Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-07 06:26 UTC
Certificate-log entries · 24 h
322.3M
from 84 distinct feeds
Unique certificates · 24 h
32.4M
each reviewed
Names resolved · 24 h
20.7M
15.2M with an address
Findings · 24 h
6,020
231 of 1,061 brands targeted

2,820 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. arcnetwork.ltd US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    arcnetwork.ltd
    First seen
    2026-11-07 06:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 05:24 UTC to 2027-02-05 05:24 UTC
    Logged 2026-11-07 06:22 UTC in Let's Encrypt Sycamore2027h1, entry 1,005,806,306
    SHA-256 a3bd9f86f5af8c6c974482979814dd0dfb53cdde659d146f5fe414aa7d456a96
    Public key SHA-256 e37a568d6e7c9cdb6c5aaf6c1ad2586e75afc70278d75e618809d7c907429205
    Addresses
    104.21.7.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.7.129, 172.67.155.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    arcnetwork.ltd
    Registered
    2026-05-14 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  2. avsfilom.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    avsfilom.net
    First seen
    2026-11-07 06:26 UTC
    Listing
    USOM listed it 2026-09-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:27 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 05:22 UTC to 2027-02-05 06:20 UTC
    Logged 2026-11-07 06:22 UTC in Google PlumbersArms2027h1, entry 656,202,639
    SHA-256 7bbdf8fe145e1f94d71a185f4d8dd6ed5a4c03c05534d4682dcf9bc8824fbab4
    Public key SHA-256 e8efeaddee293029c1fc339f1c9f3be530ed29d5d9a12c3966c7abbeaf8716d2
    Addresses
    104.21.47.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.204, 172.67.172.117): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    avsfilom.net
    Registered
    2026-09-08 · Hosting Ukraine LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  3. moonwellfi.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    moonwellfi.site
    First seen
    2026-11-07 06:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 05:21 UTC to 2027-02-05 06:20 UTC
    Logged 2026-11-07 06:21 UTC in Let's Encrypt Sycamore2027h1, entry 1,005,790,690
    SHA-256 c6be4a55d9ca270fcd00dc1d1e8f737dfdea6fa08a5ea13f4333a124aef3aa90
    Public key SHA-256 d46645ef076be2b02be584891f2f37f9eff40a39ec06737dd030df2eaebac2fc
    Addresses
    104.21.90.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.26, 172.67.151.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    moonwellfi.site
    Registered
    2026-09-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  4. pikashow1.com.in US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    pikashow1.com.in
    First seen
    2026-11-07 06:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 05:21 UTC to 2027-02-05 06:19 UTC
    Logged 2026-11-07 06:21 UTC in Geomys Tuscolo2027h1, entry 510,846,903
    SHA-256 96d3be1348e09a0051db575a3bb64aab961ec82b78d965e59578b52e2bf6e181
    Public key SHA-256 25087efe6cd1fd51acbeae6c99f572862dc0454401b1574177a03932b2cf5d95
    Addresses
    104.21.89.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.17, 172.67.155.141): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pikashow1.com.in
    Registered
    2026-01-07 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  5. yermokov.su US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    yermokov.su
    First seen
    2026-11-07 06:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 05:22 UTC to 2027-02-05 05:22 UTC
    Logged 2026-11-07 06:20 UTC in Geomys Tuscolo2027h1, entry 510,844,025
    SHA-256 0487518e881cd27631fbc2d111b2ebe44d24b51f5911ffb77611f5f156a3da59
    Public key SHA-256 a72edaa3d9b644eea3a6f374d4adcb9cc5b8c33daca513178f679b6d7c301620
    PhishDestroy
    Addresses
    104.21.53.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.229, 172.67.219.123): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    yermokov.su
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:32 UTC

    Suggest a correction

  6. ledgercom-sttart.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    ledgercom-sttart.pages.dev
    First seen
    2026-11-07 06:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 05:19 UTC to 2027-02-05 06:17 UTC
    Logged 2026-11-07 06:19 UTC in Let's Encrypt Willow2027h1, entry 981,448,587
    SHA-256 bf9172776948295d55610860c0feb230a5eaea0b517dd7dd820ee8bdc8af51fc
    Public key SHA-256 b90dc5099803cc9b3f9de34d2626bb7859a6879f5c1ba3fdc0e0f7da69243189
    Addresses
    172.66.44.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.235, 172.66.47.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  7. llxocald.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    llxocald.xyz
    First seen
    2026-11-07 06:21 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 01:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-07 05:18 UTC to 2027-02-05 06:17 UTC
    Logged 2026-11-07 06:19 UTC in Sectigo Elephant2027h1, entry 759,256,754
    SHA-256 75b95127f2b9456d981dd98ea9781085c59f754b88697010fcc48e5d603fc982
    Public key SHA-256 f3f78381bd79df064b13d1431497797e80d671a32a909633f8003dddb2bc0940
    Addresses
    104.21.55.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.59, 172.67.145.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    llxocald.xyz
    Registered
    2025-12-30 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  8. mellifluousshopping.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    mellifluousshopping.online
    First seen
    2026-11-07 06:21 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 01:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 05:19 UTC to 2027-02-05 05:19 UTC
    Logged 2026-11-07 06:18 UTC in Let's Encrypt Willow2027h1, entry 981,436,276
    SHA-256 bd0072afe325eeea3a14b783697d244be45bc6a731288c10a1494b146760faaa
    Public key SHA-256 8541f4314ec343b9f3197e4b4db2176c333fbc4513054ce754f37dfe228ead61
    Addresses
    104.21.59.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.63, 172.67.216.159): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mellifluousshopping.online
    Registered
    2026-05-14 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  9. outlra.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    outlra.com
    First seen
    2026-11-07 06:21 UTC
    Listing
    CERT Polska listed it 2026-05-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 06:26 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 05:20 UTC to 2027-02-05 05:20 UTC
    Logged 2026-11-07 06:18 UTC in Geomys Tuscolo2027h1, entry 510,829,779
    SHA-256 1e385cd9b5b1c198dc62a4d201d85804a86bbb8b252d88aa7eebea624c7b603d
    Public key SHA-256 326c328e81395aaa31f48c027b9b4cbc2a51aadd4751256a88990cf500a2025e
    Addresses
    104.21.9.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.181, 172.67.143.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    outlra.com
    Registered
    2026-05-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 07:42 UTC

    Suggest a correction

  10. gambrex.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    gambrex.com
    First seen
    2026-11-07 06:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 05:15 UTC to 2027-02-05 05:15 UTC
    Logged 2026-11-07 06:14 UTC in Let's Encrypt Sycamore2027h1, entry 1,005,658,071
    SHA-256 53ccb4b2acdfff18e61c6d54f508825aa2a7abc46832022972ee774f9a01f07f
    Public key SHA-256 41830c8393056bf332bc9b7f92cc8841ae80cd25aa05364787ab5afa41b2a072
    Addresses
    104.21.84.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.242, 172.67.199.104): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gambrex.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:20 UTC

    Suggest a correction

  11. kalsarikannitshopping.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    kalsarikannitshopping.online
    First seen
    2026-11-07 06:16 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 01:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 05:12 UTC to 2027-02-05 05:12 UTC
    Logged 2026-11-07 06:10 UTC in Google PlumbersArms2027h1, entry 656,086,917
    SHA-256 6cddcfeb54af3506aaf3ef4fe34edb68726cdb8e5ee027152ecd0d3bf29543b0
    Public key SHA-256 33b9143e47c43ba9e1569e1719f237609552664af27d4259d77cbe0242efb964
    Addresses
    104.21.0.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.0.225, 172.67.128.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kalsarikannitshopping.online
    Registered
    2026-05-14 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  12. saylor-2026.us US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    saylor-2026.us
    First seen
    2026-11-07 06:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 05:13 UTC to 2027-02-05 06:12 UTC
    Logged 2026-11-07 06:13 UTC in IPng Networks Halloumi2027h1, entry 395,847,292
    SHA-256 d852020deeae873d3bcb42bb654921584776d7f52371d13425722a9a5d0c59ce
    Public key SHA-256 e3b9df49d93c4bd9c5d15ca68c7cfb10fc72f7db389ea3f9ad1098c10673d2ce
    Addresses
    104.21.33.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.112, 172.67.161.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    saylor-2026.us
    Registered
    2026-07-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  13. xertra.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    xertra.info
    First seen
    2026-11-07 06:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 05:13 UTC to 2027-02-05 05:13 UTC
    Logged 2026-11-07 06:11 UTC in Google PlumbersArms2027h1, entry 656,096,311
    SHA-256 06e25f73677ebc163fc85f32d23e864acfdc4d570df3362a292f2659926a3ccc
    Public key SHA-256 fe0161bcccfedf4a64b6402b45126f904032884b150848681f38e6cd21d6e55a
    Addresses
    104.21.28.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.46, 172.67.144.60): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xertra.info
    Registered
    2026-05-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  14. arbitrage-trading.live US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    arbitrage-trading.live
    First seen
    2026-11-07 06:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 05:10 UTC to 2027-02-05 05:10 UTC
    Logged 2026-11-07 06:09 UTC in Let's Encrypt Willow2027h1, entry 981,332,736
    SHA-256 41cea097e0e809f15cc5fe4d74bf86ee9a4f9f35e06372bbe948594722a5c131
    Public key SHA-256 f2333191c597616f9576e3fcd6a203131d3891f1bb82b29adc9961d526c5e456
    PhishDestroy
    Addresses
    104.21.9.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.226, 172.67.161.95): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    arbitrage-trading.live
    Registered
    2026-03-16 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  15. hjhhhnl.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    hjhhhnl.xyz
    First seen
    2026-11-07 06:10 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 01:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 05:09 UTC to 2027-02-05 05:09 UTC
    Logged 2026-11-07 06:07 UTC in Google PlumbersArms2027h1, entry 656,055,010
    SHA-256 23e64759a37e48bab14ea4f8005cd5576cfd594efd34b4dccb85409f99edbe4e
    Public key SHA-256 d472184037900ceefe94815ae08412ce6a5a5c44d258e3afa94962394ab93c7e
    Addresses
    104.21.90.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.172, 172.67.202.175): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hjhhhnl.xyz
    Registered
    2026-03-12 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  16. oficinamovil.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    oficinamovil.app
    First seen
    2026-11-07 06:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 05:06 UTC to 2027-02-05 06:05 UTC
    Logged 2026-11-07 06:06 UTC in Google ParcelYard2027h1, entry 655,696,180
    SHA-256 cc79718e91798be5f8ec6482d80363fb46582042f0ac50ef5618beeaa66ee86f
    Public key SHA-256 a8be97bf3caad0eeb5cd2b5760c51355a7fb4157c6c9c373d5b5e9136074932f
    PhishDestroy
    Addresses
    104.21.80.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.173.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.29, 172.67.173.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    oficinamovil.app
    Registered
    2025-11-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:14 UTC

    Suggest a correction

  17. worldcollectiveoilreserve.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    worldcollectiveoilreserve.sbs
    First seen
    2026-11-07 06:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 05:09 UTC to 2027-02-05 05:09 UTC
    Logged 2026-11-07 06:07 UTC in Google PlumbersArms2027h1, entry 656,056,828
    SHA-256 185786898fa958dccecd69242fd1e38d1cd7f1667f4274d00e4fbc0699e7946d
    Public key SHA-256 8bcd2364ec9ee43e019619fd389146bb46e2830e8abd27a076435043a70b8975
    Addresses
    104.21.18.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.80, 172.67.181.61): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    worldcollectiveoilreserve.sbs
    Registered
    2026-05-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  18. myship7-11-svty-tws.shop US · AS13335 · Cloudflare, Inc.4 addresses7-ELEVEN Taiwan
    ListedCloudflareListed by NPA 165 (transport and delivery)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    myship7-11-svty-tws.shop
    First seen
    2026-11-07 06:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 01:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 05:03 UTC to 2027-02-05 06:02 UTC
    Logged 2026-11-07 06:03 UTC in Google PlumbersArms2027h1, entry 656,018,485
    SHA-256 2d550bef72cae8538071ff09280acb9d60f1dd1fe06c7054aae811d33626e0e4
    Public key SHA-256 947a76c340d224d9b0c965bcdf57f96041a5e5cde27f2d57170c6a64b9231bc2
    Brand
    7-ELEVEN Taiwan
    Addresses
    104.21.77.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:ccd7
    2606:4700:3037::6815:4d39
    Cloudflare
    Cloudflare (104.21.77.57, 172.67.204.215): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    myship7-11-svty-tws.shop
    Registered
    2026-01-15 · NameSilo
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:06 UTC

    Suggest a correction

  19. proposal-kinetiq.cfd US · AS13335 · Cloudflare, Inc.2 addressesKinetiq
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    proposal-kinetiq.cfd
    First seen
    2026-11-07 06:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-09 03:51 UTC to 2026-12-08 04:49 UTC
    Logged 2026-11-07 06:00 UTC in DigiCert Wyvern2026h2, entry 2,209,547,324
    SHA-256 8017aabd9c6c30f94eab4867ca6b7f40f66bf9eefb914a9518c20756b96d7433
    Public key SHA-256 e0f7a0b466bf1cf118e10da7a01745f00e845ebd7efa6b5b3f9886558d8ac71e
    Brand
    Kinetiq
    Addresses
    104.21.54.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.171, 172.67.140.176): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    proposal-kinetiq.cfd
    Registered
    2026-09-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  20. synchronizepanel-8iz.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    synchronizepanel-8iz.pages.dev
    First seen
    2026-11-07 06:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 05:00 UTC to 2027-02-05 05:58 UTC
    Logged 2026-11-07 06:00 UTC in Let's Encrypt Willow2027h1, entry 981,241,228
    SHA-256 f992a2848854d79c7116e1ad97388934c5e7384436e0d653f1b2b23045007316
    Public key SHA-256 23bb9a33a5dde64dc3a86f13feb4555dcde3e05ead4d366d081a508a9b998223
    Addresses
    172.66.45.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.3, 172.66.46.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  21. bestmarket-pl.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bestmarket-pl.shop
    First seen
    2026-11-07 06:00 UTC
    Listing
    CERT Polska listed it 2026-05-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 06:26 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 04:58 UTC to 2027-02-05 04:58 UTC
    Logged 2026-11-07 05:57 UTC in Google ParcelYard2027h1, entry 655,610,931
    SHA-256 0ec46dbed14e2b80a022cf18d815548d427c52666b87722836bf37fce25283cb
    Public key SHA-256 988fe62719f4ed9ceae1e8e407b4a324069c23c7efcb85554c867098a7e6139a
    Addresses
    104.18.22.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.22.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bestmarket-pl.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:09 UTC

    Suggest a correction

  22. globalcapitalfxtrades.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF -allDMARC policy none
    DetailsHide
    Hostname
    globalcapitalfxtrades.com
    First seen
    2026-11-07 06:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-07 04:59 UTC to 2027-02-05 04:59 UTC
    Logged 2026-11-07 05:57 UTC in Let's Encrypt Willow2027h1, entry 981,215,647
    SHA-256 6fe71822215c3bcfc0e0b434176bf56c2ccdf93a86d6992a50d64242c0c51cdc
    Public key SHA-256 c3e237dafb7d6eb0c913a42f5cfd5cf8e48711ceba0a75145d1842c6e6fb1b38
    PhishDestroy
    Addresses
    104.21.15.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.15.224, 172.67.208.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    globalcapitalfxtrades.com
    MX
    Receives mail at igw17.site4now.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 06:09 UTC

    Suggest a correction

  23. guiaveiculosbr.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    guiaveiculosbr.com
    First seen
    2026-11-07 06:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:59 UTC to 2027-02-05 05:57 UTC
    Logged 2026-11-07 05:59 UTC in Let's Encrypt Willow2027h1, entry 981,233,717
    SHA-256 76be99063900d4fc62ad21e0b7b8bd6422fdfaff8e6e512387cb18cec0bbb42d
    Public key SHA-256 34676c92a40f4a084fc5f32651e68733c6da6cc72da1fb9337eea7630ea503f4
    PhishDestroy
    Addresses
    104.21.91.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.202, 172.67.179.85): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    guiaveiculosbr.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:09 UTC

    Suggest a correction

  24. lp.base55.app US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareUnder base55.app, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 11 mo ago
    DetailsHide
    Hostname
    lp.base55.app
    First seen
    2026-11-07 06:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy, listing base55.app and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 04:56 UTC to 2027-02-05 05:55 UTC
    Logged 2026-11-07 05:56 UTC in Let's Encrypt Sycamore2027h1, entry 1,005,293,871
    SHA-256 4750a8da33e7892432f6247e0b1c9997569d518f435880b226f6549284931fbf
    Public key SHA-256 0def487cacadce87f0e8c0ba4e70ba33e02a51c1483f26c35664e4385e64969d
    PhishDestroy
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    base55.app
    Registered
    2025-11-29 · CloudFlare, Inc.
    MX
    Receives mail at route1.mx.cloudflare.net, route3.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  25. recceidomai.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    recceidomai.eu.cc
    First seen
    2026-11-07 06:00 UTC
    Listing
    CERT Polska listed it 2026-09-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 06:26 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:58 UTC to 2027-02-05 05:56 UTC
    Logged 2026-11-07 05:58 UTC in IPng Networks Halloumi2027h1, entry 395,718,044
    SHA-256 9706abd4792becc5876567d6cc702f5d68bac2d6e4b573e760afacfcb49db57c
    Public key SHA-256 615d57b0b524cb9033ab35ecf0a0b3a0d44d4fcf82d15fe6f21445ed3fd6cd70
    Addresses
    104.21.60.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.60.41, 172.67.191.115): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  26. start-ledger-cloud.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    start-ledger-cloud.pages.dev
    First seen
    2026-11-07 06:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:57 UTC to 2027-02-05 05:54 UTC
    Logged 2026-11-07 05:57 UTC in Let's Encrypt Willow2027h1, entry 981,211,956
    SHA-256 892f01dce51daa7512913a2dd41c99dd562dd604428fe7a79d2e77e8d0cb6b26
    Public key SHA-256 7fa2d4240f3d7d9646e31fcfb1acaf3e3e7b7e3c01616feecead09d1ab6f96de
    Addresses
    172.66.44.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.201, 172.66.47.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  27. www.globalcapitalfxtrades.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder globalcapitalfxtrades.com, reported by PhishDestroyMX presentSPF -allDMARC policy none
    DetailsHide
    Hostname
    www.globalcapitalfxtrades.com
    First seen
    2026-11-07 06:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy, listing globalcapitalfxtrades.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-07 04:59 UTC to 2027-02-05 04:59 UTC
    Logged 2026-11-07 05:57 UTC in Let's Encrypt Willow2027h1, entry 981,215,647
    SHA-256 6fe71822215c3bcfc0e0b434176bf56c2ccdf93a86d6992a50d64242c0c51cdc
    Public key SHA-256 c3e237dafb7d6eb0c913a42f5cfd5cf8e48711ceba0a75145d1842c6e6fb1b38
    PhishDestroy
    Addresses
    104.21.15.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.15.224, 172.67.208.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    globalcapitalfxtrades.com
    MX
    Receives mail at igw17.site4now.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 06:09 UTC

    Suggest a correction

  28. 39-curvefi.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesCurve Finance
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    39-curvefi.pages.dev
    First seen
    2026-11-07 05:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 04:39 UTC to 2027-02-05 04:39 UTC
    Logged 2026-11-07 05:37 UTC in Geomys Tuscolo2027h1, entry 510,468,896
    SHA-256 223ed372f5e885184956f81ff4851effd70de95d7d7d3ad525effc5ef9b80fa1
    Public key SHA-256 f951a33495c610b31d64343f808afb7cc72347ec3b5c83b0332bd86cdd21eb07
    Brand
    Curve Finance
    Addresses
    172.66.44.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c8d
    2606:4700:310c::ac42:2f73
    Cloudflare
    Cloudflare (172.66.44.141, 172.66.47.115): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  29. ambient-finance.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    ambient-finance.org
    First seen
    2026-11-07 05:57 UTC
    First published
    2026-11-05 17:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    DNS
    Resolves · checked 2026-11-06 17:57 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishDestroy feed
    4. We matched the new listing
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-05 16:40 UTC to 2027-02-03 16:40 UTC
    Logged 2026-11-05 17:38 UTC in IPng Networks Gouda2027h1, entry 326,194,074
    SHA-256 8ace7c8a81101a58b9b1afb60c85e262165458c51724b4fcaadd4140c95839ae
    Public key SHA-256 6805155601bbb95cd8a62d07252222e34979a9a8f6e465fea6a0158c1964a8ce
    PhishDestroy
    Addresses
    104.21.41.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.41.13, 172.67.158.217): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ambient-finance.org
    Registered
    2026-05-19 · Atak Domain Bilgi Teknolojileri A._.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  30. bitrefill.com-in-a01-esim-gift.com US · AS13335 · Cloudflare, Inc.4 addressesBitrefill
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    bitrefill.com-in-a01-esim-gift.com
    First seen
    2026-11-07 05:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-06 14:23 UTC to 2027-02-04 14:23 UTC
    Logged 2026-11-06 15:22 UTC in Google PlumbersArms2027h1, entry 645,930,221
    SHA-256 123da60b15a161c3fab9d59a57105501324b923ccd1d20a6742d9af0b233b2e6
    Public key SHA-256 7eb0df37441358d03d8930b6d7e85525a6c581bb6bc8a09a3325ce030bdab6fc
    Brand
    Bitrefill
    Addresses
    104.21.3.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:3fe
    2606:4700:3034::ac43:8367
    Cloudflare
    Cloudflare (104.21.3.254, 172.67.131.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    com-in-a01-esim-gift.com
    Registered
    2026-11-06 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:58 UTC

    Suggest a correction

  31. blaze-swap.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    blaze-swap.org
    First seen
    2026-11-07 05:57 UTC
    First published
    2026-11-05 19:02 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    DNS
    Resolves · checked 2026-11-06 19:08 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishDestroy feed
    4. We matched the new listing
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-05 17:00 UTC to 2027-02-03 17:59 UTC
    Logged 2026-11-05 18:00 UTC in Let's Encrypt Willow2027h1, entry 954,631,062
    SHA-256 22ab59ec268c3c232a5b8a70fffbd0282e41449b56fbec6a6c7e846fb21b18bd
    Public key SHA-256 3bac699e7d0cbb0cedf29d82f603ce6541095de325d17969076c5a49d66c9602
    PhishDestroy
    Addresses
    104.21.73.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.22, 172.67.137.160): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    blaze-swap.org
    Registered
    2026-05-26 · Atak Domain Bilgi Teknolojileri A._.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 18:09 UTC

    Suggest a correction

  32. casigo.org US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    casigo.org
    First seen
    2026-11-07 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Observed in the PhishDestroy feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-06 16:15 UTC to 2027-02-04 16:15 UTC
    Logged 2026-11-06 17:14 UTC in Google PlumbersArms2027h1, entry 647,351,143
    SHA-256 46aa5523e21a8338f670e94d77a050e084b4ce3bf835ac814aa6efafaa5b4223
    Public key SHA-256 2922b1b4f4d73b6da2285da71236ea02e3ab17f835a3f5f29b34754bddd6b118
    PhishDestroy
    Addresses
    104.21.36.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:c806
    2606:4700:3032::6815:24e0
    Cloudflare
    Cloudflare (104.21.36.224, 172.67.200.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    casigo.org
    Registered
    2026-11-06 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  33. coinomize.cc US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    coinomize.cc
    First seen
    2026-11-07 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Observed in the PhishDestroy feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-06 11:19 UTC to 2027-02-04 11:19 UTC
    Logged 2026-11-06 12:18 UTC in Let's Encrypt Willow2027h1, entry 968,433,111
    SHA-256 0377ce867eb135d92ae56dc8da39abffbe5f07cae98c4b9e0f2d2ba860bb5683
    Public key SHA-256 4a7ba678eb8292886b96d38a6f0d1dae4c7d8ef5490f9eac2a5fd59d0bdbeb5f
    PhishDestroy
    Addresses
    104.21.66.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:9dfd
    2606:4700:3036::6815:4255
    Cloudflare
    Cloudflare (104.21.66.85, 172.67.157.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    coinomize.cc
    Registered
    2026-11-06 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  34. elopub.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    elopub.com
    First seen
    2026-11-07 05:57 UTC
    Listing
    PhishDestroy: observed back in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC · listed 2 times
    Earlier listing periods: 2026-10-25 to 2026-11-02 (8 days)
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 14:44 UTC to 2027-02-03 14:44 UTC
    Logged 2026-11-05 15:43 UTC in Let's Encrypt Willow2027h1, entry 952,805,102
    SHA-256 dfe1e2e64b10db58cde3a8a6dd0c9fca6a43988650e277e0d06a36ff0cf3998a
    Public key SHA-256 6708abad640e4f58a89af46c9f934766066e4793fd657adf4b422a911602acd0
    PhishDestroy
    Addresses
    162.159.143.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.3.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (162.159.143.30, 172.66.3.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    elopub.com
    Registered
    2024-07-26 · Beget LLC
    MX
    Receives mail at mx.yandex.net
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 08:25 UTC

    Suggest a correction

  35. galenafurniture.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    galenafurniture.com
    First seen
    2026-11-07 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Observed in the PhishDestroy feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-06 07:04 UTC to 2027-02-03 17:50 UTC
    Logged 2026-11-06 08:05 UTC in Google ParcelYard2027h1, entry 640,075,992
    SHA-256 1f0bc5d9ce9ddd8f43a89bc4041db482ea51055ca8bb666aa5f9b16b732f2afe
    Public key SHA-256 f9b27539cbf9897b91a21985e40b31e9920f94e28118858c97d166bd6e94049e
    PhishDestroy
    Addresses
    104.21.88.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.190 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:97be
    2606:4700:3036::6815:58b2
    Cloudflare
    Cloudflare (104.21.88.178, 172.67.151.190): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    galenafurniture.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:09 UTC

    Suggest a correction

  36. lista-dao.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    lista-dao.net
    First seen
    2026-11-07 05:57 UTC
    First published
    2026-11-05 19:02 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    DNS
    Resolves · checked 2026-11-06 19:08 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishDestroy feed
    4. We matched the new listing
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 17:55 UTC to 2027-02-03 18:03 UTC
    Logged 2026-11-05 18:05 UTC in DigiCert Wyvern2027h1, entry 418,919,219
    SHA-256 2312993dc64637a6991a43afe72b1c3df9cbb63977bfba733d4a2c1d39168539
    Public key SHA-256 403014dd7646c633076f57c37caeafe0370cfd448ffe82c669ae257c3d95bd76
    PhishDestroy
    Addresses
    104.21.42.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.106, 172.67.161.62): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lista-dao.net
    Registered
    2026-06-11 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 18:09 UTC

    Suggest a correction

  37. newbie-currency.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    newbie-currency.com
    First seen
    2026-11-07 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Observed in the PhishDestroy feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-08 08:35 UTC to 2026-12-07 09:31 UTC
    Logged 2026-11-06 11:54 UTC in DigiCert Wyvern2026h2, entry 2,207,966,640
    SHA-256 ccf273ed2082c1cc17ac178d1a3852a07c8bad793a68eb4ce29e7729c8abbf09
    Public key SHA-256 8138c22221d564a3d9e41efd6bb7b85400e8d32318e4b5a08571875365cca92c
    PhishDestroy
    Addresses
    104.21.85.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:55ea
    2606:4700:3035::ac43:d417
    Cloudflare
    Cloudflare (104.21.85.234, 172.67.212.23): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    newbie-currency.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:09 UTC

    Suggest a correction

  38. novacardtrc.net US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    novacardtrc.net
    First seen
    2026-11-07 05:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 09:20 UTC to 2027-02-03 09:20 UTC
    Logged 2026-11-05 10:19 UTC in IPng Networks Gouda2027h1, entry 323,290,926
    SHA-256 1de26e2318a1d949c361e766f16d495080b6628d6f2d060df619ea1ca8b71873
    Public key SHA-256 4598f077d9fbe19d6f435aa3d69f23ed95da4475e5283a9e5e61faeb1ca5daae
    Addresses
    104.21.29.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:1d36
    2606:4700:3037::ac43:ab60
    Cloudflare
    Cloudflare (104.21.29.54, 172.67.171.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    novacardtrc.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:09 UTC

    Suggest a correction

  39. quedrocoffee.live US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    quedrocoffee.live
    First seen
    2026-11-07 05:57 UTC
    First published
    2026-11-04 20:01 UTC
    Listing
    CERT Polska listed it 2026-08-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 06:26 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    DNS
    Resolves · checked 2026-11-06 20:07 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishDestroy feed
    4. We matched the new listing
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-06 17:56 UTC to 2027-02-04 17:56 UTC
    Logged 2026-11-06 18:54 UTC in Let's Encrypt Sycamore2027h1, entry 991,085,139
    SHA-256 0918a08355363d9ee7ebfae5bed51227a94c9655e54c3621dc609172cc22666f
    Public key SHA-256 f4a0257f61a121a9a8cb99879bfe43000512e9b5eb74cac4e25c24322bfd2cdc
    PhishDestroy
    Addresses
    104.21.82.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.4, 172.67.167.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    quedrocoffee.live
    Registered
    2026-07-09 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 19:46 UTC

    Suggest a correction

  40. securemainport.top US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    securemainport.top
    First seen
    2026-11-07 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Observed in the PhishDestroy feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-06 00:00 UTC to 2027-02-03 14:32 UTC
    Logged 2026-11-06 02:45 UTC in Let's Encrypt Sycamore2027h1, entry 970,869,041
    SHA-256 2f2aaa7df3cf259247c048e5caf5a5069dfb880e65863c23084f9116f205d8c1
    Public key SHA-256 e3c1053a196ce4f9185846622caf04b744d02cc837cdcf398b0b9697b0dc52d0
    PhishDestroy
    Addresses
    104.21.84.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:5411
    2606:4700:3037::ac43:b8c3
    Cloudflare
    Cloudflare (104.21.84.17, 172.67.184.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    securemainport.top
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:09 UTC

    Suggest a correction

  41. stake-wise.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    stake-wise.org
    First seen
    2026-11-07 05:57 UTC
    First published
    2026-11-05 19:02 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    DNS
    Resolves · checked 2026-11-06 19:08 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishDestroy feed
    4. We matched the new listing
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 18:02 UTC to 2027-02-03 18:10 UTC
    Logged 2026-11-05 18:12 UTC in DigiCert Wyvern2027h1, entry 419,001,924
    SHA-256 5706ed2bef9059dac54b9310d9e5a49044d482c0585984f46d438850a60963e8
    Public key SHA-256 93b9cb1af565f40920d379bf94c6f9ed4b44a6ef051ae9f55e1cd48a2381363e
    PhishDestroy
    Addresses
    104.21.10.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.60, 172.67.162.144): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    stake-wise.org
    Registered
    2026-06-11 · Atak Domain Bilgi Teknolojileri A._.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 18:19 UTC

    Suggest a correction

  42. sui-lend.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    sui-lend.net
    First seen
    2026-11-07 05:57 UTC
    First published
    2026-11-05 19:02 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    DNS
    Resolves · checked 2026-11-06 19:08 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishDestroy feed
    4. We matched the new listing
    Certificate
    Issued by YE1
    Valid 2026-11-05 17:06 UTC to 2027-02-03 17:06 UTC
    Logged 2026-11-05 18:04 UTC in Google ParcelYard2027h1, entry 630,226,745
    SHA-256 4d7da7bd3632ab9ab419c7deb4bb328496ea3b56279c13149687a9d92ac9c1bb
    Public key SHA-256 49f34b0be7dc633617f2e33bb29b262d7439db1b4a71020a2ff05840997edc46
    PhishDestroy
    Addresses
    104.21.89.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.25, 172.67.136.84): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sui-lend.net
    Registered
    2026-06-11 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 18:09 UTC

    Suggest a correction

  43. swiezopalona.live US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    swiezopalona.live
    First seen
    2026-11-07 05:57 UTC
    First published
    2026-11-04 21:09 UTC
    Listing
    CERT Polska listed it 2026-08-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 06:26 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    DNS
    Resolves · checked 2026-11-06 21:17 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishDestroy feed
    4. We matched the new listing
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-06 17:55 UTC to 2027-02-04 17:55 UTC
    Logged 2026-11-06 18:53 UTC in DigiCert Sphinx2027h1, entry 381,974,093
    SHA-256 237df1bdfbc8d8eb009b0619aeb0b06d5792d7ec0fbe61fa46874bea88036873
    Public key SHA-256 56435c9c9dd2a71416e26bda1151a8b9a28a363ddd802bd648fd5908a25171d0
    PhishDestroy
    Addresses
    104.21.50.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.193, 172.67.210.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    swiezopalona.live
    Registered
    2026-07-09 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 20:09 UTC

    Suggest a correction

  44. tornadocash.network US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    tornadocash.network
    First seen
    2026-11-07 05:57 UTC
    First published
    2026-11-06 17:52 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    DNS
    Resolves · checked 2026-11-06 17:58 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishDestroy feed
    4. We matched the new listing
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-06 17:27 UTC to 2027-02-04 17:35 UTC
    Logged 2026-11-06 17:37 UTC in Let's Encrypt Willow2027h1, entry 972,419,323
    SHA-256 35a0094f1c7013498271769187bf46eddf1cc41fe5adc64042f65e63e833710a
    Public key SHA-256 5c27635f7cba2018fac730436609989bcf6dd718cc107a394e613d4582ed3e49
    PhishDestroy
    Addresses
    104.21.46.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.252, 172.67.143.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tornadocash.network
    Registered
    2026-11-06 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:50 UTC

    Suggest a correction

  45. vvsfinance.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    vvsfinance.org
    First seen
    2026-11-07 05:57 UTC
    First published
    2026-11-05 19:02 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    DNS
    Resolves · checked 2026-11-06 19:08 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishDestroy feed
    4. We matched the new listing
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 16:57 UTC to 2027-02-03 16:57 UTC
    Logged 2026-11-05 17:56 UTC in DigiCert Sphinx2027h1, entry 369,746,477
    SHA-256 2011b58acdba5677ecf4973eba82a9b56d8f46cca858ed6612c95485fd6a70d6
    Public key SHA-256 d26b88c85f4685c189dc6aa7a2b7cff9b1870ebf198a5d0ea0794d73dd1eee1d
    PhishDestroy
    Addresses
    104.21.23.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.23.31, 172.67.208.120): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vvsfinance.org
    Registered
    2026-05-26 · Atak Domain Bilgi Teknolojileri A._.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 18:04 UTC

    Suggest a correction

  46. vvv.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    vvv.com
    First seen
    2026-11-07 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Observed in the PhishDestroy feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-06 09:37 UTC to 2027-02-04 09:37 UTC
    Logged 2026-11-06 10:35 UTC in Let's Encrypt Sycamore2027h1, entry 978,963,850
    SHA-256 614489cecfb210b11f58f4ea268878ddaf7bf3b6e90b06975b920dd57d992be6
    Public key SHA-256 64ba88f8b02a5391e33a74c9794cc0b6897e748781b48926949074a85a30ec4c
    PhishDestroy
    Addresses
    104.21.19.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::6815:13f0
    2606:4700:3036::ac43:be7e
    Cloudflare
    Cloudflare (104.21.19.240, 172.67.190.126): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vvv.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:09 UTC

    Suggest a correction

  47. weide005.cc US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    weide005.cc
    First seen
    2026-11-07 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Observed in the PhishDestroy feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-06 12:43 UTC to 2027-02-04 12:51 UTC
    Logged 2026-11-06 12:53 UTC in DigiCert Wyvern2027h1, entry 429,142,142
    SHA-256 3bedf0caf97490cdf88840756e28e851f60d269c7d88abb004037b43e2c2edfe
    Public key SHA-256 623bcc46c0520e0db794031a49b2713939bb993ddfb8c724388c2e07b4e4cf5d
    PhishDestroy
    Addresses
    104.21.70.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:46a9
    2606:4700:3037::ac43:89eb
    Cloudflare
    Cloudflare (104.21.70.169, 172.67.137.235): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    weide005.cc
    Registered
    2026-11-05 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  48. 1991betbrazil.bet US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    1991betbrazil.bet
    First seen
    2026-11-07 05:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 04:54 UTC to 2027-02-05 05:53 UTC
    Logged 2026-11-07 05:54 UTC in Google ParcelYard2027h1, entry 655,587,158
    SHA-256 943376935cac70a9e2622191f21706abbd5b152ea9c97a7fbc3995f1aca2f0ea
    Public key SHA-256 de49faf819924957efcd76837e5a3ebfeab9bae49d6d6948bb7ade2a6bb81e74
    PhishDestroy
    Addresses
    104.21.96.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.173.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.96.54, 172.67.173.73): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    1991betbrazil.bet
    Registered
    2025-12-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  49. cornerstonecommunityhomes.org US · AS13335 · Cloudflare, Inc.3 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 18 y ago
    DetailsHide
    Hostname
    cornerstonecommunityhomes.org
    First seen
    2026-11-07 05:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-07 04:56 UTC to 2027-02-05 04:56 UTC
    Logged 2026-11-07 05:55 UTC in DigiCert Wyvern2027h1, entry 437,922,505
    SHA-256 85ac64090a5d2a7fa82dee807fb9064e53e6158b125d5e7eab3a621bd6e8b677
    Public key SHA-256 d484b72dee4d71a05c7d995ef5a0dda9fd37523d5cb1292b03c85cca1fd606df
    PhishDestroy
    Addresses
    104.26.4.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.26.5.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.69.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.26.4.215, 104.26.5.215, 172.67.69.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cornerstonecommunityhomes.org
    Registered
    2009-04-16 · eNom, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  50. ledgrlive--faq.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    ledgrlive--faq.pages.dev
    First seen
    2026-11-07 05:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:55 UTC to 2027-02-05 05:54 UTC
    Logged 2026-11-07 05:55 UTC in Let's Encrypt Sycamore2027h1, entry 1,005,287,827
    SHA-256 6e4a3c3b6a6ef826067dcfe741d9e7ead5f4baf60602b17468db4ffb845a4098
    Public key SHA-256 79cafbbcb1f180da5be372736ae8cc136920b8c577231adfd73bbfe40799a647
    Addresses
    172.66.44.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.225, 172.66.47.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  51. qiwdrf.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    qiwdrf.site
    First seen
    2026-11-07 05:56 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 01:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:53 UTC to 2027-02-05 05:52 UTC
    Logged 2026-11-07 05:53 UTC in DigiCert Sphinx2027h1, entry 387,041,181
    SHA-256 56b0430ebc638f3be389bf5b45179b0a48460eacb73ff5ad80d722cb1ec3761c
    Public key SHA-256 56452dc61e06e394565c7ebc0c5196ffd0f3bc49e2e804f4a7bf9ada5cebc366
    Addresses
    104.21.85.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.131, 172.67.206.46): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qiwdrf.site
    Registered
    2026-09-09 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  52. swaga.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    swaga.app
    First seen
    2026-11-07 05:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:53 UTC to 2027-02-05 05:52 UTC
    Logged 2026-11-07 05:53 UTC in Let's Encrypt Sycamore2027h1, entry 1,005,253,249
    SHA-256 0a25f53e2d4117bfd1230c4992b790a8c17210d0af9051e29d899bc258a50db8
    Public key SHA-256 0eba7bddd05a5cf7e7a103271eee7f151eebd91732c9e31e26277fdeaf0136fb
    PhishDestroy
    Addresses
    104.21.47.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.253, 172.67.174.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    swaga.app
    Registered
    2025-11-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  53. www.cornerstonecommunityhomes.org US · AS13335 · Cloudflare, Inc.3 addresses
    ReportedCloudflareUnder cornerstonecommunityhomes.org, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 18 y ago
    DetailsHide
    Hostname
    www.cornerstonecommunityhomes.org
    First seen
    2026-11-07 05:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy, listing cornerstonecommunityhomes.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-07 04:56 UTC to 2027-02-05 04:56 UTC
    Logged 2026-11-07 05:55 UTC in DigiCert Wyvern2027h1, entry 437,922,505
    SHA-256 85ac64090a5d2a7fa82dee807fb9064e53e6158b125d5e7eab3a621bd6e8b677
    Public key SHA-256 d484b72dee4d71a05c7d995ef5a0dda9fd37523d5cb1292b03c85cca1fd606df
    PhishDestroy
    Addresses
    104.26.4.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.26.5.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.69.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.26.4.215, 104.26.5.215, 172.67.69.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cornerstonecommunityhomes.org
    Registered
    2009-04-16 · eNom, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  54. afgpaisa.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    afgpaisa.com
    First seen
    2026-11-07 05:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 04:51 UTC to 2027-02-05 04:51 UTC
    Logged 2026-11-07 05:49 UTC in Geomys Tuscolo2027h1, entry 510,582,328
    SHA-256 88ca4f7fdb7d8d4fc0a05f035d2a6d1e8179ef75571e1ed334307f0f7a7dc524
    Public key SHA-256 460fc621aabbf2d123be51b63b27edb7a9f296a2329fc70a65e80a79efede5bb
    PhishDestroy
    Addresses
    104.21.22.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.159, 172.67.205.131): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    afgpaisa.com
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 06:04 UTC

    Suggest a correction

  55. eternityshopping.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    eternityshopping.online
    First seen
    2026-11-07 05:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 01:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 04:50 UTC to 2027-02-05 04:50 UTC
    Logged 2026-11-07 05:48 UTC in Google PlumbersArms2027h1, entry 655,865,648
    SHA-256 0a7968b16d10a38cf08b464bdcea419dc592b0ea13498c95b6bd8b39265faf13
    Public key SHA-256 68498a98bde4370761f82ad27739b546ead8dd696e07fc1ae2677b029a364aa9
    Addresses
    104.21.12.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.12.254, 172.67.154.2): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eternityshopping.online
    Registered
    2026-05-14 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  56. gfrgdcv.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    gfrgdcv.xyz
    First seen
    2026-11-07 05:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 01:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 04:51 UTC to 2027-02-05 04:51 UTC
    Logged 2026-11-07 05:50 UTC in IPng Networks Halloumi2027h1, entry 395,661,047
    SHA-256 450d973956112644ecac37ad17040be6548fac4fdee3a76689eb50bb0a5b535c
    Public key SHA-256 343012db32381dd094e02bea69f25e1c682a94fd5add40b458c299c65b94ba36
    Addresses
    104.21.8.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.105 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.92, 172.67.130.105): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gfrgdcv.xyz
    Registered
    2026-03-12 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  57. hub-airdrops.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    hub-airdrops.sbs
    First seen
    2026-11-07 05:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:48 UTC to 2027-02-05 05:46 UTC
    Logged 2026-11-07 05:48 UTC in Let's Encrypt Willow2027h1, entry 981,127,181
    SHA-256 4a3261f05954a91c750c40b5540cd76a549bc9bc3d589311fcf5a491ff8082e4
    Public key SHA-256 faf464074683dd362893447e5cbbabd826b4afd5234d5f09e6f275849da9e680
    Addresses
    104.21.16.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.13, 172.67.209.194): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hub-airdrops.sbs
    Registered
    2025-11-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:53 UTC

    Suggest a correction

  58. wodjngh.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    wodjngh.store
    First seen
    2026-11-07 05:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 01:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:49 UTC to 2027-02-05 05:46 UTC
    Logged 2026-11-07 05:49 UTC in Let's Encrypt Willow2027h1, entry 981,140,116
    SHA-256 bdc7bb3f79b903f85f5d4445335d20c9c9220692f82226faf20bcc20bfc4c4db
    Public key SHA-256 aaaa6e12afc43cd745b63eb1a3137a1c40ec02c4f62ac5e94b99aa43c94a99a8
    Addresses
    104.21.72.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.243, 172.67.155.254): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wodjngh.store
    Registered
    2026-09-09 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  59. www.727812coinlist.co US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder 727812coinlist.co, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.727812coinlist.co
    First seen
    2026-11-07 05:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask, listing 727812coinlist.co and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 04:50 UTC to 2027-02-05 04:50 UTC
    Logged 2026-11-07 05:48 UTC in IPng Networks Gouda2027h1, entry 341,226,368
    SHA-256 38d27fd8a40252615a1f668592d4fa25fdc8ffc5aa7728d630612c9c7025a3e1
    Public key SHA-256 23b74158e3e0ca3e7b23df21f4ce647e61fcf6672559de6af904b7286b3273ca
    Addresses
    104.21.1.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.1.117, 172.67.152.60): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    727812coinlist.co
    Registered
    2026-09-08 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 11:00 UTC

    Suggest a correction

  60. www.afgpaisa.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder afgpaisa.com, reported by PhishDestroyMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    www.afgpaisa.com
    First seen
    2026-11-07 05:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy, listing afgpaisa.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 04:51 UTC to 2027-02-05 04:51 UTC
    Logged 2026-11-07 05:49 UTC in Geomys Tuscolo2027h1, entry 510,582,328
    SHA-256 88ca4f7fdb7d8d4fc0a05f035d2a6d1e8179ef75571e1ed334307f0f7a7dc524
    Public key SHA-256 460fc621aabbf2d123be51b63b27edb7a9f296a2329fc70a65e80a79efede5bb
    PhishDestroy
    Addresses
    104.21.22.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.159, 172.67.205.131): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    afgpaisa.com
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 06:04 UTC

    Suggest a correction

  61. zirvarahorizyn.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    zirvarahorizyn.pro
    First seen
    2026-11-07 05:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:48 UTC to 2027-02-05 05:46 UTC
    Logged 2026-11-07 05:48 UTC in DigiCert Wyvern2027h1, entry 437,880,646
    SHA-256 8fe7f2573bed1f4ee1dfedecba62e99e9b22de235f6b490f7728e1705fa0eb15
    Public key SHA-256 8b54ae1ac39a6752bebc44689048a703f11269a4777db7063206cbf2c391fdc7
    PhishDestroy
    Addresses
    104.21.53.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.219, 172.67.219.42): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zirvarahorizyn.pro
    Registered
    2025-11-17 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:53 UTC

    Suggest a correction

  62. 479151-trezor.com US · AS13335 · Cloudflare, Inc.4 addressesTrezor
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    479151-trezor.com
    First seen
    2026-11-07 05:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 04:45 UTC to 2027-02-05 04:45 UTC
    Logged 2026-11-07 05:43 UTC in IPng Networks Gouda2027h1, entry 341,199,937
    SHA-256 3b96a3465fcc16d620730af527cc9b3cd256a0c79b5a6b7ec2f40925baaa63b0
    Public key SHA-256 6ccf00747ddc1785eb07867ae47c656e318fb6e3c1af5a5022b47cfbd767cd37
    Brand
    Trezor
    Addresses
    104.21.50.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:321b
    2606:4700:3036::ac43:9bb8
    Cloudflare
    Cloudflare (104.21.50.27, 172.67.155.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    479151-trezor.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:47 UTC

    Suggest a correction

  63. api.trade-avaprosystem-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.trade-avaprosystem-com.financecryptoworld.com
    First seen
    2026-11-07 05:46 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 06:26 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 04:43 UTC to 2027-02-05 05:40 UTC
    Logged 2026-11-07 05:43 UTC in Google ParcelYard2027h1, entry 655,451,416
    SHA-256 c5b5e6f22b7f2c68b90009033f81d037ce4be34e5f72f0bbf756e9142b1ecc3a
    Public key SHA-256 de29537700fe3724e5222a67415dc8f04b9833e023373763214a7e421770695f
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:12 UTC

    Suggest a correction

  64. connects-zoom.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    connects-zoom.live
    First seen
    2026-11-07 05:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:42 UTC to 2027-02-05 05:41 UTC
    Logged 2026-11-07 05:42 UTC in DigiCert Sphinx2027h1, entry 386,969,453
    SHA-256 bbc4566e5dad875fd1f8eb1c2f94610b83425a5358577e99178fd15a1218dbd4
    Public key SHA-256 12e597613effc8c44761ec72f9bbc606a5eb980697e628e2672c5c25009769a6
    Addresses
    104.21.60.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.60.21, 172.67.187.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    connects-zoom.live
    Registered
    2026-09-09 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  65. cvvdumplogs.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    cvvdumplogs.cc
    First seen
    2026-11-07 05:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:42 UTC to 2027-02-05 05:39 UTC
    Logged 2026-11-07 05:42 UTC in DigiCert Wyvern2027h1, entry 437,830,987
    SHA-256 2a48ccdb2359042c220da616806def9fe8a4abefc9ce3a8fadf5bb00f67a9557
    Public key SHA-256 ea26c1b211bb1647bde70cffb6924d6a992561e30329a9f01f0e7bf750722fa5
    PhishDestroy
    Addresses
    104.21.69.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.166, 172.67.210.140): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cvvdumplogs.cc
    Registered
    2024-02-06 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  66. mixyura.money US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    mixyura.money
    First seen
    2026-11-07 05:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:41 UTC to 2027-02-05 05:38 UTC
    Logged 2026-11-07 05:41 UTC in Google PlumbersArms2027h1, entry 655,782,980
    SHA-256 75cbefa011556e89b64dbafa6d1876e8565690f6c226050567c46c974da61490
    Public key SHA-256 af7ca4bf7a54ab23de20735dadaeb82c908b4d8654ba2acf348e241470cb4268
    PhishDestroy
    Addresses
    104.21.30.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.30.3, 172.67.150.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mixyura.money
    Registered
    2025-11-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  67. plvigoese.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    plvigoese.com
    First seen
    2026-11-07 05:46 UTC
    Listing
    CERT Polska listed it 2026-08-05 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 06:26 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 04:45 UTC to 2027-02-05 04:45 UTC
    Logged 2026-11-07 05:44 UTC in DigiCert Sphinx2027h1, entry 386,976,191
    SHA-256 6bf845af9904ea83adc5bc046002882b97786bdbe81e150f0175af979ecbaba8
    Public key SHA-256 e80637903ef3dc5d6677e359a79625dfc19e134be69639de7284b04b9f3b3506
    Addresses
    104.21.5.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.133.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.130, 172.67.133.120): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    plvigoese.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:47 UTC

    Suggest a correction

  68. raydium-sols.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesRaydium
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    raydium-sols.pages.dev
    First seen
    2026-11-07 05:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:44 UTC to 2027-02-05 05:43 UTC
    Logged 2026-11-07 05:44 UTC in Google PlumbersArms2027h1, entry 655,817,705
    SHA-256 6c7eeb9b3152bef22e55d4ab15be83b36b53926400183da19ef92eb831db8d61
    Public key SHA-256 da6de5d04171e89f4c6156d5f77766e51a64c904b417ad145e114520e54f051a
    Brand
    Raydium
    Addresses
    172.66.44.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2ce1
    2606:4700:310c::ac42:2f1f
    Cloudflare
    Cloudflare (172.66.44.225, 172.66.47.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  69. tectonicfi.club US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    tectonicfi.club
    First seen
    2026-11-07 05:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:45 UTC to 2027-02-05 05:44 UTC
    Logged 2026-11-07 05:45 UTC in Google PlumbersArms2027h1, entry 655,827,552
    SHA-256 80b22a303daf2024a28ddd586b26edafdd687e40df542f41a83f5df58dd8fc9f
    Public key SHA-256 9e9b94ddaadb5c9c4ddf72a370db84e3ba3dda87a734e75990d1f9f2cc775a7f
    Addresses
    104.21.11.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.11.165, 172.67.149.150): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tectonicfi.club
    Registered
    2026-09-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  70. www.rekuperia.io US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder rekuperia.io, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.rekuperia.io
    First seen
    2026-11-07 05:46 UTC
    Listing
    CERT Polska listed it 2026-05-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 06:26 UTC
    Listed
    CERT Polska, listing rekuperia.io and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-07 04:45 UTC to 2027-02-05 04:45 UTC
    Logged 2026-11-07 05:44 UTC in Google PlumbersArms2027h1, entry 655,813,065
    SHA-256 05e96d0d248174937ecfffac4e90abeddc8d8a3ca468b8b7bb63bfe28b97f4eb
    Public key SHA-256 69c12ca14beda444e0ed695cf614fd81fe96dafd12a887159063c8b6f1e01c0c
    Addresses
    104.21.96.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.173.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.96.64, 172.67.173.158): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rekuperia.io
    Registered
    2026-03-09 · Immaterialism Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 07:23 UTC

    Suggest a correction

  71. 759101-robinhood.com US · AS13335 · Cloudflare, Inc.4 addressesRobinhood
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    759101-robinhood.com
    First seen
    2026-11-07 05:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 04:38 UTC to 2027-02-05 04:38 UTC
    Logged 2026-11-07 05:36 UTC in IPng Networks Halloumi2027h1, entry 395,549,763
    SHA-256 3527e0f6eceb32b655e5afa299f3a3b240286c567ce4b6a1523abf2613a419b3
    Public key SHA-256 cec83728b383dd138d9c69c650ea238a8dbb683d9259a8621e19bce05d109eeb
    Brand
    Robinhood
    Addresses
    104.21.84.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:5411
    2606:4700:3037::ac43:b8c3
    Cloudflare
    Cloudflare (104.21.84.17, 172.67.184.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    759101-robinhood.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:42 UTC

    Suggest a correction

  72. celsols.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    celsols.com
    First seen
    2026-11-07 05:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-07 05:28 UTC to 2027-02-05 05:37 UTC
    Logged 2026-11-07 05:38 UTC in Let's Encrypt Willow2027h1, entry 981,022,191
    SHA-256 9c2ae33009dfea35269d52fc588695636e701f01a478dd8bd6d7c3b2876c1673
    Public key SHA-256 dadfa6758747837280f540cd7534ff52edafa240c750b35d1c76f840519d6f0f
    PhishDestroy
    Addresses
    104.21.58.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.124 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.35, 172.67.199.124): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    celsols.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:42 UTC

    Suggest a correction

  73. connectzoom.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    connectzoom.live
    First seen
    2026-11-07 05:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:39 UTC to 2027-02-05 05:38 UTC
    Logged 2026-11-07 05:39 UTC in Let's Encrypt Willow2027h1, entry 981,035,092
    SHA-256 82abf3987578e1e6fbdf36c137f3646ca0541b97298c0e5e7e2157ae6348c9f8
    Public key SHA-256 7cd2bdf90db95a42364e0140cc588bccc5c6ff8971e3e4ab9ae42d4520b313cb
    Addresses
    104.21.66.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.66.204, 172.67.207.63): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    connectzoom.live
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:42 UTC

    Suggest a correction

  74. rainbetcanada.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    rainbetcanada.com
    First seen
    2026-11-07 05:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 04:41 UTC to 2027-02-05 04:41 UTC
    Logged 2026-11-07 05:39 UTC in IPng Networks Gouda2027h1, entry 341,177,665
    SHA-256 848a46682536ae12e38ffa6cb72b9b1937f3155431cf235ba6b1c643d63dd1d9
    Public key SHA-256 570eda22b8fafc25d0071a9ad1380c5e9094e10e8ee98a56704aeb6396106ffe
    Addresses
    104.21.92.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.238, 172.67.200.30): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rainbetcanada.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:42 UTC

    Suggest a correction

  75. sawayshoe-plvip.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    sawayshoe-plvip.sbs
    First seen
    2026-11-07 05:41 UTC
    Listing
    CERT Polska listed it 2026-05-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 06:26 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 04:38 UTC to 2027-02-05 04:38 UTC
    Logged 2026-11-07 05:36 UTC in IPng Networks Halloumi2027h1, entry 395,549,512
    SHA-256 279b86f30e99b5d1e0e32997c57255b082d9656b0f2ebf7011a86480ddddc7a4
    Public key SHA-256 17cd74d3082fc375e0addde1441b4b5fa17b1a764a85a71f7a63e6494b33dc31
    Addresses
    104.21.92.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.133, 172.67.194.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sawayshoe-plvip.sbs
    Registered
    2026-05-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  76. songlin03.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    songlin03.store
    First seen
    2026-11-07 05:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 01:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 04:37 UTC to 2027-02-05 04:37 UTC
    Logged 2026-11-07 05:36 UTC in DigiCert Wyvern2027h1, entry 437,778,268
    SHA-256 0d2b416600289ae08d4048616c0882fe1ec20e569992639d08b12ed3e371afd6
    Public key SHA-256 5803ad711d51f64e81969e7e3fbba49197e85ee87246bd17457f99dec5f48eb3
    Addresses
    104.21.57.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.16, 172.67.158.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    songlin03.store
    Registered
    2026-05-12 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  77. vviivj.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    vviivj.top
    First seen
    2026-11-07 05:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 01:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 04:39 UTC to 2027-02-05 05:38 UTC
    Logged 2026-11-07 05:39 UTC in Let's Encrypt Sycamore2027h1, entry 1,004,949,495
    SHA-256 1dd50da8e8dab0527c612a130c0067d1879412486065c6fb3fbbbfddcab6a519
    Public key SHA-256 cc2b06477b3adc314b2682f2fd8151a7be8c40dee5c0efdd3402f5aba6f711a6
    Addresses
    104.21.67.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.229, 172.67.182.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vviivj.top
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:42 UTC

    Suggest a correction

  78. www.rainbetcanada.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder rainbetcanada.com, listed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.rainbetcanada.com
    First seen
    2026-11-07 05:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Listed
    MetaMask, listing rainbetcanada.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 04:41 UTC to 2027-02-05 04:41 UTC
    Logged 2026-11-07 05:39 UTC in IPng Networks Gouda2027h1, entry 341,177,665
    SHA-256 848a46682536ae12e38ffa6cb72b9b1937f3155431cf235ba6b1c643d63dd1d9
    Public key SHA-256 570eda22b8fafc25d0071a9ad1380c5e9094e10e8ee98a56704aeb6396106ffe
    Addresses
    104.21.92.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.238, 172.67.200.30): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rainbetcanada.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:42 UTC

    Suggest a correction

  79. originals.rainbet.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder rainbet.com, reported by PhishDestroyMX presentSPF ~allDMARC quarantineRegistered 9 y ago
    DetailsHide
    Hostname
    originals.rainbet.com
    First seen
    2026-11-07 05:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy, listing rainbet.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 04:31 UTC to 2027-02-05 05:30 UTC
    Logged 2026-11-07 05:31 UTC in DigiCert Sphinx2027h1, entry 386,876,197
    SHA-256 93de9274a7a9e9cf5fa8f014c299c9a9d2c62c3addcd7fc8233d76b4888e03b7
    Public key SHA-256 5ea87eb27914f2591b3be1d9c018a10baa05934aebe223bb70440aed46fa3687
    PhishDestroy
    Addresses
    104.18.18.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.19.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.18.181, 104.18.19.181): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rainbet.com
    Registered
    2017-11-26 · NameCheap, Inc.
    MX
    Receives mail at smtp.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-07 01:43 UTC

    Suggest a correction

  80. www.yogastudioai.healingark.app US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder healingark.app, listed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 16 mo ago
    DetailsHide
    Hostname
    www.yogastudioai.healingark.app
    First seen
    2026-11-07 05:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask, listing healingark.app and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:33 UTC to 2027-02-05 05:33 UTC
    Logged 2026-11-07 05:33 UTC in IPng Networks Halloumi2027h1, entry 395,524,122
    SHA-256 ebafd877527d852eb3d7b1b1a8ccbb37fd05c3dbcdff094a5b7bc0ee868c3a5b
    Public key SHA-256 b63f81b6485d81a56467f35a2471d6c814c54e63f8849464ce463e5f2e947189
    Addresses
    66.71.220.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (66.71.220.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    healingark.app
    Registered
    2025-07-17 · 1&1 Internet SE
    MX
    Receives mail at mx00.ionos.com, mx01.ionos.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 00:41 UTC

    Suggest a correction

  81. purplerecords.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    purplerecords.net
    First seen
    2026-11-07 05:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:26 UTC to 2027-02-05 05:24 UTC
    Logged 2026-11-07 05:26 UTC in IPng Networks Halloumi2027h1, entry 395,471,489
    SHA-256 f74690376f08369710b85fc522b5c9dc6e44e9a6ffcde9f5f1c4c403bedf637f
    Public key SHA-256 7cf3fb06c10ae93cc477d8d70c30485fca830f721212f95199b85e4a106a62d5
    PhishDestroy
    Addresses
    104.21.50.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.43, 172.67.200.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    purplerecords.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:32 UTC

    Suggest a correction

  82. vless.cf.sanx.cloud US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder sanx.cloud, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 47 d ago
    DetailsHide
    Hostname
    vless.cf.sanx.cloud
    First seen
    2026-11-07 05:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask, listing sanx.cloud and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:30 UTC to 2027-02-05 05:30 UTC
    Logged 2026-11-07 05:30 UTC in Google PlumbersArms2027h1, entry 655,684,745
    SHA-256 5df83af186158c3f567f2b32eb9d8bfbc5a20c101fe894d3350c5567f118b625
    Public key SHA-256 21747d3e11dddd1ce3b29df050f7adb5cca121d0d1366dd134c1ffce89fc158a
    Addresses
    104.21.85.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.27, 172.67.201.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sanx.cloud
    Registered
    2026-09-21 · CV. Rumahweb Indonesia
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 19:30 UTC

    Suggest a correction

  83. vote-ore.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    vote-ore.info
    First seen
    2026-11-07 05:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:29 UTC to 2027-02-05 05:28 UTC
    Logged 2026-11-07 05:29 UTC in DigiCert Wyvern2027h1, entry 437,719,097
    SHA-256 09a30399b42d3095ac351d93d7c468758621a2132f5ed4fce32fb23ac8561fbe
    Public key SHA-256 4aafab770487b7af01d937396bf2f22d5c279d77817df67af9faa8b0e0e7dce4
    Addresses
    104.21.93.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.93.21, 172.67.203.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vote-ore.info
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:32 UTC

    Suggest a correction

  84. win1spin.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    win1spin.net
    First seen
    2026-11-07 05:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:27 UTC to 2027-02-05 05:24 UTC
    Logged 2026-11-07 05:27 UTC in Let's Encrypt Sycamore2027h1, entry 1,004,701,287
    SHA-256 3ccb8967b59667083ab0e6fa9d97f2e700c2e99e70a49318e93e985ab72aee62
    Public key SHA-256 d4d492e72a40da134913b51a3305d7297d479213cd81746de70fe29ada886c05
    PhishDestroy
    Addresses
    104.21.40.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.133, 172.67.151.244): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    win1spin.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:32 UTC

    Suggest a correction

  85. skinnport.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    skinnport.com
    First seen
    2026-11-07 05:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:24 UTC to 2027-02-05 05:23 UTC
    Logged 2026-11-07 05:24 UTC in Google PlumbersArms2027h1, entry 655,628,978
    SHA-256 bf95904d16baccc10f62164b73ccea2f9006ffd789bfc2b7aac944dc29975020
    Public key SHA-256 e76f43c534aa5dc2e927ba6e2e03d4195e2ca709d9477c9d2e4144c19c0e0aab
    Addresses
    104.21.3.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.171, 172.67.130.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    skinnport.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:26 UTC

    Suggest a correction

  86. dommainfitt.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    dommainfitt.eu.cc
    First seen
    2026-11-07 05:21 UTC
    Listing
    CERT Polska listed it 2026-09-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 06:26 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:18 UTC to 2027-02-05 05:15 UTC
    Logged 2026-11-07 05:18 UTC in Google ParcelYard2027h1, entry 655,216,764
    SHA-256 c12f1a80c5f2c367dfff4e2da762eabeb879f4da694a5e112678011b93b7636c
    Public key SHA-256 74518ed0e0361a4e4c835e704a3e96d3642802f0e0a4b4a632a3a0aa5b0face8
    Addresses
    104.21.17.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.193, 172.67.178.51): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  87. finkulrontix.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    finkulrontix.org
    First seen
    2026-11-07 05:21 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 06:26 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 04:21 UTC to 2027-02-05 04:21 UTC
    Logged 2026-11-07 05:19 UTC in IPng Networks Gouda2027h1, entry 341,065,086
    SHA-256 9144331caa6de3043a041298447849b4a780cd8760b11ea737984627b8328d20
    Public key SHA-256 2adf0cbc9cf30c0e70c7199b9bd0a2ce48fd08d7b4f229538944740d667d7a6b
    Addresses
    104.21.89.124 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.159.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.124, 172.67.159.84): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    finkulrontix.org
    Registered
    2026-05-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  88. https-blsp-at.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    https-blsp-at.cc
    First seen
    2026-11-07 05:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:19 UTC to 2027-02-05 05:15 UTC
    Logged 2026-11-07 05:19 UTC in Let's Encrypt Sycamore2027h1, entry 1,004,554,017
    SHA-256 d32f2e35287b0b25f2ce1cbb802161dad3689d3f238040d5740962dead63d3d1
    Public key SHA-256 b23a42e0185c73511b1bb1826ab35198c57700131266d97009754172955474d6
    PhishDestroy
    Addresses
    104.21.87.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.87.223, 172.67.170.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    https-blsp-at.cc
    Registered
    2026-01-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  89. smksrosma.sch.id US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 18 mo ago
    DetailsHide
    Hostname
    smksrosma.sch.id
    First seen
    2026-11-07 05:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · delisted on 2026-11-07
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-07 04:20 UTC to 2027-02-05 04:20 UTC
    Logged 2026-11-07 05:19 UTC in Google PlumbersArms2027h1, entry 655,576,001
    SHA-256 1d9f4b44e7b7e6fe58536edeb0178618fe12199d0ed7637d44711a96e24e3133
    Public key SHA-256 15ffd944ad2c588f083e9d6b7e6a60287177f2b607d6c1895d149043244323b3
    PhishDestroy
    Addresses
    104.21.25.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.133.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.91, 172.67.133.242): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    smksrosma.sch.id
    Registered
    2025-05-28 · PT Digital Registra Indonesia
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 03:55 UTC

    Suggest a correction

  90. www.discountmalls-pl.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder discountmalls-pl.shop, listed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.discountmalls-pl.shop
    First seen
    2026-11-07 05:21 UTC
    Listing
    CERT Polska listed it 2026-05-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 06:26 UTC
    Listed
    CERT Polska, listing discountmalls-pl.shop and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 04:20 UTC to 2027-02-05 05:19 UTC
    Logged 2026-11-07 05:20 UTC in IPng Networks Halloumi2027h1, entry 395,420,246
    SHA-256 69af53461ff9253e780a296f020b56bfc94e66e32d4187085fa082d71f34d643
    Public key SHA-256 7816a551064dca6b4a794574bf5c42fe82f614c686f9b75e4bf43b8d21881ade
    Addresses
    104.18.22.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.22.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    discountmalls-pl.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 08:21 UTC

    Suggest a correction

  91. api.welturexsoftware-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.welturexsoftware-com.financecryptoworld.com
    First seen
    2026-11-07 05:16 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 06:26 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 04:15 UTC to 2027-02-05 05:12 UTC
    Logged 2026-11-07 05:15 UTC in DigiCert Wyvern2027h1, entry 437,628,112
    SHA-256 4507841a41cedecf3a32fa2b798ad553adeeb5502db606abde7a307825f74b2b
    Public key SHA-256 d50ac491c5fec816e476f91eb2d22e3625d711c192e3e27e2afc3836c3c560d4
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-06 17:12 UTC

    Suggest a correction

  92. brandsale-pl.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    brandsale-pl.shop
    First seen
    2026-11-07 05:16 UTC
    Listing
    CERT Polska listed it 2026-05-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 06:26 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 04:16 UTC to 2027-02-05 04:16 UTC
    Logged 2026-11-07 05:15 UTC in Google ParcelYard2027h1, entry 655,185,730
    SHA-256 aad7194f9d55325dc5721391ab5af2790e00fb50d08119b118d78cfda1100afd
    Public key SHA-256 d694004662caec2fdfa97d2d1cae5a012470cd69cd1643f1f08fcd86063c6764
    Addresses
    104.18.22.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.22.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    brandsale-pl.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:27 UTC

    Suggest a correction

  93. coinbasewalltapp.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    coinbasewalltapp.pages.dev
    First seen
    2026-11-07 05:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 04:14 UTC to 2027-02-05 04:14 UTC
    Logged 2026-11-07 05:13 UTC in Let's Encrypt Sycamore2027h1, entry 1,004,454,613
    SHA-256 499d0f290a11eebe64c0bf056400fe76ad1d7e7185f5e71807b9ff59fdfce52a
    Public key SHA-256 3a033e576f031d7bc5f35097131f5c7845c5eac5a6ad89089994189821f11da8
    Addresses
    172.66.44.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2ca7
    2606:4700:310c::ac42:2f59
    Cloudflare
    Cloudflare (172.66.44.167, 172.66.47.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  94. guiadoscarros.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    guiadoscarros.com
    First seen
    2026-11-07 05:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:11 UTC to 2027-02-05 05:08 UTC
    Logged 2026-11-07 05:11 UTC in Let's Encrypt Sycamore2027h1, entry 1,004,418,453
    SHA-256 897987cf84133d2fa91b7b199fec072028428d38768afe13f2ec1c162719e1dc
    Public key SHA-256 9a9bd1db7679a5d90e9c1b15c9d81bb7af7e097e9f1c3f63a89f34fb4097aea8
    PhishDestroy
    Addresses
    104.21.80.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.13, 172.67.172.148): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    guiadoscarros.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:27 UTC

    Suggest a correction

  95. skinoport.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    skinoport.com
    First seen
    2026-11-07 05:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 05:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:13 UTC to 2027-02-05 05:11 UTC
    Logged 2026-11-07 05:13 UTC in Google ParcelYard2027h1, entry 655,168,518
    SHA-256 94832f35b447b8e65efcdb0be61a72b8867776fbf0ea9d2a765a759ac419137e
    Public key SHA-256 fdceef911c689e88ecb14b64a49e46c87ddcc34157a5c419192b3f94ae861fea
    Addresses
    104.21.79.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.46, 172.67.141.240): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    skinoport.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:27 UTC

    Suggest a correction

  96. songlin02.buzz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    songlin02.buzz
    First seen
    2026-11-07 05:16 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 01:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 04:16 UTC to 2027-02-05 04:16 UTC
    Logged 2026-11-07 05:14 UTC in DigiCert Wyvern2027h1, entry 437,626,484
    SHA-256 2737967f6812431ba0adedaab3ca3c3acd2ac98df98e6b97d5feb023c9a174e5
    Public key SHA-256 ac64dcb4998fb73b235e16e74843b0f0d7e6081fff005bd88f83025a14df31b2
    Addresses
    104.21.76.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.250, 172.67.202.131): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    songlin02.buzz
    Registered
    2026-05-12 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  97. wfquke.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    wfquke.xyz
    First seen
    2026-11-07 05:16 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 01:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:12 UTC to 2027-02-05 05:11 UTC
    Logged 2026-11-07 05:12 UTC in Let's Encrypt Sycamore2027h1, entry 1,004,445,565
    SHA-256 b59e4e5cc387a5e971ddfc12079590ce8d017ea7ed35864723ddb9824fab3a2f
    Public key SHA-256 cec7c2da52247c4f066d33694ddc0f2ace0109499819596e163a1f3feef57d01
    Addresses
    104.21.36.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.149, 172.67.195.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wfquke.xyz
    Registered
    2026-09-08 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:33 UTC

    Suggest a correction

  98. dferlfa.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    dferlfa.store
    First seen
    2026-11-07 05:11 UTC
    First published
    2026-11-07 05:24 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 01:34 UTC
    DNS
    Resolves · checked 2026-11-07 05:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:06 UTC to 2027-02-05 05:05 UTC
    Logged 2026-11-07 05:06 UTC in Google PlumbersArms2027h1, entry 655,454,141
    SHA-256 e059f63b4a6d57fd0ec42ce525bb911d4e08b7893ae57d70aa41beaf4fed112d
    Public key SHA-256 88c63f1fee2586f4d027ffa102a1817ba6272e21a49b4ba075e4fb59f1a62324
    Addresses
    104.21.14.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.14.154, 172.67.203.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dferlfa.store
    Registered
    2026-09-09 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:22 UTC

    Suggest a correction

  99. dinokrop.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 18 mo ago
    DetailsHide
    Hostname
    dinokrop.com
    First seen
    2026-11-07 05:11 UTC
    First published
    2026-11-07 05:24 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 05:54 UTC
    DNS
    Resolves · checked 2026-11-07 05:35 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 04:10 UTC to 2027-02-05 04:10 UTC
    Logged 2026-11-07 05:08 UTC in Google PlumbersArms2027h1, entry 655,472,056
    SHA-256 3f1ebb58e04c8f7fb8094a5dc21fdf561d77b74bb20ed9398c058a4a48faf191
    Public key SHA-256 80b9bb298a3507f4e2129369ba23ba48131b1df5e6f600a518bf814214587775
    PhishDestroy
    Addresses
    104.21.54.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.174, 172.67.168.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dinokrop.com
    Registered
    2025-05-04 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:22 UTC

    Suggest a correction

  100. pyrrpi.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    pyrrpi.icu
    First seen
    2026-11-07 05:11 UTC
    First published
    2026-11-07 05:24 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 01:34 UTC
    DNS
    Resolves · checked 2026-11-07 05:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 04:09 UTC to 2027-02-05 05:07 UTC
    Logged 2026-11-07 05:09 UTC in Google PlumbersArms2027h1, entry 655,480,780
    SHA-256 bd7858ea1305d0d19c850dad2e45380357f8a254640ffa54aec08af62bc52483
    Public key SHA-256 4b4b90c65053568a4b5b2f5ee104ae19d10f15607812ea994a5801faeae98ec3
    Addresses
    104.21.77.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.114, 172.67.207.88): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pyrrpi.icu
    Registered
    2026-09-08 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:22 UTC

    Suggest a correction

Showing 1–100 of 2,820 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources