, 172.67.155.51): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kaio.lat
    Registered
    2026-05-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  82. kryptozantor.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    kryptozantor.live
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 12:04 UTC to 2027-02-03 12:04 UTC
    Logged 2026-11-05 13:02 UTC in IPng Networks Halloumi2027h1, entry 374,320,409
    SHA-256 483e2ed46331457a9e81c858278c84efbaefcb829cf4ef0c4fab621cfdbc855b
    Public key SHA-256 45599552916dc495e8daebe8b5bcd4e006b3a89279855a1609b3afccfef26a8e
    Addresses
    104.21.1.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.1.180, 172.67.129.176): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kryptozantor.live
    Registered
    2026-05-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  83. lciecamnh.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    lciecamnh.shop
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 12:53 UTC to 2027-02-03 12:58 UTC
    Logged 2026-11-05 13:03 UTC in DigiCert Wyvern2027h1, entry 416,132,230
    SHA-256 dedcd7ecf33a4b0d7bca0dc7a0357a6216af1f7c94d72261e257a2db6867efcb
    Public key SHA-256 71227d9283c0dce754f90ab780bae0d2071e6dca4f0bae53d26c4941798ae359
    Addresses
    104.21.40.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.29, 172.67.174.222): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lciecamnh.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:06 UTC

    Suggest a correction

  84. malidosya.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    malidosya.org
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    USOM listed it 2026-09-26 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:45 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:01 UTC to 2027-02-03 13:00 UTC
    Logged 2026-11-05 13:01 UTC in DigiCert Wyvern2027h1, entry 416,114,185
    SHA-256 ac4246fa47556e076542a6bdb5c88b57f071814c7bdfedfd2a83fb9d85ed8bb6
    Public key SHA-256 c4ae5cf5bf193b6312c1005754baa8b8cf8e111d7cda22508bd503b0c2dd285a
    Addresses
    104.21.7.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.7.127, 172.67.155.120): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    malidosya.org
    Registered
    2026-01-14 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  85. mobil-vip.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    mobil-vip.icu
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 12:53 UTC to 2027-02-03 12:59 UTC
    Logged 2026-11-05 13:03 UTC in DigiCert Wyvern2027h1, entry 416,136,929
    SHA-256 faabfdea0fb0d02c07606045fa63ff0809a1db3e1845f60e8795823ca50b709c
    Public key SHA-256 53099c110c781c2e794b7348511a2a084763c55f7780705b4f1fc471c0a91fe3
    PhishDestroy
    Addresses
    104.21.55.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.129, 172.67.148.45): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mobil-vip.icu
    Registered
    2026-07-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:33 UTC

    Suggest a correction

  86. msengenhariaconsultiva.com.br US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTankMX presentSPF ~allRegistered 10 y ago
    DetailsHide
    Hostname
    msengenhariaconsultiva.com.br
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 15:48 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:02 UTC to 2027-02-03 13:00 UTC
    Logged 2026-11-05 13:02 UTC in Geomys Tuscolo2027h1, entry 487,057,191
    SHA-256 84a4b9395e56ee4b2047adb0e3467229e981f7077083c4c5bdc6d7cb545792f2
    Public key SHA-256 70df1b4a4c98c9203f8180676b175ad8dfd41bc50a956393be0ebc3bc0b152b5
    PhishTank
    PhishTank report #9270505
    Addresses
    104.21.89.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.235, 172.67.148.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    msengenhariaconsultiva.com.br
    Registered
    2017-01-16
    MX
    Receives mail at mail.msengenhariaconsultiva.com.br
    SPF
    SPF record with ~all: other senders soft-fail
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  87. okx-cn.club HK · AS153494 · XRUI TECHNOLOGY LIMITED
    ListedListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    okx-cn.club
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:03 UTC to 2027-02-03 12:03 UTC
    Logged 2026-11-05 13:02 UTC in Geomys Tuscolo2027h1, entry 487,061,753
    SHA-256 5360454a856b28d63e9d61e488f48f255bba876744f17e0dda0e9fb316328c88
    Public key SHA-256 4de64e3d83b490b4fe45b2a8d7a0b09c3ba3fd1d61b043adef1ea5aaadda436e
    Addresses
    43.239.166.13 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
    Domain
    okx-cn.club
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:06 UTC

    Suggest a correction

  88. okx-com.club HK · AS153494 · XRUI TECHNOLOGY LIMITED
    ListedListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    okx-com.club
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:04 UTC to 2027-02-03 12:04 UTC
    Logged 2026-11-05 13:03 UTC in Google ParcelYard2027h1, entry 626,205,599
    SHA-256 448827e9d8ff2e3135ca9812a80e75510dc0579012791382abc8228322f03ff2
    Public key SHA-256 88208274c82161d8aa2bc2721bec6d48ba46a00ae5c6d08f55ae38a4c1866141
    Addresses
    45.122.135.229 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
    Domain
    okx-com.club
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:06 UTC

    Suggest a correction

  89. okx-okx.club HK · AS153494 · XRUI TECHNOLOGY LIMITED
    ListedListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    okx-okx.club
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:05 UTC to 2027-02-03 12:05 UTC
    Logged 2026-11-05 13:03 UTC in IPng Networks Gouda2027h1, entry 324,424,357
    SHA-256 16038cdb740183d82ae59ebe099d873ec3c63c55fa5eb986da8dc04e377b6329
    Public key SHA-256 41182a4fa2a08a1691545b406f507eac90851d9f14061a6c36e9134e4e4c2430
    Addresses
    45.122.135.235 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
    Domain
    okx-okx.club
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:06 UTC

    Suggest a correction

  90. prontachainovia-fr.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    prontachainovia-fr.live
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 12:02 UTC to 2027-02-03 12:02 UTC
    Logged 2026-11-05 13:01 UTC in Geomys Tuscolo2027h1, entry 487,050,015
    SHA-256 3f0ddb0aa3cf70ad143d1d5c07d44ec66de52a340e9c80213bf6d1edf33120c0
    Public key SHA-256 b33be039a7dae528e9f83428c3318413eb19c5e9d8090fa5fb9093f69a1330c9
    Addresses
    104.21.32.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.32.248, 172.67.157.15): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    prontachainovia-fr.live
    Registered
    2026-05-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  91. solvipcasino.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    solvipcasino.com
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:01 UTC to 2027-02-03 12:59 UTC
    Logged 2026-11-05 13:01 UTC in Google PlumbersArms2027h1, entry 626,574,060
    SHA-256 e920148b11edbc65b57522c19aaa5db62e2e710e2265ad81097e63dbec858214
    Public key SHA-256 ad1eb8c4e37ae349894f8e82bfbb136a7741e263c2e64684c8440a07823e05de
    Addresses
    104.21.9.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.159, 172.67.160.70): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    solvipcasino.com
    Registered
    2026-07-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  92. vote-ethenafi.com US · AS13335 · Cloudflare, Inc.4 addressesEthena
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    vote-ethenafi.com
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:01 UTC to 2027-02-03 12:58 UTC
    Logged 2026-11-05 13:01 UTC in Google PlumbersArms2027h1, entry 626,574,188
    SHA-256 cafe66251845d38d3a5fdfca916bb9bd2d2be145eac53bdf175c7c44cb984b09
    Public key SHA-256 1b64d3e0bff8a6033dcb5292291fe68ba0bcea411048eaf906aab220f7996c29
    Brand
    Ethena
    Addresses
    104.21.83.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:53e2
    2606:4700:3037::ac43:b664
    Cloudflare
    Cloudflare (104.21.83.226, 172.67.182.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vote-ethenafi.com
    Registered
    2026-09-07 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  93. vz2jqk.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    vz2jqk.asia
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-05 12:04 UTC to 2027-02-03 13:03 UTC
    Logged 2026-11-05 13:04 UTC in DigiCert Wyvern2027h1, entry 416,152,296
    SHA-256 2d988edc6980023ba79a21ee072455dce72f3dab378a14489a7cea16d41f3e3f
    Public key SHA-256 2c877d17086f3e81258fa9bd41fffe2849a14f62eac163c6b8be1215dc122b85
    Addresses
    104.21.68.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.75, 172.67.191.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vz2jqk.asia
    Registered
    2026-01-14 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  94. web3-gateway.com
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 16 d ago
    DetailsHide
    Hostname
    web3-gateway.com
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Not resolving · checked 2026-11-05 15:24 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-05 00:00 UTC to 2027-02-02 00:41 UTC
    Logged 2026-11-05 13:03 UTC in Google ParcelYard2027h1, entry 626,208,070
    SHA-256 d6e3bf6a3bc937f8eccf84edc692654366d9872b520b278b91ef3aa0fbe55cb6
    Public key SHA-256 4c03c1e814b716a950d564fdf3a70570fb48b3cd4ee455fef7629994b6774e5f
    Domain
    web3-gateway.com
    Registered
    2026-10-20 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  95. www.hldjzremoteaccess.patiobydesign.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 y ago
    DetailsHide
    Hostname
    www.hldjzremoteaccess.patiobydesign.com
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 12:02 UTC to 2027-02-03 12:02 UTC
    Logged 2026-11-05 13:01 UTC in DigiCert Sphinx2027h1, entry 367,257,198
    SHA-256 7c9eca8174c4bc5de953c149d9a691d63b0ef0dc13ef75411fdffb230b027f0e
    Public key SHA-256 2b63ef29f02908600e8421cf0c9bd62c09d7f5956890e0aebe134db53c540878
    PhishDestroy
    Addresses
    185.149.120.183 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.149.120.183): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    patiobydesign.com
    Registered
    2014-09-24 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:28 UTC

    Suggest a correction

  96. www.home.patiobydesign.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 y ago
    DetailsHide
    Hostname
    www.home.patiobydesign.com
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 12:02 UTC to 2027-02-03 12:02 UTC
    Logged 2026-11-05 13:01 UTC in DigiCert Sphinx2027h1, entry 367,257,198
    SHA-256 7c9eca8174c4bc5de953c149d9a691d63b0ef0dc13ef75411fdffb230b027f0e
    Public key SHA-256 2b63ef29f02908600e8421cf0c9bd62c09d7f5956890e0aebe134db53c540878
    PhishDestroy
    Addresses
    185.149.120.183 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.149.120.183): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    patiobydesign.com
    Registered
    2014-09-24 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:28 UTC

    Suggest a correction

  97. www.lyuhhsecureaccess.patiobydesign.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 y ago
    DetailsHide
    Hostname
    www.lyuhhsecureaccess.patiobydesign.com
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 12:02 UTC to 2027-02-03 12:02 UTC
    Logged 2026-11-05 13:01 UTC in DigiCert Sphinx2027h1, entry 367,257,198
    SHA-256 7c9eca8174c4bc5de953c149d9a691d63b0ef0dc13ef75411fdffb230b027f0e
    Public key SHA-256 2b63ef29f02908600e8421cf0c9bd62c09d7f5956890e0aebe134db53c540878
    PhishDestroy
    Addresses
    185.149.120.183 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.149.120.183): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    patiobydesign.com
    Registered
    2014-09-24 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:28 UTC

    Suggest a correction

  98. zebec-xlm-production.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    zebec-xlm-production.pages.dev
    First seen
    2026-11-05 13:05 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:03 UTC to 2027-02-03 13:02 UTC
    Logged 2026-11-05 13:03 UTC in Let's Encrypt Sycamore2027h1, entry 959,867,550
    SHA-256 fb6317d30987c3fa52317ed3f8587bbda39805e449a03f53dceeeea1b8cb5a09
    Public key SHA-256 cdc08c241140c4da0794c3d11ed2cd8a582f30e784b50b0d88209e5bc2698772
    Addresses
    172.66.44.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.169, 172.66.47.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  99. acey.win US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    acey.win
    First seen
    2026-11-05 13:00 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:00 UTC to 2027-02-03 12:00 UTC
    Logged 2026-11-05 12:58 UTC in Google PlumbersArms2027h1, entry 626,542,965
    SHA-256 018502230b351b7c1c76b49a4746dd0b0fed389452763d7a4932e2131f932ae1
    Public key SHA-256 6126151c2397a3cdf661a96fcb2b30a889de6471eb9f607668be4e0ac333c919
    PhishDestroy
    Addresses
    104.21.82.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.158, 172.67.158.244): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    acey.win
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:00 UTC

    Suggest a correction

  100. admin.stantexcapital.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    ReportedUnder stantexcapital.com, reported by PhishDestroyMX presentSPF ~allDMARC quarantineRegistered 22 mo ago
    DetailsHide
    Hostname
    admin.stantexcapital.com
    First seen
    2026-11-05 13:00 UTC
    First published
    2026-11-05 13:14 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 13:22 UTC
    Reported
    PhishDestroy, listing stantexcapital.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-05 11:59 UTC to 2027-02-03 11:59 UTC
    Logged 2026-11-05 12:58 UTC in Google PlumbersArms2027h1, entry 626,533,810
    SHA-256 1a1a1f17e272ecd7be764f38b3499a99475db37900e124bf8da889e1a910ac87
    Public key SHA-256 18a8a176b9fb6b0ef6884bc2e1b97e79bdec5d5b4d4f6b11408dc0b53c91a3d4
    PhishDestroy
    Addresses
    192.142.53.230 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    stantexcapital.com
    Registered
    2025-01-08 · Ultahost, Inc.
    MX
    Receives mail at mail.stantexcapital.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

Showing 901–1,000 of 5,122 hostnames.Back to the start
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources