Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-05 15:27 UTC
Certificate-log entries · 24 h
330.7M
from 84 distinct feeds
Unique certificates · 24 h
35.0M
each reviewed
Names resolved · 24 h
21.8M
16.0M with an address
Findings · 24 h
5,646
221 of 1,061 brands targeted

5,646 hostnames from the last 24 hours.

  1. www.pumpairdrop.live US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder pumpairdrop.live, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    www.pumpairdrop.live
    First seen
    2026-11-05 14:00 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy, listing pumpairdrop.live and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 12:58 UTC to 2027-02-03 12:58 UTC
    Logged 2026-11-05 13:57 UTC in IPng Networks Halloumi2027h1, entry 374,807,066
    SHA-256 0bc959097ae7278aa39b231787380f13f2a5fe6634fc2a9781f836a58c04e86e
    Public key SHA-256 30c81ace517247d00858334400155f621fa69f2cbf2781e87ef28cfc80153e5d
    PhishDestroy
    Addresses
    104.21.94.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.94.98, 172.67.221.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pumpairdrop.live
    Registered
    2026-02-08 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  2. ziteq.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    ziteq.asia
    First seen
    2026-11-05 14:00 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 13:01 UTC to 2027-02-03 13:01 UTC
    Logged 2026-11-05 13:59 UTC in Let's Encrypt Sycamore2027h1, entry 960,696,878
    SHA-256 90c3c13143ed4b38e5eca5ca70073a5a7939ca9fd0227e4a84eb82c542b8e0d7
    Public key SHA-256 fc6057ccb91d28707854d803b933e3d73d9a1685d35e4208b780b74e4b052e3d
    Addresses
    104.21.89.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.88, 172.67.157.99): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ziteq.asia
    Registered
    2026-05-12 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  3. wrightsure-liverpool.co.uk DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…5 addressesLiverpool
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    wrightsure-liverpool.co.uk
    First seen
    2026-11-05 13:59 UTC
    First published
    2026-11-05 14:22 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.78.156.59.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 5.78.156.59
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:53 UTC to 2027-02-03 12:53 UTC
    Logged 2026-11-05 13:51 UTC in Google ParcelYard2027h1, entry 626,878,205
    SHA-256 54c021dd921adb3996edb40cf3a1c620f6c0b5c86c8e1e31b4348d42c748ebe3
    Public key SHA-256 0f0f32a7193bb1bcd042cff0eaf169ebf53383a19b4d386accedcb873b978481
    Brand
    Liverpool
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
    Domain
    wrightsure-liverpool.co.uk
    Registered
    2026-11-05 · Domain Science Ltd t/a autoBackorder
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:21 UTC

    Suggest a correction

  4. 188yah.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    188yah.top
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:53 UTC to 2027-02-03 13:52 UTC
    Logged 2026-11-05 13:53 UTC in Google PlumbersArms2027h1, entry 627,301,507
    SHA-256 392e76c12b5a905b7939dacd70d396ec364e4261c8c2a40d01556ddb4d9ef918
    Public key SHA-256 a6d89f8c69e77ba63ef4a14bd61e8b87cb5372b060c367d3fa5f9b3cb1bf81b2
    Addresses
    104.21.40.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.38, 172.67.175.45): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    188yah.top
    Registered
    2026-09-06 · NameSilo,LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:24 UTC

    Suggest a correction

  5. 40-governance-zama.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    40-governance-zama.pages.dev
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Not resolving · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:52 UTC to 2027-02-03 13:50 UTC
    Logged 2026-11-05 13:52 UTC in DigiCert Wyvern2027h1, entry 416,590,244
    SHA-256 044a0fdb281b4e6754f1239105d7c8514fa77aa57f32ffc834eb4f83ffeda5cc
    Public key SHA-256 d27faa5c7269e59d82ec1ec8eaca2acd1a6219637062c8f45ecc1e18c31ccaf8
    Addresses
    172.66.44.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.52, 172.66.47.204): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  6. biminiboats.com US · AS14618 · Amazon.com, Inc.2 addressesSaison Card
    ListedParking page · HugeDomainsListed by JPCERT/CC as imitating SAISON CARDMX presentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    biminiboats.com
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    JPCERT/CC confirmed it 2026-08-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 14:10 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:54 UTC to 2027-02-03 12:54 UTC
    Logged 2026-11-05 13:52 UTC in Google ParcelYard2027h1, entry 626,897,306
    SHA-256 85caed3e3f8101e47cb618752489c0391e24493589f6d7acacb53ed050df8c55
    Public key SHA-256 ea91e63c8c3c817a6031b39c92377ffbf9b9044d9d2450c67cffec1f43d477fb
    Brand
    Saison Card
    Addresses
    13.223.25.84 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · HugeDomains (parking page)
    54.243.117.197 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · HugeDomains (parking page)
    Parking page · HugeDomains
    HugeDomains (13.223.25.84, 54.243.117.197): a parking service. It answers for names that are typically for sale or unused.
    Domain
    biminiboats.com
    Registered
    2026-11-05 · DropCatch.com 1240 LLC
    MX
    Receives mail at anmail.namebrightmail.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  7. birrbit.com AU · AS133618 · Trellian Pty. Limited
    ReportedParking page · Above.comReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    birrbit.com
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:57 UTC to 2027-02-03 12:57 UTC
    Logged 2026-11-05 13:55 UTC in Google PlumbersArms2027h1, entry 627,331,541
    SHA-256 1be2e8c802e78ffdc4f9e6903f8f80234eb8bc42de9534827303e5df78dd6101
    Public key SHA-256 d047870536ca314d305119f8c3d9389323de2ca3275bbe71c01c3d639399284e
    PhishDestroy
    Addresses
    103.224.182.250 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates birrbit.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.250): a parking service. It answers for names that are typically for sale or unused.
    Domain
    birrbit.com
    Registered
    2025-11-05 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  8. bold-earnings.com
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    bold-earnings.com
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Not resolving · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:51 UTC to 2027-02-03 13:50 UTC
    Logged 2026-11-05 13:51 UTC in DigiCert Wyvern2027h1, entry 416,578,662
    SHA-256 6376e2abed52b25bbb2938fc1137ffc9eace0daf1e3cd5081c51780ea7d12ea3
    Public key SHA-256 5fe592a19436ad9325a1d800410ea1a595080e13a76d57e0d3c7ba1d052d3293
    Domain
    bold-earnings.com
    Registered
    2025-12-04 · Porkbun LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  9. dinexion.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    dinexion.click
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-09-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 12:55 UTC to 2027-02-03 12:55 UTC
    Logged 2026-11-05 13:53 UTC in IPng Networks Halloumi2027h1, entry 374,771,324
    SHA-256 0f3c0b9034b414927f298ab4359930d671366603973372c8733b46040e8c0a25
    Public key SHA-256 8d0fbbaaca02db95075f2228aa9618c941456e4a6635cdf21553b717b08afc3c
    Addresses
    104.21.39.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.250, 172.67.172.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dinexion.click
    Registered
    2026-05-12 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:21 UTC

    Suggest a correction

  10. dqkj-fq6-o46svx-qht-e3eofu.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    dqkj-fq6-o46svx-qht-e3eofu.pages.dev
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 14:18 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-05 12:53 UTC to 2027-02-03 13:52 UTC
    Logged 2026-11-05 13:55 UTC in Sectigo Elephant2027h1, entry 731,524,074
    SHA-256 b7e83786d76ea5eff731939cfc631cc0761a9eab5fd22386145a3677530a9421
    Public key SHA-256 6531c26079603030fbd6387fc5e0bd82f55bfc3c7f65af631188caa51fe2f6bd
    PhishTank
    PhishTank report #9479348
    Addresses
    172.66.44.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.129, 172.66.47.127): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  11. eopnuissb.shop CN · AS132203 · Tencent Building, Kejizhong…
    ListedTencent CloudListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    eopnuissb.shop
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 13:41 UTC to 2027-02-03 13:49 UTC
    Logged 2026-11-05 13:51 UTC in DigiCert Wyvern2027h1, entry 416,576,528
    SHA-256 abd8273184333b07ec993ab50e279034e735c49f8424be74d0627d603abfe3be
    Public key SHA-256 5c64c4d1805006d6fa87cbb2b4311e0eda02613daf3a504c3a586f225766b1cd
    Addresses
    43.154.192.95 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
    Tencent Cloud
    Tencent Cloud (43.154.192.95): a cloud provider. It rents servers and addresses to its customers.
    Domain
    eopnuissb.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:59 UTC

    Suggest a correction

  12. happy-dividend.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    happy-dividend.com
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 11:54 UTC to 2026-12-06 12:53 UTC
    Logged 2026-11-05 13:52 UTC in IPng Networks Halloumi2026h2a, entry 1,287,549,680
    SHA-256 7fe4ce68e50ae81c3a035d79347c518d67f1ded714ba1e08840f9187feb54d95
    Public key SHA-256 dc1b7f783af0bd344867642d8bfde4de063e136ee34cae70605191642391e13c
    Addresses
    104.21.77.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.110, 172.67.207.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    happy-dividend.com
    Registered
    2025-12-04 · Porkbun LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  13. help.freewallet.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder freewallet.org, reported by PhishDestroyMX presentSPF -allDMARC rejectRegistered 15 y ago
    DetailsHide
    Hostname
    help.freewallet.org
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy, listing freewallet.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 12:54 UTC to 2027-02-03 12:54 UTC
    Logged 2026-11-05 13:53 UTC in Let's Encrypt Willow2027h1, entry 951,304,408
    SHA-256 055a046fe77e283673fc02814e6eb6ffd8c2ecdc53cec29e43b2147ebd7320df
    Public key SHA-256 8490e8a0b4cc2ce7dc9c06c3e1ec05a37d8183e867bd041836139198f5eeca20
    PhishDestroy
    Addresses
    162.159.140.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.0.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (162.159.140.147, 172.66.0.145): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    freewallet.org
    Registered
    2011-07-01 · NameCheap, Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 07:19 UTC

    Suggest a correction

  14. join.hookup-zone.com US · AS19527 · Google LLC
    ReportedUnder hookup-zone.com, reported by PhishDestroyMX presentSPF missingDMARC rejectRegistered 5 mo ago
    DetailsHide
    Hostname
    join.hookup-zone.com
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy, listing hookup-zone.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-05 12:53 UTC to 2027-02-03 13:49 UTC
    Logged 2026-11-05 13:53 UTC in Google ParcelYard2027h1, entry 626,906,970
    SHA-256 05582a7738dc77b4ff5e20100a0f7d7bb64141e6917165af64b3aea4e47ed95c
    Public key SHA-256 a5bb7d830ac4a2fae587714f9c963f9714f232ae6944e2601f7affdaa5ef1b1e
    PhishDestroy
    Addresses
    35.219.200.109 · United States · AS19527 GOOGLE-2 - Google LLC
    Domain
    hookup-zone.com
    Registered
    2026-06-10 · Key-Systems GmbH
    MX
    Receives mail at rx1.sparkpostmail.com, rx2.sparkpostmail.com, rx3.sparkpostmail.com
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  15. nazvelqorn-pt.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    nazvelqorn-pt.live
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-05 12:51 UTC to 2027-02-03 13:49 UTC
    Logged 2026-11-05 13:54 UTC in DigiCert Wyvern2027h1, entry 416,616,096
    SHA-256 08fa24aa22a9ede9fc4bf17edcddf5aca357cd0c02cee2046aaa2d4649ccddcb
    Public key SHA-256 6ca37d5505559470d6d0ffd74be12f14cf5745eb62e2460631078f1b2ada9c11
    Addresses
    104.21.52.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.52.82, 172.67.196.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nazvelqorn-pt.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  16. nil-allocation.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    nil-allocation.xyz
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:53 UTC to 2027-02-03 12:53 UTC
    Logged 2026-11-05 13:52 UTC in Google PlumbersArms2027h1, entry 627,278,202
    SHA-256 63673c3c27dadc528058d4b7dcab1e465bc6ded1dfee8ea5c831e829d43d95ed
    Public key SHA-256 7f9c53f8861cef751e442946d3c0a23beb4866099e9dbe7a8f01f6a8ffcbb895
    Addresses
    104.21.24.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.44, 172.67.216.199): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nil-allocation.xyz
    Registered
    2026-05-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  17. report-wallet.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    report-wallet.com
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:56 UTC to 2027-02-03 13:53 UTC
    Logged 2026-11-05 13:56 UTC in Google PlumbersArms2027h1, entry 627,336,783
    SHA-256 5736c1d6fd4e2d2a982298a808a4dd41814ad199be5e7a0648a689f130e041fb
    Public key SHA-256 763754ab21a57bc9b4dce101ab15a96bc767dd51f865ba2bd66c75ac81319af2
    PhishDestroy
    Addresses
    104.21.63.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.92, 172.67.145.27): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    report-wallet.com
    Registered
    2026-01-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:59 UTC

    Suggest a correction

  18. setup.zenavlico.cyou TJ · AS208885 · NFS-AS Noyobzoda Faridduni …
    ListedUnder zenavlico.cyou, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    setup.zenavlico.cyou
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-05-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska, listing zenavlico.cyou and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
    Valid 2026-11-05 00:00 UTC to 2027-02-03 23:59 UTC
    Logged 2026-11-05 13:53 UTC in DigiCert Wyvern2027h1, entry 416,593,354
    SHA-256 668fe408bb10bc8d9a1692de3ead2f68c418f53af6aaa72b63c94be487a26d39
    Public key SHA-256 4a8226515735e1c414a1061d948098ec5b18a7bf4cf7ba618100a724d4685ab3
    Addresses
    95.85.244.13 · Tajikistan · AS208885 NFS-AS Noyobzoda Faridduni Saidilhom
    Domain
    zenavlico.cyou
    Registered
    2026-01-26 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  19. silent-pathway.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    silent-pathway.com
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-05-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 11:46 UTC to 2026-12-06 12:44 UTC
    Logged 2026-11-05 13:51 UTC in DigiCert Wyvern2026h2, entry 2,206,001,228
    SHA-256 e180255d9033c587f3d4049366a6e435e56fc27bccde36da2b483d72951b81b7
    Public key SHA-256 a0bbd69d487359a4313a9f923b526947319968baae242c207398d581ec98ed97
    Addresses
    104.21.86.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.176, 172.67.223.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    silent-pathway.com
    Registered
    2025-12-04 · Porkbun LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  20. telernxove.help US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    telernxove.help
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-09-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:56 UTC to 2027-02-03 13:54 UTC
    Logged 2026-11-05 13:56 UTC in DigiCert Sphinx2027h1, entry 367,736,449
    SHA-256 b779ee86bf2049ce05ddd5587a1411a39e14ef49b68f00a2f6f48912929ecd8e
    Public key SHA-256 5c6ae0451a9c52c2a197a45c66dc6b5001742f2dba3f13d1f960e4c704175119
    Addresses
    104.21.69.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.202, 172.67.213.18): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    telernxove.help
    Registered
    2026-09-07 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  21. walletexo-eng.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    walletexo-eng.pages.dev
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:52 UTC to 2027-02-03 13:48 UTC
    Logged 2026-11-05 13:52 UTC in Geomys Tuscolo2027h1, entry 487,578,436
    SHA-256 b1e8fea7bc3a71b1355158c4433854183cb9823aa0afc09f587194aeb13689bc
    Public key SHA-256 73e973ddb1b47be7ab039ba627cc5af0e6884078a4dbe879bc628027b3d537c8
    Addresses
    172.66.44.245 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.245, 172.66.47.11): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  22. www.anthropic-ads-marketing.com US · AS16509 · Amazon.com, Inc.2 addressesClaude
    ListedAmazon Web ServicesUnder anthropic-ads-marketing.com, listed by USOMMX presentSPF ~allDMARC policy noneRegistered 4 mo ago
    DetailsHide
    Hostname
    www.anthropic-ads-marketing.com
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    USOM listed it 2026-10-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 14:15 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    USOM, listing anthropic-ads-marketing.com and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-05 12:55 UTC to 2027-02-03 12:55 UTC
    Logged 2026-11-05 13:53 UTC in Google PlumbersArms2027h1, entry 627,300,563
    SHA-256 0ca8c74958c30d4577ddab2c9b804f9990480f9298f164117f0366497852379f
    Public key SHA-256 2c039f0cf7bd461880d12e0fabc9a48d8cd4cecc54444bbf35cb0ae6c96097c0
    Brand
    Claude
    Addresses
    216.150.1.193 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.150.16.193 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.150.1.193, 216.150.16.193): a cloud provider. It rents servers and addresses to its customers.
    Domain
    anthropic-ads-marketing.com
    Registered
    2026-07-05 · Ultahost, Inc.
    MX
    Receives mail at mail.anthropic-ads-marketing.com, anthropic-ads-marketing.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  23. xeprk.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    xeprk.xyz
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-09-16 16:50 UTC to 2026-12-15 16:50 UTC
    Logged 2026-11-05 13:51 UTC in DigiCert Wyvern2026h2, entry 2,206,000,816
    SHA-256 5593bb69919d60acc3ca7bc1cb979228949b141970a3c1ff64e38e840e81b92c
    Public key SHA-256 33e1531969afb59d32109b3ee72cffd5e3ff55e3b4f65d5b64e20441d105f003
    Addresses
    104.21.93.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.93.9, 172.67.201.222): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xeprk.xyz
    Registered
    2026-03-23 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  24. y711tw25.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    y711tw25.store
    First seen
    2026-11-05 13:56 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:55 UTC to 2027-02-03 12:55 UTC
    Logged 2026-11-05 13:54 UTC in Let's Encrypt Sycamore2027h1, entry 960,615,466
    SHA-256 02a9fe44612fc3f2e5f0193720db153e9dbe18afa69c67e8491691b222542456
    Public key SHA-256 6766d8a9970daaad79e46edc0060c042c40faca78bade03e162059095520a3c9
    Addresses
    104.21.78.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.78.182, 172.67.168.83): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    y711tw25.store
    Registered
    2026-05-12 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  25. santander.com.cn US · AS46844 · Sharktech3 addressesSantander
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    santander.com.cn
    First seen
    2026-11-05 13:55 UTC
    First published
    2026-10-31 13:42 UTC
    DNS
    Resolves · checked 2026-11-05 13:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 208.98.40.40.
    1. Phishing-host list fetched with the address
    2. Resolved to 208.98.40.40
    Brand
    Santander
    Addresses
    208.98.40.40 · United States · AS46844 SHARKTECH - Sharktech
    208.98.40.222 · United States · AS46844 SHARKTECH - Sharktech
    208.98.43.93 · United States · AS46844 SHARKTECH - Sharktech
    Domain
    santander.com.cn
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:38 UTC

    Suggest a correction

  26. animshquse.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    animshquse.shop
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 09:52 UTC to 2026-12-06 10:50 UTC
    Logged 2026-11-05 13:51 UTC in DigiCert Wyvern2026h2, entry 2,205,999,202
    SHA-256 80c9724278405127374aecbe0e4f4c46874af939a76b0156bf8822fe05f07574
    Public key SHA-256 957f6aae64bc53d5da9433d17558ae80fe0c4aad47089b10d356d06304dd0e75
    Addresses
    104.21.34.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.187, 172.67.163.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    animshquse.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:54 UTC

    Suggest a correction

  27. darkout.cfd US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    darkout.cfd
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 12:51 UTC to 2027-02-03 12:51 UTC
    Logged 2026-11-05 13:50 UTC in Let's Encrypt Willow2027h1, entry 951,257,385
    SHA-256 377cc8047ded5420307b2d9a5fa4bc30e8a7ade150dce86c6f8aa2da77e0906a
    Public key SHA-256 43ab8daa44eeab1aa22668f7169aecc2c0ed603a3bc794499591fc8740c2e8cc
    PhishDestroy
    Addresses
    104.21.75.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.83, 172.67.217.148): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    darkout.cfd
    Registered
    2026-02-09 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  28. deyanauto.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    deyanauto.live
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-08-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:47 UTC to 2027-02-03 12:47 UTC
    Logged 2026-11-05 13:46 UTC in Google ParcelYard2027h1, entry 626,797,437
    SHA-256 8b0aee275cebea4aabe5f04e6c3c796fcad2573557a1b6e97e0e21fa1e122927
    Public key SHA-256 0882af89ba4362c45145c0071e66cb549ac84a58b9e78c1dcd1cb5ea040bb60c
    Addresses
    104.21.42.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.234, 172.67.211.60): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    deyanauto.live
    Registered
    2026-08-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  29. ducisedge.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    ducisedge.com
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:45 UTC to 2027-02-03 13:44 UTC
    Logged 2026-11-05 13:45 UTC in DigiCert Wyvern2027h1, entry 416,507,808
    SHA-256 a0f47091d006b85f3a134cdb83ebd07972df8986a0abc0a9b87c5be70706eea8
    Public key SHA-256 86dfaddd508454a4e2650f7d95272eb347794f8743f58c779869add0cd582720
    Addresses
    104.21.77.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.8, 172.67.203.18): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ducisedge.com
    Registered
    2026-09-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  30. gizaprotocol.ai US · AS16509 · Amazon.com, Inc.
    ReportedAmazon Web ServicesReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 21 mo ago
    DetailsHide
    Hostname
    gizaprotocol.ai
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-05 12:50 UTC to 2027-02-03 12:50 UTC
    Logged 2026-11-05 13:48 UTC in Google ParcelYard2027h1, entry 626,832,286
    SHA-256 7a80bf5cc80264192f1a5d1a7513bc692e98ba4129ac601048b2d5eafccbad79
    Public key SHA-256 1723e931ccec9ba4893b9f4bb6b698f4a5974304f3e722f9f057da3f807b7bee
    PhishDestroy
    Addresses
    76.76.21.21 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (76.76.21.21): a cloud provider. It rents servers and addresses to its customers.
    Domain
    gizaprotocol.ai
    Registered
    2025-02-21 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  31. hashkeyegd.com
    ListedListed by NPA 165 (information services)MX presentSPF ~allDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    hashkeyegd.com
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Not resolving · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:46 UTC to 2027-02-03 13:44 UTC
    Logged 2026-11-05 13:46 UTC in Google PlumbersArms2027h1, entry 627,192,557
    SHA-256 cf0aa3899211e4510f416d8ffa765c39f70da4dc70632da00ac8d84602f2c9aa
    Public key SHA-256 78a6c28b0658cdc93f483c3f9997f509f47676f95cf4cdaf9c26786f6aef541b
    Domain
    hashkeyegd.com
    Registered
    2026-01-13 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  32. m-obilet.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    m-obilet.info
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    USOM listed it 2026-08-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 14:15 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-10-19 15:12 UTC to 2027-01-17 16:10 UTC
    Logged 2026-11-05 13:50 UTC in Sectigo Statue2027h1, entry 64,300,716
    SHA-256 3985212888d8d0fdf88ebc91c01661313d4b1860224078ecb7531887c8a5bda8
    Public key SHA-256 34d69a90dfb52297926d9101f1d6c3ef6c1befe21f43de13cebf68503e96a27c
    Addresses
    104.21.1.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.1.185, 172.67.129.198): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    m-obilet.info
    Registered
    2026-08-21 · Turkticaret.net Yazılım Hizmetleri Sanayi ve Ticaret A.Ş.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  33. mcga0e.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    mcga0e.xyz
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:47 UTC to 2027-02-03 13:46 UTC
    Logged 2026-11-05 13:47 UTC in Let's Encrypt Willow2027h1, entry 951,225,328
    SHA-256 8da458331ddbdb841e3e90cd52488ce4ce5fc1e14bf3b0d7b53fe10a3539375a
    Public key SHA-256 cbfa6380d94d96706f4d92139798a626ef2ea9747e5504df48a407ba87ca163b
    Addresses
    104.21.95.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.158, 172.67.145.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mcga0e.xyz
    Registered
    2026-01-14 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  34. meow.xn--jp8h.de5.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroy
    DetailsHide
    Hostname
    meow.xn--jp8h.de5.net
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:47 UTC to 2027-02-03 13:47 UTC
    Logged 2026-11-05 13:47 UTC in Geomys Tuscolo2027h1, entry 487,526,228
    SHA-256 786d7d6fde541bc79671a76f9391b60976d6d00bdd74a931dfde79f16c4265aa
    Public key SHA-256 0a1c52ceb3030256d8fc2d1ff825be89cd3c9dece935586091b06bab76112e77
    PhishDestroy
    Addresses
    104.21.20.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.20.138, 172.67.192.241): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  35. nextgenerationinnovationplatform.cryptopayment.xyz US · AS14061 · DigitalOcean, LLC
    ListedDigitalOceanUnder cryptopayment.xyz, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    nextgenerationinnovationplatform.cryptopayment.xyz
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask, listing cryptopayment.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 12:48 UTC to 2027-02-03 12:48 UTC
    Logged 2026-11-05 13:46 UTC in Let's Encrypt Willow2027h1, entry 951,206,652
    SHA-256 7daadb5ac74d545e67fc9e9983861c18cca71bb41ef026bc6ee876351b9ffd42
    Public key SHA-256 9c4e6e5003ab91b5f4ce09fe3148adff19535405e78bf4258eeea4ab27b4d2bc
    Addresses
    143.244.211.82 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
    DigitalOcean
    DigitalOcean (143.244.211.82): a cloud provider. It rents servers and addresses to its customers.
    Domain
    cryptopayment.xyz
    Registered
    2020-11-20 · Interstellar Registrar Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  36. noiantebs.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    noiantebs.shop
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:48 UTC to 2027-02-03 13:46 UTC
    Logged 2026-11-05 13:48 UTC in Let's Encrypt Willow2027h1, entry 951,228,572
    SHA-256 1aea80268818892e3111a95b7d073cc73a8cb387277b5b79218baf369df83abf
    Public key SHA-256 b15f3ee8d01b6d36cffd4b08e0a699bd51d8cd22ac09b505be66e1f965a3f919
    Addresses
    104.21.6.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.200, 172.67.135.61): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    noiantebs.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:54 UTC

    Suggest a correction

  37. onchain-seli.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 13 mo ago
    DetailsHide
    Hostname
    onchain-seli.com
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:50 UTC to 2027-02-03 13:49 UTC
    Logged 2026-11-05 13:50 UTC in Geomys Tuscolo2027h1, entry 487,567,451
    SHA-256 a1783246c4fbff68c1661bf5c87f4a4d94e65efe5f235cd6129fe69eaa0e0ecf
    Public key SHA-256 8b1a665245103066ac58299b5334d9bde1369083e69d16b6f9dcdf3b7992aad6
    Addresses
    104.21.78.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.78.99, 172.67.220.52): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    onchain-seli.com
    Registered
    2025-10-18 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  38. plperhjuisusir.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    plperhjuisusir.com
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-05-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:49 UTC to 2027-02-03 12:49 UTC
    Logged 2026-11-05 13:48 UTC in DigiCert Wyvern2027h1, entry 416,536,252
    SHA-256 49bcde4d90d380d38ec3a0a4903c1cdf14f85bb983b9a6e2cbef09c3600d5b77
    Public key SHA-256 6e711da0a357684aeb0efa06f8efe2863d8ccc457c6470cdea3eadad232b2481
    Addresses
    104.21.4.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.114, 172.67.132.7): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    plperhjuisusir.com
    Registered
    2026-05-12 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  39. proposal-onbeam.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    proposal-onbeam.com
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:47 UTC to 2027-02-03 13:46 UTC
    Logged 2026-11-05 13:47 UTC in Let's Encrypt Sycamore2027h1, entry 960,516,067
    SHA-256 18f461d964c40000704c38eb1ba2f54ec64aa66ae00a43456efaf9f167630f34
    Public key SHA-256 ae32d1a26cf08e808ff773ef5e2b918599284b62a9405d430c2df38ba36935a6
    Addresses
    104.21.42.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.211, 172.67.166.77): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    proposal-onbeam.com
    Registered
    2026-07-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  40. sp19ct7-lurex-biz-marek-dofis.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    sp19ct7-lurex-biz-marek-dofis.pages.dev
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 14:18 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:50 UTC to 2027-02-03 13:48 UTC
    Logged 2026-11-05 13:50 UTC in Google ParcelYard2027h1, entry 626,859,642
    SHA-256 4bd2db53e30d717091aefbba1d71aa62b8f82254cf1d42dcae01a94096d031f7
    Public key SHA-256 859bbb747c52372c754d80ac7604be529963897bf9d5e443c04fe6825ff98ce7
    PhishTank
    PhishTank report #9479567
    Addresses
    172.66.44.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.144, 172.66.47.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  41. sso-ndex-login-us.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    sso-ndex-login-us.pages.dev
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:46 UTC to 2027-02-03 13:45 UTC
    Logged 2026-11-05 13:46 UTC in Google PlumbersArms2027h1, entry 627,191,927
    SHA-256 6d338f6311778375968be227ea84f9833e78b4d9b7f7f98af44e1eb0c6649063
    Public key SHA-256 0012a80e1a7e0f111b014c1cb5f45a338d08b87409718b34b7cfe628d32de9bb
    Addresses
    172.66.45.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.34, 172.66.46.222): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  42. tomitie.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    tomitie.pro
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-07-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 13:39 UTC to 2027-02-03 13:47 UTC
    Logged 2026-11-05 13:49 UTC in DigiCert Wyvern2027h1, entry 416,547,383
    SHA-256 3232b749074697fb2b3a21fa17eb0a7cc21b3bf2732109b7e18d079bcd30a41d
    Public key SHA-256 a459db1c7f16524ab5237ecca82c051f7887fcc288777a540313d6628b4e25b3
    Addresses
    104.21.79.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.89, 172.67.169.109): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tomitie.pro
    Registered
    2026-07-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  43. trezzo-suitesg.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    trezzo-suitesg.pages.dev
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:47 UTC to 2027-02-03 13:45 UTC
    Logged 2026-11-05 13:47 UTC in Google ParcelYard2027h1, entry 626,808,597
    SHA-256 dcc5008bccbf1a1fc7f544935d7d575a70c83f93e3a4abe270a50f27bd5bf464
    Public key SHA-256 3d3f47a3e1f764d68115782e6d6234f99c915540c3604013fa8d29dcde918ca4
    Addresses
    172.66.44.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.129, 172.66.47.127): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  44. vobymoy.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    vobymoy.pro
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-07-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 10:00 UTC to 2026-12-06 10:59 UTC
    Logged 2026-11-05 13:50 UTC in Geomys Tuscolo2026h2, entry 1,040,586,195
    SHA-256 0269fa0de974f9b6396adc48d3e822813f1c2a9ae2f3a558bce4305eeeaaee95
    Public key SHA-256 336fd7dedd2781f5eaf0ca049dde13ef2c6da90bd7976db202a070f1ca297563
    Addresses
    104.21.59.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.184, 172.67.182.110): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vobymoy.pro
    Registered
    2026-07-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  45. vogataa.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    vogataa.pro
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-07-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 09:55 UTC to 2026-12-06 10:54 UTC
    Logged 2026-11-05 13:50 UTC in DigiCert Wyvern2026h2, entry 2,205,997,935
    SHA-256 c52703db8a3709f4f0800b6bd4ea5d66fac3d88e409f935d4718cf127707a71a
    Public key SHA-256 09b9c99a7e393499f53aa69911bce1b256726bdb09149c2b028a8092a3cf0a8e
    Addresses
    104.21.39.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.197, 172.67.171.86): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vogataa.pro
    Registered
    2026-07-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  46. wirecoreunit.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    wirecoreunit.com
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-05-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:49 UTC to 2027-02-03 12:49 UTC
    Logged 2026-11-05 13:48 UTC in Google PlumbersArms2027h1, entry 627,218,870
    SHA-256 3ea59af8130d6fca6214a25b834867280824a5520fa33e169656132b6eb32cc7
    Public key SHA-256 a6bd54fa94b5bbd94577649af12639a7f21d35f2462c7db69cc507eedf016092
    Addresses
    104.21.22.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.249, 172.67.207.229): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wirecoreunit.com
    Registered
    2026-05-12 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  47. zenithglobalfinance.co US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF -allDMARC rejectRegistered 19 mo ago
    DetailsHide
    Hostname
    zenithglobalfinance.co
    First seen
    2026-11-05 13:51 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 11:51 UTC to 2026-12-06 12:50 UTC
    Logged 2026-11-05 13:50 UTC in Google PlumbersArms2026h2, entry 1,640,300,994
    SHA-256 675b6d9b8a1dd41859fc58f66185a6c694f9fe932ebb4d184830479dd158b066
    Public key SHA-256 c1317f5ba85c58284c40f7e9aefc521937b437d847b4a74a1882e813762076c8
    PhishDestroy
    Addresses
    104.21.25.12 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.12, 172.67.221.141): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zenithglobalfinance.co
    Registered
    2025-04-12 · Dynadot Inc
    MX
    Receives mail at igw06.site4now.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 14:21 UTC

    Suggest a correction

  48. avito.pay.randomraff13d5d.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com FR · AS200484 · SENDINBLUE-ASN Sendinblue S…Avito
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 11 y ago
    DetailsHide
    Hostname
    avito.pay.randomraff13d5d.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com
    First seen
    2026-11-05 13:50 UTC
    First published
    2026-11-05 14:22 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-05 12:39 UTC to 2027-02-03 12:39 UTC
    Logged 2026-11-05 13:38 UTC in Google PlumbersArms2027h1, entry 627,078,224
    SHA-256 2091718e1c88e48df7bae6116369b90fb2b068c412a38a4947642a6a35828f38
    Public key SHA-256 b75aceb6aa83a52aefd116d1eb243705c4a3f775f466c9f654744749ccab5a20
    Brand
    Avito
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS
    Domain
    leankoala.com
    Registered
    2016-03-15 · united-domains GmbH
    MX
    Receives mail at mx00.udag.de, mx01.udag.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  49. apps-suite-us-home.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    apps-suite-us-home.pages.dev
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:45 UTC to 2027-02-03 13:43 UTC
    Logged 2026-11-05 13:45 UTC in Let's Encrypt Willow2027h1, entry 951,181,426
    SHA-256 b78b1cf38ddc41bc6c166d8bac216aeeecd94def5c9e34d872906f5404538831
    Public key SHA-256 5f543dd6be2ac13f3dc4f17c0d393d29af90f9467765d4d71961c85c18aeb83d
    Addresses
    172.66.44.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.145, 172.66.47.111): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  50. colomberendif-fr.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    colomberendif-fr.live
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:42 UTC to 2027-02-03 13:39 UTC
    Logged 2026-11-05 13:42 UTC in Google PlumbersArms2027h1, entry 627,131,648
    SHA-256 45e900378ff59fdd154a067cabf71b41972ddd771a44f0832ab1de988418d078
    Public key SHA-256 570539aa516ee3c0147651fbba74a470141aaee321d8784b77dbcb1b33b26d2e
    Addresses
    104.21.29.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.87, 172.67.148.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    colomberendif-fr.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  51. community.commute-now.top MD · AS200019 · AlexHost ALEXHOST S.R.L.
    ListedListed by USOMMX absentSPF missingDMARC missingRegistered 15 mo ago
    DetailsHide
    Hostname
    community.commute-now.top
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    USOM listed it 2026-08-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 14:15 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by LiteSSL RSA CA 2025 · precertificate
    Valid 2026-11-05 12:00 UTC to 2027-02-03 11:59 UTC
    Logged 2026-11-05 13:40 UTC in Google Xenon2027h1, entry 730,329,404
    SHA-256 92e707423149b62dca4e654b58e3fd048f3c63ac10c43cee41a34b44a0b202fe
    Public key SHA-256 887483884678cb49efdaaa3573e7c79f22b0eb6405795f01606450158d620185
    Addresses
    176.116.0.89 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    commute-now.top
    Registered
    2025-08-12 · NameSilo,LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:27 UTC

    Suggest a correction

  52. cricfylive.com.in US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    cricfylive.com.in
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:46 UTC to 2027-02-03 12:46 UTC
    Logged 2026-11-05 13:45 UTC in Google PlumbersArms2027h1, entry 627,171,526
    SHA-256 3120905c76d19be18f8209dce5b84cefe02b339368e37641e798c90a5cbaba01
    Public key SHA-256 853f743843afb13497b65aae54c96c4ef83a3ae1a9ba4ba89bed688cda1345c3
    Addresses
    104.21.28.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.99, 172.67.145.210): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cricfylive.com.in
    Registered
    2026-05-11 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:21 UTC

    Suggest a correction

  53. eclipseearnai.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    eclipseearnai.live
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:45 UTC to 2027-02-03 12:45 UTC
    Logged 2026-11-05 13:43 UTC in Let's Encrypt Willow2027h1, entry 951,166,857
    SHA-256 c17e3a027eb070c0e86f774ba0cae20dd74407ba173a712f8e067aabe8908acf
    Public key SHA-256 badb94a4ec0c14d37a096945381b632c0af2406d875fc04c891085ca6fd69a85
    Addresses
    104.21.82.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.11, 172.67.167.135): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eclipseearnai.live
    Registered
    2026-05-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  54. get-krraken-login.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    get-krraken-login.pages.dev
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:41 UTC to 2027-02-03 13:39 UTC
    Logged 2026-11-05 13:41 UTC in Google ParcelYard2027h1, entry 626,734,144
    SHA-256 9765736277f97f479b167498781521c9a8202602382da49218565e02b92b7233
    Public key SHA-256 077a56295771f49dc7ab59412c02fe06e5d7ed2269d9f3c0f824080beb85af0a
    Addresses
    172.66.45.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.7, 172.66.46.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  55. indexiplex200-fr.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    indexiplex200-fr.live
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 12:16 UTC to 2026-12-06 13:14 UTC
    Logged 2026-11-05 13:42 UTC in DigiCert Wyvern2026h2, entry 2,205,982,877
    SHA-256 4a2e885b19db5d9720f6cd7fd6694a91084c23ad08e528c96f045a5b2c6f1ee7
    Public key SHA-256 e5c71cdaa8b382c25ced647c8464e285a1675c082986074bd3377e1f5edb09e1
    Addresses
    104.21.78.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.78.39, 172.67.215.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    indexiplex200-fr.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  56. mrmarcuspeterlascelles.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    mrmarcuspeterlascelles.sbs
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 12:16 UTC to 2026-12-06 13:14 UTC
    Logged 2026-11-05 13:43 UTC in DigiCert Wyvern2026h2, entry 2,205,985,679
    SHA-256 23103f5b3d93deaca3edb0d194e94f93b8029595cfd74b816df13c8aa485d32c
    Public key SHA-256 8e82df4cf649f9ce1d85b5d2cc95443abed4b8b8b1dde9afc2db6fafa1845371
    PhishDestroy
    Addresses
    104.21.61.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.61.202, 172.67.214.113): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mrmarcuspeterlascelles.sbs
    Registered
    2026-07-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  57. mytrixhalogpt-review.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    mytrixhalogpt-review.net
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-07-27 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:43 UTC to 2027-02-03 12:43 UTC
    Logged 2026-11-05 13:41 UTC in DigiCert Sphinx2027h1, entry 367,575,967
    SHA-256 175dc5de81dab26937d7ecbbf4fcdcd2edc3d9400d8bd52b9b33d9aee0c1a634
    Public key SHA-256 53271cbe9ee2da966d344c8b90ae0e6097f311c2937f029f15d9fb49e6146887
    Addresses
    104.21.20.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.20.144, 172.67.192.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mytrixhalogpt-review.net
    Registered
    2026-03-14 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  58. plperhjuisusirekir.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    plperhjuisusirekir.com
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-05-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:46 UTC to 2027-02-03 12:46 UTC
    Logged 2026-11-05 13:44 UTC in Google PlumbersArms2027h1, entry 627,165,295
    SHA-256 ab19dc2e8f6d717d77343d682198add51e380f0b545c9404b50902653b3eaf89
    Public key SHA-256 5606313f7159d13b91d3a5657668df1f2374f104ba59ef81613bbe76d242ba5f
    Addresses
    104.21.11.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.11.177, 172.67.149.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    plperhjuisusirekir.com
    Registered
    2026-05-12 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  59. polymarketpredictionai.com US · AS32561 · Aquiryn LLC
    ReportedReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 8 mo ago
    DetailsHide
    Hostname
    polymarketpredictionai.com
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-05 12:47 UTC to 2027-02-03 12:47 UTC
    Logged 2026-11-05 13:45 UTC in IPng Networks Gouda2027h1, entry 324,660,558
    SHA-256 5c2f8bf30112bc5bb77d8c05df43774a9533f6b7a261b9f2d668d444bae7acf5
    Public key SHA-256 7af5e856a85362022f295d220f12e2f2d3f1b1a7596db3ee504672afb4ab2462
    PhishDestroy
    Addresses
    23.153.104.17 · United States · AS32561 AQUIRYN-LLC - Aquiryn LLC
    Domain
    polymarketpredictionai.com
    Registered
    2026-03-24 · NameSilo, LLC
    MX
    Receives mail at polymarketpredictionai.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  60. sp19ct7-kuref-biz-vasem-doril.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    sp19ct7-kuref-biz-vasem-doril.pages.dev
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 14:18 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:44 UTC to 2027-02-03 13:42 UTC
    Logged 2026-11-05 13:44 UTC in Let's Encrypt Willow2027h1, entry 951,177,028
    SHA-256 ee71b8b122d4f0fce39ceb2dc099a9ee9306a790f341ee5c3ea762f424eba7b8
    Public key SHA-256 65809983b51335ddfff99f8f08709f840898c2550cf0b34f4da511f9cb4fd4e1
    PhishTank
    PhishTank report #9479525
    Addresses
    172.66.44.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.104, 172.66.47.152): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  61. testwallet.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    testwallet.info
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:44 UTC to 2027-02-03 12:44 UTC
    Logged 2026-11-05 13:43 UTC in Google ParcelYard2027h1, entry 626,752,665
    SHA-256 1f1a96bcfc2dd0527835f9370161ba6f131a9e60616f25482e54f27c2ca11cd3
    Public key SHA-256 2c3ace27648c17c4216932062a9e9f36b606cf3ef548835991540223892a9df2
    Addresses
    104.21.25.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.102, 172.67.134.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    testwallet.info
    Registered
    2026-03-14 · Cloudflare, Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  62. twalet-card.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    twalet-card.digital
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:44 UTC to 2027-02-03 13:42 UTC
    Logged 2026-11-05 13:44 UTC in Let's Encrypt Sycamore2027h1, entry 960,464,547
    SHA-256 34a220d8648ab8d668eb5c281071a91ac48585df474cfc38332e4ce24c51ba75
    Public key SHA-256 9a5d9fe6f20f8a371499b8bdeaff5304a6ba79d9eafe39965a1489e14b94a404
    Addresses
    104.21.82.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.73, 172.67.154.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    twalet-card.digital
    Registered
    2026-09-05 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  63. urbanselvia.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    urbanselvia.com
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-09-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:43 UTC to 2027-02-03 12:43 UTC
    Logged 2026-11-05 13:41 UTC in IPng Networks Halloumi2027h1, entry 374,645,478
    SHA-256 169d41cd04c4ffb0c102d0e4365a6a14f1f1da1d2ebe5663d7a3b0ba7d05ab08
    Public key SHA-256 775a5b1ed95feeab2a4d3f92a3eb0324750f4836cfa240ba1227a887f0df22e7
    Addresses
    104.18.15.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.15.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    urbanselvia.com
    Registered
    2026-05-08 · Spaceship, Inc.
    MX
    Receives mail at route2.mx.cloudflare.net, route3.mx.cloudflare.net, route1.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  64. ww38.ronal.click DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ReportedParking page · Above.comUnder ronal.click, reported by PhishDestroyMX presentSPF -allDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    ww38.ronal.click
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy, listing ronal.click and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:42 UTC to 2027-02-03 12:42 UTC
    Logged 2026-11-05 13:41 UTC in DigiCert Sphinx2027h1, entry 367,570,503
    SHA-256 853504dfa6caaf2f27611f0cfaaee4d14e821b325b129d33d55da7d1cc904316
    Public key SHA-256 d7919dd4001d5688ef50817ddaf2b2498488069dd8ce83c44fca9c65e4735095
    PhishDestroy
    Addresses
    185.53.179.200 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · Above.com
    The registry delegates ronal.click to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. ParkingCrew (Team Internet) (185.53.179.200): a parking service. It answers for names that are typically for sale or unused.
    Domain
    ronal.click
    Registered
    2026-11-04 · CommuniGal Communication Ltd.
    MX
    Receives mail at park-mx.above.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 02:58 UTC

    Suggest a correction

  65. x-messs.com
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    x-messs.com
    First seen
    2026-11-05 13:46 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Not resolving · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:45 UTC to 2027-02-03 13:43 UTC
    Logged 2026-11-05 13:45 UTC in Google ParcelYard2027h1, entry 626,786,454
    SHA-256 e81743d8b369b8aeba48770e889368d2a8350e36f6d733290bc7433b5127e81b
    Public key SHA-256 ce890ebfb01fde5c0316814c67a33a5c99b4d47844c0042c842d2a38478ad2ea
    Domain
    x-messs.com
    Registered
    2026-09-07 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  66. chasebankonline.net US · AS19853 · OrangeHostChase
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered today
    DetailsHide
    Hostname
    chasebankonline.net
    First seen
    2026-11-05 13:45 UTC
    First published
    2026-11-05 14:22 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 173.252.167.150.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 173.252.167.150
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-05 12:33 UTC to 2027-02-03 12:33 UTC
    Logged 2026-11-05 13:31 UTC in Google PlumbersArms2027h1, entry 626,991,441
    SHA-256 c20d5a186ba8c1e70417800ae4ede36600fa4ca3f482f0dec080f7b3cc4b5b19
    Public key SHA-256 78c35f9f517d578c60addac0283f62d2f52b6735a188ea072eee2e0fa99b03e6
    Brand
    Chase
    Addresses
    173.252.167.150 · United States · AS19853 ORANGEHOST - OrangeHost
    Domain
    chasebankonline.net
    Registered
    2026-11-05 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at chasebankonline.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  67. adjustime.casa US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    adjustime.casa
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-07-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:36 UTC to 2027-02-03 13:35 UTC
    Logged 2026-11-05 13:36 UTC in Google ParcelYard2027h1, entry 626,662,601
    SHA-256 a387684bd4cb14a352c3f3aa56c8848ab1dac9afd373468da69efc03c2daa4da
    Public key SHA-256 af353ea01be446426571a5c33c9153ac113815649d8d3271edd365475c4eb233
    Addresses
    104.21.31.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.31.33, 172.67.174.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    adjustime.casa
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:44 UTC

    Suggest a correction

  68. ardito-maturaggio.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 16 d ago
    DetailsHide
    Hostname
    ardito-maturaggio.pro
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 13:29 UTC to 2027-02-03 13:37 UTC
    Logged 2026-11-05 13:39 UTC in DigiCert Sphinx2027h1, entry 367,564,861
    SHA-256 b801c808c5697347f69a2830994c524df971ad148711e6151b7088f617b3c93b
    Public key SHA-256 a9b7b2189abe92f158f9a88e204bb78ac3be196785aa6ea22918754ffa988cfe
    Addresses
    104.21.58.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.36, 172.67.199.125): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ardito-maturaggio.pro
    Registered
    2026-10-20 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  69. fidelnex.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    fidelnex.com
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:39 UTC to 2027-02-03 13:37 UTC
    Logged 2026-11-05 13:39 UTC in DigiCert Wyvern2027h1, entry 416,440,703
    SHA-256 6b75f8a8be39c45e268df7f189c69494a0c96c538b15699678bd637b21665fe1
    Public key SHA-256 afe6d8fcf50c87aaa8fe70fb6ad7e1c16505c36021d40f43ec57d275c05e4df4
    Addresses
    104.21.38.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.56, 172.67.219.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fidelnex.com
    Registered
    2026-09-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  70. frugacella.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 16 d ago
    DetailsHide
    Hostname
    frugacella.pro
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:40 UTC to 2027-02-03 12:40 UTC
    Logged 2026-11-05 13:39 UTC in Google PlumbersArms2027h1, entry 627,090,831
    SHA-256 5a83d07c86d6588e80edb6f9ca3b9687f3a992af6cc02148d2426c25cf0d1ae7
    Public key SHA-256 754ccd7932c9dfa3bd83891f5e2ed43ab6212fef224b6618c9ef6de7b024e91d
    Addresses
    104.21.11.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.11.243, 172.67.193.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    frugacella.pro
    Registered
    2026-10-20 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  71. imetokovnik.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 28 d ago
    DetailsHide
    Hostname
    imetokovnik.live
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:41 UTC to 2027-02-03 12:41 UTC
    Logged 2026-11-05 13:39 UTC in Geomys Tuscolo2027h1, entry 487,452,107
    SHA-256 19a58db1ea530071a4be4c8ea9b7f348fcb5879ff731ca8135a34624cedd43c8
    Public key SHA-256 0b4ef602aa8b4f335680b51ad87288cce9d7f46b6673bcde4428a2b1fd83d3f5
    Addresses
    104.21.84.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.2, 172.67.184.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    imetokovnik.live
    Registered
    2026-10-08 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  72. kfccyz.com
    ListedListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    kfccyz.com
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Not resolving · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:39 UTC to 2027-02-03 13:37 UTC
    Logged 2026-11-05 13:39 UTC in Geomys Tuscolo2027h1, entry 487,452,544
    SHA-256 e503b322fc55331853e7c9e2d5d42949995226982bdb800d6002109b5c61e7db
    Public key SHA-256 a1441b50aa5b7a8821cc7f38e4e2570ccc77e412e7956dc999a95b71c3ad49ad
    Domain
    kfccyz.com
    Registered
    2026-07-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  73. krevpixelon-es.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    krevpixelon-es.live
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:40 UTC to 2027-02-03 13:38 UTC
    Logged 2026-11-05 13:40 UTC in IPng Networks Halloumi2027h1, entry 374,637,348
    SHA-256 93c6aeeaa896745b5ae5e42917ac7ec8a044d52f6b5cea9db9aebe0c7d4e2d69
    Public key SHA-256 27ed4cf6ce65fb55baf1ba82672452cac56f7eb3b06b42ab431332928e001f65
    Addresses
    104.21.45.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.45.3, 172.67.207.9): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    krevpixelon-es.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  74. m3cx-6de-8miepj-ek0-47m-dki.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    m3cx-6de-8miepj-ek0-47m-dki.pages.dev
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 14:18 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:38 UTC to 2027-02-03 13:37 UTC
    Logged 2026-11-05 13:38 UTC in DigiCert Sphinx2027h1, entry 367,556,710
    SHA-256 9e5c6399cd840378ad51d1b272d697964f2b3c54804d8a32e869c6356e6433c9
    Public key SHA-256 0ea595838d21d2ecbcc5aa59547dcbb8cf7b61d6a69b00f8bb78bd2def233cae
    PhishTank
    PhishTank report #9479404
    Addresses
    172.66.44.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.178, 172.66.47.78): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  75. mail.uttspetrolofisi.com TR · AS42846 · guzelhosting GNET Internet …
    ListedUnder uttspetrolofisi.com, listed by USOMMX presentSPF ~allDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    mail.uttspetrolofisi.com
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    USOM listed it 2026-09-05 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 14:15 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    USOM, listing uttspetrolofisi.com and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-05 12:37 UTC to 2027-02-03 12:37 UTC
    Logged 2026-11-05 13:36 UTC in Google PlumbersArms2027h1, entry 627,057,268
    SHA-256 32b529151c1cbfbe627cfa569df0c8b7f7b413f130485ab283c6427e07a2123c
    Public key SHA-256 3b44f14ca8f20cf1c8e6d29ed28adf3d3702657fa3ee0c8dc114509765b1c557
    Addresses
    89.252.187.72 · Türkiye · AS42846 guzelhosting GNET Internet Telekomunikasyon A.S.
    Domain
    uttspetrolofisi.com
    Registered
    2024-10-30 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Receives mail at uttspetrolofisi.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  76. mathscinet.imath.kiev.ua UA · AS3255 · UARNET-AS LLC EKSINTECH
    ReportedUnder imath.kiev.ua, reported by PhishDestroyMX presentSPF -allDMARC quarantineRegistered 29 y ago
    DetailsHide
    Hostname
    mathscinet.imath.kiev.ua
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy, listing imath.kiev.ua and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:39 UTC to 2027-02-03 12:39 UTC
    Logged 2026-11-05 13:37 UTC in Google PlumbersArms2027h1, entry 627,071,986
    SHA-256 82408d4bc5740965deeec5311366607e74c73a6e8f80a21c0d1a84cc88de9e5f
    Public key SHA-256 01b3bec99651a89bc353303caabaf12354972d52cfbd8c5fd863053051ab7100
    PhishDestroy
    Addresses
    194.44.31.54 · Ukraine · AS3255 UARNET-AS LLC EKSINTECH
    Domain
    imath.kiev.ua
    Registered
    1997-12-16 · BUSINESS AND TECHNOLOGIS LTD
    MX
    Receives mail at twinhead.imath.kiev.ua, zen.imath.kiev.ua
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-05 08:33 UTC

    Suggest a correction

  77. moltenevent.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    moltenevent.net
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:41 UTC to 2027-02-03 12:41 UTC
    Logged 2026-11-05 13:40 UTC in Google ParcelYard2027h1, entry 626,714,539
    SHA-256 13637f6b5e5ac88b22d78449dc45042714556ad558b9fe2c34b4ace6829708b6
    Public key SHA-256 3896107a770955d7c3542e112668f86f94f40cb945b4378835ab213084039aa3
    PhishDestroy
    Addresses
    104.21.90.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.159.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.188, 172.67.159.200): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    moltenevent.net
    Registered
    2026-03-14 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:44 UTC

    Suggest a correction

  78. nidocapitorio.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    nidocapitorio.live
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 12:42 UTC to 2027-02-03 12:42 UTC
    Logged 2026-11-05 13:40 UTC in Let's Encrypt Willow2027h1, entry 951,119,341
    SHA-256 931652334abbc14ca2b1994f7321c4a77a1281a52837a967a6b1da7045a150a3
    Public key SHA-256 1bc88470dbb697d2541c5ee6d7bfbaedb2cf2e25d3830f36de6fc8a51c6de6cd
    Addresses
    104.21.82.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.230, 172.67.207.236): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nidocapitorio.live
    Registered
    2026-05-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  79. onboarding.androidloading.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardUnder androidloading.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    onboarding.androidloading.com
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy, listing androidloading.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-05 12:40 UTC to 2027-02-03 12:40 UTC
    Logged 2026-11-05 13:38 UTC in Geomys Tuscolo2027h1, entry 487,443,877
    SHA-256 4f11f708fd18151a00d17a621ef9089c2dbdcac0fc8750cb0616372bd60647ae
    Public key SHA-256 f11d64b2af206356fbc5e206b74a4266d2e62e75a3496b9770bed80c2742f4ed
    PhishDestroy
    Addresses
    185.178.208.191 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.178.208.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    androidloading.com
    Registered
    2023-04-19 · Center of Ukrainian Internet Names (UKRNAMES)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  80. ondofinance.cfd US · AS13335 · Cloudflare, Inc.4 addressesOndo Finance
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ondofinance.cfd
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:39 UTC to 2027-02-03 13:37 UTC
    Logged 2026-11-05 13:39 UTC in Google PlumbersArms2027h1, entry 627,092,825
    SHA-256 5263ef2572acb90127e9eea88e77187d0e7a4e350d62c3802b4828ced5040349
    Public key SHA-256 59a837886668a8e32cd88e0e6284a389344dd35b315738f1654028b6ca0068bd
    Brand
    Ondo Finance
    Addresses
    104.21.83.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:df78
    2606:4700:3032::6815:536d
    Cloudflare
    Cloudflare (104.21.83.109, 172.67.223.120): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ondofinance.cfd
    Registered
    2026-07-09 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:44 UTC

    Suggest a correction

  81. pages.revivalpoint.com US · AS13335 · Cloudflare, Inc.3 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC rejectRegistered 9 y ago
    DetailsHide
    Hostname
    pages.revivalpoint.com
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-05 12:38 UTC to 2027-02-03 12:38 UTC
    Logged 2026-11-05 13:37 UTC in Google PlumbersArms2027h1, entry 627,067,617
    SHA-256 89e18fc63d586cc8827703ab27e6e9e36136d62c663ef8ffc45d8dee11880ced
    Public key SHA-256 b30083f18f7dec8e5c3b5eb16b6280f1ed508b50aee86856bcf50d0959ef94c5
    PhishDestroy
    Addresses
    104.26.2.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.26.3.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.68.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.26.2.165, 104.26.3.165, 172.67.68.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    revivalpoint.com
    Registered
    2017-10-26 · Cloudflare, Inc.
    MX
    Receives mail at aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  82. pelkruvilanz-es.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    pelkruvilanz-es.live
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:40 UTC to 2027-02-03 13:38 UTC
    Logged 2026-11-05 13:40 UTC in Google ParcelYard2027h1, entry 626,711,065
    SHA-256 c8551a9b59b890bb74d0341fd80d6ce8235180e478984def3b763bc167f61d4a
    Public key SHA-256 b2846cdb853b34bc9fe003f2302f22d859e2d8d71d77433562beea44321d08ac
    Addresses
    104.21.58.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.148, 172.67.204.127): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pelkruvilanz-es.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  83. pl-oferta87344537.click
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    pl-oferta87344537.click
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-09-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Not resolving · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:36 UTC to 2027-02-03 13:35 UTC
    Logged 2026-11-05 13:36 UTC in Google PlumbersArms2027h1, entry 627,062,954
    SHA-256 75da82ae66467664fb8a350a38152c8629a9ed2e9ed3e8033faa1ac35f4b51cd
    Public key SHA-256 63813ae840358006662f7933378a10aed88785b14dbd38969e613ec89a68a8e6
    Domain
    pl-oferta87344537.click
    Registered
    2026-09-07 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  84. possecimo-pt.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 11 d ago
    DetailsHide
    Hostname
    possecimo-pt.pro
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 12:41 UTC to 2027-02-03 12:41 UTC
    Logged 2026-11-05 13:39 UTC in Let's Encrypt Willow2027h1, entry 951,110,188
    SHA-256 74585f517cd17f711929b53afc13f0031222e42faf8f9b71c88def12df2e306b
    Public key SHA-256 90541aec9a9f2c7d9c33838415e44c17c2594ba2a180b40c7a3356c9dd2b7263
    Addresses
    104.21.42.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.97, 172.67.160.175): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    possecimo-pt.pro
    Registered
    2026-10-25 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  85. sobrecosta.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    sobrecosta.com
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-05-29 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 12:39 UTC to 2027-02-03 12:39 UTC
    Logged 2026-11-05 13:37 UTC in Google ParcelYard2027h1, entry 626,683,623
    SHA-256 5580060b2f5e8dbf37a78210fef5b10622b26b0e4fdade6b70df4c022505e05e
    Public key SHA-256 d7cefec805260da8e7a946ba370291dba9b1c8898aa4d41b265b0354f403d414
    Addresses
    104.21.25.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.104, 172.67.134.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sobrecosta.com
    Registered
    2026-05-12 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  86. sp19ct7-furev-biz-kalen-doris.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    sp19ct7-furev-biz-kalen-doris.pages.dev
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 14:18 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:40 UTC to 2027-02-03 13:37 UTC
    Logged 2026-11-05 13:40 UTC in Google PlumbersArms2027h1, entry 627,104,799
    SHA-256 de870b1ed4c6220ed6393403a3d022712a5a2815f08df6e22df0466ea418662a
    Public key SHA-256 3c72c82e3b07c8844b837d7f2b0e5a6bf40cd08a5f911359418b5f32b9689567
    PhishTank
    PhishTank report #9479504
    Addresses
    172.66.44.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.12 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.244, 172.66.47.12): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  87. streamevista-ai.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 16 d ago
    DetailsHide
    Hostname
    streamevista-ai.pro
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:41 UTC to 2027-02-03 12:41 UTC
    Logged 2026-11-05 13:39 UTC in Geomys Tuscolo2027h1, entry 487,455,402
    SHA-256 1ed227d891866bb228239ade34866240d715052c4de73700c96459466149acbf
    Public key SHA-256 d5b87360ae0189323aee1c028c7e80505e78231940bd1d3d78d81c350ed262ad
    Addresses
    104.21.33.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.114, 172.67.161.229): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    streamevista-ai.pro
    Registered
    2026-10-20 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  88. swaptaire-fr.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 35 d ago
    DetailsHide
    Hostname
    swaptaire-fr.live
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 12:41 UTC to 2027-02-03 12:41 UTC
    Logged 2026-11-05 13:39 UTC in Geomys Tuscolo2027h1, entry 487,450,814
    SHA-256 94fa1808e42d1aca57c548a5cb24d7555eb49990abadbc4003bdcb7d9bd03d7f
    Public key SHA-256 b92637cebdad137936426a6c5937c754b038e36e8dfc28e8b3453e8df02577a0
    Addresses
    104.21.35.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.35.59, 172.67.214.83): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    swaptaire-fr.live
    Registered
    2026-10-01 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  89. twxunxi.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    twxunxi.shop
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 13:27 UTC to 2027-02-03 13:35 UTC
    Logged 2026-11-05 13:37 UTC in DigiCert Wyvern2027h1, entry 416,428,437
    SHA-256 da27fd6c670a673e66c90b18f11d90904efc9f2745610325ad339adec8f7c9a7
    Public key SHA-256 74242c385cccaad6690810f9de5fb3ccd49c4ca37d495ae958503df36c1659ae
    Addresses
    104.21.74.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.74.180, 172.67.160.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    twxunxi.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:44 UTC

    Suggest a correction

  90. uttspetrolofisi.com TR · AS42846 · guzelhosting GNET Internet …
    ListedListed by USOMMX presentSPF ~allDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    uttspetrolofisi.com
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    USOM listed it 2026-09-05 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 14:15 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-05 12:37 UTC to 2027-02-03 12:37 UTC
    Logged 2026-11-05 13:36 UTC in Google PlumbersArms2027h1, entry 627,057,268
    SHA-256 32b529151c1cbfbe627cfa569df0c8b7f7b413f130485ab283c6427e07a2123c
    Public key SHA-256 3b44f14ca8f20cf1c8e6d29ed28adf3d3702657fa3ee0c8dc114509765b1c557
    Addresses
    89.252.187.72 · Türkiye · AS42846 guzelhosting GNET Internet Telekomunikasyon A.S.
    Domain
    uttspetrolofisi.com
    Registered
    2024-10-30 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Receives mail at uttspetrolofisi.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  91. worame.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    worame.digital
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-06-04 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 12:40 UTC to 2027-02-03 12:40 UTC
    Logged 2026-11-05 13:39 UTC in Let's Encrypt Sycamore2027h1, entry 960,393,530
    SHA-256 2acecf982784e43ff55bbacc1dc3a8c95c465e780815c9175a208b0427eef423
    Public key SHA-256 0727f20dac7e7a66568ef51bf06c91b6f193590678f8e72b707ae7a9e10e781f
    Addresses
    104.21.84.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.142, 172.67.193.207): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    worame.digital
    Registered
    2026-05-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  92. www.catshoes-hu.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.catshoes-hu.shop
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-10-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:40 UTC to 2027-02-03 13:40 UTC
    Logged 2026-11-05 13:40 UTC in Let's Encrypt Sycamore2027h1, entry 960,403,103
    SHA-256 d2e01c5e9cbd11313bacd10544b8e1e674a1a465cb5ac8de3bba2985f8b45882
    Public key SHA-256 f51745006a7b109724bd6741eca1487eddab344ca8fb1691a9a6d0e3188f4843
    Addresses
    104.17.246.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.17.247.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.17.246.119, 104.17.247.119): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    catshoes-hu.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:44 UTC

    Suggest a correction

  93. www.uttspetrolofisi.com TR · AS42846 · guzelhosting GNET Internet …
    ListedUnder uttspetrolofisi.com, listed by USOMMX presentSPF ~allDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    www.uttspetrolofisi.com
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    USOM listed it 2026-09-05 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 14:15 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    USOM, listing uttspetrolofisi.com and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-05 12:37 UTC to 2027-02-03 12:37 UTC
    Logged 2026-11-05 13:36 UTC in Google PlumbersArms2027h1, entry 627,057,268
    SHA-256 32b529151c1cbfbe627cfa569df0c8b7f7b413f130485ab283c6427e07a2123c
    Public key SHA-256 3b44f14ca8f20cf1c8e6d29ed28adf3d3702657fa3ee0c8dc114509765b1c557
    Addresses
    89.252.187.72 · Türkiye · AS42846 guzelhosting GNET Internet Telekomunikasyon A.S.
    Domain
    uttspetrolofisi.com
    Registered
    2024-10-30 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Receives mail at uttspetrolofisi.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  94. yativorastium.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 10 d ago
    DetailsHide
    Hostname
    yativorastium.info
    First seen
    2026-11-05 13:41 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:38 UTC to 2027-02-03 13:36 UTC
    Logged 2026-11-05 13:38 UTC in IPng Networks Halloumi2027h1, entry 374,626,438
    SHA-256 55e31d47b1652cb7434f67e565a46b3c378da6d3a55035c44173777993b8890a
    Public key SHA-256 bcedd0ff4d1a825e4ac22ebc29bb812512177c0c3956df059fa59550de70c50a
    Addresses
    104.21.79.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.29, 172.67.141.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    yativorastium.info
    Registered
    2026-10-26 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  95. arcusxyz.one US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    arcusxyz.one
    First seen
    2026-11-05 13:36 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 13:23 UTC to 2027-02-03 13:31 UTC
    Logged 2026-11-05 13:33 UTC in DigiCert Wyvern2027h1, entry 416,404,095
    SHA-256 4ba76b3c37ca75762bdead2a68e7b749c3c3136ddb247dac4a0063444af77984
    Public key SHA-256 d36a8b89d14731fc5e8dadae2fd6ccf1cbb008972ef105d4975055d745e5c20f
    Addresses
    104.21.62.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.62.164, 172.67.137.24): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    arcusxyz.one
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:39 UTC

    Suggest a correction

  96. backend.skollwallet.com US · AS397273 · Render2 addresses
    ReportedShared platform · RenderUnder skollwallet.com, reported by PhishDestroyMX presentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    backend.skollwallet.com
    First seen
    2026-11-05 13:36 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy, listing skollwallet.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:35 UTC to 2027-02-03 13:35 UTC
    Logged 2026-11-05 13:35 UTC in Google ParcelYard2027h1, entry 626,648,778
    SHA-256 c8a04e5a977d2169e9e45f4298bf191cd5734bdfd6c16d6c561109ea0bfda6bd
    Public key SHA-256 adc803f5846212e262f7ede890d7ce998d455dff180b24520827f8a5ac1f885e
    PhishDestroy
    Addresses
    216.24.57.16 · United States · AS397273 RENDER - Render · Render (shared platform)
    216.24.57.18 · United States · AS397273 RENDER - Render · Render (shared platform)
    Shared platform · Render
    Render (216.24.57.16, 216.24.57.18): a shared platform front end. The address serves every app deployed on the platform.
    Domain
    skollwallet.com
    Registered
    2025-12-22 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Receives mail at smtp.google.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  97. candoredge.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    candoredge.com
    First seen
    2026-11-05 13:36 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:30 UTC to 2027-02-03 13:29 UTC
    Logged 2026-11-05 13:30 UTC in IPng Networks Halloumi2027h1, entry 374,560,427
    SHA-256 381c14057f0243fa0fa0b3e78be04ef46cd074a9ffb5a02f4db37ab0a71fb382
    Public key SHA-256 d0f079a0b9063f0c1e010c1534dd746c864f8927d8ad17e92584cda692846ce7
    Addresses
    104.21.86.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.68, 172.67.216.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    candoredge.com
    Registered
    2026-09-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

  98. chainlink-distribution.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    chainlink-distribution.xyz
    First seen
    2026-11-05 13:36 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 12:33 UTC to 2027-02-03 12:33 UTC
    Logged 2026-11-05 13:31 UTC in Let's Encrypt Sycamore2027h1, entry 960,280,247
    SHA-256 570f656ed1e87527bdcb9b78e41720e16ff3ad5c7eca0f26afe3cff7c0d1ef52
    Public key SHA-256 afae37e307f3b72dfd6c404c40cc29d3c845a88b8c72a8d78fc02549fda6a5cd
    Addresses
    104.21.39.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.199, 172.67.171.88): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    chainlink-distribution.xyz
    Registered
    2026-05-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:22 UTC

    Suggest a correction

  99. contentloce.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    contentloce.shop
    First seen
    2026-11-05 13:36 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:33 UTC to 2027-02-03 13:32 UTC
    Logged 2026-11-05 13:33 UTC in IPng Networks Halloumi2027h1, entry 374,590,100
    SHA-256 33165aa7d9d73428fe72ccaab53b6ee949c5d35e9799b52984d3326e22c21dff
    Public key SHA-256 2c665a47fe7fc984cdd456ac0988796cfd3d03ca81e742024a8ce98f133b99ea
    Addresses
    104.21.62.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.62.196, 172.67.138.192): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    contentloce.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:39 UTC

    Suggest a correction

  100. cshop.sale US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    cshop.sale
    First seen
    2026-11-05 13:36 UTC
    First published
    2026-11-05 14:22 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 14:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 12:33 UTC to 2027-02-03 13:30 UTC
    Logged 2026-11-05 13:33 UTC in Google ParcelYard2027h1, entry 626,620,314
    SHA-256 50f360b18e9ca660bf52a890a5086f855a297d2ce4bd8a9f3a9d7c9296bd0cb4
    Public key SHA-256 d70662042d531773a6d42c2a188455232aace4d18659bbf387a9a5901d6df596
    PhishDestroy
    Addresses
    104.21.59.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.142, 172.67.179.73): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cshop.sale
    Registered
    2026-07-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 14:23 UTC

    Suggest a correction

Showing 401–500 of 5,646 hostnames.Back to the start
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources