Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-06 17:46 UTC
Certificate-log entries · 24 h
321.0M
from 84 distinct feeds
Unique certificates · 24 h
33.4M
each reviewed
Names resolved · 24 h
21.4M
15.6M with an address
Findings · 24 h
5,630
227 of 1,061 brands targeted

2,785 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. bccard.official-platform.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder official-platform.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    bccard.official-platform.com
    First seen
    2026-11-06 17:46 UTC
    Listing
    CERT Polska listed it 2026-05-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska, listing official-platform.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-06 16:46 UTC to 2027-02-04 16:46 UTC
    Logged 2026-11-06 17:45 UTC in Let's Encrypt Willow2027h1, entry 972,519,257
    SHA-256 a6219e6cd492ec0190cffcdd5bdc829fdfd250d318b2bbf3ef5db6e3010f05b5
    Public key SHA-256 eddf4ca4e3fdb01c3cb2b676419449042ce5ddc4a23e11990bd4d8c1408d5172
    Addresses
    104.21.35.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.35.144, 172.67.175.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    official-platform.com
    Registered
    2026-04-16 · Dreamscape Networks International Pte Ltd
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 22:16 UTC

    Suggest a correction

  2. download.pocketbitcoindesktop.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder pocketbitcoindesktop.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    download.pocketbitcoindesktop.com
    First seen
    2026-11-06 17:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask, listing pocketbitcoindesktop.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-06 16:42 UTC to 2027-02-04 17:41 UTC
    Logged 2026-11-06 17:42 UTC in Geomys Tuscolo2027h1, entry 503,658,946
    SHA-256 2a03b95840bc7801c201306d7deca206fcd25f5e8e1dce388a9e3965c7f4612a
    Public key SHA-256 bde5d7b94a1401e4a06e29ce8a5a37c52177163a5ec044a8d8d538c4646fa35f
    Addresses
    104.21.34.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.99, 172.67.158.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pocketbitcoindesktop.com
    Registered
    2026-09-08 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  3. hgjythgr.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    hgjythgr.shop
    First seen
    2026-11-06 17:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-08 14:33 UTC to 2026-12-07 15:33 UTC
    Logged 2026-11-06 17:42 UTC in Google ParcelYard2026h2, entry 1,642,764,172
    SHA-256 64b1b53db870d5697dcccb91097611cfcbbeca5be82c040e4cc76ceace356abf
    Public key SHA-256 4fa08ea074494caa249c108c372f958bfa0315668074a25148264fcf189f62de
    Addresses
    104.21.25.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.224, 172.67.134.206): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hgjythgr.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  4. hngknv.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    hngknv.xyz
    First seen
    2026-11-06 17:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:44 UTC to 2027-02-04 17:41 UTC
    Logged 2026-11-06 17:44 UTC in Google ParcelYard2027h1, entry 647,372,654
    SHA-256 7957089653bbfc886573922ba7ba17ab4140062bdd0e747a9efc02ea47195287
    Public key SHA-256 f6b4a339b884333116ec385cd717e0b095c092f5e5afd8d60b337ce12318dbd8
    Addresses
    104.21.44.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.44.147, 172.67.200.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hngknv.xyz
    Registered
    2026-09-08 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  5. portal.gwavellc.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder gwavellc.com, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 6 mo ago
    DetailsHide
    Hostname
    portal.gwavellc.com
    First seen
    2026-11-06 17:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy, listing gwavellc.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-06 16:44 UTC to 2027-02-04 17:41 UTC
    Logged 2026-11-06 17:44 UTC in Google PlumbersArms2027h1, entry 647,728,948
    SHA-256 3681a397be2ce00354942128d86303ef1a8cace1c85872679f4f3829da58a757
    Public key SHA-256 b8f42d890e21caaf7c16ccc5d9681bcbb12a6c587a87c644a04e6c89fec2bdcf
    PhishDestroy
    Addresses
    104.21.22.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.4, 172.67.201.172): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gwavellc.com
    Registered
    2026-05-01 · Squarespace Domains LLC
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-06 01:42 UTC

    Suggest a correction

  6. rawnaqrcc.a-amaq.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder a-amaq.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 13 mo ago
    DetailsHide
    Hostname
    rawnaqrcc.a-amaq.com
    First seen
    2026-11-06 17:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy, listing a-amaq.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:45 UTC to 2027-02-04 17:45 UTC
    Logged 2026-11-06 17:45 UTC in Let's Encrypt Sycamore2027h1, entry 989,416,520
    SHA-256 6f23df248b57f230c252c24ee22da646c694b6fbf7257be3aac4d93168ad22c4
    Public key SHA-256 06c72202f0cf5ab44b18648d09a87718b103ae67000a06a92456ef5c01283158
    PhishDestroy
    Addresses
    104.21.4.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.171, 172.67.132.74): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    a-amaq.com
    Registered
    2025-10-20 · NameCheap, Inc.
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-06 08:27 UTC

    Suggest a correction

  7. www.retroactive.center US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder retroactive.center, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    www.retroactive.center
    First seen
    2026-11-06 17:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask, listing retroactive.center and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-06 16:42 UTC to 2027-02-04 16:42 UTC
    Logged 2026-11-06 17:40 UTC in Geomys Tuscolo2027h1, entry 503,640,569
    SHA-256 8bf36df7bd6ca42034730afc808364bb69d37d5c0affb36059aba1823511fd04
    Public key SHA-256 4a7ca281d6aa399b574e2b7adf7daf29bff1654bf5fc5dcf41c45a53110b780c
    Addresses
    104.21.85.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.28, 172.67.201.58): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    retroactive.center
    Registered
    2026-06-03 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 07:19 UTC

    Suggest a correction

  8. xn--ranbet1-8ya.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    xn--ranbet1-8ya.com
    First seen
    2026-11-06 17:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-06 16:46 UTC to 2027-02-04 16:46 UTC
    Logged 2026-11-06 17:45 UTC in Google ParcelYard2027h1, entry 647,384,922
    SHA-256 2e1947535e0701d823f70013cd9aec89bc0eb30b69a2cb9346fc3b83f67f22f7
    Public key SHA-256 8f3b913240d282423ac7748cc767715559e8daaa936659ed8a1f4e3d23b17892
    Addresses
    104.21.24.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.203, 172.67.220.128): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xn--ranbet1-8ya.com
    Registered
    2026-09-08 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  9. 00898933.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    00898933.sbs
    First seen
    2026-11-06 17:41 UTC
    Listing
    USOM listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 17:23 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-06 16:40 UTC to 2027-02-04 16:40 UTC
    Logged 2026-11-06 17:38 UTC in DigiCert Wyvern2027h1, entry 431,654,351
    SHA-256 0b0dfd2441dbd70ef10efdba8a41f5ee41ed4960931d92f76c7f7270f20180f7
    Public key SHA-256 856d25f7891b1871dadccd9f3957b102160852fb7d7f10ed08fde9a7660c4b8b
    Addresses
    104.21.85.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.232, 172.67.211.228): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    00898933.sbs
    Registered
    2026-05-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  10. bursivex-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    bursivex-app.com
    First seen
    2026-11-06 17:41 UTC
    Listing
    CERT Polska listed it 2026-07-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-06 16:38 UTC to 2027-02-04 16:38 UTC
    Logged 2026-11-06 17:36 UTC in DigiCert Sphinx2027h1, entry 381,313,815
    SHA-256 1f74676ab284dc28518f36c0ca8b02e4de2c76ff1ba3ead018033c3935c3cae2
    Public key SHA-256 6f03580770dd703bd54feb2ec199ff08f36491ed414ec384a9256baac8d588f9
    Addresses
    104.21.93.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.93.130, 172.67.210.44): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bursivex-app.com
    Registered
    2026-05-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  11. ljxxjyju.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    ljxxjyju.shop
    First seen
    2026-11-06 17:41 UTC
    Listing
    CERT Polska listed it 2026-05-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-06 16:38 UTC to 2027-02-04 16:38 UTC
    Logged 2026-11-06 17:37 UTC in DigiCert Wyvern2027h1, entry 431,636,944
    SHA-256 d0d14fc4a11eef09c479a3dd9e41d92eeb1f7c31139e94a1437135aa29b19116
    Public key SHA-256 f7f2e3d81254f67edf02b930c429bd532f84a2eace56dc33ea1bdf28e08a2ccc
    Addresses
    104.17.231.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.17.231.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ljxxjyju.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:43 UTC

    Suggest a correction

  12. megaethdapps.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    megaethdapps.com
    First seen
    2026-11-06 17:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-06 16:38 UTC to 2027-02-04 16:38 UTC
    Logged 2026-11-06 17:36 UTC in Geomys Tuscolo2027h1, entry 503,603,592
    SHA-256 312d95e3180c5fbebe898646615b031b7967a14955005755f27773f01dbc5285
    Public key SHA-256 4708aebe9104d8feb622f799e7cbc623556326f9d0be2cceca0a1f97b196b113
    Addresses
    104.21.87.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.87.153, 172.67.144.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    megaethdapps.com
    Registered
    2026-05-09 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-06 17:43 UTC

    Suggest a correction

  13. npdjcm.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    npdjcm.xyz
    First seen
    2026-11-06 17:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-06 16:35 UTC to 2027-02-04 17:34 UTC
    Logged 2026-11-06 17:38 UTC in DigiCert Wyvern2027h1, entry 431,647,504
    SHA-256 345ed27a03dbc4a56f6f1b725ae6f19302460ba5ddd80a677eaa5131be99bce4
    Public key SHA-256 a0f74558e80c1b37a7504e8c5ccbe66b0fe6a7cf97fe4b03bb052d55cc14500c
    Addresses
    104.21.28.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.126, 172.67.146.46): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    npdjcm.xyz
    Registered
    2026-09-08 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  14. ponsfamiiy.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    ponsfamiiy.com
    First seen
    2026-11-06 17:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:38 UTC to 2027-02-04 17:37 UTC
    Logged 2026-11-06 17:38 UTC in IPng Networks Gouda2027h1, entry 336,637,736
    SHA-256 f722bab14dede0a14e31a48f34610a1e0e0f8133414eea509b0175305631d3ef
    Public key SHA-256 2c31a0b00315c7d7488e1de3eb81e332f4fec9dd237cc7aabf6c86a0062478b4
    Addresses
    104.21.19.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.121, 172.67.186.38): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ponsfamiiy.com
    Registered
    2026-09-08 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:51 UTC

    Suggest a correction

  15. secureverif.bio US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    secureverif.bio
    First seen
    2026-11-06 17:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-06 16:38 UTC to 2027-02-04 16:38 UTC
    Logged 2026-11-06 17:37 UTC in Let's Encrypt Willow2027h1, entry 972,409,817
    SHA-256 316e8b2c88f644b9552c83304f066a83daf3d17f44fb7bd3f593999ecc0fae53
    Public key SHA-256 ca44dec9438e0b64fd0257d0de4bea8899dd9f78957f1f1f38e13f37c8cf6c0c
    Addresses
    104.21.11.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.11.252, 172.67.150.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    secureverif.bio
    Registered
    2026-11-06 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  16. sensor500chenix-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    sensor500chenix-ai.com
    First seen
    2026-11-06 17:41 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-06 16:39 UTC to 2027-02-04 16:39 UTC
    Logged 2026-11-06 17:38 UTC in Google PlumbersArms2027h1, entry 647,655,921
    SHA-256 1bfab89a093a09be2ed097ffa902608557018baaceb6855023efa5d09d690db7
    Public key SHA-256 2c45f785b60951be34343e817c120e09d3a82612c934ac5bf0e9bb47bf0839ba
    Addresses
    104.21.22.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.36, 172.67.202.60): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sensor500chenix-ai.com
    Registered
    2026-05-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:51 UTC

    Suggest a correction

  17. tevenovoa.help US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    tevenovoa.help
    First seen
    2026-11-06 17:41 UTC
    Listing
    CERT Polska listed it 2026-07-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-06 16:39 UTC to 2027-02-04 16:39 UTC
    Logged 2026-11-06 17:38 UTC in DigiCert Wyvern2027h1, entry 431,650,177
    SHA-256 0d1ed1b36742032eb89c08ec594ae8fbb5940b88c1cf5e50875032e9035ea69e
    Public key SHA-256 621d1717d68cec474b9f98a8fac75dc97b2774a869ae6a29d9bd7cdc2c4039d0
    Addresses
    104.21.70.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.226, 172.67.140.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tevenovoa.help
    Registered
    2026-05-13 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  18. the-rainbet-pl-com.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    the-rainbet-pl-com.pages.dev
    First seen
    2026-11-06 17:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:36 UTC to 2027-02-04 17:34 UTC
    Logged 2026-11-06 17:36 UTC in Let's Encrypt Willow2027h1, entry 972,403,548
    SHA-256 7f1f2438db194cbe8186055363628b6a2767b29485de55fe5b032e87eed81c71
    Public key SHA-256 c487cbad469ce1db0ed6c401ac1343e092c523f62eca03cd3728927209565868
    Addresses
    172.66.44.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.76, 172.66.47.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  19. tornadocash.network US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    tornadocash.network
    First seen
    2026-11-06 17:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-06 17:27 UTC to 2027-02-04 17:35 UTC
    Logged 2026-11-06 17:37 UTC in Let's Encrypt Willow2027h1, entry 972,419,323
    SHA-256 35a0094f1c7013498271769187bf46eddf1cc41fe5adc64042f65e63e833710a
    Public key SHA-256 5c27635f7cba2018fac730436609989bcf6dd718cc107a394e613d4582ed3e49
    Addresses
    104.21.46.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.252, 172.67.143.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tornadocash.network
    Registered
    2026-11-06 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  20. usdcoin.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (virtual currency)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    usdcoin.vip
    First seen
    2026-11-06 17:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-06 16:39 UTC to 2027-02-04 16:39 UTC
    Logged 2026-11-06 17:38 UTC in Let's Encrypt Willow2027h1, entry 972,422,333
    SHA-256 5ed405d55641257653330601ebc95bee27e2afaa701f31f45ef2b6e2d199f539
    Public key SHA-256 528809474abbc3fe54fb4f12942e5527fd88ae28efbb8c3f11eec7072bf19168
    Addresses
    104.21.4.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.236, 172.67.154.63): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    usdcoin.vip
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:43 UTC

    Suggest a correction

  21. api.nairabot-ai-system-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.nairabot-ai-system-com.financecryptoworld.com
    First seen
    2026-11-06 17:36 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-06 16:33 UTC to 2027-02-04 17:30 UTC
    Logged 2026-11-06 17:33 UTC in DigiCert Sphinx2027h1, entry 381,295,004
    SHA-256 8e3bb4b0927e8b7a3656963f5c6a6bb8f049377987515dd69a0515e8bcaf2e0f
    Public key SHA-256 ebbde609a75cdf7e905a67965da9b322830c0637cd7868b4b21a9ac0ed034c98
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:12 UTC

    Suggest a correction

  22. casino-betlive2.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    casino-betlive2.com
    First seen
    2026-11-06 17:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:34 UTC to 2027-02-04 17:34 UTC
    Logged 2026-11-06 17:34 UTC in DigiCert Sphinx2027h1, entry 381,299,432
    SHA-256 56f6088e802e5a978001266cd041a30bb180bd1ad7ba48a01303e434dbd01f80
    Public key SHA-256 a41186de707fd3d9d354d10b2e9a3c059864182715afa9a96f20d9ebcf3d675a
    PhishDestroy
    Addresses
    104.21.67.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.179, 172.67.179.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    casino-betlive2.com
    Registered
    2026-02-12 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:51 UTC

    Suggest a correction

  23. defi-xrpl.live US · AS13335 · Cloudflare, Inc.2 addressesRipple (XRP)
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    defi-xrpl.live
    First seen
    2026-11-06 17:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:31 UTC to 2027-02-04 17:30 UTC
    Logged 2026-11-06 17:31 UTC in Google PlumbersArms2027h1, entry 647,571,794
    SHA-256 2d57a3d7e391f90c3909498cf369e293a266d8f5dc13f79126dcf82bda96bdf6
    Public key SHA-256 a505cb34134c1d992378bdcb0814a3fb6b14f11053834855127e00dd99f812d8
    Brand
    Ripple (XRP)
    Addresses
    104.21.1.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.1.155, 172.67.129.117): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    defi-xrpl.live
    Registered
    2026-07-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  24. eapykj.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    eapykj.xyz
    First seen
    2026-11-06 17:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:35 UTC to 2027-02-04 17:34 UTC
    Logged 2026-11-06 17:35 UTC in Google PlumbersArms2027h1, entry 647,617,663
    SHA-256 755d7776138fedf505f82e544e2dbd14a05f74d3501c7a79b0362617ee15ddf5
    Public key SHA-256 63fe399f664f81c1c565d198b7da2111fcbd406fc3f5a6ece26708c7d7561baa
    Addresses
    104.21.16.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.127, 172.67.212.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eapykj.xyz
    Registered
    2026-09-08 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:51 UTC

    Suggest a correction

  25. frumzi-casino-fr2.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    frumzi-casino-fr2.com
    First seen
    2026-11-06 17:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-06 16:33 UTC to 2027-02-04 17:32 UTC
    Logged 2026-11-06 17:33 UTC in Let's Encrypt Sycamore2027h1, entry 989,122,571
    SHA-256 71859b4d569ad3ac8c95b53429f79bf549868aa03e9600e8baf13d98c1c97593
    Public key SHA-256 ba255f9dfd426ab12d4e90ce2375f9bcec95b5a06396bb6f5fb868e2c1144bcd
    PhishDestroy
    Addresses
    104.21.90.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.3, 172.67.150.128): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    frumzi-casino-fr2.com
    Registered
    2026-02-12 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:51 UTC

    Suggest a correction

  26. pocketbitcoindesktop.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    pocketbitcoindesktop.com
    First seen
    2026-11-06 17:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:35 UTC to 2027-02-04 17:32 UTC
    Logged 2026-11-06 17:35 UTC in IPng Networks Gouda2027h1, entry 336,608,543
    SHA-256 2727531ebe62475a8896ab90c6b5c0b4ab60beac37cd775ea72d0d222c922607
    Public key SHA-256 630cf35dd3e2c92494369bd5dd4c03c0abcdac4bd2cd2ea4575839d8ba5a4bc0
    Addresses
    104.21.34.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.99, 172.67.158.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pocketbitcoindesktop.com
    Registered
    2026-09-08 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  27. tevecorix.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tevecorix.shop
    First seen
    2026-11-06 17:36 UTC
    Listing
    CERT Polska listed it 2026-07-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-06 16:34 UTC to 2027-02-04 16:34 UTC
    Logged 2026-11-06 17:32 UTC in Google ParcelYard2027h1, entry 647,231,355
    SHA-256 a92342154e5f3abe007a9a39a887c02b8476c7a8a34060ed094ca45731b945c3
    Public key SHA-256 518b1dcbb12b421054ab2e3d55281890932c64e058c02c53a559ab4b1413fa75
    Addresses
    104.21.43.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.196, 172.67.184.172): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tevecorix.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:38 UTC

    Suggest a correction

  28. teveluxon.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    teveluxon.click
    First seen
    2026-11-06 17:36 UTC
    Listing
    CERT Polska listed it 2026-06-06 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-06 16:35 UTC to 2027-02-04 16:35 UTC
    Logged 2026-11-06 17:33 UTC in Google ParcelYard2027h1, entry 647,242,176
    SHA-256 25dbb2f4fe78703fdc0b05f7a113a7055d2567cd0dd1e8f705c766d7fe21ebef
    Public key SHA-256 275192d962555704c11bbfce7615a6c119dbf91e9e359d5d37ee441adaaa5fd4
    Addresses
    104.21.53.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.43, 172.67.208.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    teveluxon.click
    Registered
    2026-05-13 · Chengdu West Dimension Digital Technology Co., LTD
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  29. tevenovae.club US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tevenovae.club
    First seen
    2026-11-06 17:36 UTC
    Listing
    CERT Polska listed it 2026-07-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-06 16:32 UTC to 2027-02-04 16:32 UTC
    Logged 2026-11-06 17:30 UTC in Google ParcelYard2027h1, entry 647,199,834
    SHA-256 4a993682ee5ea5f1a2d53890974861ae28a4082920f99c9df4dab9b436f50b2c
    Public key SHA-256 585aa36701e4de979dfa612bc0c1324a879b971d9fd15b9a910c25e4d33d9a09
    Addresses
    104.21.37.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.131, 172.67.208.61): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tevenovae.club
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:38 UTC

    Suggest a correction

  30. www.v2-curvefinance.com US · AS13335 · Cloudflare, Inc.4 addressesCurve Finance
    ListedCloudflareUnder v2-curvefinance.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.v2-curvefinance.com
    First seen
    2026-11-06 17:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask, listing v2-curvefinance.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-06 16:32 UTC to 2027-02-04 16:32 UTC
    Logged 2026-11-06 17:30 UTC in Let's Encrypt Sycamore2027h1, entry 989,051,743
    SHA-256 491d32ee1f3f7cf9161468f744ff35a012245181e1936ad9b60fcbdb4570c0cc
    Public key SHA-256 1e71c99bfa10717fe0b5db5a2f9f44d9fb03ab847449d2b29447f5bc1dc52069
    Brand
    Curve Finance
    Addresses
    104.21.68.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:448d
    2606:4700:3031::ac43:c3f0
    Cloudflare
    Cloudflare (104.21.68.141, 172.67.195.240): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    v2-curvefinance.com
    Registered
    2026-08-19 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 09:34 UTC

    Suggest a correction

  31. ygevg.hair US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    ygevg.hair
    First seen
    2026-11-06 17:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-06 16:34 UTC to 2027-02-04 16:34 UTC
    Logged 2026-11-06 17:32 UTC in Let's Encrypt Willow2027h1, entry 972,356,038
    SHA-256 069ebd630e6d97849d24c716a7ae84a3205aaf108c79bd779e1e6c310216d7f3
    Public key SHA-256 55af00d6921a02a583359b9efec301a65d729fa929889e9beede896edacc6974
    Addresses
    104.21.67.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.239, 172.67.182.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ygevg.hair
    Registered
    2026-05-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:51 UTC

    Suggest a correction

  32. app.trustora-capital.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 11 mo ago
    DetailsHide
    Hostname
    app.trustora-capital.com
    First seen
    2026-11-06 17:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-06 16:30 UTC to 2027-02-04 16:30 UTC
    Logged 2026-11-06 17:29 UTC in Google ParcelYard2027h1, entry 647,183,289
    SHA-256 a41b391063048b6a0fd6828828132b7675aa7f9b7d59b6cf29a9bedea2e88cf0
    Public key SHA-256 e34e2a915b899d837380485e6837bdafa2d5c60e58541e6fdd55db211394e190
    PhishDestroy
    Addresses
    104.21.43.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.52, 172.67.220.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trustora-capital.com
    Registered
    2025-12-01 · Dynadot Inc
    MX
    Receives mail at _dc-mx.dfc1f5e40f5f.trustora-capital.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-06 17:51 UTC

    Suggest a correction

  33. eng-ondofinance.com US · AS13335 · Cloudflare, Inc.4 addressesOndo Finance
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    eng-ondofinance.com
    First seen
    2026-11-06 17:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-06 16:29 UTC to 2027-02-04 16:29 UTC
    Logged 2026-11-06 17:28 UTC in Google PlumbersArms2027h1, entry 647,525,304
    SHA-256 26b7fbe50d7702d275ba681bc3cf9d3061a67917f8995c1d54c049027c8a245b
    Public key SHA-256 806d68c62318f02f8431cc8b605abd9f44cebc54ae7a4636a6df1fd55883a668
    Brand
    Ondo Finance
    Addresses
    104.21.51.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:be9c
    2606:4700:3037::6815:33e2
    Cloudflare
    Cloudflare (104.21.51.226, 172.67.190.156): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eng-ondofinance.com
    Registered
    2026-08-18 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:35 UTC

    Suggest a correction

  34. lbrdao.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    lbrdao.com
    First seen
    2026-11-06 17:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:29 UTC to 2027-02-04 17:27 UTC
    Logged 2026-11-06 17:29 UTC in Google PlumbersArms2027h1, entry 647,538,842
    SHA-256 acae7712306fbe420e0a788d84eab85e59957870e1cf678c9f260f0efc242e58
    Public key SHA-256 b7b6a7ad26f6a6ce2136d8d58764713e2f02f74f3fc50011840c21ea45ac5072
    Addresses
    104.21.39.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.28, 172.67.142.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lbrdao.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:33 UTC

    Suggest a correction

  35. makeredto.org US · AS209242 · CLOUDFLARESPECTRUM Cloudfla…
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 9 y ago
    DetailsHide
    Hostname
    makeredto.org
    First seen
    2026-11-06 17:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:29 UTC to 2027-02-04 17:29 UTC
    Logged 2026-11-06 17:29 UTC in Google ParcelYard2027h1, entry 647,182,723
    SHA-256 6368a21d3c07f47a3446e708100a8d78947d629f13253213b41e3c0dc008acfe
    Public key SHA-256 8dd14b78753417dc9b56d4de2a7175367ac9ade87449a2ca4d39e104bea93457
    PhishDestroy
    Addresses
    160.153.0.128 · United States · AS209242 CLOUDFLARESPECTRUM Cloudflare London, LLC · Cloudflare (cdn)
    Cloudflare
    Cloudflare (160.153.0.128): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    makeredto.org
    Registered
    2018-03-28 · GoDaddy.com, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  36. megaethdapp.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    megaethdapp.com
    First seen
    2026-11-06 17:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-06 16:29 UTC to 2027-02-04 16:29 UTC
    Logged 2026-11-06 17:28 UTC in Geomys Tuscolo2027h1, entry 503,521,931
    SHA-256 70541409dc9a5c5e9a4901508921a0a890c4f1cc758c56fef8b8083d92333c12
    Public key SHA-256 e1486a3365503a4fadd23fa34da97fcf4bde8f430a6f66d193ba0bc46c03148f
    Addresses
    104.21.11.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.11.114, 172.67.165.243): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    megaethdapp.com
    Registered
    2026-05-09 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-06 17:33 UTC

    Suggest a correction

  37. sisuye.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    sisuye.digital
    First seen
    2026-11-06 17:31 UTC
    Listing
    CERT Polska listed it 2026-10-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:27 UTC to 2027-02-04 17:26 UTC
    Logged 2026-11-06 17:27 UTC in Let's Encrypt Sycamore2027h1, entry 988,974,783
    SHA-256 21a6d78ae987a7c8fe2cf75b71084f8c9e877d49164c677e9b2006984384d3ae
    Public key SHA-256 ca0601da90314bd3a060cf245d76d493713dc3190ddd61dbb9ac1106720b4c20
    Addresses
    104.21.90.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.16, 172.67.151.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sisuye.digital
    Registered
    2026-09-08 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:51 UTC

    Suggest a correction

  38. tevekyano.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tevekyano.work
    First seen
    2026-11-06 17:31 UTC
    Listing
    CERT Polska listed it 2026-06-06 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-06 16:31 UTC to 2027-02-04 16:31 UTC
    Logged 2026-11-06 17:29 UTC in Let's Encrypt Willow2027h1, entry 972,317,213
    SHA-256 355635eb23fb4e64ac358f0801eb2df786d12243d54878a835f42b3efbc6f871
    Public key SHA-256 ff372c69d4096c18cce6c3b13829518c84f7bac7460bc4b912ccd8dc807803a0
    Addresses
    104.21.43.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.223, 172.67.186.183): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tevekyano.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:33 UTC

    Suggest a correction

  39. teveluxor.club US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    teveluxor.club
    First seen
    2026-11-06 17:31 UTC
    Listing
    CERT Polska listed it 2026-07-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-06 16:30 UTC to 2027-02-04 16:30 UTC
    Logged 2026-11-06 17:29 UTC in IPng Networks Halloumi2027h1, entry 389,371,985
    SHA-256 43a29f57524a2afd78a160335d3b18092ef6107e29eae692af79b9c14c46827f
    Public key SHA-256 923c1897add5a4ecf9a0fb448443fc4f1ba3cdcaa84fb23dedf10ef999cd3040
    Addresses
    104.21.86.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.250, 172.67.138.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    teveluxor.club
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:33 UTC

    Suggest a correction

  40. vornexaltiqra.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    vornexaltiqra.com
    First seen
    2026-11-06 17:31 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-06 16:30 UTC to 2027-02-04 16:30 UTC
    Logged 2026-11-06 17:28 UTC in IPng Networks Gouda2027h1, entry 336,566,497
    SHA-256 59d36efbc598fc6ab8cc7ddff5a0b7d3d393193ef9d7bddc61ee83bb47cbb5ea
    Public key SHA-256 2ddd54adfaba3d3cecf746df1f9de8cfaed4923e57d3a38be0c1771a14de8e50
    Addresses
    104.21.77.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.107, 172.67.207.44): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vornexaltiqra.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:33 UTC

    Suggest a correction

  41. www.eng-ondofinance.com US · AS13335 · Cloudflare, Inc.4 addressesOndo Finance
    ListedCloudflareUnder eng-ondofinance.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.eng-ondofinance.com
    First seen
    2026-11-06 17:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask, listing eng-ondofinance.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-06 16:29 UTC to 2027-02-04 16:29 UTC
    Logged 2026-11-06 17:28 UTC in Google PlumbersArms2027h1, entry 647,525,304
    SHA-256 26b7fbe50d7702d275ba681bc3cf9d3061a67917f8995c1d54c049027c8a245b
    Public key SHA-256 806d68c62318f02f8431cc8b605abd9f44cebc54ae7a4636a6df1fd55883a668
    Brand
    Ondo Finance
    Addresses
    104.21.51.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:be9c
    2606:4700:3037::6815:33e2
    Cloudflare
    Cloudflare (104.21.51.226, 172.67.190.156): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eng-ondofinance.com
    Registered
    2026-08-18 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:35 UTC

    Suggest a correction

  42. www.spotffyapk.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder spotffyapk.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.spotffyapk.com
    First seen
    2026-11-06 17:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask, listing spotffyapk.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-06 16:30 UTC to 2027-02-04 16:30 UTC
    Logged 2026-11-06 17:29 UTC in IPng Networks Gouda2027h1, entry 336,574,298
    SHA-256 8afe0e5d736b33c20de59aa78d3e2f27a8d02420fda25596577e82b87fea41e6
    Public key SHA-256 79582b0afeae4fb220614b709cc8ff80c2e04a8c60caefda7d6eafb7101689a1
    Addresses
    104.21.25.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.133.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.86, 172.67.133.228): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spotffyapk.com
    Registered
    2026-03-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 07:45 UTC

    Suggest a correction

  43. bifrostdesktops.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bifrostdesktops.com
    First seen
    2026-11-06 17:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:21 UTC to 2027-02-04 17:19 UTC
    Logged 2026-11-06 17:21 UTC in Google ParcelYard2027h1, entry 647,091,369
    SHA-256 f4166d90bdd8289cca36ab1e2a6fc1f16675858ddc4a523bcb79e03e4ab13e3b
    Public key SHA-256 412646d037d26dce9ed27428c30f25021695e58d3b518374bcfa317e78bcf729
    Addresses
    104.21.76.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.61, 172.67.190.85): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bifrostdesktops.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:28 UTC

    Suggest a correction

  44. docs.octra.org US · AS13335 · Cloudflare, Inc.3 addresses
    ReportedCloudflareUnder octra.org, reported by PhishDestroyMX presentSPF -allDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    docs.octra.org
    First seen
    2026-11-06 17:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy, listing octra.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-06 16:26 UTC to 2027-02-04 16:26 UTC
    Logged 2026-11-06 17:24 UTC in IPng Networks Gouda2027h1, entry 336,540,535
    SHA-256 68112da2458758294083ce6212a75d1f25923ceb30ae0f9b0673fd7b9a666172
    Public key SHA-256 6b82938a57a53fbf4db6d04bf1885315cf4d99d5f66618e888be0b1b86e19ee2
    PhishDestroy
    Addresses
    104.26.14.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.26.15.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.73.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.26.14.236, 104.26.15.236, 172.67.73.170): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    octra.org
    Registered
    2022-11-05 · GoDaddy.com, LLC
    MX
    Receives mail at mx.zoho.eu, mx2.zoho.eu, mx3.zoho.eu
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 07:24 UTC

    Suggest a correction

  45. jxpbar.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    jxpbar.xyz
    First seen
    2026-11-06 17:26 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:23 UTC to 2027-02-04 17:21 UTC
    Logged 2026-11-06 17:23 UTC in DigiCert Wyvern2027h1, entry 431,540,124
    SHA-256 5e499f8f76f16830d8b33151b4aab25bdc8ca8cd7e1398b12b3e07a2839cd90e
    Public key SHA-256 83b21624cd15e2101a6225cd9a930bc6c40a0441a5fddcd5325b0484501e9e41
    Addresses
    104.21.40.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.107, 172.67.150.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    jxpbar.xyz
    Registered
    2026-09-08 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:51 UTC

    Suggest a correction

  46. lab-guide.auto-upgrade-analysis.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder auto-upgrade-analysis.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    lab-guide.auto-upgrade-analysis.com
    First seen
    2026-11-06 17:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask, listing auto-upgrade-analysis.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-06 16:24 UTC to 2027-02-04 17:23 UTC
    Logged 2026-11-06 17:24 UTC in Google PlumbersArms2027h1, entry 647,480,923
    SHA-256 54e3f7dddcb20e9ade0b7d3cf0eb0170ace312c387e739d4dc4301f6ca5bfc78
    Public key SHA-256 d5a8e86f649c81cdc2483169cdd2a1d0ae7449a8f6f2ba54d8d73a17a88180eb
    Addresses
    172.66.40.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.43.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.40.97, 172.66.43.159): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    auto-upgrade-analysis.com
    Registered
    2026-06-01 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 15:34 UTC

    Suggest a correction

  47. reply-accenture.us US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF all omittedDMARC policy none
    DetailsHide
    Hostname
    reply-accenture.us
    First seen
    2026-11-06 17:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-06 16:21 UTC to 2027-02-04 16:21 UTC
    Logged 2026-11-06 17:20 UTC in Google PlumbersArms2027h1, entry 647,431,101
    SHA-256 de42f222e904eecf17265c3b8fd85e001699175321ee7d75f1c324cb6b369137
    Public key SHA-256 3713239a89d9354eeb2398e03248e82e5bde8507c1450760cdec653196297a50
    PhishDestroy
    Addresses
    104.21.52.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:348a
    2606:4700:3031::ac43:c7f1
    Cloudflare
    Cloudflare (104.21.52.138, 172.67.199.241): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    reply-accenture.us
    MX
    Receives mail at emx.mail.ru
    SPF
    SPF record without an "all" mechanism
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-06 17:28 UTC

    Suggest a correction

  48. tevemirae.wiki US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tevemirae.wiki
    First seen
    2026-11-06 17:26 UTC
    Listing
    CERT Polska listed it 2026-07-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-06 16:26 UTC to 2027-02-04 16:26 UTC
    Logged 2026-11-06 17:25 UTC in IPng Networks Gouda2027h1, entry 336,545,514
    SHA-256 4aaca7aba6f0df327d5f5d1f185224aa297ee0c29caf35b7c650522007072646
    Public key SHA-256 76d8016570b4ce37ed2959fed939d19cd8e94d55d7660d85f219bfb25169abfd
    Addresses
    104.21.40.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.231, 172.67.157.147): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tevemirae.wiki
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:28 UTC

    Suggest a correction

  49. www.octra.org US · AS13335 · Cloudflare, Inc.3 addresses
    ReportedCloudflareUnder octra.org, reported by PhishDestroyMX presentSPF -allDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    www.octra.org
    First seen
    2026-11-06 17:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy, listing octra.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-06 16:26 UTC to 2027-02-04 16:26 UTC
    Logged 2026-11-06 17:24 UTC in IPng Networks Gouda2027h1, entry 336,540,535
    SHA-256 68112da2458758294083ce6212a75d1f25923ceb30ae0f9b0673fd7b9a666172
    Public key SHA-256 6b82938a57a53fbf4db6d04bf1885315cf4d99d5f66618e888be0b1b86e19ee2
    PhishDestroy
    Addresses
    104.26.14.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.26.15.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.73.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.26.14.236, 104.26.15.236, 172.67.73.170): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    octra.org
    Registered
    2022-11-05 · GoDaddy.com, LLC
    MX
    Receives mail at mx.zoho.eu, mx2.zoho.eu, mx3.zoho.eu
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 07:24 UTC

    Suggest a correction

  50. www.polandsale.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.polandsale.com
    First seen
    2026-11-06 17:26 UTC
    Listing
    CERT Polska listed it 2026-07-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:22 UTC to 2027-02-04 17:22 UTC
    Logged 2026-11-06 17:22 UTC in DigiCert Sphinx2027h1, entry 381,226,995
    SHA-256 01a40a4a8eaf634b851869d08b848604e3c314bc7519eb85b6bdecd6f8c5968b
    Public key SHA-256 b5e65c594e27972d4bda629f71ba0d80ce8c6e521caf8e0b0738b0bd6e226063
    Addresses
    104.18.13.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.13.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    polandsale.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:28 UTC

    Suggest a correction

  51. acesso-principal.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTankMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    acesso-principal.com
    First seen
    2026-11-06 17:21 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 15:56 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-06 16:18 UTC to 2027-02-04 16:18 UTC
    Logged 2026-11-06 17:16 UTC in Google PlumbersArms2027h1, entry 647,383,771
    SHA-256 14a4c7fa8b4b6201acea00285e6fb2b46dd91a206e9d6a3ba0aa190647732c57
    Public key SHA-256 f9ddb58728d1e1625ff2618ff384e449ed59c076cf5872523b335292ac47d8a1
    PhishTank
    PhishTank report #9424274
    Addresses
    104.21.53.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.95, 172.67.211.152): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    acesso-principal.com
    Registered
    2026-05-13 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:22 UTC

    Suggest a correction

  52. ai.laosji.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder laosji.net, reported by PhishDestroyMX absentSPF ~allDMARC policy noneRegistered 3 y ago
    DetailsHide
    Hostname
    ai.laosji.net
    First seen
    2026-11-06 17:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy, listing laosji.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-06 16:16 UTC to 2027-02-04 17:15 UTC
    Logged 2026-11-06 17:16 UTC in IPng Networks Gouda2027h1, entry 336,487,253
    SHA-256 c32a0667b76a056ad112dffd901afd4492faa55b8742ea2bbca2624f0077c099
    Public key SHA-256 a2d98d26c374a1898ec5c682bb3b1bb5d9d9ba3facc30601a51625e66a344cfd
    PhishDestroy
    Addresses
    104.21.63.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.225, 172.67.172.90): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    laosji.net
    Registered
    2023-07-19 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-06 08:36 UTC

    Suggest a correction

  53. bspl.at US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bspl.at
    First seen
    2026-11-06 17:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:17 UTC to 2027-02-04 17:15 UTC
    Logged 2026-11-06 17:17 UTC in Let's Encrypt Sycamore2027h1, entry 988,707,879
    SHA-256 4d891c821a7943b631383530953251bbbbf5dcaffe82ea15a18af84c8c2a8fd8
    Public key SHA-256 2906bd50ecd37e793d183b3ca528ae714061f097d8495fbf17de236b4efc0860
    PhishDestroy
    Addresses
    104.21.51.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.105 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.144, 172.67.181.105): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bspl.at
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:22 UTC

    Suggest a correction

  54. bursivex-ai-ro.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bursivex-ai-ro.com
    First seen
    2026-11-06 17:21 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-06 16:20 UTC to 2027-02-04 16:20 UTC
    Logged 2026-11-06 17:19 UTC in Geomys Tuscolo2027h1, entry 503,437,428
    SHA-256 75254c5b3b0a4f2fe6f8c1f16193057aea25ce2b0d9bfeed4b4fc15227bbc29e
    Public key SHA-256 089ef4d573abd04b2fe366ad8f0e612d04d8269c501a9e56dadf73178b5aa590
    Addresses
    104.21.24.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.183, 172.67.219.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bursivex-ai-ro.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:22 UTC

    Suggest a correction

  55. curren-gleam.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    curren-gleam.com
    First seen
    2026-11-06 17:21 UTC
    Listing
    CERT Polska listed it 2026-05-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:20 UTC to 2027-02-04 17:18 UTC
    Logged 2026-11-06 17:20 UTC in Google PlumbersArms2027h1, entry 647,427,167
    SHA-256 29a38a0a5e50d740c3e02a59091434888a92df3bf2b5aacb610e56baf46f59b5
    Public key SHA-256 9decaed2cc37453adf88fc0ab05952c84bbb035d204cd7e55915e0aaf13dff35
    Addresses
    104.21.15.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.15.18, 172.67.161.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    curren-gleam.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:22 UTC

    Suggest a correction

  56. flrelight-claim.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    flrelight-claim.com
    First seen
    2026-11-06 17:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-06 16:18 UTC to 2027-02-04 16:17 UTC
    Logged 2026-11-06 17:16 UTC in Google PlumbersArms2027h1, entry 647,378,621
    SHA-256 5a3e0d5c19ca304abe100f52a24100a953010cc7e364c1c434bff9065dd692cb
    Public key SHA-256 cced5825253c5c99cc85ad82aeee0d435816b74ca3e762ec1bd68a0519f15673
    Addresses
    104.21.5.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.254, 172.67.134.25): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    flrelight-claim.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:22 UTC

    Suggest a correction

  57. hdstreamz.info US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    hdstreamz.info
    First seen
    2026-11-06 17:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-06 00:00 UTC to 2027-02-04 17:15 UTC
    Logged 2026-11-06 17:16 UTC in IPng Networks Halloumi2027h1, entry 389,271,485
    SHA-256 0bcb5a91929506f529550e4653c7d614903cd50838ebbc9ac548089c53901ad0
    Public key SHA-256 63b16b5d71a6657d506b660fa7484d171cc5b7b055e2605be0ab20f2f8847a64
    PhishDestroy
    Addresses
    104.21.0.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.0.173, 172.67.128.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hdstreamz.info
    Registered
    2026-11-06 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:51 UTC

    Suggest a correction

  58. teecopam.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    teecopam.shop
    First seen
    2026-11-06 17:21 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-06 16:17 UTC to 2027-02-04 16:17 UTC
    Logged 2026-11-06 17:15 UTC in Google ParcelYard2027h1, entry 647,010,836
    SHA-256 30e4bf45ac134de22da9c4b5c61a5dbfec758a3205a9cebba2d36d8b27090ce9
    Public key SHA-256 0af9f91cda9aa8e0f2081a89037cb433548fa82fa515e9c8be1faeefb82f8794
    Addresses
    104.21.0.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.0.216, 172.67.128.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    teecopam.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:22 UTC

    Suggest a correction

  59. www.guiadecarrosbrasil.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder guiadecarrosbrasil.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.guiadecarrosbrasil.com
    First seen
    2026-11-06 17:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy, listing guiadecarrosbrasil.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-06 16:21 UTC to 2027-02-04 16:21 UTC
    Logged 2026-11-06 17:19 UTC in Google ParcelYard2027h1, entry 647,061,958
    SHA-256 7a8830f59ea277b0e005b95d84df50622c6dc1ce008cf50123fca67f8a0fb5e4
    Public key SHA-256 f9e8558e901029215fd006f585484224665e2b5d8645c4eca5b537de00926cf0
    PhishDestroy
    Addresses
    104.21.28.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.82, 172.67.170.107): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    guiadecarrosbrasil.com
    Registered
    2026-03-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:22 UTC

    Suggest a correction

  60. xopan.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    xopan.pro
    First seen
    2026-11-06 17:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-06 16:18 UTC to 2027-02-04 16:18 UTC
    Logged 2026-11-06 17:17 UTC in Geomys Tuscolo2027h1, entry 503,418,910
    SHA-256 2d17adaeced7583cbe5fd0e67838799bb0bf825b803dc7dec9a40f42c285d31b
    Public key SHA-256 afb5ae7a95a9017706f3e247324ef9438b63283983416895ad99fd04284223c4
    PhishDestroy
    Addresses
    104.21.58.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.159.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.115, 172.67.159.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xopan.pro
    Registered
    2026-11-06 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:51 UTC

    Suggest a correction

  61. bjvsfd.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    bjvsfd.xyz
    First seen
    2026-11-06 17:16 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:10 UTC to 2027-02-04 17:09 UTC
    Logged 2026-11-06 17:10 UTC in DigiCert Wyvern2027h1, entry 431,454,324
    SHA-256 6a84a2b8d85d7f17b6709362bcebdb6607ceba9e06dd87a2aa314f86c809d8f2
    Public key SHA-256 f8164cd672ce7785a3b975050c6b17a12e6f0fc71ae1f8e2791487c5e1d8eb7a
    Addresses
    104.21.96.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.96.120, 172.67.180.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bjvsfd.xyz
    Registered
    2026-09-08 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:51 UTC

    Suggest a correction

  62. endrover.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    endrover.com
    First seen
    2026-11-06 17:16 UTC
    Listing
    CERT Polska listed it 2026-05-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-06 16:12 UTC to 2027-02-04 16:12 UTC
    Logged 2026-11-06 17:11 UTC in Google ParcelYard2027h1, entry 646,942,709
    SHA-256 9fac0215a955770ce616928abb490931afd4e604fbcd1f52342dcd536ce653fa
    Public key SHA-256 8bdc3cf43304aba071baac3e43f93bdf51194dc0b6f1bd9f512c714e3b1146e0
    Addresses
    104.21.60.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.60.252, 172.67.203.145): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    endrover.com
    MX
    Receives mail at _dc-mx.dde64e659e04.endrover.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-06 17:17 UTC

    Suggest a correction

  63. faelthornebrook.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    faelthornebrook.com
    First seen
    2026-11-06 17:16 UTC
    Listing
    USOM listed it 2026-09-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 17:23 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:11 UTC to 2027-02-04 17:09 UTC
    Logged 2026-11-06 17:11 UTC in IPng Networks Halloumi2027h1, entry 389,229,383
    SHA-256 284a1fadd082c236e2d1ad8e25fc0885128f7c48a6322865143bd00254a06818
    Public key SHA-256 cf5472451842927d4bdf91c810c35b7b2ef2a328105f7a643cf5f3000e5e7762
    Addresses
    104.21.30.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.30.118, 172.67.172.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    faelthornebrook.com
    MX
    Receives mail at faelthornebrook-com.mail.protection.outlook.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:17 UTC

    Suggest a correction

  64. iqxgee.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    iqxgee.xyz
    First seen
    2026-11-06 17:16 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:10 UTC to 2027-02-04 17:08 UTC
    Logged 2026-11-06 17:10 UTC in Geomys Tuscolo2027h1, entry 503,350,566
    SHA-256 67f8fa8d85841892f6181387e459d8d0e9d241856ce0a7bfa19ec6f401ff4ff3
    Public key SHA-256 68aaa63e5a60c52ddb8d31055d695759ee5f0899429707c98ce106d8d54d9efa
    Addresses
    104.21.91.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.239, 172.67.181.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    iqxgee.xyz
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:17 UTC

    Suggest a correction

  65. jupjup.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    jupjup.org
    First seen
    2026-11-06 17:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-06 16:15 UTC to 2027-02-04 16:15 UTC
    Logged 2026-11-06 17:14 UTC in Google PlumbersArms2027h1, entry 647,351,021
    SHA-256 532a0e450f876c50cf6c139b011b0cbbfb2af821cad0d75650b9f6bc09b30323
    Public key SHA-256 0a80a0ab472ffee6c8338f80b995ed5ed8b70e7a50041c38a43aa0ba7a542820
    PhishDestroy
    Addresses
    104.21.51.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.44, 172.67.220.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    jupjup.org
    Registered
    2026-11-06 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  66. qtjkx.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    qtjkx.com
    First seen
    2026-11-06 17:16 UTC
    Listing
    CERT Polska listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-06 16:16 UTC to 2027-02-04 16:16 UTC
    Logged 2026-11-06 17:15 UTC in IPng Networks Gouda2027h1, entry 336,480,816
    SHA-256 564cc01979185eeaf2c96b983efad0bd850c308ce7372e7e39e30fb135adc5e8
    Public key SHA-256 1e5d9998c73800cb35ff0c6482cbb9a7c5f668aef5650ff0e44e135c1f2ea60e
    Addresses
    104.21.73.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.196, 172.67.148.203): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qtjkx.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:17 UTC

    Suggest a correction

  67. tevemirae.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tevemirae.shop
    First seen
    2026-11-06 17:16 UTC
    Listing
    CERT Polska listed it 2026-06-06 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-06 16:14 UTC to 2027-02-04 16:14 UTC
    Logged 2026-11-06 17:13 UTC in Google PlumbersArms2027h1, entry 647,332,942
    SHA-256 01bc8219184a51a6b5f5d8afd7a79a5a24dd5d6c0c1ba8cc8e0a0c5431fb46f5
    Public key SHA-256 f84897d7772b097b3e7a7c59ec23110c63adf99b05b68c344bfeb5fc1fff2a01
    Addresses
    104.21.22.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.136, 172.67.205.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tevemirae.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:17 UTC

    Suggest a correction

  68. trcezasorgu.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    trcezasorgu.org
    First seen
    2026-11-06 17:16 UTC
    Listing
    USOM listed it 2026-07-31 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 17:23 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-06 16:15 UTC to 2027-02-04 16:15 UTC
    Logged 2026-11-06 17:14 UTC in Google PlumbersArms2027h1, entry 647,345,703
    SHA-256 0616d27dfe8a5b91796cec411d24d765af9067e130b84a6ca728197596afe59f
    Public key SHA-256 158b72e0f8288dd802e35834663a471a04318211c92321101a93ebb13a1b1126
    Addresses
    104.21.77.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.226, 172.67.212.34): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trcezasorgu.org
    Registered
    2026-11-06 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  69. wffpd.website US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    wffpd.website
    First seen
    2026-11-06 17:16 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-06 16:12 UTC to 2027-02-04 16:12 UTC
    Logged 2026-11-06 17:10 UTC in Let's Encrypt Willow2027h1, entry 972,076,533
    SHA-256 5891186f863d07451416d766f0d58b3323d2764c7e9a2db7f2e0cc84e9d0cc54
    Public key SHA-256 b95166ebcb625c30c38a79ba1d8f15a072a4964f50204cf0a5a0cf9de2c8dc93
    Addresses
    104.21.68.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.252, 172.67.200.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wffpd.website
    Registered
    2026-03-15 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  70. xpvxdh.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    xpvxdh.xyz
    First seen
    2026-11-06 17:16 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:12 UTC to 2027-02-04 17:09 UTC
    Logged 2026-11-06 17:12 UTC in Geomys Tuscolo2027h1, entry 503,366,746
    SHA-256 5e5f243319c0ff732459ef23febb21c348713c7b6e8647a419776579a292e529
    Public key SHA-256 a42695ea58c5a9ec6adae61cd8de4741866626605b0fe9adbd141f1b888da216
    Addresses
    104.21.23.190 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.23.190, 172.67.212.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xpvxdh.xyz
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:17 UTC

    Suggest a correction

  71. bmeruw.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bmeruw.xyz
    First seen
    2026-11-06 17:10 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:08 UTC to 2027-02-04 17:07 UTC
    Logged 2026-11-06 17:09 UTC in Google ParcelYard2027h1, entry 646,910,818
    SHA-256 63597c8e96d32dafe903814783c3fd95f38d956e6fb556f19dc252f318eb8a0e
    Public key SHA-256 34a03f78e4d49336c47462eed5e5c3d74c70891e782e1f41d3825612c13f005b
    Addresses
    104.21.19.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.18, 172.67.184.117): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bmeruw.xyz
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:12 UTC

    Suggest a correction

  72. lgdvz.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    lgdvz.com
    First seen
    2026-11-06 17:10 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:06 UTC to 2027-02-04 17:04 UTC
    Logged 2026-11-06 17:06 UTC in DigiCert Sphinx2027h1, entry 381,116,520
    SHA-256 8fe8835c739b488bef6f6911e73b28561bc96c6a824743e1a0fb2af3466da062
    Public key SHA-256 ad17eeaef07b2db49741c00fed838240ef99a89aea626ccaa7375df49bbb5ef6
    Addresses
    104.21.64.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.64.137, 172.67.151.52): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lgdvz.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:12 UTC

    Suggest a correction

  73. penguish.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    penguish.app
    First seen
    2026-11-06 17:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:08 UTC to 2027-02-04 17:07 UTC
    Logged 2026-11-06 17:08 UTC in DigiCert Wyvern2027h1, entry 431,440,195
    SHA-256 a33e246132189fdf0eb31a32410e4072ec917e20520773356b9ab4385863d377
    Public key SHA-256 83bf6b5169e833f207b919f1991fbe6b1048225003ea998819e7500754a5cb86
    PhishDestroy
    Addresses
    104.21.2.214 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.214, 172.67.129.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    penguish.app
    Registered
    2026-07-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  74. weltroute24.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    weltroute24.com
    First seen
    2026-11-06 17:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:09 UTC to 2027-02-04 17:07 UTC
    Logged 2026-11-06 17:09 UTC in Google ParcelYard2027h1, entry 646,915,696
    SHA-256 50d015ec31c481f1ac24e0d24c141943d9af6afb1b9f6c8c14243223cd7415fc
    Public key SHA-256 0798ee3b7a3d073cd9d565994c1d4fc8be6499c6ea26c5828f99dfe4365fc7b6
    PhishDestroy
    Addresses
    104.21.55.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.194, 172.67.172.110): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    weltroute24.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:12 UTC

    Suggest a correction

  75. asterextrade.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    asterextrade.com
    First seen
    2026-11-06 17:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:04 UTC to 2027-02-04 17:03 UTC
    Logged 2026-11-06 17:04 UTC in IPng Networks Halloumi2027h1, entry 389,162,913
    SHA-256 eb9b6ddaac0276b3744960c48a61682064e2c5617d7643c069cdcd35da1207a1
    Public key SHA-256 4a146b739fe3c54d65e13f22f005746e4702a36705682214cbae05696fd0e047
    Addresses
    104.21.41.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.41.203, 172.67.167.36): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    asterextrade.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:07 UTC

    Suggest a correction

  76. cashcatstoken.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    cashcatstoken.live
    First seen
    2026-11-06 17:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:03 UTC to 2027-02-04 17:01 UTC
    Logged 2026-11-06 17:03 UTC in Geomys Tuscolo2027h1, entry 503,269,467
    SHA-256 f02ef28ff351ce03bbe2eb643985b7eedfe1b153befbbfecf29e6b16ead5d39b
    Public key SHA-256 6f4f03e8bad0d384dc9829fc9b7cbf455cf7cb674f0b6f4c06473131f4cb09ce
    Addresses
    104.21.95.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.60, 172.67.143.88): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cashcatstoken.live
    Registered
    2026-07-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:51 UTC

    Suggest a correction

  77. ftp.odin.tools US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder odin.tools, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 23 mo ago
    DetailsHide
    Hostname
    ftp.odin.tools
    First seen
    2026-11-06 17:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy, listing odin.tools and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:03 UTC to 2027-02-04 17:03 UTC
    Logged 2026-11-06 17:03 UTC in Google PlumbersArms2027h1, entry 647,198,544
    SHA-256 78fe11becbbd5c15635739695da3061055d66ac1ea08f0177c1c76348dd44732
    Public key SHA-256 ddd6167273778a3308324d63ee572d428e6d975e8f541d2310ec53efbdaf16ff
    PhishDestroy
    Addresses
    104.21.27.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.119, 172.67.169.68): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    odin.tools
    Registered
    2024-12-17 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-06 07:53 UTC

    Suggest a correction

  78. futurec.buzz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    futurec.buzz
    First seen
    2026-11-06 17:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:02 UTC to 2027-02-04 17:01 UTC
    Logged 2026-11-06 17:02 UTC in DigiCert Sphinx2027h1, entry 381,079,313
    SHA-256 44a546349050f10a444e66992a0126952ba7de3e7b204c283b8329bf75e8ad9c
    Public key SHA-256 eebb007026359a7667f3ad00d77c3b4d069ea730e5d74f0e3b2b3060381ae9c5
    Addresses
    104.21.33.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.108, 172.67.161.223): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    futurec.buzz
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:07 UTC

    Suggest a correction

  79. gryvongridai.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    gryvongridai.net
    First seen
    2026-11-06 17:05 UTC
    Listing
    CERT Polska listed it 2026-07-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:02 UTC to 2027-02-04 17:00 UTC
    Logged 2026-11-06 17:02 UTC in Google ParcelYard2027h1, entry 646,815,577
    SHA-256 1b1321c5f9cc8941bc8ef499da42a5b050271a3a47f0d5e91011fc43f770af74
    Public key SHA-256 a73f4b1f0fc4f52d607f913a01f819180b978373838f20e8b23b7d36ea382fb1
    Addresses
    104.21.94.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.94.127, 172.67.135.252): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gryvongridai.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:07 UTC

    Suggest a correction

  80. kipibz.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    kipibz.xyz
    First seen
    2026-11-06 17:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:03 UTC to 2027-02-04 17:01 UTC
    Logged 2026-11-06 17:03 UTC in Google PlumbersArms2027h1, entry 647,184,628
    SHA-256 07a66ca6a52116c4a6df543c1592c05bb342c005d0af87fd03a7ac59ed950184
    Public key SHA-256 8820e3f963439c7ea1316a9d706b582bdd340ef804b3fb497c77e65583943db2
    Addresses
    104.21.46.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.65, 172.67.136.11): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kipibz.xyz
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:07 UTC

    Suggest a correction

  81. neopan.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    neopan.shop
    First seen
    2026-11-06 17:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 16:04 UTC to 2027-02-04 17:02 UTC
    Logged 2026-11-06 17:04 UTC in Google PlumbersArms2027h1, entry 647,201,533
    SHA-256 e4c37d45518e5f32e142a457de9d37960cee41b098ece42bcdbe6c479ef248ff
    Public key SHA-256 71505de6dd2d8a6ced6424512efcb1116dbd760a1532c31c51111e15ab547d57
    Addresses
    104.21.9.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.34, 172.67.141.107): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    neopan.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:07 UTC

    Suggest a correction

  82. cialis44.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    cialis44.shop
    First seen
    2026-11-06 17:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-06 15:59 UTC to 2027-02-04 15:59 UTC
    Logged 2026-11-06 16:57 UTC in Google ParcelYard2027h1, entry 646,745,112
    SHA-256 19e8c9d09532498622a62e68c20a9efc1ca94256ef8fd520bd9c918715a11105
    Public key SHA-256 a7a966f0c4b81df25677caa6765a5d7567f926b3b16e279c649910d0842cf0aa
    Addresses
    104.21.10.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.60, 172.67.162.144): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cialis44.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:02 UTC

    Suggest a correction

  83. eng-suiet-trezor.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesTrezor
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    eng-suiet-trezor.pages.dev
    First seen
    2026-11-06 17:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 15:59 UTC to 2027-02-04 16:58 UTC
    Logged 2026-11-06 16:59 UTC in Let's Encrypt Sycamore2027h1, entry 988,250,887
    SHA-256 33feae873f45594580e22670366172c15a6aa7d67f12c221636d83988390d789
    Public key SHA-256 69720c7e1186b0875d787ec22ac907645a6bc102c957191a3f55e53d8d2dc95a
    Brand
    Trezor
    Addresses
    172.66.44.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cb8
    2606:4700:310c::ac42:2f48
    Cloudflare
    Cloudflare (172.66.44.184, 172.66.47.72): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  84. pumpswapdex.info US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    pumpswapdex.info
    First seen
    2026-11-06 17:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 15:59 UTC to 2027-02-04 16:57 UTC
    Logged 2026-11-06 16:59 UTC in DigiCert Wyvern2027h1, entry 431,344,185
    SHA-256 4af01c34a8fd614417ac769dd028769ccc6b862a12f33af73b5e5da1b27e590e
    Public key SHA-256 1e3c0294188ff81ae5452523cb6a9655a1b95e1d3b754a5c63898fe69914136e
    PhishDestroy
    Addresses
    104.21.38.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.52, 172.67.219.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pumpswapdex.info
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:02 UTC

    Suggest a correction

  85. 76653333.com US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    76653333.com
    First seen
    2026-11-06 16:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 15:53 UTC to 2027-02-04 16:50 UTC
    Logged 2026-11-06 16:53 UTC in Google ParcelYard2027h1, entry 646,690,071
    SHA-256 ab345f15c88b3527c3eabe57467e06641edcf3e17c07637fca2a9c01c248c251
    Public key SHA-256 a8acff977a6367dedf98cd963c3b856a81a284c28124a7f88e90cfba52fbf9bd
    PhishDestroy
    Addresses
    23.145.152.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (23.145.152.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    76653333.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:02 UTC

    Suggest a correction

  86. concaskarbez.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    concaskarbez.org
    First seen
    2026-11-06 16:57 UTC
    Listing
    CERT Polska listed it 2026-07-29 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-06 15:56 UTC to 2027-02-04 15:56 UTC
    Logged 2026-11-06 16:54 UTC in Google PlumbersArms2027h1, entry 647,065,206
    SHA-256 7afcf6dce91b33d5ce698f14f8dccdbb50ccb51c8712876185c777577f4e35d8
    Public key SHA-256 9feae15aa45d218576d1c1fa4a65b7525b68a315d2344acf45b42dc5b589f5df
    Addresses
    104.21.80.212 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.212, 172.67.153.213): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    concaskarbez.org
    Registered
    2026-05-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  87. portallogonapp.casa US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    portallogonapp.casa
    First seen
    2026-11-06 16:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 15:55 UTC to 2027-02-04 16:49 UTC
    Logged 2026-11-06 16:55 UTC in Google PlumbersArms2027h1, entry 647,070,242
    SHA-256 b22bc6036eb3ee191b231e8becbb520be013a4b67883d112142cbf8db1a67087
    Public key SHA-256 a949e77ae5486c55c3ac40d0436de163b49a8135aacc13430fc18b34a1f31eee
    Addresses
    104.21.77.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.19, 172.67.203.137): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    portallogonapp.casa
    Registered
    2026-09-08 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:02 UTC

    Suggest a correction

  88. tevehyrex.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tevehyrex.work
    First seen
    2026-11-06 16:57 UTC
    Listing
    CERT Polska listed it 2026-06-06 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-06 15:55 UTC to 2027-02-04 15:55 UTC
    Logged 2026-11-06 16:54 UTC in Google ParcelYard2027h1, entry 646,703,357
    SHA-256 1374c292f0da4b03f4e56461cbaa8bb470b63c7ac7a0c3fa0f6729cd68d3e867
    Public key SHA-256 ff9a0500fe6a2887d18214c5d90935bd9980725e1fcd35f308d0177d91c55790
    Addresses
    104.21.42.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.44, 172.67.199.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tevehyrex.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:02 UTC

    Suggest a correction

  89. uniswapdex.win US · AS13335 · Cloudflare, Inc.4 addressesUniswap
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    uniswapdex.win
    First seen
    2026-11-06 16:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 15:56 UTC to 2027-02-04 16:54 UTC
    Logged 2026-11-06 16:56 UTC in Geomys Tuscolo2027h1, entry 503,194,975
    SHA-256 06ec9309a534d83734ddda68d96df26f9ae53f8ddb25e7f6ca80a20dce9a11b4
    Public key SHA-256 fa302317c352275d0fd9ef1ab7f442a3bf1a46940fd691db18f7f7a2c285ae35
    Brand
    Uniswap
    Addresses
    104.21.54.10 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:360a
    2606:4700:3036::ac43:de31
    Cloudflare
    Cloudflare (104.21.54.10, 172.67.222.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    uniswapdex.win
    Registered
    2026-07-11 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:02 UTC

    Suggest a correction

  90. bezpiec-204819.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    bezpiec-204819.eu.cc
    First seen
    2026-11-06 16:51 UTC
    Listing
    CERT Polska listed it 2026-09-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-06 15:49 UTC to 2027-02-04 16:46 UTC
    Logged 2026-11-06 16:50 UTC in Google ParcelYard2027h1, entry 646,644,167
    SHA-256 51f919f518b312aadbbd88d6cbaa3847c1bb772b07dcfacde5706408ff643bbd
    Public key SHA-256 a56300438c16f2436b2229b8a41feca191858f19c04feb38784bcd93d5ab678a
    Addresses
    104.21.85.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.220, 172.67.211.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  91. calarixtraderengine-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    calarixtraderengine-com.financecryptoworld.com
    First seen
    2026-11-06 16:51 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-06 15:46 UTC to 2027-02-04 16:45 UTC
    Logged 2026-11-06 16:46 UTC in DigiCert Wyvern2027h1, entry 431,216,701
    SHA-256 5d06704c89578d357ad49900eea707f7da890e251902d20dcdf7f7f475c94840
    Public key SHA-256 699157ad9a45183294087d7a2e694694c73dc68c3018dc278d229229c103400f
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:12 UTC

    Suggest a correction

  92. gldi.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    gldi.online
    First seen
    2026-11-06 16:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 15:47 UTC to 2027-02-04 16:45 UTC
    Logged 2026-11-06 16:47 UTC in DigiCert Sphinx2027h1, entry 380,945,949
    SHA-256 3cf09bbfd405396eb0a33f774834c455b3e72e98ae1afe7b874687de4667cadf
    Public key SHA-256 b3ea5a9453865d8fa2f84890e0b90ac638c49c25ad88267eba13da70359e8e55
    Addresses
    104.21.49.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.49.72, 172.67.160.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gldi.online
    Registered
    2026-01-15 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  93. hongsuanzhu.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    hongsuanzhu.com
    First seen
    2026-11-06 16:51 UTC
    Listing
    CERT Polska listed it 2026-09-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 15:48 UTC to 2027-02-04 16:47 UTC
    Logged 2026-11-06 16:48 UTC in DigiCert Wyvern2027h1, entry 431,238,498
    SHA-256 57b26e31c4093481559375d3ef95d8740f0fc2bebe7227dc724affefddacc0dd
    Public key SHA-256 ab628133fab86728a5cdaa8567fdf446d13c9e85883e7e9921b35ae061629623
    Addresses
    104.21.4.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.101, 172.67.153.252): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hongsuanzhu.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 16:57 UTC

    Suggest a correction

  94. ledgerr-live-us.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    ledgerr-live-us.pages.dev
    First seen
    2026-11-06 16:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 15:50 UTC to 2027-02-04 16:48 UTC
    Logged 2026-11-06 16:50 UTC in Google ParcelYard2027h1, entry 646,655,218
    SHA-256 5364ac27aade3429dd87acf92db23685f1321f97d6457dd988054dc330d47628
    Public key SHA-256 00d06bfa010aa483ade9b3f73b839e5719ecf646d6a35d4ed00bbbf591778e27
    Addresses
    172.66.45.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.45, 172.66.46.211): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  95. lgdvu.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    lgdvu.com
    First seen
    2026-11-06 16:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 13:33 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 15:49 UTC to 2027-02-04 16:48 UTC
    Logged 2026-11-06 16:49 UTC in Let's Encrypt Sycamore2027h1, entry 988,015,836
    SHA-256 a1ddbeee473a5fb0ca6c83568f5b19ff3045df8fefc178d62e921e82f7a024b4
    Public key SHA-256 d3fbfb53c147cb7b4368ebff8d8f270e409cb0fa1c476513373984984b7c2f26
    Addresses
    104.21.18.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.201, 172.67.183.83): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lgdvu.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 16:57 UTC

    Suggest a correction

  96. lucdigitholm.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    lucdigitholm.com
    First seen
    2026-11-06 16:51 UTC
    Listing
    CERT Polska listed it 2026-07-27 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-06 15:50 UTC to 2027-02-04 15:50 UTC
    Logged 2026-11-06 16:49 UTC in Geomys Tuscolo2027h1, entry 503,130,284
    SHA-256 4cd9c85432834562c996df53a6265f043c86308c814b4f2875ab802210d02d39
    Public key SHA-256 1188834bb382b70dade0705910c89b555665b93e4fa28372c3486c7087ac378c
    Addresses
    104.21.18.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.119, 172.67.181.206): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lucdigitholm.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 16:57 UTC

    Suggest a correction

  97. nairabot-ai-system-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    nairabot-ai-system-com.financecryptoworld.com
    First seen
    2026-11-06 16:51 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 15:46 UTC to 2027-02-04 16:46 UTC
    Logged 2026-11-06 16:46 UTC in Google PlumbersArms2027h1, entry 646,963,522
    SHA-256 350206b120e6da9f88fddd579846ab2a4a45bb6fd3f092a00c839e34b8ad008f
    Public key SHA-256 0d950fdd56493a8941dea5d813edd8abe6322a139b1381da87698b0f27f22be6
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:12 UTC

    Suggest a correction

  98. sso-robinhood-lgn.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesRobinhood
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    sso-robinhood-lgn.pages.dev
    First seen
    2026-11-06 16:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 15:51 UTC to 2027-02-04 16:49 UTC
    Logged 2026-11-06 16:51 UTC in Google PlumbersArms2027h1, entry 647,018,646
    SHA-256 28521a27586361ec82903f85afe48cc573c62644aa812cc036d88b4b427846a4
    Public key SHA-256 e18c614dc9ea81e1ce900a1f078f6fa9cd294a52a10d3c7739771fb7cb866ddc
    Brand
    Robinhood
    Addresses
    172.66.45.10 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2d0a
    2606:4700:310c::ac42:2ef6
    Cloudflare
    Cloudflare (172.66.45.10, 172.66.46.246): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  99. stakeworld.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    stakeworld.cc
    First seen
    2026-11-06 16:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-06 11:53 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 15:50 UTC to 2027-02-04 16:48 UTC
    Logged 2026-11-06 16:50 UTC in Let's Encrypt Willow2027h1, entry 971,794,862
    SHA-256 4384e2bd20dc0d2b1b3253c4230b1b9ad6a9acc2564b0598ac76181fb417b313
    Public key SHA-256 c68fc33630e7a6bce67a700b43bb2c2edd0d0c22ca66d93aa3f6595bad11f6ca
    PhishDestroy
    Addresses
    104.21.18.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.64, 172.67.180.181): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    stakeworld.cc
    Registered
    2026-07-11 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  100. api.elavortraderplatform-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.elavortraderplatform-com.financecryptoworld.com
    First seen
    2026-11-06 16:47 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-06 15:23 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-06 15:44 UTC to 2027-02-04 16:40 UTC
    Logged 2026-11-06 16:44 UTC in Let's Encrypt Sycamore2027h1, entry 987,887,351
    SHA-256 1d042246c46c4607000159399d85a121fcd996d0308fbc8c9cfa55a290d3a2ec
    Public key SHA-256 15cbd8fc9da0b5966c37ea91d5a175a6facd44b9200ba0fc305c7d2d303fb97e
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:12 UTC

    Suggest a correction

Showing 1–100 of 2,785 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources