Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-05 17:45 UTC
Certificate-log entries · 24 h
329.8M
from 84 distinct feeds
Unique certificates · 24 h
35.2M
each reviewed
Names resolved · 24 h
22.2M
16.3M with an address
Findings · 24 h
5,793
223 of 1,061 brands targeted

5,793 hostnames from the last 24 hours.

  1. kdollldq.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    kdollldq.com
    First seen
    2026-11-05 15:56 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-05-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 14:52 UTC to 2027-02-03 14:52 UTC
    Logged 2026-11-05 15:51 UTC in Let's Encrypt Willow2027h1, entry 952,914,896
    SHA-256 7c881f4b5db7b797799a635d816d4f4a6a200910e524fe9c1f2fb0c960a23223
    Public key SHA-256 ac74cb108b78529be4e881eeefeed8bce5a4594f7123b452e284d0b265c0aa3f
    Addresses
    104.21.17.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.155, 172.67.177.15): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kdollldq.com
    Registered
    2026-05-12 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:57 UTC

    Suggest a correction

  2. khm.sale US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    khm.sale
    First seen
    2026-11-05 15:56 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 14:55 UTC to 2027-02-03 14:55 UTC
    Logged 2026-11-05 15:54 UTC in Let's Encrypt Willow2027h1, entry 952,955,766
    SHA-256 2f96d5e898ceb0add8b5f77653e7b8e0c6f6ae8f57d17610d071bfd78c0113fd
    Public key SHA-256 9fdf0b67f208cc6cf1eaa88de7afa5cc0259c2c6c9ed3fa3d4f071bb4acddce4
    PhishDestroy
    Addresses
    104.21.71.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.14, 172.67.168.252): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    khm.sale
    Registered
    2026-05-12 · GNAME.COM PTE. LTD.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:42 UTC

    Suggest a correction

  3. m.js4519.com HK · AS137951 · ASLINE LIMITED
    ReportedUnder js4519.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    m.js4519.com
    First seen
    2026-11-05 15:56 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy, listing js4519.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-05 14:52 UTC to 2027-02-03 14:52 UTC
    Logged 2026-11-05 15:51 UTC in Google ParcelYard2027h1, entry 628,470,754
    SHA-256 41bfc8df707f1c2ebde691751898732cbffec56ae844c51b01111612adbf14e1
    Public key SHA-256 67a805910cb025a033f9dda40d3e653550ce2bfe72f3c852a8ec410adcfeea39
    PhishDestroy
    Addresses
    168.76.227.176 · Hong Kong · AS137951 ASLINE-AS-AP - ASLINE LIMITED
    Domain
    js4519.com
    Registered
    2026-05-19 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  4. mf30i-umfa-57wy3-064ga1-l314e8.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    mf30i-umfa-57wy3-064ga1-l314e8.pages.dev
    First seen
    2026-11-05 15:56 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 17:18 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:54 UTC to 2027-02-03 15:53 UTC
    Logged 2026-11-05 15:54 UTC in DigiCert Sphinx2027h1, entry 368,752,765
    SHA-256 95cf49498e8fa4101dba1fad478a28bacf926cdb508845ef882573d03d6e9ee4
    Public key SHA-256 0aed494ecd81d0e14cc47952e28818b90fe82ff5b4eb563b967535ca518c72a6
    PhishTank
    PhishTank report #9479415
    Addresses
    172.66.44.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.83, 172.66.47.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  5. monitor.emranweb.net CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    ReportedHostingerUnder emranweb.net, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    monitor.emranweb.net
    First seen
    2026-11-05 15:56 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy, listing emranweb.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-05 14:56 UTC to 2027-02-03 14:56 UTC
    Logged 2026-11-05 15:54 UTC in Google ParcelYard2027h1, entry 628,521,271
    SHA-256 4cafe5e405b7fa3997e1ccb2e570841eee6629b76b9b05ceb1ec01c391220140
    Public key SHA-256 d449d8abfe1bcf175b6ce26e27fca4cecd1049eaa6e430adf15abd691885efe4
    PhishDestroy
    Addresses
    31.97.69.128 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (31.97.69.128): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    emranweb.net
    Registered
    2025-12-29 · Purple IT Ltd
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  6. mortezosedge-de.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    mortezosedge-de.live
    First seen
    2026-11-05 15:56 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:54 UTC to 2027-02-03 15:52 UTC
    Logged 2026-11-05 15:54 UTC in DigiCert Sphinx2027h1, entry 368,757,550
    SHA-256 de6e382a505103544eb371286ce2dd5a7e275494321758d80c592c3ced8a295f
    Public key SHA-256 8031ac67637b7516dcc15d1c4b9abd0c14d8dd9cc42f8eb3100f2950c1d36c45
    Addresses
    104.21.80.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.226, 172.67.154.135): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mortezosedge-de.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:42 UTC

    Suggest a correction

  7. myetherewallet.com US · AS14618 · Amazon.com, Inc.2 addresses
    ListedParking page · HugeDomainsListed by MetaMaskMX absentSPF -allDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    myetherewallet.com
    First seen
    2026-11-05 15:56 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 14:52 UTC to 2027-02-03 14:52 UTC
    Logged 2026-11-05 15:51 UTC in Google ParcelYard2027h1, entry 628,474,000
    SHA-256 71677fb0fcd62a77232d18b13bd6c184252194718ef57eda9db33ef571841d1c
    Public key SHA-256 30e6adfd320c10ab86f93819042a37a4e840763d44e6df6e7ebf68ad14be1bf7
    Addresses
    13.223.25.84 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · HugeDomains (parking page)
    54.243.117.197 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · HugeDomains (parking page)
    Parking page · HugeDomains
    HugeDomains (13.223.25.84, 54.243.117.197): a parking service. It answers for names that are typically for sale or unused.
    Domain
    myetherewallet.com
    Registered
    2022-10-04 · DropCatch.com 1094 LLC
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  8. ns.cloudflafe.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder cloudflafe.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    ns.cloudflafe.com
    First seen
    2026-11-05 15:56 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask, listing cloudflafe.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 14:54 UTC to 2027-02-03 14:54 UTC
    Logged 2026-11-05 15:53 UTC in IPng Networks Gouda2027h1, entry 325,515,314
    SHA-256 e2230b086cb8262e66249fd665b36d307a06e8051cb928b1bd52a031cb804604
    Public key SHA-256 fd5468ac2123b71e760c16ed2580e81b67a889c4d383566f8b9679b71d12d86a
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cloudflafe.com
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:19 UTC

    Suggest a correction

  9. slotocash.co US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    slotocash.co
    First seen
    2026-11-05 15:56 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 09:43 UTC to 2026-12-06 10:43 UTC
    Logged 2026-11-05 15:52 UTC in DigiCert Wyvern2026h2, entry 2,206,174,484
    SHA-256 206a8c02a6a6f08f101d1c8f259e1504e8686b1683a53e46c421554e43aff53b
    Public key SHA-256 6c2be1957d06f040b57bb1e23cd63daafb34eb040e002bc6886180354b79fc3b
    Addresses
    104.21.31.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.124 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.31.117, 172.67.176.124): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    slotocash.co
    Registered
    2023-08-14 · Name.com, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:41 UTC

    Suggest a correction

  10. swap-fi.surf
    ListedListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    swap-fi.surf
    First seen
    2026-11-05 15:56 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Not resolving · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-05 00:00 UTC to 2027-01-31 02:04 UTC
    Logged 2026-11-05 15:52 UTC in IPng Networks Halloumi2027h1, entry 375,889,834
    SHA-256 492f9b27887f89c961db805605aca80ee98094cef272e75cebe5dc9b1b3ec550
    Public key SHA-256 e844358f4d2d4f7af5f2fdcb48d0ffda23e6573a71b3b0baf8f5c30b0abc7ae9
    Domain
    swap-fi.surf
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:57 UTC

    Suggest a correction

  11. vehtuorn.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    vehtuorn.shop
    First seen
    2026-11-05 15:56 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:51 UTC to 2027-02-03 15:49 UTC
    Logged 2026-11-05 15:51 UTC in DigiCert Wyvern2027h1, entry 417,717,615
    SHA-256 a010a246f3a16e5756d116f67d520288690e05cddc09150addb229987b826482
    Public key SHA-256 099c72b51df7399f070dc9eb74820838f59ee75ec546b6124845d64a89563c04
    Addresses
    104.21.1.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.1.23, 172.67.151.223): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vehtuorn.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:57 UTC

    Suggest a correction

  12. www.js4519.com HK · AS137951 · ASLINE LIMITED
    ReportedUnder js4519.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.js4519.com
    First seen
    2026-11-05 15:56 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy, listing js4519.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-05 14:52 UTC to 2027-02-03 14:52 UTC
    Logged 2026-11-05 15:51 UTC in Google ParcelYard2027h1, entry 628,470,754
    SHA-256 41bfc8df707f1c2ebde691751898732cbffec56ae844c51b01111612adbf14e1
    Public key SHA-256 67a805910cb025a033f9dda40d3e653550ce2bfe72f3c852a8ec410adcfeea39
    PhishDestroy
    Addresses
    168.76.227.176 · Hong Kong · AS137951 ASLINE-AS-AP - ASLINE LIMITED
    Domain
    js4519.com
    Registered
    2026-05-19 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  13. zeonixedge-de.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    zeonixedge-de.live
    First seen
    2026-11-05 15:56 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-05 14:53 UTC to 2027-02-03 15:52 UTC
    Logged 2026-11-05 15:54 UTC in Sectigo Monument2027h1, entry 65,189,404
    SHA-256 137c47a7fddabdde511be791c44a570dfd9d423156c64d055b95229af33d0bf5
    Public key SHA-256 bed8ab812c4215850833a2b07e88b8557134a18194b9bcc77839f37ddffd8afc
    Addresses
    104.21.29.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.14, 172.67.148.72): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zeonixedge-de.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:42 UTC

    Suggest a correction

  14. 94hxnr-xhkn4-rk77-e371d7.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    94hxnr-xhkn4-rk77-e371d7.pages.dev
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 17:18 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:47 UTC to 2027-02-03 15:44 UTC
    Logged 2026-11-05 15:47 UTC in Let's Encrypt Sycamore2027h1, entry 962,192,883
    SHA-256 3194b766a8351d3b235bfaeb51f55ea601326ebf53946ca8021128cb6699345a
    Public key SHA-256 7c3839284bdd353a34c45a467e197184cd19b7b5de6171b9b1b50e0a89c5e54d
    PhishTank
    PhishTank report #9479290
    Addresses
    172.66.44.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.55, 172.66.47.201): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  15. capkcutapk.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC quarantineRegistered 2 y ago
    DetailsHide
    Hostname
    capkcutapk.com
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 14:50 UTC to 2027-02-03 14:50 UTC
    Logged 2026-11-05 15:48 UTC in Let's Encrypt Sycamore2027h1, entry 962,215,367
    SHA-256 7acf7f16771161ebe4ca28ffac55ffd661915a255c4ddbe383638bd750af76a2
    Public key SHA-256 432d58f1286243fed143d7fa5b8dad4bd15a194ae77f095efcd5843ac75175c8
    PhishDestroy
    Addresses
    104.21.77.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.237, 172.67.213.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    capkcutapk.com
    Registered
    2024-09-11 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  16. dec-cntralised-exods.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    dec-cntralised-exods.pages.dev
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:49 UTC to 2027-02-03 15:47 UTC
    Logged 2026-11-05 15:49 UTC in Google ParcelYard2027h1, entry 628,446,495
    SHA-256 e67f91fadb770c0a2c1e1ef471338ddf4a65530a4db76a527ff874459cf4fa30
    Public key SHA-256 dc42971f28be386a9b119372376b279048e00a3686854ddbc1231f7430bf86ce
    Addresses
    172.66.44.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.193, 172.66.47.63): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  17. eligibility.today US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    eligibility.today
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:48 UTC to 2027-02-03 15:46 UTC
    Logged 2026-11-05 15:48 UTC in Google ParcelYard2027h1, entry 628,428,341
    SHA-256 729db6d0f33c0cd7f1f2f72908a41f3fd5be05c8da49dc5f319f9b451f322228
    Public key SHA-256 1db2deae2c28bf255a218a4c9f5efdea3ec63a550764be970cac02b0dc709412
    Addresses
    104.21.33.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.35, 172.67.158.129): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eligibility.today
    Registered
    2026-07-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  18. kiwiwealthgrid.click NL · AS62370 · Snel Snel.com B.V.
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    kiwiwealthgrid.click
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-07-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 14:51 UTC to 2027-02-03 14:51 UTC
    Logged 2026-11-05 15:50 UTC in Google PlumbersArms2027h1, entry 628,848,106
    SHA-256 09b86a7404c902c7a6d3005a925070bce7e9dbe5397b47aab47f2df3651373f2
    Public key SHA-256 fa0e28e77b48cc4a43424cc9a588524d23b555e9f5032d789bda3d75890fd032
    Addresses
    185.62.58.179 · Netherlands · AS62370 Snel Snel.com B.V.
    Domain
    kiwiwealthgrid.click
    Registered
    2026-05-12 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:41 UTC

    Suggest a correction

  19. lamaniahome.shop US · AS396982 · Google LLC
    ListedGoogle CloudListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    lamaniahome.shop
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3
    Valid 2026-09-11 13:18 UTC to 2026-12-10 14:12 UTC
    Logged 2026-11-05 15:47 UTC in DigiCert Wyvern2026h2, entry 2,206,167,368
    SHA-256 222313edbc54f06b41a62814c069681c1f7579b4a79b419789c14e62112fc7c8
    Public key SHA-256 057a41379b127b85c903d7e166aa22393be622b0859c597171372b96dd41cf6a
    Addresses
    34.8.77.192 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)
    Google Cloud
    Google Cloud (34.8.77.192): a cloud provider. It rents servers and addresses to its customers.
    Domain
    lamaniahome.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:52 UTC

    Suggest a correction

  20. ledger-live-applications.io US · AS13335 · Cloudflare, Inc.4 addressesLedger
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    ledger-live-applications.io
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:47 UTC to 2027-02-03 15:44 UTC
    Logged 2026-11-05 15:47 UTC in Google ParcelYard2027h1, entry 628,418,585
    SHA-256 581075e93e61e44db6ddfe192c1d2ddfe72c83ea046441faab95b0c2cec69935
    Public key SHA-256 6e69d319909a846846d59660deaf8522afcb54d55062f4f8ca5044230f1bfad3
    Brand
    Ledger
    Addresses
    104.21.0.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:96ea
    2606:4700:3034::6815:72
    Cloudflare
    Cloudflare (104.21.0.114, 172.67.150.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ledger-live-applications.io
    Registered
    2026-09-07 · TLD Registrar Solutions Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:42 UTC

    Suggest a correction

  21. maautomobile.orionacademy.com.ng US · AS396073 · Majestic Hosting Solutions,…
    ReportedUnder orionacademy.com.ng, reported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    maautomobile.orionacademy.com.ng
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy, listing orionacademy.com.ng and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-05 14:50 UTC to 2027-02-03 14:50 UTC
    Logged 2026-11-05 15:48 UTC in Let's Encrypt Sycamore2027h1, entry 962,214,348
    SHA-256 21de3f178d49f55fabe2f80ba8257f3cc1884039f349b198f590d453d47ce0a9
    Public key SHA-256 c46c5baa885b5cb88e5dd28101a181842a6403005f92f1b0ff26cd103eb836ee
    PhishDestroy
    Addresses
    147.124.214.15 · United States · AS396073 MAJESTIC-HOSTING-01 - Majestic Hosting Solutions, LLC
    Domain
    orionacademy.com.ng
    MX
    Receives mail at orionacademy.com.ng
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:52 UTC

    Suggest a correction

  22. my.immortalpos.co.za US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder immortalpos.co.za, reported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    my.immortalpos.co.za
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy, listing immortalpos.co.za and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 14:52 UTC to 2027-02-03 14:52 UTC
    Logged 2026-11-05 15:50 UTC in Let's Encrypt Willow2027h1, entry 952,901,801
    SHA-256 892f0facbed3dec7e3386504c26bfba1954f7211af9d165453f8bfaaaf232830
    Public key SHA-256 0f5e36f057edb97fd8356e8ea2df5505ee65a6a8a8b294fb4f4a6a115cbb8b36
    PhishDestroy
    Addresses
    104.21.72.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.30, 172.67.174.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    immortalpos.co.za
    MX
    Receives mail at mx1.tld-mx.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:12 UTC

    Suggest a correction

  23. pigsoft.secureapp.online GB · AS14670 · WHG-USE1 WHG Hosting Servic…
    ReportedUnder secureapp.online, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    pigsoft.secureapp.online
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy, listing secureapp.online and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 14:48 UTC to 2027-02-03 14:48 UTC
    Logged 2026-11-05 15:46 UTC in DigiCert Sphinx2027h1, entry 368,677,768
    SHA-256 18d1b350a5d6555f4db592f077567b6fa1d9a6e51189c584e36c6e992a16a35f
    Public key SHA-256 317a32557ff11ed4cd1ef57482592530ef3288b18056c3949b46413a4017d9bb
    PhishDestroy
    Addresses
    179.61.192.12 · United Kingdom · AS14670 WHG-USE1 WHG Hosting Services Ltd
    Domain
    secureapp.online
    Registered
    2021-09-27 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at secureapp.online
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 17:12 UTC

    Suggest a correction

  24. px34-d443e2-7fv-0pdgm-fr9q.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    px34-d443e2-7fv-0pdgm-fr9q.pages.dev
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 17:18 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:50 UTC to 2027-02-03 15:48 UTC
    Logged 2026-11-05 15:50 UTC in DigiCert Wyvern2027h1, entry 417,712,293
    SHA-256 4b8e0b061a0f3aba5a91aaaf2b4674205f6979545fbafe33ec7cec1ab855534f
    Public key SHA-256 0164bad8d21e1c6d0429a3219bf420bba432eaae18c5691e3a8db58ef71dd640
    PhishTank
    PhishTank report #9479446
    Addresses
    172.66.44.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.85, 172.66.47.171): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  25. refurbished.immortalpos.co.za US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder immortalpos.co.za, reported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    refurbished.immortalpos.co.za
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy, listing immortalpos.co.za and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 14:52 UTC to 2027-02-03 14:52 UTC
    Logged 2026-11-05 15:50 UTC in Let's Encrypt Willow2027h1, entry 952,901,801
    SHA-256 892f0facbed3dec7e3386504c26bfba1954f7211af9d165453f8bfaaaf232830
    Public key SHA-256 0f5e36f057edb97fd8356e8ea2df5505ee65a6a8a8b294fb4f4a6a115cbb8b36
    PhishDestroy
    Addresses
    104.21.72.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.30, 172.67.174.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    immortalpos.co.za
    MX
    Receives mail at mx1.tld-mx.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:12 UTC

    Suggest a correction

  26. roospincasino-au.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    roospincasino-au.net
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:50 UTC to 2027-02-03 15:49 UTC
    Logged 2026-11-05 15:50 UTC in Geomys Tuscolo2027h1, entry 488,770,710
    SHA-256 94d341ac21f958cb78eb82fb86787849a8cf2c71ce8a446d030886d0ef1414fd
    Public key SHA-256 1ca1a87fd1a8cedcdd46ba8477578501ccd5d5ee7f64e44510238097ca56e286
    PhishDestroy
    Addresses
    104.21.33.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.152, 172.67.146.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    roospincasino-au.net
    Registered
    2026-07-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  27. slon-1at.cc US · AS205196 · BIGCORE-ASN BIG CORE LLC
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    slon-1at.cc
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-09-28 17:43 UTC to 2026-12-27 17:43 UTC
    Logged 2026-11-05 15:50 UTC in DigiCert Sphinx2026h2, entry 2,168,965,118
    SHA-256 d60514c9d952a04af0d7e383d182d973b7d57656c3fb1728e1aee9b328c3ae66
    Public key SHA-256 b25feae97879cfb6b8745a7ad2f9cd40dce7fc84a7c37c834a652997d33e6125
    PhishDestroy
    Addresses
    185.226.93.186 · United States · AS205196 BIGCORE-ASN BIG CORE LLC
    Domain
    slon-1at.cc
    Registered
    2026-02-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:41 UTC

    Suggest a correction

  28. www.maautomobile.orionacademy.com.ng US · AS396073 · Majestic Hosting Solutions,…
    ReportedUnder orionacademy.com.ng, reported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.maautomobile.orionacademy.com.ng
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy, listing orionacademy.com.ng and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-05 14:50 UTC to 2027-02-03 14:50 UTC
    Logged 2026-11-05 15:48 UTC in Let's Encrypt Sycamore2027h1, entry 962,214,348
    SHA-256 21de3f178d49f55fabe2f80ba8257f3cc1884039f349b198f590d453d47ce0a9
    Public key SHA-256 c46c5baa885b5cb88e5dd28101a181842a6403005f92f1b0ff26cd103eb836ee
    PhishDestroy
    Addresses
    147.124.214.15 · United States · AS396073 MAJESTIC-HOSTING-01 - Majestic Hosting Solutions, LLC
    Domain
    orionacademy.com.ng
    MX
    Receives mail at orionacademy.com.ng
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:52 UTC

    Suggest a correction

  29. www.my.immortalpos.co.za US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder immortalpos.co.za, reported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.my.immortalpos.co.za
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy, listing immortalpos.co.za and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 14:52 UTC to 2027-02-03 14:52 UTC
    Logged 2026-11-05 15:50 UTC in Let's Encrypt Willow2027h1, entry 952,901,801
    SHA-256 892f0facbed3dec7e3386504c26bfba1954f7211af9d165453f8bfaaaf232830
    Public key SHA-256 0f5e36f057edb97fd8356e8ea2df5505ee65a6a8a8b294fb4f4a6a115cbb8b36
    PhishDestroy
    Addresses
    104.21.72.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.30, 172.67.174.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    immortalpos.co.za
    MX
    Receives mail at mx1.tld-mx.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:12 UTC

    Suggest a correction

  30. www.pigsoft.secureapp.online GB · AS14670 · WHG-USE1 WHG Hosting Servic…
    ReportedUnder secureapp.online, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    www.pigsoft.secureapp.online
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy, listing secureapp.online and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 14:48 UTC to 2027-02-03 14:48 UTC
    Logged 2026-11-05 15:46 UTC in DigiCert Sphinx2027h1, entry 368,677,768
    SHA-256 18d1b350a5d6555f4db592f077567b6fa1d9a6e51189c584e36c6e992a16a35f
    Public key SHA-256 317a32557ff11ed4cd1ef57482592530ef3288b18056c3949b46413a4017d9bb
    PhishDestroy
    Addresses
    179.61.192.12 · United Kingdom · AS14670 WHG-USE1 WHG Hosting Services Ltd
    Domain
    secureapp.online
    Registered
    2021-09-27 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at secureapp.online
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 17:12 UTC

    Suggest a correction

  31. www.refurbished.immortalpos.co.za US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder immortalpos.co.za, reported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.refurbished.immortalpos.co.za
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy, listing immortalpos.co.za and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 14:52 UTC to 2027-02-03 14:52 UTC
    Logged 2026-11-05 15:50 UTC in Let's Encrypt Willow2027h1, entry 952,901,801
    SHA-256 892f0facbed3dec7e3386504c26bfba1954f7211af9d165453f8bfaaaf232830
    Public key SHA-256 0f5e36f057edb97fd8356e8ea2df5505ee65a6a8a8b294fb4f4a6a115cbb8b36
    PhishDestroy
    Addresses
    104.21.72.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.30, 172.67.174.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    immortalpos.co.za
    MX
    Receives mail at mx1.tld-mx.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:12 UTC

    Suggest a correction

  32. xornrtbssa.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    xornrtbssa.shop
    First seen
    2026-11-05 15:51 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:50 UTC to 2027-02-03 15:48 UTC
    Logged 2026-11-05 15:50 UTC in Google ParcelYard2027h1, entry 628,463,770
    SHA-256 d3b673bee3a165798b718cb6717c5e2ef49d6c36ae018b4e077f20df47047dae
    Public key SHA-256 9ff2097f409ea8b2ee0e2d3d692a175482a912345bf433b1ced4a444ee837a82
    Addresses
    104.21.36.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.88, 172.67.190.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xornrtbssa.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:52 UTC

    Suggest a correction

  33. cicekci.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 18 d ago
    DetailsHide
    Hostname
    cicekci.xyz
    First seen
    2026-11-05 15:47 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    USOM listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 17:15 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    USOM
    1. Certificate logged in CT
    2. Listed by USOM
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-04 00:00 UTC to 2027-01-21 19:20 UTC
    Logged 2026-11-04 19:08 UTC in DigiCert Wyvern2027h1, entry 406,172,605
    SHA-256 12a84bcd91458a2016f2d95211a73e0ab5bbea7af8f3b6dafb8d5490ad934af3
    Public key SHA-256 4dcc413d6d82d81488be2f837d827c5b784c8d7227faa70a9d8845628c660b28
    Addresses
    104.21.44.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:c8e6
    2606:4700:3033::6815:2c97
    Cloudflare
    Cloudflare (104.21.44.151, 172.67.200.230): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cicekci.xyz
    Registered
    2026-10-18 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:41 UTC

    Suggest a correction

  34. m-rndsglkrhber.cfd US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    m-rndsglkrhber.cfd
    First seen
    2026-11-05 15:47 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    USOM listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 17:15 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    USOM
    1. Certificate logged in CT
    2. Listed by USOM
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 09:26 UTC to 2027-02-03 10:25 UTC
    Logged 2026-11-05 10:26 UTC in Google ParcelYard2027h1, entry 624,159,243
    SHA-256 137b4f590eac92e590608e6a8d8f0bd5daf2cc3ec32e34ab2e29c9973820aec2
    Public key SHA-256 9642244d8a1ea5d444d43fbf239a1f671c13acdaabaf23e3d5a782cbb56e7c39
    Addresses
    104.21.39.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::6815:27bc
    2606:4700:3037::ac43:9443
    Cloudflare
    Cloudflare (104.21.39.188, 172.67.148.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    m-rndsglkrhber.cfd
    Registered
    2026-11-05 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:41 UTC

    Suggest a correction

  35. m-sglikrhber.cfd US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    m-sglikrhber.cfd
    First seen
    2026-11-05 15:47 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    USOM listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 17:15 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    USOM
    1. Certificate logged in CT
    2. Listed by USOM
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 13:53 UTC to 2027-02-03 14:01 UTC
    Logged 2026-11-05 14:03 UTC in Let's Encrypt Sycamore2027h1, entry 960,756,154
    SHA-256 c11aa1820398e34a4511d68daa938e0edd4d9b59898597beac6caec5f91c38fb
    Public key SHA-256 0d66b889665df14ddd173c16c8e23ab1a38c2335ca5f6c72c34bab089395a0ad
    Addresses
    104.21.89.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::ac43:9ee8
    2606:4700:3036::6815:5974
    Cloudflare
    Cloudflare (104.21.89.116, 172.67.158.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    m-sglikrhber.cfd
    Registered
    2026-11-05 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:41 UTC

    Suggest a correction

  36. tarmkoparmatifmarket.blogdns.com US · AS16509 · Amazon.com, Inc.
    ListedAmazon Web ServicesListed by USOM
    DetailsHide
    Hostname
    tarmkoparmatifmarket.blogdns.com
    First seen
    2026-11-05 15:47 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    USOM listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 17:15 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    USOM
    1. Certificate logged in CT
    2. Listed by USOM
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 08:44 UTC to 2027-02-03 08:44 UTC
    Logged 2026-11-05 09:42 UTC in DigiCert Sphinx2027h1, entry 365,437,054
    SHA-256 5345b4cd0db65dc298834cccd916bb4b9046001bf737b37221d1365a43631200
    Public key SHA-256 c6350a2f2f6be97d113c00c9812999cc9417860fc2a60de3a0593d2cfde5980c
    Addresses
    13.63.158.187 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.63.158.187): a cloud provider. It rents servers and addresses to its customers.

    Suggest a correction

  37. wrqrasgfqqwr.sbs US · AS206216 · ADVIN-AS Advin Services LLC
    ListedListed by USOMMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    wrqrasgfqqwr.sbs
    First seen
    2026-11-05 15:47 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    USOM listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 17:15 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    USOM
    1. Certificate logged in CT
    2. Listed by USOM
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 11:13 UTC to 2027-02-03 11:13 UTC
    Logged 2026-11-05 12:12 UTC in Google PlumbersArms2027h1, entry 625,946,344
    SHA-256 292036d46e13a30275402a260446fdbe71c053457be21b9d76313adbed2eb64a
    Public key SHA-256 14404190dcd8a887c15c8ee8c64ea3ceb52c1a00c5fb6c6da46bc44cfeeecbc0
    Addresses
    207.241.172.137 · United States · AS206216 ADVIN-AS Advin Services LLC
    Domain
    wrqrasgfqqwr.sbs
    Registered
    2026-11-05 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:41 UTC

    Suggest a correction

  38. www-budgettb-ayrica-cepte.myonlineportal.ch RU · AS213995 · FROSTYHOSTING-AS Belenkii I…
    ListedListed by USOMMX presentSPF missingDMARC missing
    DetailsHide
    Hostname
    www-budgettb-ayrica-cepte.myonlineportal.ch
    First seen
    2026-11-05 15:47 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    USOM listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 17:15 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    USOM
    1. Certificate logged in CT
    2. Listed by USOM
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 11:01 UTC to 2027-02-03 11:01 UTC
    Logged 2026-11-05 11:59 UTC in DigiCert Sphinx2027h1, entry 366,704,244
    SHA-256 fcaf58902d30f7b96531615ec7b2d221191a30969eaa869773abbc6d723777c4
    Public key SHA-256 b28a8abb0290c2af5c95ed4a9b3397e8f13edaf9e88611d0cb90c19a59e0e414
    Addresses
    94.183.168.35 · Russia · AS213995 FROSTYHOSTING-AS Belenkii Ivan Alexandrovich
    Domain
    myonlineportal.ch
    MX
    Receives mail at mail.myonlineportal.ch
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 07:39 UTC

    Suggest a correction

  39. www.recuperation-de-donnees-iphone.com FR · AS16276 · OVH OVH SASApple
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    www.recuperation-de-donnees-iphone.com
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.91.236.255.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 51.91.236.255
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 14:44 UTC to 2027-02-03 14:44 UTC
    Logged 2026-11-05 15:42 UTC in Let's Encrypt Sycamore2027h1, entry 962,129,696
    SHA-256 09ee8b4b314cb3d258f2d72a76a6673dbf1d89b28ac6f8f24de6b7ad96365b13
    Public key SHA-256 fd98deb2bae752433ee36f7b4de1416435f244ac1318b07bbcc1cdd00a20bc51
    Brand
    Apple
    Addresses
    51.91.236.255 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.91.236.255): a cloud provider. It rents servers and addresses to its customers.
    Domain
    recuperation-de-donnees-iphone.com
    Registered
    2024-07-28 · OVH sas
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:59 UTC

    Suggest a correction

  40. update.pochta.216e6ta6fwh9gr9r.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com FR · AS200484 · SENDINBLUE-ASN Sendinblue S…Russian Post
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 11 y ago
    DetailsHide
    Hostname
    update.pochta.216e6ta6fwh9gr9r.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 14:46 UTC to 2027-02-03 14:46 UTC
    Logged 2026-11-05 15:44 UTC in Let's Encrypt Sycamore2027h1, entry 962,159,918
    SHA-256 4218643d2ee54e0d1293b3f4d45757b0c986295259ff5c7bbea8e92c453dc15f
    Public key SHA-256 6b0ae5ac7f476b82e4a320d959e3d754973346e6e44be5cf3fac0057d2ca1612
    Brand
    Russian Post
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS
    Domain
    leankoala.com
    Registered
    2016-03-15 · united-domains GmbH
    MX
    Receives mail at mx00.udag.de, mx01.udag.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  41. 9qranm8dv.static-cor-dncv.wasmer.app FR · AS16276 · OVH OVH SAS
    ListedOVHUnder static-cor-dncv.wasmer.app, listed by CERT Polska
    DetailsHide
    Hostname
    9qranm8dv.static-cor-dncv.wasmer.app
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-05-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska, listing static-cor-dncv.wasmer.app and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 14:45 UTC to 2027-02-03 14:45 UTC
    Logged 2026-11-05 15:43 UTC in Google ParcelYard2027h1, entry 628,373,095
    SHA-256 1ae93e0698334f5eede93b24bc8277e29adfdd12a94af3f028920351cdf84d66
    Public key SHA-256 2347a48584187d8c6514a42033c9faba4df30a37345ebdb13829452ce7fed7ae
    Addresses
    141.94.158.208 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (141.94.158.208): a cloud provider. It rents servers and addresses to its customers.

    Suggest a correction

  42. auth-ledgr-com-strt.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    auth-ledgr-com-strt.pages.dev
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:42 UTC to 2027-02-03 15:41 UTC
    Logged 2026-11-05 15:42 UTC in Let's Encrypt Sycamore2027h1, entry 962,129,524
    SHA-256 67613bebf5497c590ebd85d6397745c59e11ec56522ffb49e0b6ddec63d0b42a
    Public key SHA-256 01c938fa76b0f8531ac6aac73a52460cc3d0d726687bba47dbe75bb8e3f4ecc8
    Addresses
    172.66.44.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.176, 172.66.47.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  43. bitbry.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 y ago
    DetailsHide
    Hostname
    bitbry.com
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:41 UTC to 2027-02-03 15:39 UTC
    Logged 2026-11-05 15:41 UTC in Let's Encrypt Sycamore2027h1, entry 962,109,747
    SHA-256 592dd793d894629d35e2c8118618f289803a499b0b449bf1bbd53b9984010f6f
    Public key SHA-256 b969929484d874e0f1f4dda8d3f5149de92a031f4826843cd71196bd12a12b18
    Addresses
    104.21.88.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.88.186, 172.67.152.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bitbry.com
    Registered
    2019-08-11 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  44. cricfyy.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 36 d ago
    DetailsHide
    Hostname
    cricfyy.com
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-05 00:00 UTC to 2027-02-02 06:53 UTC
    Logged 2026-11-05 15:45 UTC in Geomys Tuscolo2027h1, entry 488,718,086
    SHA-256 99b024d29e577e5dffa9e5684d99c69b8371a357ea1473f544b3eb36b00fb815
    Public key SHA-256 65f0b4e2eb2c8c3a9212ad1d449c9b271fa773617141b3b820d8f8dc7430305b
    Addresses
    104.21.21.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.21.201, 172.67.200.23): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cricfyy.com
    Registered
    2026-09-30 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  45. ezebrashop-sale.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    ezebrashop-sale.shop
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-07-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 14:44 UTC to 2027-02-03 14:44 UTC
    Logged 2026-11-05 15:43 UTC in Geomys Tuscolo2027h1, entry 488,700,939
    SHA-256 790c67c02ecbb4580c14e15d7e3130191ceaeb952b584320dd32cd52b097a974
    Public key SHA-256 f137074464e95bdbd4673cf1233540b7aee75a8edd6cc68d1c0647d5c46a43f2
    Addresses
    104.21.96.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.96.89, 172.67.176.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ezebrashop-sale.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 07:17 UTC

    Suggest a correction

  46. lista-app.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    lista-app.pro
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:41 UTC to 2027-02-03 15:39 UTC
    Logged 2026-11-05 15:41 UTC in Google ParcelYard2027h1, entry 628,342,997
    SHA-256 d40c7ab13f5fde39fc745dc1010033a75df3bd831bf29e17d76a143ffef965bb
    Public key SHA-256 42dca3c7f337bf04d5d6221f2b0884466f9ca5af2ab3a1f207824f83f52de614
    PhishDestroy
    Addresses
    104.21.23.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.23.109, 172.67.210.203): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lista-app.pro
    Registered
    2026-07-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:47 UTC

    Suggest a correction

  47. mirelganthvorzelyx-fr.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    mirelganthvorzelyx-fr.live
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 13:04 UTC to 2026-12-06 14:03 UTC
    Logged 2026-11-05 15:45 UTC in Let's Encrypt Willow2026h2, entry 1,023,791,913
    SHA-256 70afefba5c70072b7246d39b9f66e3fbc2c376fc92f16cf41e2560e8c980120c
    Public key SHA-256 181a9e776a05c17d98f0549081852973376f3d052825987ff464596e57c15cc2
    Addresses
    104.21.54.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.196, 172.67.141.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mirelganthvorzelyx-fr.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:42 UTC

    Suggest a correction

  48. motofelga.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    motofelga.com
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-10-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 14:44 UTC to 2027-02-03 14:44 UTC
    Logged 2026-11-05 15:43 UTC in DigiCert Wyvern2027h1, entry 417,629,901
    SHA-256 5f1cbf8d278f36df1fb14b72e1a1b519b4ddacdcfe40e1ace1629b51fd86fe1b
    Public key SHA-256 a836597d176786b015b5904e8dd71d0bf781b4f86325c284495b01f618395a4b
    Addresses
    104.21.88.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.88.129, 172.67.179.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    motofelga.com
    Registered
    2026-04-29 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  49. preview.myprepaidscenter.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ListedParking page · ParkingCrew (Team Internet)Under myprepaidscenter.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    preview.myprepaidscenter.com
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask, listing myprepaidscenter.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 14:42 UTC to 2027-02-03 14:42 UTC
    Logged 2026-11-05 15:41 UTC in Geomys Tuscolo2027h1, entry 488,682,435
    SHA-256 33e3d8d405654d23dcdedcd00b7f69c91c335233bf075f0be5d62b2834bc513b
    Public key SHA-256 1a774c352f67f1517620296b37e489b8ee77ce36a1c06a04c56b4ed9dd529037
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    myprepaidscenter.com
    Registered
    2026-01-06 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 05:03 UTC

    Suggest a correction

  50. rks.keylines.net.in IN · AS151746 · Uv Enterprises
    ListedUnder keylines.net.in, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 13 y ago
    DetailsHide
    Hostname
    rks.keylines.net.in
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-08-04 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska, listing keylines.net.in and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 14:46 UTC to 2027-02-03 14:46 UTC
    Logged 2026-11-05 15:45 UTC in Let's Encrypt Sycamore2027h1, entry 962,167,624
    SHA-256 51afe97a264f1f2f7853ed9c9282fe24ad2defd6ab780d7d23eb81dcc92e570f
    Public key SHA-256 0a1338efee786b0159fd1d664226c7dba7cc9f1f046006893bfd95ca4b8361bf
    Addresses
    157.15.130.67 · India · AS151746 UVENTER24-AS-IN - Uv Enterprises
    Domain
    keylines.net.in
    Registered
    2013-10-31 · Endurance International Group India Private Limited
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:28 UTC

    Suggest a correction

  51. sp19ct7-mafor-biz-surex-kelin.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    sp19ct7-mafor-biz-surex-kelin.pages.dev
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 17:18 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:45 UTC to 2027-02-03 15:43 UTC
    Logged 2026-11-05 15:45 UTC in Google ParcelYard2027h1, entry 628,395,591
    SHA-256 597e81a6eb70b5bd2ac8910928968f4dfbee615110fddabf3f99a59241a86e2e
    Public key SHA-256 b3b3c46d1e854d2a93ed64954ed2e53492b8d7c7cfa92a65c0609922434331b6
    PhishTank
    PhishTank report #9479570
    Addresses
    172.66.45.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.43, 172.66.46.213): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  52. tidebreak.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 15 d ago
    DetailsHide
    Hostname
    tidebreak.xyz
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    USOM listed it 2026-11-04 · still listed at the last successful feed check 2026-11-05 17:15 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-05 00:00 UTC to 2027-02-03 04:46 UTC
    Logged 2026-11-05 15:41 UTC in Let's Encrypt Sycamore2027h1, entry 962,110,338
    SHA-256 804f4b358c7fc2927d538da88314fccbc6a68ebc424973a5f97af24b7f66b87d
    Public key SHA-256 9f3b397fa6f06340d798e905ecddc0d2e6ebe6c13ff309667b605c5f84e55d87
    Addresses
    104.21.63.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.120, 172.67.145.119): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tidebreak.xyz
    Registered
    2026-10-21 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:41 UTC

    Suggest a correction

  53. turbo200codrix.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    turbo200codrix.shop
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-08-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 14:46 UTC to 2027-02-03 14:46 UTC
    Logged 2026-11-05 15:45 UTC in Let's Encrypt Sycamore2027h1, entry 962,162,144
    SHA-256 4350627a3a572bf62dc0c059fe39cf680e6537d36664c94058471e942c4ffb68
    Public key SHA-256 22a37a183b7a918caf586c107b8cfbe8b4fec9676a836702ddd4ded2f3096782
    Addresses
    104.21.36.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.146, 172.67.195.28): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    turbo200codrix.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:47 UTC

    Suggest a correction

  54. velonario-it.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    velonario-it.live
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:41 UTC to 2027-02-03 15:40 UTC
    Logged 2026-11-05 15:41 UTC in IPng Networks Halloumi2027h1, entry 375,785,101
    SHA-256 11757157e76f3dffdda1bf2141abb6123182d791f7512a4825d432c72c72be4c
    Public key SHA-256 b2dd69416649096fa74d7de8ee8af88ee3201469fc3f455a894307c4491c1b3a
    Addresses
    104.21.35.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.35.197, 172.67.179.23): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    velonario-it.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:42 UTC

    Suggest a correction

  55. vividvvivid.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    vividvvivid.info
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-05-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 14:43 UTC to 2027-02-03 14:43 UTC
    Logged 2026-11-05 15:41 UTC in Google ParcelYard2027h1, entry 628,348,745
    SHA-256 0bd02f7b7c2d197100ed44ed84967f8f246a05c1b73e122286770837356a7ce0
    Public key SHA-256 d8cbf26d225faf88239fa5625c50874be79181b6dd9103ee998eb9decf368393
    Addresses
    104.21.35.212 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.35.212, 172.67.179.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vividvvivid.info
    Registered
    2026-05-12 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:42 UTC

    Suggest a correction

  56. www.gurl.pro US · AS16509 · Amazon.com, Inc.2 addresses
    ReportedAmazon Web ServicesUnder gurl.pro, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 y ago
    DetailsHide
    Hostname
    www.gurl.pro
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy, listing gurl.pro and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-05 14:45 UTC to 2027-02-03 14:45 UTC
    Logged 2026-11-05 15:43 UTC in IPng Networks Halloumi2027h1, entry 375,804,138
    SHA-256 8081677d9957d0da6a881323569b4f82d5829cb322b115e970f4a5ae5c3b8a71
    Public key SHA-256 d61e539bc43e079e6267bfc0ba29a457c4eb0d5714b1c618b5176e857aed21f6
    PhishDestroy
    Addresses
    64.29.17.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.29.17.65, 216.198.79.65): a cloud provider. It rents servers and addresses to its customers.
    Domain
    gurl.pro
    Registered
    2020-02-19 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:14 UTC

    Suggest a correction

  57. www.motofelga.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder motofelga.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.motofelga.com
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-10-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska, listing motofelga.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 14:44 UTC to 2027-02-03 14:44 UTC
    Logged 2026-11-05 15:43 UTC in DigiCert Wyvern2027h1, entry 417,629,901
    SHA-256 5f1cbf8d278f36df1fb14b72e1a1b519b4ddacdcfe40e1ace1629b51fd86fe1b
    Public key SHA-256 a836597d176786b015b5904e8dd71d0bf781b4f86325c284495b01f618395a4b
    Addresses
    104.21.88.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.88.129, 172.67.179.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    motofelga.com
    Registered
    2026-04-29 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  58. www.mqtgr.ezgateway.net US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    www.mqtgr.ezgateway.net
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 17:15 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 13:20 UTC to 2026-12-06 14:20 UTC
    Logged 2026-11-05 15:42 UTC in DigiCert Wyvern2026h2, entry 2,206,159,882
    SHA-256 6042c21643583ae7cd9a6f94da79d140d8c87f766d8a71e5a98d77b7e92cc7f0
    Public key SHA-256 3c61b4e976737cbd715402e6829bc84e4707c3202cebd7c8608c9adcfdc450df
    Addresses
    172.67.165.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.67.165.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 17:12 UTC

    Suggest a correction

  59. www.rks.keylines.net.in IN · AS151746 · Uv Enterprises
    ListedUnder keylines.net.in, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 13 y ago
    DetailsHide
    Hostname
    www.rks.keylines.net.in
    First seen
    2026-11-05 15:46 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-08-04 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska, listing keylines.net.in and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 14:46 UTC to 2027-02-03 14:46 UTC
    Logged 2026-11-05 15:45 UTC in Let's Encrypt Sycamore2027h1, entry 962,167,624
    SHA-256 51afe97a264f1f2f7853ed9c9282fe24ad2defd6ab780d7d23eb81dcc92e570f
    Public key SHA-256 0a1338efee786b0159fd1d664226c7dba7cc9f1f046006893bfd95ca4b8361bf
    Addresses
    157.15.130.67 · India · AS151746 UVENTER24-AS-IN - Uv Enterprises
    Domain
    keylines.net.in
    Registered
    2013-10-31 · Endurance International Group India Private Limited
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 13:28 UTC

    Suggest a correction

  60. netflix-profile.com US · AS399979 · 49.3 Networking LLC2 addressesNetflix
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    netflix-profile.com
    First seen
    2026-11-05 15:45 UTC
    First published
    2026-11-03 15:38 UTC
    DNS
    Resolves · checked 2026-11-05 15:45 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 104.250.165.184.
    1. Phishing-host list fetched with the address
    2. Resolved to 104.250.165.184
    Brand
    Netflix
    Addresses
    104.250.165.184 · United States · AS399979 AS-493NETWORKING - 49.3 Networking LLC
    45.139.104.212 · United States · AS399979 AS-493NETWORKING - 49.3 Networking LLC
    Domain
    netflix-profile.com
    Registered
    2026-11-03 · Key-Systems GmbH
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:42 UTC

    Suggest a correction

  61. qzone.krd 153.52.255.1192 addressesQQ
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    qzone.krd
    First seen
    2026-11-05 15:45 UTC
    First published
    2026-11-03 15:38 UTC
    DNS
    Resolves · checked 2026-11-05 15:45 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 153.52.255.119.
    1. Phishing-host list fetched with the address
    2. Resolved to 153.52.255.119
    Brand
    QQ
    Addresses
    153.52.255.119
    69.46.46.84 · United States · AS400940 RAILWAY - Railway
    Domain
    qzone.krd
    Registered
    2026-07-06 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:42 UTC

    Suggest a correction

  62. www.taobao-alibabainfo.shop HK · AS152194 · CTG Server LimitedAlibaba
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.taobao-alibabainfo.shop
    First seen
    2026-11-05 15:42 UTC
    First published
    2026-11-05 16:42 UTC
    DNS
    Not resolving · checked 2026-11-05 16:55 UTC
    Checks
    Overdue since 2026-11-05 16:55 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 27.124.5.22.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 27.124.5.22
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-05 14:39 UTC to 2027-02-03 14:38 UTC
    Logged 2026-11-05 15:37 UTC in Geomys Tuscolo2027h1, entry 488,641,251
    SHA-256 37f6e5318d986eb0d5f8b864adc4194dbd23a183239e79a4b215cf0f358f6562
    Public key SHA-256 2192b74460ccba98396cacadd8f8081336b7377f106c28b59a6438ad1ddca9b9
    Brand
    Alibaba
    Addresses
    27.124.5.22 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Domain
    taobao-alibabainfo.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:42 UTC

    Suggest a correction

  63. accessportal.me US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    accessportal.me
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:36 UTC to 2027-02-03 15:35 UTC
    Logged 2026-11-05 15:36 UTC in Geomys Tuscolo2027h1, entry 488,629,172
    SHA-256 e54040e72129e9500b0c7c58fff5a84d5dd37fc06603fae954ed7d1512a64740
    Public key SHA-256 470a18b04445d7b889923610cf9353ee13652c1dbd992181262669b01690d1ae
    Addresses
    104.21.45.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.105 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.45.158, 172.67.216.105): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    accessportal.me
    Registered
    2026-09-07 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:42 UTC

    Suggest a correction

  64. aiwprton.hissesepetim.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder hissesepetim.com, listed by USOMMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    aiwprton.hissesepetim.com
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    USOM listed it 2026-07-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 17:15 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    USOM, listing hissesepetim.com and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 14:39 UTC to 2027-02-03 14:39 UTC
    Logged 2026-11-05 15:38 UTC in Geomys Tuscolo2027h1, entry 488,649,956
    SHA-256 32ee86f2ea298a17436964e5b8ef2ce647d7334628976450784b965cc388ef80
    Public key SHA-256 ee13e3353baf36f29ce2498e9e173904be446ea37fd7b451fbd9d87eb4162bb6
    Addresses
    104.21.84.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.82, 172.67.190.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hissesepetim.com
    Registered
    2026-03-02 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:14 UTC

    Suggest a correction

  65. de-performance.de US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    de-performance.de
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-26 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:36 UTC to 2027-02-03 15:33 UTC
    Logged 2026-11-05 15:36 UTC in Let's Encrypt Willow2027h1, entry 952,718,930
    SHA-256 b7b88935ee82649e721075d83a960ef9217978e89249fcd0caf93eb5b4a64ed2
    Public key SHA-256 d23d3b7224e5422b75a22089245166f7ba40d5283e4ea5e9781d41367c0d7855
    PhishDestroy
    Addresses
    104.21.17.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.162, 172.67.177.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    de-performance.de
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:42 UTC

    Suggest a correction

  66. efawosid.polar-tensor.com DE · AS51167 · CONTABO Contabo GmbH4 addresses
    ListedContabo +1Under polar-tensor.com, listed by MetaMaskMX presentSPF ~allDMARC missingRegistered 19 mo ago
    DetailsHide
    Hostname
    efawosid.polar-tensor.com
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask, listing polar-tensor.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 14:40 UTC to 2027-02-03 14:40 UTC
    Logged 2026-11-05 15:38 UTC in Google ParcelYard2027h1, entry 628,309,131
    SHA-256 21541223e09f3ec66aad9162c2b651500c9c5362d6cf6c566720ca69f643ec0f
    Public key SHA-256 1b1962936ec8af1a37d2b5534ec4d32647e5735147c50e0ad6b92d0abdf6e384
    Addresses
    5.189.134.86 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    57.128.187.75 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    57.129.49.179 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    193.242.211.59 · Germany · AS58329 SERVINGA-NL servinga GmbH
    Contabo +1
    Contabo (5.189.134.86): a cloud provider. It rents servers and addresses to its customers. OVH (57.128.187.75, 57.129.49.179): a cloud provider. It rents servers and addresses to its customers.
    Domain
    polar-tensor.com
    Registered
    2025-04-28 · Web Commerce Communications Limited dba WebNic.cc
    MX
    Receives mail at mail.protonmail.ch, mailsec.protonmail.ch
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  67. foto3969.link US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by USOMMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    foto3969.link
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    USOM listed it 2026-09-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 17:15 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-05 14:41 UTC to 2027-02-03 14:41 UTC
    Logged 2026-11-05 15:39 UTC in Google ParcelYard2027h1, entry 628,324,867
    SHA-256 0858dfd8f604310e0f32e4d015435d02defc7b50c82b743180ff2f63bb9a0567
    Public key SHA-256 4590d87b11f4e05917ba987bfe6b6ad4c4722559f1970c493dfc0983d5406044
    Addresses
    64.239.109.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    64.239.123.193 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.239.109.1, 64.239.123.193): a cloud provider. It rents servers and addresses to its customers.
    Domain
    foto3969.link
    Registered
    2026-09-04 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:41 UTC

    Suggest a correction

  68. gedikmenkul.com US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by USOMMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    gedikmenkul.com
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    USOM listed it 2026-09-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 17:15 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-05 14:40 UTC to 2027-02-03 14:40 UTC
    Logged 2026-11-05 15:39 UTC in Google PlumbersArms2027h1, entry 628,707,232
    SHA-256 277c25d4f9c174d868e84de8969d0d7da9b33e0f71c339976461fb684a2da894
    Public key SHA-256 b8e41d467802227aee01ef82af0292f4a34a9907e6ea7f28c5ce4a00be772d3b
    Addresses
    216.150.1.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.150.1.193 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.150.1.65, 216.150.1.193): a cloud provider. It rents servers and addresses to its customers.
    Domain
    gedikmenkul.com
    Registered
    2026-09-04 · Name.com, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  69. grafana.polar-tensor.com DE · AS51167 · CONTABO Contabo GmbH4 addresses
    ListedContabo +1Under polar-tensor.com, listed by MetaMaskMX presentSPF ~allDMARC missingRegistered 19 mo ago
    DetailsHide
    Hostname
    grafana.polar-tensor.com
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask, listing polar-tensor.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 14:38 UTC to 2027-02-03 14:38 UTC
    Logged 2026-11-05 15:37 UTC in Google ParcelYard2027h1, entry 628,292,904
    SHA-256 6dccebc1f2f137d0173f24a32f345e0190ea959d18ea55ee39a58261622ef081
    Public key SHA-256 3b53f89e87663c2d336dc7eeea5b6015ac7d234d836536565df858a52f492f3f
    Addresses
    5.189.134.86 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    57.128.187.75 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    57.129.49.179 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    193.242.211.59 · Germany · AS58329 SERVINGA-NL servinga GmbH
    Contabo +1
    Contabo (5.189.134.86): a cloud provider. It rents servers and addresses to its customers. OVH (57.128.187.75, 57.129.49.179): a cloud provider. It rents servers and addresses to its customers.
    Domain
    polar-tensor.com
    Registered
    2025-04-28 · Web Commerce Communications Limited dba WebNic.cc
    MX
    Receives mail at mail.protonmail.ch, mailsec.protonmail.ch
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  70. ledger-live-desktops.io US · AS13335 · Cloudflare, Inc.4 addressesLedger
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    ledger-live-desktops.io
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:40 UTC to 2027-02-03 15:39 UTC
    Logged 2026-11-05 15:40 UTC in Google PlumbersArms2027h1, entry 628,724,272
    SHA-256 a2278661c07b06abc42ab5eb0088533433080d3597ebf6a730b2ee5c2ba8cd6e
    Public key SHA-256 f17083b8c81ad01f434fecb90699ace5bbe8bb49787af4687ee6d0a2e26e401b
    Brand
    Ledger
    Addresses
    104.21.19.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:bc92
    2606:4700:3035::6815:13c0
    Cloudflare
    Cloudflare (104.21.19.192, 172.67.188.146): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ledger-live-desktops.io
    Registered
    2026-09-07 · TLD Registrar Solutions Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:42 UTC

    Suggest a correction

  71. matacapitstead.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    matacapitstead.click
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-08-03 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 14:37 UTC to 2027-02-03 14:37 UTC
    Logged 2026-11-05 15:35 UTC in DigiCert Wyvern2027h1, entry 417,583,920
    SHA-256 40d22e79ab13daf7cb4f2d3b56bbc5148a6b5267fa00e8d1170c37538ee35e2b
    Public key SHA-256 051a44a02c670cd0ce75011fdd9c1e87f9cad031bd4f5ae51d0b66d6c1950302
    Addresses
    104.21.8.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.183, 172.67.157.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    matacapitstead.click
    Registered
    2026-05-12 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:41 UTC

    Suggest a correction

  72. mazaltrov-it.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    mazaltrov-it.live
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:40 UTC to 2027-02-03 15:38 UTC
    Logged 2026-11-05 15:40 UTC in Google ParcelYard2027h1, entry 628,328,597
    SHA-256 a31fe36ccb64ef3c10973b7c418f93b0139091704ed12bbde51ab724b106e78b
    Public key SHA-256 a62eff73a12e76cedfc3ef3feaa14f89fef41420e519c4744205cab1dd53c8dc
    Addresses
    104.21.29.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.192, 172.67.149.170): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mazaltrov-it.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:42 UTC

    Suggest a correction

  73. mellstroy.host GB · AS200514 · KnownSRV KnownSRV Ltd.
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    mellstroy.host
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 14:40 UTC to 2027-02-03 14:40 UTC
    Logged 2026-11-05 15:39 UTC in DigiCert Wyvern2027h1, entry 417,601,693
    SHA-256 46283ae7f82fda0e412d7a98271ef44b2197ea0314abedbce7045def922d3574
    Public key SHA-256 6e388794bbffb0f3f6750698df54783f8041c260adb2dc48c7b46470ebead51f
    PhishDestroy
    Addresses
    89.248.67.197 · United Kingdom · AS200514 KnownSRV KnownSRV Ltd.
    Domain
    mellstroy.host
    Registered
    2026-03-13 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:41 UTC

    Suggest a correction

  74. neuvefondvrac-it.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    neuvefondvrac-it.live
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-05 14:38 UTC to 2027-02-03 15:36 UTC
    Logged 2026-11-05 15:39 UTC in Sectigo Monument2027h1, entry 65,057,275
    SHA-256 062c1da215116ac3c11ebc734d9032c8378244769f1766682bb49123d90e3be5
    Public key SHA-256 36a465eaea5a163a44f4c92aa282a9363a6c8e6d8edb8d5dfd4549f15aa77ce7
    Addresses
    104.21.53.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.152, 172.67.214.155): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    neuvefondvrac-it.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  75. peaceful-funds.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    peaceful-funds.com
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:39 UTC to 2027-02-03 15:36 UTC
    Logged 2026-11-05 15:38 UTC in IPng Networks Halloumi2027h1, entry 375,765,224
    SHA-256 2181e60807565b6f3185163d645e2b5c580523b3a7d2b736db16695cfdd535f2
    Public key SHA-256 d9fb1b8a5c8b1ab8c9ab06294bae3d15159760e1a30444c286e3ce3c8f50c15d
    Addresses
    104.21.7.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.7.222, 172.67.156.125): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    peaceful-funds.com
    Registered
    2025-12-04 · Porkbun LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  76. pheira-it.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    pheira-it.live
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:39 UTC to 2027-02-03 15:37 UTC
    Logged 2026-11-05 15:39 UTC in Let's Encrypt Willow2027h1, entry 952,754,902
    SHA-256 abc6907f4f765856dba860086f1242547ae9e31aeda92b30e07da187ae4f7903
    Public key SHA-256 1f7bae88fbe9736c0b28e22cad1fd9c80964bcd65712d9905bd03ad6f5d08730
    Addresses
    104.21.66.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.159.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.66.109, 172.67.159.113): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pheira-it.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  77. polskiemennlce.pl US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    polskiemennlce.pl
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-05-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 14:38 UTC to 2027-02-03 14:38 UTC
    Logged 2026-11-05 15:36 UTC in Google PlumbersArms2027h1, entry 628,672,082
    SHA-256 1d9fae225cf49601faa55d896bccf58bc18ef43c625b30f6b4cf77727959b342
    Public key SHA-256 41394bdf5a1e2f1ece776f79b3fd2a9acac3b9debd5ecddc6e977bd7b57cdef2
    Addresses
    104.21.67.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.245 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.236, 172.67.182.245): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    polskiemennlce.pl
    Registered
    2026-05-12 · Hosting Concepts B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:41 UTC

    Suggest a correction

  78. proprofitlab.pro NL · AS62370 · Snel Snel.com B.V.
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    proprofitlab.pro
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2
    Valid 2026-11-05 00:00 UTC to 2027-02-03 23:59 UTC
    Logged 2026-11-05 15:38 UTC in HARICA Selene2027h1, entry 56,220,485
    SHA-256 d677f077f86a34d44be48f792a2bafa078a0d21d462214c5ea2358c86b519673
    Public key SHA-256 01df3f8414203aba8dd6fe78fdbc4fa6c8e8b53931e5c39e47d0263b3da9533d
    Addresses
    185.62.58.101 · Netherlands · AS62370 Snel Snel.com B.V.
    Domain
    proprofitlab.pro
    Registered
    2026-03-23 · NETIM SAS
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  79. prulkovizan-it.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    prulkovizan-it.live
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:38 UTC to 2027-02-03 15:37 UTC
    Logged 2026-11-05 15:38 UTC in DigiCert Wyvern2027h1, entry 417,598,450
    SHA-256 ae5d7cb5be20ad815cebc3ec96439d79b206bceab0c8fdaa80c949ea7d9f9e6d
    Public key SHA-256 11ee53543856051dd02413c145282d210e1ea3ab115e3139cbc682237628d2ca
    Addresses
    104.21.9.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.252, 172.67.131.50): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    prulkovizan-it.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  80. qazmuro-mpt-zelquvi-c5x9fa37.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    qazmuro-mpt-zelquvi-c5x9fa37.pages.dev
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-09-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:36 UTC to 2027-02-03 15:35 UTC
    Logged 2026-11-05 15:36 UTC in Geomys Tuscolo2027h1, entry 488,628,850
    SHA-256 65fe6a15c85114daf7f461ce9b82d246435a78097eee1f27617df968e718f91f
    Public key SHA-256 a8b5106ea751af03686b321f64075431d8a59441279c47eefc46d3e66ca2ff1a
    Addresses
    172.66.44.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.100, 172.66.47.156): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  81. sivodex.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    sivodex.com
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 14:41 UTC to 2027-02-03 14:41 UTC
    Logged 2026-11-05 15:40 UTC in Google ParcelYard2027h1, entry 628,328,018
    SHA-256 3fe58b7d0a091130f2fb2097673f48f0e5a95ee38520f4753041457fa55c514b
    Public key SHA-256 f7dd746602f1fd0c6b32bd95ffe5bc7025b61045d88c650861c71a0f589262f5
    PhishDestroy
    Addresses
    104.21.46.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.97, 172.67.137.88): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sivodex.com
    Registered
    2026-03-13 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  82. tarnfundvane.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    tarnfundvane.online
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-09-04 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:40 UTC to 2027-02-03 15:38 UTC
    Logged 2026-11-05 15:40 UTC in Google ParcelYard2027h1, entry 628,328,308
    SHA-256 99c4595cf4a3599be5a1fdf84f9b6bf231496c0743a4d4ff4cdf857c3fa7da63
    Public key SHA-256 84ddec784e37de59910809ce197959f906d891f564714d3f8611d7e85297f431
    Addresses
    104.21.41.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.41.99, 172.67.164.44): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tarnfundvane.online
    Registered
    2026-09-03 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:41 UTC

    Suggest a correction

  83. tiplifeshortfilm.com FR · AS16276 · OVH OVH SAS
    ReportedOVHReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    tiplifeshortfilm.com
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-05 14:39 UTC to 2027-02-03 14:39 UTC
    Logged 2026-11-05 15:37 UTC in Google ParcelYard2027h1, entry 628,297,382
    SHA-256 1bd04caed8586f28daca5397bcd40d7141bddd858017b2ed5cc0348e9567ad8d
    Public key SHA-256 89fa35471105717d15642e8c1f264801b078af83da395e0e7df11e0232c03541
    PhishDestroy
    Addresses
    51.178.163.93 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.178.163.93): a cloud provider. It rents servers and addresses to its customers.
    Domain
    tiplifeshortfilm.com
    Registered
    2023-09-01 · GoDaddy.com, LLC
    MX
    Receives mail at tiplifeshortfilm.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  84. www.72kkk.ezgateway.net US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    www.72kkk.ezgateway.net
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 17:15 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 15:28 UTC to 2027-02-03 15:36 UTC
    Logged 2026-11-05 15:38 UTC in DigiCert Wyvern2027h1, entry 417,595,320
    SHA-256 65799587e4f67b5b377ce79d3aca27b8d60538e0acdef42482a1dae47b1c9100
    Public key SHA-256 6577b8d44038092f9e3f3f6a54fa89300555f06ada0c5375fdad8a5421235e90
    Addresses
    104.21.13.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.13.213): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 17:12 UTC

    Suggest a correction

  85. www.airbnb-reservations-rooms-31377018-properties.projedekorasyon.com.tr TR · AS219450 · VOYAR VOYAR VERIMERKEZI TEK…
    ReportedUnder airbnb-reservations-rooms-31377018-properties.projedekorasyon.com.tr, reported by PhishDestroyMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    www.airbnb-reservations-rooms-31377018-properties.projedekorasyon.com.tr
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy, listing airbnb-reservations-rooms-31377018-properties.projedekorasyon.com.tr and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 14:40 UTC to 2027-02-03 14:40 UTC
    Logged 2026-11-05 15:39 UTC in IPng Networks Gouda2027h1, entry 325,421,816
    SHA-256 22f15d646a476ce39f7075e4a93803c4b5b79664c8bcd59ffb00796438a375d8
    Public key SHA-256 1721c2066bf5d9c4316afacbc43da38424ff4c1288c7e25d21eaed5c339cb6dd
    PhishDestroy
    Addresses
    83.150.213.76 · Türkiye · AS219450 VOYAR VOYAR VERIMERKEZI TEKNOLOJILERI LTD. STI
    Domain
    projedekorasyon.com.tr
    MX
    Receives mail at projedekorasyon.com.tr
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 15:42 UTC

    Suggest a correction

  86. wwyybp.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 49 d ago
    DetailsHide
    Hostname
    wwyybp.top
    First seen
    2026-11-05 15:41 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-05 00:00 UTC to 2027-01-30 23:08 UTC
    Logged 2026-11-05 15:40 UTC in DigiCert Wyvern2027h1, entry 417,605,626
    SHA-256 75a25f403a3e0f5245f43bb5b934e8cd0ce420a7e30525f995d3cffe8df0cbd7
    Public key SHA-256 d5bb32e2690d891bff70498531d3ee0e05b401e907f659ee5c5970726b62f625
    Addresses
    104.21.90.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.109, 172.67.199.223): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wwyybp.top
    Registered
    2026-09-17 · NameSilo,LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:44 UTC

    Suggest a correction

  87. whatsapp-site-builder.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…WhatsApp
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    whatsapp-site-builder.com
    First seen
    2026-11-05 15:38 UTC
    First published
    2026-11-05 16:42 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 93.127.179.147.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 93.127.179.147
    Certificate
    Issued by YE2
    Valid 2026-11-05 14:29 UTC to 2027-02-03 14:29 UTC
    Logged 2026-11-05 15:27 UTC in Google ParcelYard2027h1, entry 628,170,710
    SHA-256 2a3831a75da8f182452ab212d7ea166850077c5ad26e448987528a5052ae8130
    Public key SHA-256 22a23408a5f8191e54fdb3f8b7fa3328b52be3148604b7a56823b80ec639f0c2
    Brand
    WhatsApp
    Addresses
    93.127.179.147 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (93.127.179.147): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    whatsapp-site-builder.com
    Registered
    2026-05-09 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  88. axialys-fr.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    axialys-fr.live
    First seen
    2026-11-05 15:36 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:32 UTC to 2027-02-03 15:29 UTC
    Logged 2026-11-05 15:32 UTC in Let's Encrypt Willow2027h1, entry 952,674,710
    SHA-256 ae7c08cd0d9feb696126251d1c339277b8d789600cf66dd298cb0b1e7fc43357
    Public key SHA-256 b32e2f26d9fea13bae8b5cfa8adaddbbb3127be9dacc82161ffbdbfc3a6eaf4c
    Addresses
    104.21.92.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.242, 172.67.200.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    axialys-fr.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  89. cimarendizio-it.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    cimarendizio-it.live
    First seen
    2026-11-05 15:36 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:31 UTC to 2027-02-03 15:28 UTC
    Logged 2026-11-05 15:31 UTC in Google ParcelYard2027h1, entry 628,218,764
    SHA-256 78d62565ebe5dd67bd34e9612bdd972843b944f76c24c7a297c3aae5f1eeb762
    Public key SHA-256 d4627ea001855861af5b39c30c121b96e0d0632d161534aacc4fa5972324432b
    Addresses
    104.21.40.218 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.218, 172.67.157.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cimarendizio-it.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  90. colegioconexao.com.br BR · AS266618 · MEGA PROVEDORPayPal
    ReportedReported by PhishTank as imitating PayPalMX presentRegistered 18 y ago
    DetailsHide
    Hostname
    colegioconexao.com.br
    First seen
    2026-11-05 15:36 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 17:18 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-05 14:35 UTC to 2027-02-03 14:35 UTC
    Logged 2026-11-05 15:34 UTC in Geomys Tuscolo2027h1, entry 488,608,322
    SHA-256 25fd7542d42fc0e2ad3931c8db18ef29ba99f4095eb9084b10cf3063474c3712
    Public key SHA-256 b212e0f4faa216e56d820f8a837df0567fb9512ef7fa401d66cd0a5e31d330c0
    PhishTank
    PhishTank report #9459322
    Brand
    PayPal
    Addresses
    128.201.75.97 · Brazil · AS266618 AS266618 - MEGA PROVEDOR - SERVICOS DE INTERNET LTDA - ME
    Domain
    colegioconexao.com.br
    Registered
    2009-04-30
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    Checked
    2026-11-05 16:41 UTC

    Suggest a correction

  91. colomberendif-nl.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    colomberendif-nl.live
    First seen
    2026-11-05 15:36 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:35 UTC to 2027-02-03 15:33 UTC
    Logged 2026-11-05 15:35 UTC in Let's Encrypt Sycamore2027h1, entry 962,040,560
    SHA-256 3121273e4fabc1a2045c49573fdc205296a00a193eb74c77d9c2056f2bacf211
    Public key SHA-256 139ff7e12853d2064b7437be5a751228251a9479eebec8e444e634838b55b870
    Addresses
    104.21.91.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.153, 172.67.223.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    colomberendif-nl.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  92. en-usa-desktop-ledgre.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    en-usa-desktop-ledgre.pages.dev
    First seen
    2026-11-05 15:36 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:31 UTC to 2027-02-03 15:30 UTC
    Logged 2026-11-05 15:31 UTC in Google ParcelYard2027h1, entry 628,222,841
    SHA-256 3212ca7f2aa880165ccff8d98d8a0cae2f8a485ebf95d6d550a962316060a736
    Public key SHA-256 a27fbff01227e8c30eaf1468480f5f0dd1d4ad9bdc7985e2bc067237c11fc245
    Addresses
    172.66.44.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.137, 172.66.47.119): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  93. fadfny.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    fadfny.shop
    First seen
    2026-11-05 15:36 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:32 UTC to 2027-02-03 15:31 UTC
    Logged 2026-11-05 15:32 UTC in Google ParcelYard2027h1, entry 628,236,859
    SHA-256 26d304f028b05a99057fcc7f36058c068dbf658e9bfa5ea46fe4f7cbc07c25ef
    Public key SHA-256 4aa884dd69a3dce6dffb70cddb957a5953a5f26b2576d65696420555ca41d281
    Addresses
    104.21.62.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.62.25, 172.67.219.22): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fadfny.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:37 UTC

    Suggest a correction

  94. neurshard-ai.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    neurshard-ai.digital
    First seen
    2026-11-05 15:36 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-09-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    PhishDestroy: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:31 UTC to 2027-02-03 15:30 UTC
    Logged 2026-11-05 15:31 UTC in Geomys Tuscolo2027h1, entry 488,580,424
    SHA-256 81e2bd07b43a7ae3a0e9dc6f433f30cbc8922bb94880e4d2dc4bb558644ef351
    Public key SHA-256 7cf02de81f133cf4da7c7a892f1f6f319b64cbff7695a82e1c812acb7aad3b4a
    Addresses
    104.21.44.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.198.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.44.95, 172.67.198.131): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    neurshard-ai.digital
    Registered
    2026-09-07 · NETIM SAS
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  95. nokti.amlpro.io US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder amlpro.io, reported by PhishDestroyMX presentSPF -allDMARC rejectRegistered 43 d ago
    DetailsHide
    Hostname
    nokti.amlpro.io
    First seen
    2026-11-05 15:36 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy, listing amlpro.io and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 14:36 UTC to 2027-02-03 14:36 UTC
    Logged 2026-11-05 15:34 UTC in Google ParcelYard2027h1, entry 628,256,980
    SHA-256 6df0deedff3197ea4fd29c197b0c2099602fa051ef110a1b5a5574b7efd293ba
    Public key SHA-256 69c75667c1f1b8c44e7a49614ca44bff7e84a7ae6c90aac5b1a0a4904a904c36
    PhishDestroy
    Addresses
    104.21.12.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.12.189, 172.67.132.86): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    amlpro.io
    Registered
    2026-09-23 · Cloudflare, Inc
    MX
    Receives mail at smtp.secureserver.net, mailstore1.secureserver.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  96. nweawlzu.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    nweawlzu.shop
    First seen
    2026-11-05 15:36 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-10-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-05 00:00 UTC to 2027-02-01 20:35 UTC
    Logged 2026-11-05 15:30 UTC in Sectigo Statue2027h1, entry 65,105,305
    SHA-256 7ed60e6ce3aed9b85fddb6b39c63cd6f43fd9365d597dacdff265dfec60b5299
    Public key SHA-256 c2103d3f50474a499c640f3e8756c65498e7ffdfb04363cfb5972d8faddfae96
    Addresses
    104.17.231.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.17.231.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nweawlzu.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:37 UTC

    Suggest a correction

  97. octis.site US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    octis.site
    First seen
    2026-11-05 15:36 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:32 UTC to 2027-02-03 15:30 UTC
    Logged 2026-11-05 15:32 UTC in Let's Encrypt Willow2027h1, entry 952,679,565
    SHA-256 5860d25ef20dd7cf035bbc0677728e6515b3ff857e18811c3d5042b956e2b211
    Public key SHA-256 f5d1775ab303823b08f66ebdedd5ce55b9b8704f709c6e08bd877b0d9f2ea290
    PhishDestroy
    Addresses
    104.21.19.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.174, 172.67.187.5): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    octis.site
    Registered
    2026-01-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 15:37 UTC

    Suggest a correction

  98. panel.teamcoinbase.co DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ReportedParking page · ParkingCrew (Team Internet)Under teamcoinbase.co, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    panel.teamcoinbase.co
    First seen
    2026-11-05 15:36 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Reported
    PhishDestroy, listing teamcoinbase.co and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-05 14:32 UTC to 2027-02-03 14:32 UTC
    Logged 2026-11-05 15:31 UTC in Let's Encrypt Willow2027h1, entry 952,657,507
    SHA-256 0ce2216823876f874ada2b42c649d66798575de86cd7262413911a8902c813f3
    Public key SHA-256 11e69721afaab4a414829be4653e642fca642afbe6516b08b5b560617415cbd3
    PhishDestroy
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    teamcoinbase.co
    Registered
    2025-12-01 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:24 UTC

    Suggest a correction

  99. ramoinvestezzaai-fr.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ramoinvestezzaai-fr.live
    First seen
    2026-11-05 15:36 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
    DNS
    Resolves · checked 2026-11-05 16:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 14:34 UTC to 2027-02-03 15:32 UTC
    Logged 2026-11-05 15:34 UTC in Google ParcelYard2027h1, entry 628,250,728
    SHA-256 af39bf7559603729e0137a8301a293713f62d85d63f7f5b9065fcbd065cf7197
    Public key SHA-256 c7bfc57efb3da1c579049bbe991c10935c8f86ff18365283d7ddc8162bb91a57
    Addresses
    104.21.29.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.135, 172.67.149.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ramoinvestezzaai-fr.live
    Registered
    2026-07-10 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 16:43 UTC

    Suggest a correction

  100. tiktok888.xyzTikTok
    ListedListed by MetaMaskMX absentSPF -allDMARC rejectRegistered 6 mo ago
    DetailsHide
    Hostname
    tiktok888.xyz
    First seen
    2026-11-05 15:36 UTC
    First published
    2026-11-05 16:42 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 11:51 UTC
    DNS
    Not resolving · checked 2026-11-05 16:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 14:33 UTC to 2027-02-03 14:33 UTC
    Logged 2026-11-05 15:32 UTC in Let's Encrypt Sycamore2027h1, entry 962,003,090
    SHA-256 489055adf15779b954bc6c7406605ab357bc648a6d782b4e2d6c919dba17f336
    Public key SHA-256 8b372db0a06d96172c730ccc36ef1f59fc4be306c3857a0acbf50121c5bb4e89
    Brand
    TikTok
    Domain
    tiktok888.xyz
    Registered
    2026-05-12 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 15:37 UTC

    Suggest a correction

Showing 501–600 of 5,793 hostnames.Back to the start
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources