Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-05 17:45 UTC

Certificate-log entries · 24 h

329.8M

from 84 distinct feeds

Unique certificates · 24 h

35.2M

each reviewed

Names resolved · 24 h

22.2M

16.3M with an address

Findings · 24 h

5,793

223 of 1,061 brands targeted

5,793 hostnames from the last 24 hours.

jpy.deadcellsmod.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.deadcellsmod.com
Hostname
jpy.deadcellsmod.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
deadcellsmod.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.dlfutaixj.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.dlfutaixj.com
Hostname
jpy.dlfutaixj.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
dlfutaixj.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.dnxicheji.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.dnxicheji.com
Hostname
jpy.dnxicheji.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
dnxicheji.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.duobaotao.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.duobaotao.com
Hostname
jpy.duobaotao.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
duobaotao.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.faka188.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.faka188.com
Hostname
jpy.faka188.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
Domain
faka188.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.gssph.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.gssph.com
Hostname
jpy.gssph.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
gssph.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.h5sh2.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.h5sh2.com
Hostname
jpy.h5sh2.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
Domain
h5sh2.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.hao0718.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.hao0718.com
Hostname
jpy.hao0718.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
hao0718.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.hctrah.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.hctrah.com
Hostname
jpy.hctrah.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
Domain
hctrah.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.hengxingtj.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.hengxingtj.com
Hostname
jpy.hengxingtj.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
hengxingtj.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.hlk005.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.hlk005.com
Hostname
jpy.hlk005.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
Domain
hlk005.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.hnfwjggs.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.hnfwjggs.com
Hostname
jpy.hnfwjggs.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
hnfwjggs.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.huayintoys.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.huayintoys.com
Hostname
jpy.huayintoys.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
huayintoys.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.idacx.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.idacx.com
Hostname
jpy.idacx.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
Domain
idacx.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.jumeiche.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.jumeiche.com
Hostname
jpy.jumeiche.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
jumeiche.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.k182w2a.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.k182w2a.com
Hostname
jpy.k182w2a.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
Domain
k182w2a.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.kaixindaxiao.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.kaixindaxiao.com
Hostname
jpy.kaixindaxiao.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
kaixindaxiao.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.kawasakipay3.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.kawasakipay3.com
Hostname
jpy.kawasakipay3.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
kawasakipay3.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.kd0000.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.kd0000.com
Hostname
jpy.kd0000.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
Domain
kd0000.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.rrcp05.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.rrcp05.com
Hostname
jpy.rrcp05.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
Domain
rrcp05.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.shuichengzx.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.shuichengzx.com
Hostname
jpy.shuichengzx.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
Domain
shuichengzx.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
jpy.zlcwe.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as jpy.chatgpt05.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
41 min ago
DetailsHide details for jpy.zlcwe.com
Hostname
jpy.zlcwe.com
First seen
2026-11-05 17:23 UTC
Same certificate
Same certificate as jpy.chatgpt05.com: on Spamhaus DROP at 134.122.139.51; a OpenAI lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
32 of 70 domains on this certificate have their own listing evidence
Certificate 9b96db4735b64f38… · 70 domains on it · first seen 2026-11-05 17:23 UTC
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
Domain
zlcwe.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
www.cardstop.co.uk US · AS20473 · The Constant Company, LLC2 addressesCard Stop
Phishing hostVultrAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 10 mo ago
42 min ago
DetailsHide details for www.cardstop.co.uk
Hostname
www.cardstop.co.uk
First seen
2026-11-05 17:22 UTC
Phishing host
A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.77.102.235.
2026-11-05 16:25 UTCPhishing-host list fetched with the address
2026-11-05 17:19 UTCCertificate logged in CT
2026-11-05 17:22 UTCResolved to 45.77.102.235
Certificate
Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
Valid 2026-11-05 00:00 UTC to 2027-02-03 23:59 UTC
Logged 2026-11-05 17:19 UTC in Let's Encrypt Willow2027h1, entry 954,100,247
SHA-256 152f18fe6692fd92c049bbb1fc018178d14b0ca7422af31aa38ff51035b8aa8e
Public key SHA-256 70c6fc9763489d7c58d63c075c1efa7f369d8056faea3fb821199d039b5b80cc
Brand
Card Stop
Addresses
45.77.102.235 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)
64.176.195.8 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)
Vultr
Vultr (45.77.102.235, 64.176.195.8): a cloud provider. It rents servers and addresses to its customers.
Domain
cardstop.co.uk
Registered
2025-12-30 · Abion AB
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:22 UTC
Suggest a correction
jpy.chatgpt05.com HK · AS152194 · CTG Server LimitedOpenAI
Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
42 min ago
DetailsHide details for jpy.chatgpt05.com
Hostname
jpy.chatgpt05.com
First seen
2026-11-05 17:22 UTC
Spamhaus DROP
A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 134.122.139.51.
2026-11-04 22:14 UTCSpamhaus DROP list fetched with the address
2026-11-05 17:18 UTCCertificate logged in CT
2026-11-05 17:22 UTCResolved to 134.122.139.51
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Gouda2027h1, entry 326,051,230
SHA-256 9b96db4735b64f3802914c497c445db85f13b79e952a14ec5f28c7bf90fe5f77
Public key SHA-256 32ab39fb502b9168966e8fcbaa6b8edb55fc712dcf0489c30ba130be99173039
Brand
OpenAI
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
Domain
chatgpt05.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:23 UTC
Suggest a correction
cardstop.co.uk US · AS20473 · The Constant Company, LLC2 addressesCard Stop
Phishing hostVultrAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 10 mo ago
42 min ago
DetailsHide details for cardstop.co.uk
Hostname
cardstop.co.uk
First seen
2026-11-05 17:21 UTC
Phishing host
A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.77.102.235.
2026-11-05 16:25 UTCPhishing-host list fetched with the address
2026-11-05 17:20 UTCCertificate logged in CT
2026-11-05 17:21 UTCResolved to 45.77.102.235
Certificate
Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
Valid 2026-11-05 00:00 UTC to 2027-02-03 23:59 UTC
Logged 2026-11-05 17:20 UTC in IPng Networks Halloumi2027h1, entry 376,714,429
SHA-256 172ec616bfdc49285c2720148aee3d824f0a23c213feb97d6ffbe516921fa537
Public key SHA-256 492eabcd1e8baea4a8ebbe831a8848e880581eacb0ad80ad88a74ad9ed6ca5ca
Brand
Card Stop
Addresses
45.77.102.235 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)
64.176.195.8 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)
Vultr
Vultr (45.77.102.235, 64.176.195.8): a cloud provider. It rents servers and addresses to its customers.
Domain
cardstop.co.uk
Registered
2025-12-30 · Abion AB
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:22 UTC
Suggest a correction
adqe.lucifergin.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
ListedParking page · ParkingCrew (Team Internet)Under lucifergin.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 y ago
42 min ago
DetailsHide details for adqe.lucifergin.com
Hostname
adqe.lucifergin.com
First seen
2026-11-05 17:21 UTC
Listing
MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Listed
MetaMask, listing lucifergin.com and the names under it
2026-10-27 05:34 UTCObserved in the MetaMask feed
2026-11-05 17:17 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:24 UTCLatest DNS check
Certificate
Issued by YE2 · precertificate
Valid 2026-11-05 16:18 UTC to 2027-02-03 16:18 UTC
Logged 2026-11-05 17:17 UTC in DigiCert Wyvern2027h1, entry 418,505,762
SHA-256 5b7838c532319db8dc298a4d62e3e7f659ec5e0952eef4c4b9719b0c58180915
Public key SHA-256 1c5edbd55c7b5f134dd7ef9ff59bd0f45a4754bc67db8881ec180de121e422f4
Addresses
185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
Parking page · ParkingCrew (Team Internet)
ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
Domain
lucifergin.com
Registered
2023-01-04 · Hosting Concepts B.V. d/b/a Registrar.eu
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:12 UTC
Suggest a correction
briand-monteve-fr.live US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
42 min ago
DetailsHide details for briand-monteve-fr.live
Hostname
briand-monteve-fr.live
First seen
2026-11-05 17:21 UTC
Listing
CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
Listed
CERT Polska
2026-07-20 12:28 UTCListed by CERT Polska
2026-11-05 17:20 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:24 UTCLatest DNS check
Certificate
Issued by WE1 · precertificate
Valid 2026-11-05 16:20 UTC to 2027-02-03 17:18 UTC
Logged 2026-11-05 17:20 UTC in Google PlumbersArms2027h1, entry 630,037,196
SHA-256 95afe02a5a82915d3eac71352c89a4c8fe946ee244920198d06f89757c9dad6b
Public key SHA-256 cefa569d6a62f9d7a05f08749619652f3326aa25015b93ab9406a3539ef5a596
Addresses
104.21.31.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.175.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.31.85, 172.67.175.128): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
briand-monteve-fr.live
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:23 UTC
Suggest a correction
capvalorenca-fr.live US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
42 min ago
DetailsHide details for capvalorenca-fr.live
Hostname
capvalorenca-fr.live
First seen
2026-11-05 17:21 UTC
Listing
CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
Listed
CERT Polska
2026-07-20 13:09 UTCListed by CERT Polska
2026-11-05 17:20 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:21 UTCLatest DNS check
Certificate
Issued by WE1 · precertificate
Valid 2026-11-05 16:20 UTC to 2027-02-03 17:18 UTC
Logged 2026-11-05 17:20 UTC in Google ParcelYard2027h1, entry 629,650,606
SHA-256 c6c18a45bd2f1e70feaed24d43aefa7cf90b14cbd750da321d273b5d83038d47
Public key SHA-256 0de37016a7a2563f24747e793c0bb9261aeafae26ffbfc10676132cd554b8d4f
Addresses
104.21.29.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.171.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.29.4, 172.67.171.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
capvalorenca-fr.live
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:23 UTC
Suggest a correction
confident.codeified.info AU · AS154653 · ParkLogic Pty Ltd
ListedParking page · ParkLogicUnder codeified.info, listed by CERT PolskaMX presentSPF -allDMARC missingRegistered 12 mo ago
42 min ago
DetailsHide details for confident.codeified.info
Hostname
confident.codeified.info
First seen
2026-11-05 17:21 UTC
Listing
CERT Polska listed it 2026-06-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
Listed
CERT Polska, listing codeified.info and the names under it
2026-06-18 17:30 UTCListed by CERT Polska
2026-11-05 17:19 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:21 UTCLatest DNS check
Certificate
Issued by YE1 · precertificate
Valid 2026-11-05 16:21 UTC to 2027-02-03 16:21 UTC
Logged 2026-11-05 17:19 UTC in Geomys Tuscolo2027h1, entry 489,693,223
SHA-256 40aac12c89b751057ed492176601ff1702ee6e7322c6c2fd61e19a99d09abb37
Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
Addresses
162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
Parking page · ParkLogic
The registry delegates codeified.info to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
Domain
codeified.info
Registered
2025-11-03 · NameSilo, LLC
MX
Receives mail at mail.eye-mail.net
SPF
SPF record with -all: other senders fail
DMARC
Publishes no DMARC policy
Checked
2026-11-05 13:28 UTC
Suggest a correction
consul.socialvisor.ru RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
ReportedDDoS-GuardUnder socialvisor.ru, reported by PhishDestroyMX presentSPF ~allDMARC policy none
42 min ago
DetailsHide details for consul.socialvisor.ru
Hostname
consul.socialvisor.ru
First seen
2026-11-05 17:21 UTC
Listing
PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Reported
PhishDestroy, listing socialvisor.ru and the names under it
2026-10-25 23:31 UTCObserved in the PhishDestroy feed
2026-11-05 17:16 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:21 UTCLatest DNS check
Certificate
Issued by YR2 · precertificate
Valid 2026-11-05 16:18 UTC to 2027-02-03 16:18 UTC
Logged 2026-11-05 17:16 UTC in Let's Encrypt Willow2027h1, entry 954,064,454
SHA-256 86aa3a3f08475e788c1bfb4042755ce186994aa74c8fdf7d8cfd601af4d90d37
Public key SHA-256 6ae5151947a71d3e321101a34df5e472a8b3f09809acc06895c42a07c5967815
PhishDestroy
PhishDestroy's report on socialvisor.ru
Addresses
91.215.41.91 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
DDoS-Guard
DDoS-Guard (91.215.41.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
socialvisor.ru
MX
Receives mail at emx.mail.ru
SPF
SPF record with ~all: other senders soft-fail
DMARC
DMARC policy p=none: reports only
Checked
2026-11-05 01:41 UTC
Suggest a correction
dinamixorai-es.live US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
42 min ago
DetailsHide details for dinamixorai-es.live
Hostname
dinamixorai-es.live
First seen
2026-11-05 17:21 UTC
Listing
CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
Listed
CERT Polska
2026-07-20 13:25 UTCListed by CERT Polska
2026-11-05 17:18 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:21 UTCLatest DNS check
Certificate
Issued by WE1 · precertificate
Valid 2026-11-05 16:18 UTC to 2027-02-03 17:17 UTC
Logged 2026-11-05 17:18 UTC in Let's Encrypt Willow2027h1, entry 954,087,010
SHA-256 9d64e9799c2479b6194c880f8ae17aa59b4b8615aae747f7a8b4f6cddd16ff60
Public key SHA-256 696acecb6be3998969294b3229676e967652b29ba232ba427ec635c544f68547
Addresses
104.21.65.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.158.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.65.63, 172.67.158.201): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
dinamixorai-es.live
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:23 UTC
Suggest a correction
dublikat.shop US · AS13335 · Cloudflare, Inc.2 addresses
ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
42 min ago
DetailsHide details for dublikat.shop
Hostname
dublikat.shop
First seen
2026-11-05 17:21 UTC
Listing
PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Reported
PhishDestroy
2026-10-25 23:31 UTCObserved in the PhishDestroy feed
2026-11-05 17:18 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:21 UTCLatest DNS check
Certificate
Issued by WE1 · precertificate
Valid 2026-11-05 16:18 UTC to 2027-02-03 17:17 UTC
Logged 2026-11-05 17:18 UTC in Google ParcelYard2027h1, entry 629,626,915
SHA-256 6b9f0a52d5d7017e76a8ddc18deb52cec02c69cfec70d8cbb180aad8158c719a
Public key SHA-256 9d32d3153afdc402306bae09d190a993c19ddd5cf7f02bad1660d16c395f2eba
PhishDestroy
PhishDestroy's report on dublikat.shop
Addresses
104.21.4.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.131.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.4.37, 172.67.131.158): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
dublikat.shop
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:22 UTC
Suggest a correction
fra-12124c.wb-cdn-global.com DE · AS58087 · FlorianKolb Florian Kolb
ListedUnder wb-cdn-global.com, listed by MetaMaskMX absentSPF -allDMARC rejectRegistered 9 mo ago
42 min ago
DetailsHide details for fra-12124c.wb-cdn-global.com
Hostname
fra-12124c.wb-cdn-global.com
First seen
2026-11-05 17:21 UTC
Listing
MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Listed
MetaMask, listing wb-cdn-global.com and the names under it
2026-10-27 05:34 UTCObserved in the MetaMask feed
2026-11-05 17:17 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:22 UTCLatest DNS check
Certificate
Issued by YE1
Valid 2026-11-05 16:19 UTC to 2027-02-03 16:19 UTC
Logged 2026-11-05 17:17 UTC in Google PlumbersArms2027h1, entry 630,003,322
SHA-256 54a7b1f10500a47d50be9698089f5d71dea7684dd1f83105f261ddd7e15dd2d8
Public key SHA-256 c2af569620ee4ee42bb97283cd6df347221ab0834a8d53f6673e04f4c0349503
Addresses
45.133.74.82 · Germany · AS58087 FlorianKolb Florian Kolb
Domain
wb-cdn-global.com
Registered
2026-02-23 · Registrar of Domain Names REG.RU LLC
MX
Publishes no mail exchanger
SPF
SPF record with -all: other senders fail
DMARC
DMARC policy p=reject
Checked
2026-11-04 20:39 UTC
Suggest a correction
gamevwr.com AU · AS133618 · Trellian Pty. Limited
ListedParking page · Above.comListed by CERT PolskaMX absentSPF -allDMARC missing
42 min ago
DetailsHide details for gamevwr.com
Hostname
gamevwr.com
First seen
2026-11-05 17:21 UTC
Listing
CERT Polska listed it 2026-06-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
Listed
CERT Polska
2026-06-01 15:54 UTCListed by CERT Polska
2026-11-05 17:16 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:22 UTCLatest DNS check
Certificate
Issued by YE2
Valid 2026-11-05 16:17 UTC to 2027-02-03 16:17 UTC
Logged 2026-11-05 17:16 UTC in Let's Encrypt Sycamore2027h1, entry 963,422,188
SHA-256 c39fed7a0e1d6571f922fa75ce42e13976d1ef32526dffc1287d66aea389463f
Public key SHA-256 e296f03db65a60bcdebdbe62e0b7f0c68722714aa98e1fc7ceb967d8e0cba47a
Addresses
103.224.182.250 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
Parking page · Above.com
The registry delegates gamevwr.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.250): a parking service. It answers for names that are typically for sale or unused.
Domain
gamevwr.com
MX
Publishes no mail exchanger
SPF
SPF record with -all: other senders fail
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:23 UTC
Suggest a correction
jimmyquizgiveaway.com US · AS16509 · Amazon.com, Inc.2 addresses
ReportedAmazon Web ServicesReported by PhishDestroyMX absentSPF missingDMARC quarantine
42 min ago
DetailsHide details for jimmyquizgiveaway.com
Hostname
jimmyquizgiveaway.com
First seen
2026-11-05 17:21 UTC
Listing
PhishDestroy: first observed in the feed 2026-10-26 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Reported
PhishDestroy
2026-10-26 05:31 UTCObserved in the PhishDestroy feed
2026-11-05 17:17 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:22 UTCLatest DNS check
Certificate
Issued by GoDaddy TLS Intermediate CA DV - R1v1
Valid 2026-11-05 17:17 UTC to 2027-05-22 17:17 UTC
Logged 2026-11-05 17:17 UTC in GoDaddy Aquamarine2027h1, entry 184,433,316
SHA-256 848fad96e28ac970143b28e137f1297d5f807c6e414a52b494d6faa16b9d60fe
Public key SHA-256 c38568d6ef03f654540cf6880c8f383f396a783dc7c492a93ffe72e334fb604e
PhishDestroy
PhishDestroy's report on jimmyquizgiveaway.com
Addresses
3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
Amazon Web Services
Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
Domain
jimmyquizgiveaway.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
DMARC policy p=quarantine
Checked
2026-11-05 17:22 UTC
Suggest a correction
mansndksmsnskzkskek.org US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 59 d ago
42 min ago
DetailsHide details for mansndksmsnskzkskek.org
Hostname
mansndksmsnskzkskek.org
First seen
2026-11-05 17:21 UTC
Listing
USOM listed it 2026-09-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 17:15 UTC
Listed
USOM
2026-09-12 13:05 UTCListed by USOM
2026-11-05 17:17 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:22 UTCLatest DNS check
Certificate
Issued by WE1 · precertificate
Valid 2026-11-05 16:17 UTC to 2027-02-03 17:14 UTC
Logged 2026-11-05 17:17 UTC in Geomys Tuscolo2027h1, entry 489,661,921
SHA-256 178e77cf806d606ccb552212f63155b6dcee5a5894bd0eff3a9887948fa057e8
Public key SHA-256 8f26238390f5b2e44bd251578722042d30cb1d21de70c1e1bd8578be3a8dd29c
Addresses
104.21.14.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.160.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.14.188, 172.67.160.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
mansndksmsnskzkskek.org
Registered
2026-09-07 · NameCheap, Inc.
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:51 UTC
Suggest a correction
mansndksnskwlwkdnd.org US · AS396982 · Google LLC
ListedGoogle CloudListed by USOMMX absentSPF missingDMARC missingRegistered 59 d ago
42 min ago
DetailsHide details for mansndksnskwlwkdnd.org
Hostname
mansndksnskwlwkdnd.org
First seen
2026-11-05 17:21 UTC
Listing
USOM listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 17:15 UTC
Listed
USOM
2026-09-11 20:11 UTCListed by USOM
2026-11-05 17:15 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:22 UTCLatest DNS check
Certificate
Issued by WE1 · precertificate
Valid 2026-11-05 16:15 UTC to 2027-02-03 17:14 UTC
Logged 2026-11-05 17:15 UTC in Let's Encrypt Sycamore2027h1, entry 963,419,251
SHA-256 b506ebd439be3cf873f89b70a1d3034a3598b4e342177cefd7dc8d0899c2ccd7
Public key SHA-256 da30d2b434c01de730338a4cb50e8f123e02f17da3b7f38727276e40d46a1d5d
Addresses
34.90.71.70 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)
Google Cloud
Google Cloud (34.90.71.70): a cloud provider. It rents servers and addresses to its customers.
Domain
mansndksnskwlwkdnd.org
Registered
2026-09-07 · NameCheap, Inc.
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:51 UTC
Suggest a correction
marearentivo-it.live US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
42 min ago
DetailsHide details for marearentivo-it.live
Hostname
marearentivo-it.live
First seen
2026-11-05 17:21 UTC
Listing
CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
Listed
CERT Polska
2026-07-20 12:49 UTCListed by CERT Polska
2026-11-05 17:20 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:22 UTCLatest DNS check
Certificate
Issued by WE1 · precertificate
Valid 2026-11-05 16:20 UTC to 2027-02-03 17:17 UTC
Logged 2026-11-05 17:20 UTC in Google PlumbersArms2027h1, entry 630,037,897
SHA-256 3013efb4deebff6b2583501ab4f72753ef7c4e3a15ee70f727a7d2188c173e97
Public key SHA-256 5b4e39b41e1ff6fd2d6af35af319d7b45f30af2e79b195f7114569b32a774191
Addresses
104.21.64.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.187.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.64.215, 172.67.187.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
marearentivo-it.live
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:22 UTC
Suggest a correction
onlineportaal-wetgevingspagina.info US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
42 min ago
DetailsHide details for onlineportaal-wetgevingspagina.info
Hostname
onlineportaal-wetgevingspagina.info
First seen
2026-11-05 17:21 UTC
Listing
MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Listed
MetaMask
2026-10-27 05:34 UTCObserved in the MetaMask feed
2026-11-05 17:19 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:22 UTCLatest DNS check
Certificate
Issued by WE1 · precertificate
Valid 2026-11-05 16:19 UTC to 2027-02-03 17:17 UTC
Logged 2026-11-05 17:19 UTC in IPng Networks Halloumi2027h1, entry 376,706,855
SHA-256 c3ebb832f09a22aeac5505138650192965d3fac8af15b6056a9df603e00e076e
Public key SHA-256 786028732db07a581fb277b0b77bc4e03963fa0a372160dc43b4378f9b81abc7
Addresses
104.21.69.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.210.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.69.165, 172.67.210.139): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
onlineportaal-wetgevingspagina.info
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:22 UTC
Suggest a correction
pzbdp.asia US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
42 min ago
DetailsHide details for pzbdp.asia
Hostname
pzbdp.asia
First seen
2026-11-05 17:21 UTC
Listing
NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
Listed
NPA 165
2026-10-27 13:23 UTCObserved in the NPA 165 feed
2026-11-05 17:18 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:22 UTCLatest DNS check
Certificate
Issued by YE2
Valid 2026-11-05 16:20 UTC to 2027-02-03 16:20 UTC
Logged 2026-11-05 17:18 UTC in Google ParcelYard2027h1, entry 629,630,925
SHA-256 09b63b2313c0c4efbec355d5cb2e3fa15c4acefa97fd6f9152c37d91b8e51f69
Public key SHA-256 0e53a31ff1744798632b59c7238e0c9653b7cfc37981e6678e4e0528eac38079
Addresses
104.21.18.105 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.181.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.18.105, 172.67.181.151): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
pzbdp.asia
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:22 UTC
Suggest a correction
qql-series.com US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
42 min ago
DetailsHide details for qql-series.com
Hostname
qql-series.com
First seen
2026-11-05 17:21 UTC
Listing
MetaMask: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Listed
MetaMask
2026-11-02 05:46 UTCObserved in the MetaMask feed
2026-11-05 17:17 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:24 UTCLatest DNS check
Certificate
Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
Valid 2026-11-05 00:00 UTC to 2027-02-01 05:14 UTC
Logged 2026-11-05 17:17 UTC in IPng Networks Halloumi2027h1, entry 376,690,717
SHA-256 27fe039f2ff8d09f67588e4876fa7e9ae2be4df33635028c4f9909e93d678113
Public key SHA-256 10901ca96848501883060f20c65b3c2e1fa4fb4425d531a27fdfe13d77e1b545
Addresses
104.21.87.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.143.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.87.117, 172.67.143.8): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
qql-series.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:22 UTC
Suggest a correction
skrovendiq-es.live US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
42 min ago
DetailsHide details for skrovendiq-es.live
Hostname
skrovendiq-es.live
First seen
2026-11-05 17:21 UTC
Listing
CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
Listed
CERT Polska
2026-07-20 12:35 UTCListed by CERT Polska
2026-11-05 17:18 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:22 UTCLatest DNS check
Certificate
Issued by WE1 · precertificate
Valid 2026-11-05 16:18 UTC to 2027-02-03 17:16 UTC
Logged 2026-11-05 17:18 UTC in Let's Encrypt Willow2027h1, entry 954,087,429
SHA-256 e0610cf9d36c5c9f0698ec04fddcf2bb3031f56ab8f3de2ec46cebd17e530951
Public key SHA-256 5b91d770a8b2fbf37e39e69ddfe6f6b4b7e17d28b844e0b681eba2207c5d2fd4
Addresses
104.21.43.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.186.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.43.224, 172.67.186.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
skrovendiq-es.live
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:22 UTC
Suggest a correction
tabotcapitalai-it.live US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
42 min ago
DetailsHide details for tabotcapitalai-it.live
Hostname
tabotcapitalai-it.live
First seen
2026-11-05 17:21 UTC
Listing
CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
Listed
CERT Polska
2026-07-20 12:38 UTCListed by CERT Polska
2026-11-05 17:18 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:22 UTCLatest DNS check
Certificate
Issued by WE1 · precertificate
Valid 2026-11-05 16:18 UTC to 2027-02-03 17:15 UTC
Logged 2026-11-05 17:18 UTC in IPng Networks Halloumi2027h1, entry 376,703,751
SHA-256 cf6810aa50665a94360c3390a4e837ec23acd46c796ac222199054474ae4f501
Public key SHA-256 7d405258b7bd0f8d2d8a79ab4d600f0fb04e311e0928c2aadbeaff7a72eeb8df
Addresses
104.21.20.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.191.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.20.67, 172.67.191.217): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
tabotcapitalai-it.live
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:22 UTC
Suggest a correction
v5oa.steinberixkapital.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
ReportedParking page · ParkingCrew (Team Internet)Under steinberixkapital.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
42 min ago
DetailsHide details for v5oa.steinberixkapital.com
Hostname
v5oa.steinberixkapital.com
First seen
2026-11-05 17:21 UTC
Listing
PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Reported
PhishDestroy, listing steinberixkapital.com and the names under it
2026-10-25 23:31 UTCObserved in the PhishDestroy feed
2026-11-05 17:16 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:22 UTCLatest DNS check
Certificate
Issued by YE1
Valid 2026-11-05 16:17 UTC to 2027-02-03 16:17 UTC
Logged 2026-11-05 17:16 UTC in Google PlumbersArms2027h1, entry 629,981,595
SHA-256 1dfdc2a493cf995ea9b7d1167c6adb16d96b50cfa9449e59f20b30f04e4d2684
Public key SHA-256 8c013c351dacd1b08c632314e8deceecabcdc3170a0ddf477abd573c92e69b47
PhishDestroy
PhishDestroy's report on steinberixkapital.com
Addresses
185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
Parking page · ParkingCrew (Team Internet)
ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
Domain
steinberixkapital.com
Registered
2026-03-10 · Hosting Concepts B.V. d/b/a Registrar.eu
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 08:32 UTC
Suggest a correction
w09.woodcraft-meb.ru US · AS36352 · HostPapa
ReportedColoCrossingUnder woodcraft-meb.ru, reported by PhishDestroyMX absentSPF missingDMARC missing
42 min ago
DetailsHide details for w09.woodcraft-meb.ru
Hostname
w09.woodcraft-meb.ru
First seen
2026-11-05 17:21 UTC
Listing
PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Reported
PhishDestroy, listing woodcraft-meb.ru and the names under it
2026-10-25 23:31 UTCObserved in the PhishDestroy feed
2026-11-05 17:16 UTCCertificate logged in CT
2026-11-05 17:21 UTCWe matched its certificate name
2026-11-05 17:22 UTCLatest DNS check
Certificate
Issued by YE1 · precertificate
Valid 2026-11-05 16:17 UTC to 2027-02-03 16:17 UTC
Logged 2026-11-05 17:16 UTC in DigiCert Wyvern2027h1, entry 418,500,798
SHA-256 074c108468da8e5a32906c2d23946c4a657ab2528a2e3e89f6aad33284815826
Public key SHA-256 d578d5ecff235f797676d7994d597b0a922380e1feba80b9f4a9f071d9cc8738
PhishDestroy
PhishDestroy's report on woodcraft-meb.ru
Addresses
172.245.41.12 · United States · AS36352 AS-COLOCROSSING - HostPapa · ColoCrossing (shared hosting)
ColoCrossing
ColoCrossing (172.245.41.12): shared web hosting and domain registration. One address typically serves many customer sites.
Domain
woodcraft-meb.ru
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 08:36 UTC
Suggest a correction
24478996bsvrkmpnyaprmsny.pro SC · AS403005 · Blatant
ListedListed by USOMMX absentSPF missingDMARC missing
47 min ago
DetailsHide details for 24478996bsvrkmpnyaprmsny.pro
Hostname
24478996bsvrkmpnyaprmsny.pro
First seen
2026-11-05 17:17 UTC
Listing
USOM listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 17:15 UTC
Listed
USOM
2026-11-05 14:56 UTCCertificate logged in CT
2026-11-05 16:11 UTCListed by USOM
2026-11-05 17:17 UTCWe matched the new listing
2026-11-05 17:17 UTCLatest DNS check
Certificate
Issued by YE2 · precertificate
Valid 2026-11-05 13:58 UTC to 2027-02-03 13:58 UTC
Logged 2026-11-05 14:56 UTC in Let's Encrypt Sycamore2027h1, entry 961,504,408
SHA-256 118a83a015f3e14217b4248511cbb2957bb8a2b2de9180c8d7641d91d4bd7d76
Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
Addresses
64.89.160.238 · Seychelles · AS403005 BLATANTHOST - Blatant
Domain
24478996bsvrkmpnyaprmsny.pro
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:17 UTC
Suggest a correction
haberler4923648.sbs SC · AS403005 · Blatant
ListedListed by USOMMX absentSPF missingDMARC missingRegistered 1 d ago
47 min ago
DetailsHide details for haberler4923648.sbs
Hostname
haberler4923648.sbs
First seen
2026-11-05 17:17 UTC
Listing
USOM listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 17:15 UTC
Listed
USOM
2026-11-04 22:18 UTCCertificate logged in CT
2026-11-05 16:56 UTCListed by USOM
2026-11-05 17:17 UTCWe matched the new listing
2026-11-05 17:17 UTCLatest DNS check
Certificate
Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
Valid 2026-11-04 22:08 UTC to 2027-02-02 22:15 UTC
Logged 2026-11-04 22:18 UTC in DigiCert Wyvern2027h1, entry 407,845,477
SHA-256 4d74959047a46421dc8a213e2c4829c7fe582687f513d76fcd1464114e5a7e17
Public key SHA-256 a40b36707ce3bd94b5959b14da2cabff487571dc60909461db693587e86b3238
Addresses
64.89.160.238 · Seychelles · AS403005 BLATANTHOST - Blatant
Domain
haberler4923648.sbs
Registered
2026-11-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:51 UTC
Suggest a correction
kmpnyybsvrr32352.info SC · AS403005 · Blatant
ListedListed by USOMMX absentSPF missingDMARC missing
47 min ago
DetailsHide details for kmpnyybsvrr32352.info
Hostname
kmpnyybsvrr32352.info
First seen
2026-11-05 17:17 UTC
Listing
USOM listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 17:15 UTC
Listed
USOM
2026-11-05 14:52 UTCCertificate logged in CT
2026-11-05 16:20 UTCListed by USOM
2026-11-05 17:17 UTCWe matched the new listing
2026-11-05 17:17 UTCLatest DNS check
Certificate
Issued by YE1 · precertificate
Valid 2026-11-05 13:53 UTC to 2027-02-03 13:53 UTC
Logged 2026-11-05 14:52 UTC in IPng Networks Halloumi2027h1, entry 375,325,239
SHA-256 4b1e6b1b759f8362737bfb659c8bed84be03f561f61d930a27bc59576fc3e072
Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
Addresses
64.89.160.238 · Seychelles · AS403005 BLATANTHOST - Blatant
Domain
kmpnyybsvrr32352.info
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:17 UTC
Suggest a correction
kmpnyybsvrr32352.online SC · AS403005 · Blatant
ListedListed by USOMMX absentSPF missingDMARC missingRegistered today
47 min ago
DetailsHide details for kmpnyybsvrr32352.online
Hostname
kmpnyybsvrr32352.online
First seen
2026-11-05 17:17 UTC
Listing
USOM listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 17:15 UTC
Listed
USOM
2026-11-05 14:54 UTCCertificate logged in CT
2026-11-05 16:28 UTCListed by USOM
2026-11-05 17:17 UTCWe matched the new listing
2026-11-05 17:17 UTCLatest DNS check
Certificate
Issued by YE2 · precertificate
Valid 2026-11-05 13:56 UTC to 2027-02-03 13:56 UTC
Logged 2026-11-05 14:54 UTC in Geomys Tuscolo2027h1, entry 488,217,550
SHA-256 1aee51a7e59165c05e7cdb4746d16f2ff26c2dcf5aba3fe40972d1fd2a9391fc
Public key SHA-256 1be98da3d15149136ecf8f2542e4082018c2f595114ff24506e27a40e00bf306
Addresses
64.89.160.238 · Seychelles · AS403005 BLATANTHOST - Blatant
Domain
kmpnyybsvrr32352.online
Registered
2026-11-05 · Sav.com, LLC
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:51 UTC
Suggest a correction
promosyon-cepteteb-com-tr.my-homeip.de US · AS16509 · Amazon.com, Inc.
ListedAmazon Web ServicesListed by USOMMX presentSPF missingDMARC missing
47 min ago
DetailsHide details for promosyon-cepteteb-com-tr.my-homeip.de
Hostname
promosyon-cepteteb-com-tr.my-homeip.de
First seen
2026-11-05 17:17 UTC
Listing
USOM listed it 2026-11-05 · still listed at the last successful feed check 2026-11-05 17:15 UTC
Listed
USOM
2026-11-05 12:22 UTCCertificate logged in CT
2026-11-05 16:47 UTCListed by USOM
2026-11-05 17:17 UTCWe matched the new listing
2026-11-05 17:17 UTCLatest DNS check
Certificate
Issued by YR1 · precertificate
Valid 2026-11-05 11:23 UTC to 2027-02-03 11:23 UTC
Logged 2026-11-05 12:22 UTC in DigiCert Wyvern2027h1, entry 415,721,926
SHA-256 0a36ba4b3de67b05c48d952d2bb6d63e89dc2a01f722adfc06b245203dc9ad6a
Public key SHA-256 a19be3ce5b8432bbbc2836c34583cf30d0759c56648381891a38873894218ec5
Addresses
3.67.168.154 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
Amazon Web Services
Amazon Web Services (3.67.168.154): a cloud provider. It rents servers and addresses to its customers.
Domain
my-homeip.de
MX
Receives mail at mail-02.dd24.net
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:12 UTC
Suggest a correction
ciscostore.co.uk US · AS20473 · The Constant Company, LLC2 addressesCisco
Phishing hostVultrAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 12 mo ago
47 min ago
DetailsHide details for ciscostore.co.uk
Hostname
ciscostore.co.uk
First seen
2026-11-05 17:16 UTC
Phishing host
A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.77.102.235.
2026-11-05 16:25 UTCPhishing-host list fetched with the address
2026-11-05 17:00 UTCCertificate logged in CT
2026-11-05 17:16 UTCResolved to 45.77.102.235
Certificate
Issued by ZeroSSL ECC DV SSL CA 2
Valid 2026-09-06 00:00 UTC to 2026-12-05 23:59 UTC
Logged 2026-11-05 17:00 UTC in Let's Encrypt Sycamore2026h2, entry 1,066,987,939
SHA-256 334ad58cdab30e15228ff098b9fbe872a332a0f7026335fe8ac84f002a9fd108
Public key SHA-256 e4396b533e129f4741acd520baac1627267019ee2f71f23e4cc9073823e0a174
Brand
Cisco
Addresses
45.77.102.235 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)
64.176.195.8 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)
Vultr
Vultr (45.77.102.235, 64.176.195.8): a cloud provider. It rents servers and addresses to its customers.
Domain
ciscostore.co.uk
Registered
2025-10-28 · Abion AB
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:51 UTC
Suggest a correction
abundan-fincap.shop US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
48 min ago
DetailsHide details for abundan-fincap.shop
Hostname
abundan-fincap.shop
First seen
2026-11-05 17:16 UTC
Listing
CERT Polska listed it 2026-09-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
Listed
CERT Polska
2026-09-16 13:06 UTCListed by CERT Polska
2026-11-05 17:14 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:16 UTCLatest DNS check
Certificate
Issued by WE1
Valid 2026-09-07 16:26 UTC to 2026-12-06 17:26 UTC
Logged 2026-11-05 17:14 UTC in TrustAsia log2026b, entry 3,042,812,148
SHA-256 3aafadf563d2b9d4c2c7cd3b15428babd07c55c3b81274339d16479ff1064329
Public key SHA-256 5d66e33dce79585e1feb7d5a7d6ab3ce810a96382da9f2b9f3a9b3559cc7d877
Addresses
104.21.79.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.150.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.79.236, 172.67.150.9): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
abundan-fincap.shop
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:17 UTC
Suggest a correction
alphabonds.org US · AS13335 · Cloudflare, Inc.2 addresses
ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered today
48 min ago
DetailsHide details for alphabonds.org
Hostname
alphabonds.org
First seen
2026-11-05 17:16 UTC
Listing
PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Reported
PhishDestroy
2026-10-25 23:31 UTCObserved in the PhishDestroy feed
2026-11-05 17:12 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:23 UTCLatest DNS check
Certificate
Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
Valid 2026-11-05 17:02 UTC to 2027-02-03 17:10 UTC
Logged 2026-11-05 17:12 UTC in DigiCert Sphinx2027h1, entry 369,416,273
SHA-256 07e754b220385d8c01fe267e235f619d69b58cde715d405cce636c0dddd27d9f
Public key SHA-256 def9823e136d0d7ac403a6854a650acfad48f952f7b7fe2a308b2c5885afc7c6
PhishDestroy
PhishDestroy's report on alphabonds.org
Addresses
104.21.7.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.155.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.7.15, 172.67.155.95): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
alphabonds.org
Registered
2026-11-05 · Dynadot Inc
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:51 UTC
Suggest a correction
badge-firelight.xyz US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
48 min ago
DetailsHide details for badge-firelight.xyz
Hostname
badge-firelight.xyz
First seen
2026-11-05 17:16 UTC
Listing
MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Listed
MetaMask
2026-10-27 05:34 UTCObserved in the MetaMask feed
2026-11-05 17:11 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:16 UTCLatest DNS check
Certificate
Issued by WE1 · precertificate
Valid 2026-11-05 16:11 UTC to 2027-02-03 17:09 UTC
Logged 2026-11-05 17:11 UTC in Let's Encrypt Willow2027h1, entry 953,990,781
SHA-256 45e6a1cdd0c1650b93d3c14004572725d0b4dc147fb2f200717a58a7770a7b1c
Public key SHA-256 9cb0e80762a86e76d715972207bab52e2b5a66671ef71f90688a6196a4137773
Addresses
104.21.82.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.159.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.82.165, 172.67.159.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
badge-firelight.xyz
Registered
2026-09-07 · NICENIC INTERNATIONAL GROUP CO., LIMITED
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:51 UTC
Suggest a correction
chainatarax500.live US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
48 min ago
DetailsHide details for chainatarax500.live
Hostname
chainatarax500.live
First seen
2026-11-05 17:16 UTC
Listing
CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Listed
CERT Polska
2026-07-17 23:08 UTCListed by CERT Polska
2026-11-05 17:13 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:16 UTCLatest DNS check
Certificate
Issued by YE2 · precertificate
Valid 2026-11-05 16:15 UTC to 2027-02-03 16:15 UTC
Logged 2026-11-05 17:13 UTC in IPng Networks Gouda2027h1, entry 326,032,884
SHA-256 5b357ff2cf34a0fcdd53afbef50c65725ed59c51921116c4e8757f07ac4065be
Public key SHA-256 45e20d45c123c771e859fcc21ef8c1f539ed818b72933d1c5c77f0e2c1cdc47f
Addresses
104.21.10.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.163.32 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.10.119, 172.67.163.32): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
chainatarax500.live
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:17 UTC
Suggest a correction
fx.legacytrustfinance.com US · AS53667 · FranTech Solutions
ReportedUnder legacytrustfinance.com, reported by PhishDestroyMX presentSPF ~allDMARC policy none
48 min ago
DetailsHide details for fx.legacytrustfinance.com
Hostname
fx.legacytrustfinance.com
First seen
2026-11-05 17:16 UTC
Listing
PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Reported
PhishDestroy, listing legacytrustfinance.com and the names under it
2026-10-25 23:31 UTCObserved in the PhishDestroy feed
2026-11-05 17:10 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:16 UTCLatest DNS check
Certificate
Issued by YR2
Valid 2026-11-05 16:12 UTC to 2027-02-03 16:12 UTC
Logged 2026-11-05 17:10 UTC in Google ParcelYard2027h1, entry 629,524,242
SHA-256 3b355577bc8a8c9ff9636d8b1818bbc545d62637083b2f036998b3ae1c42b4ae
Public key SHA-256 7a0ccac47ba1d24deed832c181cfd87866d06d0daa677ff5b10f7ae68c00ee27
PhishDestroy
PhishDestroy's report on legacytrustfinance.com
Addresses
198.251.84.200 · United States · AS53667 PONYNET - FranTech Solutions
Domain
legacytrustfinance.com
MX
Receives mail at legacytrustfinance.com
SPF
SPF record with ~all: other senders soft-fail
DMARC
DMARC policy p=none: reports only
Checked
2026-11-05 17:02 UTC
Suggest a correction
global-huobi.com.cn
ListedListed by MetaMaskMX absentSPF missingDMARC missing
48 min ago
DetailsHide details for global-huobi.com.cn
Hostname
global-huobi.com.cn
First seen
2026-11-05 17:16 UTC
Listing
MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Listed
MetaMask
2026-10-27 05:34 UTCObserved in the MetaMask feed
2026-11-05 17:14 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:16 UTCLatest DNS check
Certificate
Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
Valid 2026-11-05 00:00 UTC to 2027-02-03 00:35 UTC
Logged 2026-11-05 17:14 UTC in Let's Encrypt Sycamore2027h1, entry 963,407,368
SHA-256 2fed885f46554ea6d99ca1dd5b9f6aac56891654f3b24c84e0604a2dbe8e9b7a
Public key SHA-256 aa7c5cd25a13c85b7fd80aae0a8256935d5c91d6693a439a8f64ee086f115c41
Domain
global-huobi.com.cn
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:17 UTC
Suggest a correction
limanfindra.net US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
48 min ago
DetailsHide details for limanfindra.net
Hostname
limanfindra.net
First seen
2026-11-05 17:16 UTC
Listing
CERT Polska listed it 2026-10-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
Listed
CERT Polska
2026-10-14 16:16 UTCListed by CERT Polska
2026-11-05 17:14 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:16 UTCLatest DNS check
Certificate
Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
Valid 2026-11-05 00:00 UTC to 2027-02-01 03:53 UTC
Logged 2026-11-05 17:14 UTC in Geomys Tuscolo2027h1, entry 489,635,592
SHA-256 1ae6b9407f37e9e6c08b8a203721568f241b4a3082566caef23864ef7716f057
Public key SHA-256 5f6afdedcef61a330dc568f19cb1738269d9ab033df868112d04710987b52b7b
Addresses
104.21.54.218 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.142.218 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.54.218, 172.67.142.218): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
limanfindra.net
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:17 UTC
Suggest a correction
micosoft.us.ci US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by MetaMask
48 min ago
DetailsHide details for micosoft.us.ci
Hostname
micosoft.us.ci
First seen
2026-11-05 17:16 UTC
Listing
MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Listed
MetaMask
2026-11-01 17:45 UTCObserved in the MetaMask feed
2026-11-05 17:13 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:16 UTCLatest DNS check
Certificate
Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
Valid 2026-11-05 00:00 UTC to 2027-02-03 00:32 UTC
Logged 2026-11-05 17:13 UTC in DigiCert Sphinx2027h1, entry 369,420,375
SHA-256 2e912abf463b46cbd2aadf97b683e82e21452da4a696ccae1a1e481cdab13157
Public key SHA-256 fb457e32d4aea4b3f63790d3db6f66784fc49a5789c45844ef2d6b3195c9a31f
Addresses
104.21.6.105 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.134.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.6.105, 172.67.134.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Suggest a correction
mightyes.top US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
48 min ago
DetailsHide details for mightyes.top
Hostname
mightyes.top
First seen
2026-11-05 17:16 UTC
Listing
NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 13:33 UTC
Listed
NPA 165
2026-10-27 13:23 UTCObserved in the NPA 165 feed
2026-11-05 17:10 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:16 UTCLatest DNS check
Certificate
Issued by Sectigo Public Server Authentication CA DV E36
Valid 2026-11-05 00:00 UTC to 2027-02-03 00:24 UTC
Logged 2026-11-05 17:10 UTC in Google PlumbersArms2027h1, entry 629,909,462
SHA-256 b15b94ff21be718c892ca6f06cb84644c25483d37fdbb2eb504797b07163c605
Public key SHA-256 b779dbcdb2237c664ee2d5ca2f3f172dbb49e9bab7b4b42089e1606e5a6d74b6
Addresses
104.21.20.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.191.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.20.44, 172.67.191.85): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
mightyes.top
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:17 UTC
Suggest a correction
neuralprofit.net US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
48 min ago
DetailsHide details for neuralprofit.net
Hostname
neuralprofit.net
First seen
2026-11-05 17:16 UTC
Listing
CERT Polska listed it 2026-10-04 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
Listed
CERT Polska
2026-10-04 01:20 UTCListed by CERT Polska
2026-11-05 17:13 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:16 UTCLatest DNS check
Certificate
Issued by WE1 · precertificate
Valid 2026-11-05 16:13 UTC to 2027-02-03 17:10 UTC
Logged 2026-11-05 17:13 UTC in DigiCert Wyvern2027h1, entry 418,487,890
SHA-256 1198e6fa599677f4affa8f19fdbecab738473b65535e49be2852fc917b0ed2e6
Public key SHA-256 7689ad8ae825ae14bbe8513ea1061d8f2f019560ef9c2a2236e01026388027c1
Addresses
104.21.63.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.145.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.63.119, 172.67.145.118): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
neuralprofit.net
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:17 UTC
Suggest a correction
onorefund-ai.digital US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
48 min ago
DetailsHide details for onorefund-ai.digital
Hostname
onorefund-ai.digital
First seen
2026-11-05 17:16 UTC
Listing
CERT Polska listed it 2026-09-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 15:17 UTC
PhishDestroy: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Listed
CERT Polska
2026-09-16 12:06 UTCListed by CERT Polska
2026-11-05 17:14 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:16 UTCLatest DNS check
Certificate
Issued by WR1 · precertificate
Valid 2026-11-05 16:14 UTC to 2027-02-03 17:13 UTC
Logged 2026-11-05 17:14 UTC in Let's Encrypt Sycamore2027h1, entry 963,404,569
SHA-256 b473fa6dc852dacffbbe7339ad9d0762c99875dd78a1b5f3ce336d9c73b8429a
Public key SHA-256 21e226da542c435ef909e76fe0e975b9cfbb86d8c815d6cd0653936287b4e5ca
Addresses
104.21.48.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.187.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.48.170, 172.67.187.102): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
onorefund-ai.digital
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:17 UTC
Suggest a correction
rainbet-ceska.cz US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missingRegistered 59 d ago
48 min ago
DetailsHide details for rainbet-ceska.cz
Hostname
rainbet-ceska.cz
First seen
2026-11-05 17:16 UTC
Listing
MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Listed
MetaMask
2026-10-27 05:34 UTCObserved in the MetaMask feed
2026-11-05 17:10 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:16 UTCLatest DNS check
Certificate
Issued by WE1 · precertificate
Valid 2026-11-05 16:10 UTC to 2027-02-03 17:09 UTC
Logged 2026-11-05 17:10 UTC in Google PlumbersArms2027h1, entry 629,908,671
SHA-256 918a5801eb464f81994b8c538363334bbef52e67a98c7b4e6abf54711b1a84da
Public key SHA-256 a421758af81362f4d0e837b9e43295c71e8a9f77c75a884cca16ce19910fab96
Addresses
104.21.89.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.162.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.89.172, 172.67.162.176): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
rainbet-ceska.cz
Registered
2026-09-07 · Dynadot Inc.
MX
Receives mail at route3.mx.cloudflare.net, route1.mx.cloudflare.net, route2.mx.cloudflare.net
SPF
SPF record with ~all: other senders soft-fail
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:51 UTC
Suggest a correction
rainbet-fr.casino US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missing
48 min ago
DetailsHide details for rainbet-fr.casino
Hostname
rainbet-fr.casino
First seen
2026-11-05 17:16 UTC
Listing
MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 11:51 UTC
PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Listed
MetaMask
2026-10-27 05:34 UTCObserved in the MetaMask feed
2026-11-05 17:15 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:16 UTCLatest DNS check
Certificate
Issued by WE1 · precertificate
Valid 2026-11-05 16:15 UTC to 2027-02-03 17:12 UTC
Logged 2026-11-05 17:15 UTC in DigiCert Wyvern2027h1, entry 418,495,566
SHA-256 cd4ab3fd8551681aa8e361e2c98198f52fe9612110f7e68d9eef9c770f94e5a0
Public key SHA-256 d4fb3af0b0487f7fbf54c9da9c3fb1df51dd616a0a1461cab4472e6e7e0600e2
Addresses
104.21.93.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.204.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.93.35, 172.67.204.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
rainbet-fr.casino
MX
Receives mail at route1.mx.cloudflare.net, route2.mx.cloudflare.net, route3.mx.cloudflare.net
SPF
SPF record with ~all: other senders soft-fail
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:17 UTC
Suggest a correction
stakehive.org US · AS13335 · Cloudflare, Inc.2 addresses
ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered today
48 min ago
DetailsHide details for stakehive.org
Hostname
stakehive.org
First seen
2026-11-05 17:16 UTC
Listing
PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Reported
PhishDestroy
2026-10-25 23:31 UTCObserved in the PhishDestroy feed
2026-11-05 17:12 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:16 UTCLatest DNS check
Certificate
Issued by YE1 · precertificate
Valid 2026-11-05 16:13 UTC to 2027-02-03 16:13 UTC
Logged 2026-11-05 17:12 UTC in DigiCert Sphinx2027h1, entry 369,413,946
SHA-256 0e7ab5e75795a74c896d66e40c98efdfa95a60b95dc1309451f525dd8d2a9157
Public key SHA-256 34cd7768e8cf8ffbe435c1fa34e2c6d9b602086ef08b62c1e0cbe4db2565d6bf
PhishDestroy
PhishDestroy's report on stakehive.org
Addresses
104.21.2.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.129.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.2.187, 172.67.129.143): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
stakehive.org
Registered
2026-11-05 · Dynadot Inc
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:51 UTC
Suggest a correction
verify-clouds.click US · AS13335 · Cloudflare, Inc.2 addresses
ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 15 d ago
48 min ago
DetailsHide details for verify-clouds.click
Hostname
verify-clouds.click
First seen
2026-11-05 17:16 UTC
Listing
MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Listed
MetaMask
2026-10-28 05:36 UTCObserved in the MetaMask feed
2026-11-05 17:13 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:16 UTCLatest DNS check
Certificate
Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
Valid 2026-11-05 00:00 UTC to 2027-02-01 03:28 UTC
Logged 2026-11-05 17:13 UTC in Let's Encrypt Sycamore2027h1, entry 963,390,239
SHA-256 173baab0f9ad6d5f20d5b5551ea9c41e02c4ef2fce513ecfc597d7fff3a45844
Public key SHA-256 7d28c0239a3a99ff89d6e199194f77660798c88eea7fd0f8f88a04134ef3f8d9
Addresses
104.21.10.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
172.67.131.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
Cloudflare
Cloudflare (104.21.10.67, 172.67.131.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
Domain
verify-clouds.click
Registered
2026-10-21 · NameSilo, LLC
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:51 UTC
Suggest a correction
www.fx.legacytrustfinance.com US · AS53667 · FranTech Solutions
ReportedUnder legacytrustfinance.com, reported by PhishDestroyMX presentSPF ~allDMARC policy none
48 min ago
DetailsHide details for www.fx.legacytrustfinance.com
Hostname
www.fx.legacytrustfinance.com
First seen
2026-11-05 17:16 UTC
Listing
PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 11:51 UTC
Reported
PhishDestroy, listing legacytrustfinance.com and the names under it
2026-10-25 23:31 UTCObserved in the PhishDestroy feed
2026-11-05 17:10 UTCCertificate logged in CT
2026-11-05 17:16 UTCWe matched its certificate name
2026-11-05 17:16 UTCLatest DNS check
Certificate
Issued by YR2
Valid 2026-11-05 16:12 UTC to 2027-02-03 16:12 UTC
Logged 2026-11-05 17:10 UTC in Google ParcelYard2027h1, entry 629,524,242
SHA-256 3b355577bc8a8c9ff9636d8b1818bbc545d62637083b2f036998b3ae1c42b4ae
Public key SHA-256 7a0ccac47ba1d24deed832c181cfd87866d06d0daa677ff5b10f7ae68c00ee27
PhishDestroy
PhishDestroy's report on legacytrustfinance.com
Addresses
198.251.84.200 · United States · AS53667 PONYNET - FranTech Solutions
Domain
legacytrustfinance.com
MX
Receives mail at legacytrustfinance.com
SPF
SPF record with ~all: other senders soft-fail
DMARC
DMARC policy p=none: reports only
Checked
2026-11-05 17:02 UTC
Suggest a correction
brt.1aunt.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.1aunt.com
Hostname
brt.1aunt.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
Domain
1aunt.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.2132zf.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.2132zf.com
Hostname
brt.2132zf.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
2132zf.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.21fangche.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.21fangche.com
Hostname
brt.21fangche.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
Domain
21fangche.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.45657w.com HK · AS152194 · CTG Server LimitedBRT
Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.45657w.com
Hostname
brt.45657w.com
First seen
2026-11-05 17:14 UTC
Spamhaus DROP
A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 134.122.139.51.
2026-11-04 22:14 UTCSpamhaus DROP list fetched with the address
2026-11-05 16:58 UTCCertificate logged in CT
2026-11-05 17:14 UTCResolved to 134.122.139.51
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Brand
BRT
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
Domain
45657w.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:17 UTC
Suggest a correction
brt.5pwz.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.5pwz.com
Hostname
brt.5pwz.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
5pwz.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.83kyf.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.83kyf.com
Hostname
brt.83kyf.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
83kyf.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.8600f.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.8600f.com
Hostname
brt.8600f.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
Domain
8600f.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.acosenglish.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.acosenglish.com
Hostname
brt.acosenglish.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
acosenglish.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.agc65.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.agc65.com
Hostname
brt.agc65.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
Domain
agc65.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.anlidqzs.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.anlidqzs.com
Hostname
brt.anlidqzs.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
anlidqzs.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.bailongxj.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.bailongxj.com
Hostname
brt.bailongxj.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
bailongxj.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.balderlight.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.balderlight.com
Hostname
brt.balderlight.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
Domain
balderlight.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.bingovo.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.bingovo.com
Hostname
brt.bingovo.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
bingovo.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.cetind.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.cetind.com
Hostname
brt.cetind.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
Domain
cetind.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.chaowuji.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.chaowuji.com
Hostname
brt.chaowuji.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
Domain
chaowuji.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.chenzaoxue.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.chenzaoxue.com
Hostname
brt.chenzaoxue.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
chenzaoxue.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.chrishyze.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.chrishyze.com
Hostname
brt.chrishyze.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
chrishyze.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.czdlhbgc.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.czdlhbgc.com
Hostname
brt.czdlhbgc.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
czdlhbgc.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.deadcellsmod.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.deadcellsmod.com
Hostname
brt.deadcellsmod.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
deadcellsmod.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.deheilan.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.deheilan.com
Hostname
brt.deheilan.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
Domain
deheilan.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.dekaroncn.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.dekaroncn.com
Hostname
brt.dekaroncn.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
dekaroncn.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.dlfutaixj.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.dlfutaixj.com
Hostname
brt.dlfutaixj.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
dlfutaixj.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.dnxicheji.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.dnxicheji.com
Hostname
brt.dnxicheji.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
Domain
dnxicheji.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.downeyflyfan.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.downeyflyfan.com
Hostname
brt.downeyflyfan.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
Domain
downeyflyfan.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.dreamlandtec.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.dreamlandtec.com
Hostname
brt.dreamlandtec.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
dreamlandtec.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.duobaotao.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.duobaotao.com
Hostname
brt.duobaotao.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
duobaotao.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.fuubyserina.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.fuubyserina.com
Hostname
brt.fuubyserina.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
104.233.161.155 · United States · AS398993 PEG-TY - PEG TECH INC
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
Domain
fuubyserina.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.getwpthemes.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.getwpthemes.com
Hostname
brt.getwpthemes.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
getwpthemes.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.gssph.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.gssph.com
Hostname
brt.gssph.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
gssph.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.h5sh2.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.h5sh2.com
Hostname
brt.h5sh2.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
h5sh2.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.h5sh3.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.h5sh3.com
Hostname
brt.h5sh3.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
h5sh3.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.hatayofuku.com HK · AS152194 · CTG Server Limited4 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.hatayofuku.com
Hostname
brt.hatayofuku.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
64.83.37.135 · United States · AS979 NETLAB-SDN - NetLab Global
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
hatayofuku.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction
brt.hctrah.com HK · AS152194 · CTG Server Limited3 addresses
Same certificateSame certificate as brt.45657w.com, on Spamhaus DROP at 134.122.139.51MX absentSPF missingDMARC missing
50 min ago
DetailsHide details for brt.hctrah.com
Hostname
brt.hctrah.com
First seen
2026-11-05 17:14 UTC
Same certificate
Same certificate as brt.45657w.com: on Spamhaus DROP at 134.122.139.51; a BRT lookalike
Listed: resolved to 134.122.139.51 on Spamhaus DROP
55 of 70 domains on this certificate have their own listing evidence
Certificate 574d5a5847f1fc69… · 70 domains on it · first seen 2026-11-05 17:14 UTC
Certificate
Issued by YR2
Valid 2026-11-05 15:59 UTC to 2027-02-03 15:59 UTC
Logged 2026-11-05 16:58 UTC in Google ParcelYard2027h1, entry 629,364,380
SHA-256 574d5a5847f1fc699b0c7bbe48a2f9c253cc53a2afda351fa74ad4bb7f99f728
Public key SHA-256 73109f0a5cf90278385b78edccc3c644f9b2d63cdcc21dc7eb8f06f7375d58a5
Addresses
134.122.139.51 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
107.149.110.130 · United States · AS54600 PEG-SV - PEG TECH INC
111.68.14.6 · Singapore · AS963 N963-AS-AP - N963 PTE. LTD.
Domain
hctrah.com
MX
Publishes no mail exchanger
SPF
Publishes no SPF record
DMARC
Publishes no DMARC policy
Checked
2026-11-05 17:50 UTC
Suggest a correction

Showing 101–200 of 5,793 hostnames.Back to the start Next 100

How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources