Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-07 21:16 UTC
Certificate-log entries · 24 h
314.7M
from 84 distinct feeds
Unique certificates · 24 h
30.7M
each reviewed
Names resolved · 24 h
19.7M
14.5M with an address
Findings · 24 h
6,086
213 of 1,061 brands targeted

2,578 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. europeancryptounionplatform.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    europeancryptounionplatform.com
    First seen
    2026-11-07 21:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 20:15 UTC to 2027-02-05 20:15 UTC
    Logged 2026-11-07 21:14 UTC in Google ParcelYard2027h1, entry 666,483,952
    SHA-256 2936c3fa338ca1f6a72963f5bf06360ca29d1734da35fdc8fecfe43edfb9066e
    Public key SHA-256 eb98f5b04ef61311977b6251a6b756bd808ff5b918eb64e00cff996554ec8c06
    Addresses
    104.21.92.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:5c94
    2606:4700:3035::ac43:c337
    Cloudflare
    Cloudflare (104.21.92.148, 172.67.195.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    europeancryptounionplatform.com
    Registered
    2026-05-14 · Realtime Register B.V.
    MX
    Receives mail at _dc-mx.dda0c4047525.europeancryptounionplatform.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  2. ferro-protocol.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    ferro-protocol.com
    First seen
    2026-11-07 21:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 20:16 UTC to 2027-02-05 20:16 UTC
    Logged 2026-11-07 21:15 UTC in DigiCert Wyvern2027h1, entry 445,910,538
    SHA-256 c93e090ebc721db395778190cccce95f6828f0dbbd1070fd758f4a01f829bb96
    Public key SHA-256 e6d98958c48ed2bf9b1b202ad0b5eab9dcbff1b192df0e9be239fbd63003eee7
    Addresses
    104.21.35.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:d52e
    2606:4700:3037::6815:2329
    Cloudflare
    Cloudflare (104.21.35.41, 172.67.213.46): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ferro-protocol.com
    Registered
    2026-04-09 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  3. www.exchangeio.ink US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareUnder exchangeio.ink, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.exchangeio.ink
    First seen
    2026-11-07 21:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask, listing exchangeio.ink and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 20:10 UTC to 2027-02-05 21:07 UTC
    Logged 2026-11-07 21:10 UTC in Let's Encrypt Willow2027h1, entry 992,025,151
    SHA-256 5efb8e07bac63f9d71b437387fe3bb0a241359f575e37e83685e17dceb681d90
    Public key SHA-256 bbb2b5cab9f76b1b2944cb096dea88e1553bca04b5078426efa201901f5f33d6
    Addresses
    104.21.39.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:27fd
    2606:4700:3036::ac43:acd5
    Cloudflare
    Cloudflare (104.21.39.253, 172.67.172.213): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    exchangeio.ink
    Registered
    2026-05-14 · NameMart Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  4. aeroxyz.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    aeroxyz.click
    First seen
    2026-11-07 21:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 20:08 UTC to 2027-02-05 21:06 UTC
    Logged 2026-11-07 21:08 UTC in IPng Networks Halloumi2027h1, entry 403,586,030
    SHA-256 5f278ea634d4c69bdfa603e7e64d64b968d776c149b83b9213d1f51922fa0c25
    Public key SHA-256 883475fc9e7069fce5e8a9811254b364cc3b5cd84e2e60463b0629b09844cbcf
    Addresses
    104.21.53.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.73, 172.67.210.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aeroxyz.click
    Registered
    2026-09-09 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  5. brokerfarm.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    brokerfarm.live
    First seen
    2026-11-07 21:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 20:06 UTC to 2027-02-05 21:04 UTC
    Logged 2026-11-07 21:06 UTC in Google PlumbersArms2027h1, entry 666,707,964
    SHA-256 7b61fd1c9afa83e7aaf14e1e5d8085bcc751b69edc87e6497318d5a0402b7172
    Public key SHA-256 0c5255b8126b9436bd1c1a7d8a701ad58423d181178897b5501815aec54a9087
    Addresses
    104.21.27.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.225, 172.67.169.201): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    brokerfarm.live
    Registered
    2026-09-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  6. cashcat-robinhd.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    cashcat-robinhd.xyz
    First seen
    2026-11-07 21:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-09 19:22 UTC to 2026-12-08 20:21 UTC
    Logged 2026-11-07 21:08 UTC in DigiCert Wyvern2026h2, entry 2,210,849,802
    SHA-256 1b4ce6ba064cd962cff0d05cc3278bdefe530a415fc735e2f4a406a8c79d33fd
    Public key SHA-256 fd9e4899db9a4e9f027f7da3a7d8879ed5efc6f5cd16efbf4f86e54d5ae1a909
    Addresses
    104.21.60.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.60.251, 172.67.203.144): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cashcat-robinhd.xyz
    Registered
    2026-07-12 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  7. claim-pixelcoin.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    claim-pixelcoin.cc
    First seen
    2026-11-07 21:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 20:10 UTC to 2027-02-05 20:10 UTC
    Logged 2026-11-07 21:09 UTC in Google PlumbersArms2027h1, entry 666,745,968
    SHA-256 e849bc6db74c701a7ee67daed5e35580debb168ff6ff83d5a89c6ba46213bf0c
    Public key SHA-256 86f1a42179bf4b944a72cdd410bf86813493c204c1456d837dc394f568d01278
    Addresses
    104.21.68.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.225, 172.67.199.51): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    claim-pixelcoin.cc
    Registered
    2026-05-14 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:14 UTC

    Suggest a correction

  8. cumbregananciosoftware.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    cumbregananciosoftware.com
    First seen
    2026-11-07 21:10 UTC
    Listing
    CERT Polska listed it 2026-09-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 18:27 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 20:08 UTC to 2027-02-05 21:07 UTC
    Logged 2026-11-07 21:08 UTC in Google PlumbersArms2027h1, entry 666,730,542
    SHA-256 5b6fbf6c634f9cd9f0c7972ff6654883043a2548a96da0b0a516575977836e82
    Public key SHA-256 52d01398fb574b5a31d7e5a80ee926c6eb548358de6eeb8f41d3e3c54d6e31d0
    Addresses
    104.21.53.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.62, 172.67.209.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cumbregananciosoftware.com
    Registered
    2026-02-22 · MainReg Inc.
    MX
    Receives mail at mail.cumbregananciosoftware.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  9. exchangeio.ink US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    exchangeio.ink
    First seen
    2026-11-07 21:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 20:08 UTC to 2027-02-05 21:05 UTC
    Logged 2026-11-07 21:08 UTC in Google PlumbersArms2027h1, entry 666,734,780
    SHA-256 0f2dcf78c040c82013727f97d30642bf92dadace987d0f3708480316c75f2faa
    Public key SHA-256 7c6dbda78ec53df65ef4345a61b0b8d5a9fd7e5634ad97639312cbb2c3a5b9dd
    Addresses
    104.21.39.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.253, 172.67.172.213): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    exchangeio.ink
    Registered
    2026-05-14 · NameMart Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  10. exchangeio.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    exchangeio.net
    First seen
    2026-11-07 21:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 20:09 UTC to 2027-02-05 21:06 UTC
    Logged 2026-11-07 21:09 UTC in Google PlumbersArms2027h1, entry 666,751,679
    SHA-256 1e26d07a0338020106235a14989d7ae3504f003cd21e0c1584f7ab105091ab48
    Public key SHA-256 ebbba92dfd823d8fd001736c61b77fdb87acb9f071d75c5d30ea082ba385472f
    Addresses
    104.21.33.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.196, 172.67.149.25): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    exchangeio.net
    Registered
    2026-05-14 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  11. golkarbulukumba.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF missingDMARC missingRegistered 15 mo ago
    DetailsHide
    Hostname
    golkarbulukumba.com
    First seen
    2026-11-07 21:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-07 20:07 UTC to 2027-02-05 20:07 UTC
    Logged 2026-11-07 21:06 UTC in Google PlumbersArms2027h1, entry 666,706,894
    SHA-256 7749d357edc02db0fc73fc7cd5a1f7c32f211938463e568a5f56bc657ee0fa04
    Public key SHA-256 1ed7a931dbce3b1ed70caf26db088dd674fbad25916f37da1043c188e57dbc89
    PhishDestroy
    Addresses
    104.21.51.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.28, 172.67.220.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    golkarbulukumba.com
    Registered
    2025-08-11 · Gname.com Pte. Ltd.
    MX
    Receives mail at ghs.google.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  12. www.exchangeio.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder exchangeio.net, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.exchangeio.net
    First seen
    2026-11-07 21:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask, listing exchangeio.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 20:09 UTC to 2027-02-05 21:06 UTC
    Logged 2026-11-07 21:09 UTC in Google PlumbersArms2027h1, entry 666,751,679
    SHA-256 1e26d07a0338020106235a14989d7ae3504f003cd21e0c1584f7ab105091ab48
    Public key SHA-256 ebbba92dfd823d8fd001736c61b77fdb87acb9f071d75c5d30ea082ba385472f
    Addresses
    104.21.33.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.196, 172.67.149.25): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    exchangeio.net
    Registered
    2026-05-14 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  13. www.golkarbulukumba.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder golkarbulukumba.com, reported by PhishDestroyMX presentSPF missingDMARC missingRegistered 15 mo ago
    DetailsHide
    Hostname
    www.golkarbulukumba.com
    First seen
    2026-11-07 21:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing golkarbulukumba.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-07 20:07 UTC to 2027-02-05 20:07 UTC
    Logged 2026-11-07 21:06 UTC in Google PlumbersArms2027h1, entry 666,706,894
    SHA-256 7749d357edc02db0fc73fc7cd5a1f7c32f211938463e568a5f56bc657ee0fa04
    Public key SHA-256 1ed7a931dbce3b1ed70caf26db088dd674fbad25916f37da1043c188e57dbc89
    PhishDestroy
    Addresses
    104.21.51.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.28, 172.67.220.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    golkarbulukumba.com
    Registered
    2025-08-11 · Gname.com Pte. Ltd.
    MX
    Receives mail at ghs.google.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  14. wwwcolchoesemma.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    wwwcolchoesemma.com
    First seen
    2026-11-07 21:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 20:06 UTC to 2027-02-05 20:06 UTC
    Logged 2026-11-07 21:05 UTC in IPng Networks Halloumi2027h1, entry 403,553,759
    SHA-256 87103af0f235fea19c318da385f1b7f7f12862d77ee7f42538cf3f1d75bd848c
    Public key SHA-256 949de71f0b5b6a2c6594cb008fd488e70ca0a5f30ce9adb539e23e065d79ef18
    PhishDestroy
    Addresses
    104.21.62.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.62.176, 172.67.137.230): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wwwcolchoesemma.com
    Registered
    2026-02-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  15. fi-strategy-assistant-website.website US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    fi-strategy-assistant-website.website
    First seen
    2026-11-07 21:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-29 15:14 UTC to 2026-12-28 16:14 UTC
    Logged 2026-11-07 21:02 UTC in DigiCert Wyvern2026h2, entry 2,210,839,123
    SHA-256 1c9e5186628cd7897d15d288a4af65a06f9b7fd2182a98fae8fc1f2d0c09c494
    Public key SHA-256 32ae278da4ef90c950945c59ea7821a0c474d14580fd02efaf16ad9e8c97d904
    Addresses
    104.21.76.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.147, 172.67.196.62): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fi-strategy-assistant-website.website
    Registered
    2026-07-12 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  16. gjxmk.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    gjxmk.work
    First seen
    2026-11-07 21:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 13:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 20:03 UTC to 2027-02-05 20:03 UTC
    Logged 2026-11-07 21:02 UTC in IPng Networks Halloumi2027h1, entry 403,524,864
    SHA-256 61cee06bbbdb9560c567c9e76b47cb725f06e67db870e65ace0fb93f64b150de
    Public key SHA-256 bc857b1e6c0cc18cf28c8ca429d642609505009afb37765326c0d3bd09409993
    Addresses
    104.21.68.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.97, 172.67.193.225): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gjxmk.work
    Registered
    2026-05-14 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  17. home--en--ledgr.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    home--en--ledgr.pages.dev
    First seen
    2026-11-07 21:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 20:02 UTC to 2027-02-05 21:00 UTC
    Logged 2026-11-07 21:02 UTC in Let's Encrypt Willow2027h1, entry 991,920,941
    SHA-256 bd5ef763236a232ac919229c6ef8765b857ca84651b717970a64365f70d931ec
    Public key SHA-256 d7fa36549d811a853c7b1932314834ddd9d3b0f8609d2da45a5afadede1d0a9a
    Addresses
    172.66.44.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.125, 172.66.47.131): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  18. interbahisresmigirisler.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    interbahisresmigirisler.vip
    First seen
    2026-11-07 21:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-09 16:46 UTC to 2026-12-08 17:44 UTC
    Logged 2026-11-07 21:01 UTC in DigiCert Wyvern2026h2, entry 2,210,838,371
    SHA-256 226459452acd60b88ba50e63498c70684a0d6e2d8ad1b8ffcd93ee9c464eca91
    Public key SHA-256 55abe219ce6ef1d905f68ca2754152384833d7367343e3b414b54d5fb38524ac
    PhishDestroy
    Addresses
    104.21.88.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.88.195, 172.67.152.156): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    interbahisresmigirisler.vip
    Registered
    2026-07-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:09 UTC

    Suggest a correction

  19. kra45---c--c.ru US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    kra45---c--c.ru
    First seen
    2026-11-07 21:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 20:02 UTC to 2027-02-05 21:00 UTC
    Logged 2026-11-07 21:02 UTC in IPng Networks Halloumi2027h1, entry 403,523,545
    SHA-256 12e04a92c3cdc2aa6537807fc2af0fc113f6c5bdcbca5e0887bb7cacb96cbbad
    Public key SHA-256 7cc334676abe11bb5f88331ce038c2ce0d5ea22685008f47259f04b539c6b436
    PhishDestroy
    Addresses
    104.21.62.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.62.8, 172.67.217.167): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kra45---c--c.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:09 UTC

    Suggest a correction

  20. ledger-co.io US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ledger-co.io
    First seen
    2026-11-07 21:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 20:03 UTC to 2027-02-05 21:01 UTC
    Logged 2026-11-07 21:03 UTC in Google PlumbersArms2027h1, entry 666,668,812
    SHA-256 05b423b8161582e76ece34496f00f0191ab06ce25a33defa3fe1645f579ae6fe
    Public key SHA-256 4261a7c83d787d017d610abe01e9cd930f129a1e04c82131b91f7145fbda1dde
    Addresses
    104.21.67.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.193, 172.67.180.33): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ledger-co.io
    Registered
    2026-07-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  21. makerduoo.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    makerduoo.pro
    First seen
    2026-11-07 21:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 20:05 UTC to 2027-02-05 20:05 UTC
    Logged 2026-11-07 21:04 UTC in IPng Networks Halloumi2027h1, entry 403,541,891
    SHA-256 0b043eaeba74c09ec853d32576a8351a1df781a44af80773f302eb879ee55ce1
    Public key SHA-256 6e1b836083b7fd7a8cc0b2cf2083da89d0f17ff6a09218d7aabd41081d0b81a0
    Addresses
    104.21.44.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.44.195, 172.67.203.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    makerduoo.pro
    Registered
    2026-05-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  22. moonshot-vote.bond US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    moonshot-vote.bond
    First seen
    2026-11-07 21:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 20:04 UTC to 2027-02-05 20:04 UTC
    Logged 2026-11-07 21:02 UTC in Let's Encrypt Willow2027h1, entry 991,921,958
    SHA-256 498bd842762c1daba7ed4abe282aae0ac99395a8a2f5e0b89a4058312dbc0f98
    Public key SHA-256 75db44b4f496bfa6f81d81f4b0bff1f94bb68975b79537322b1bd59dce14e2a9
    PhishDestroy
    Addresses
    104.21.54.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.6, 172.67.221.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    moonshot-vote.bond
    Registered
    2026-03-16 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  23. gdfxdw.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    gdfxdw.xyz
    First seen
    2026-11-07 21:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 13:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:59 UTC to 2027-02-05 20:58 UTC
    Logged 2026-11-07 20:59 UTC in Google ParcelYard2027h1, entry 666,289,383
    SHA-256 dd4ca620c742dbea2c6ea29d78fc0c62500dc16e36cf29975fb06cb2b8e70f6d
    Public key SHA-256 d34d846cf8f76eec1a34740ec34eed5bfd3ee77f6c0e28add11eb63ff4aed05b
    Addresses
    104.21.77.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.209, 172.67.211.134): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gdfxdw.xyz
    Registered
    2025-11-18 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  24. fulcrom-finance.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    fulcrom-finance.net
    First seen
    2026-11-07 20:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:51 UTC to 2027-02-05 20:50 UTC
    Logged 2026-11-07 20:51 UTC in DigiCert Sphinx2027h1, entry 394,061,553
    SHA-256 e013d8348e87ac297ff0c23b489edc09c58eb75821eda4a59ed153302c6388f2
    Public key SHA-256 b268ff236672140f3803788015bcdbf6256fb52d7ad80515e849f48f7af0b91a
    Addresses
    104.21.85.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.207, 172.67.210.152): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fulcrom-finance.net
    Registered
    2026-04-09 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  25. micescrewdriverspear.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    micescrewdriverspear.com
    First seen
    2026-11-07 20:56 UTC
    Listing
    USOM listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 20:31 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 19:52 UTC to 2027-02-05 19:52 UTC
    Logged 2026-11-07 20:51 UTC in Google ParcelYard2027h1, entry 666,191,227
    SHA-256 7c2c5de3954cf250a7b830b6b7e3f2814ad13b1986348154ba536c89781d3dfa
    Public key SHA-256 ce7d686922d863aedb14b50e8015f1d99fcc814c1c4228e31fbe63f5247eb84b
    Addresses
    104.21.7.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.7.145, 172.67.187.154): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    micescrewdriverspear.com
    Registered
    2026-05-14 · Sav.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  26. tevehyron.help US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    tevehyron.help
    First seen
    2026-11-07 20:56 UTC
    Listing
    CERT Polska listed it 2026-09-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 18:27 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 19:54 UTC to 2027-02-05 19:54 UTC
    Logged 2026-11-07 20:53 UTC in DigiCert Sphinx2027h1, entry 394,077,401
    SHA-256 14ae384e33a9e563c63242534ced912ef81501fc566d472ec77029e9bcc621fb
    Public key SHA-256 b75302aa8321df9188dcb39dc666de417a285f3b40bb702b0affe21fdf30d29f
    Addresses
    104.21.46.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.243, 172.67.143.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tevehyron.help
    Registered
    2026-05-14 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  27. www.omotoyosifoundation.com.ng US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder omotoyosifoundation.com.ng, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 20 mo ago
    DetailsHide
    Hostname
    www.omotoyosifoundation.com.ng
    First seen
    2026-11-07 20:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing omotoyosifoundation.com.ng and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 19:56 UTC to 2027-02-05 19:56 UTC
    Logged 2026-11-07 20:54 UTC in Geomys Tuscolo2027h1, entry 519,197,277
    SHA-256 074144f7c7b510b214c7c9cfa40172cdd62053f0be9a86e1e3774b9b474c7d71
    Public key SHA-256 372db1533a993e8771d4c4903458254424ea4e2c3c2eaadf63ecd815708aaa30
    PhishDestroy
    Addresses
    104.21.33.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.84, 172.67.160.128): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    omotoyosifoundation.com.ng
    Registered
    2025-03-26 · MYDOT.NGONLINE
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:50 UTC

    Suggest a correction

  28. carrefourtemis.ca US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    carrefourtemis.ca
    First seen
    2026-11-07 20:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-07 19:48 UTC to 2027-02-05 19:48 UTC
    Logged 2026-11-07 20:46 UTC in Let's Encrypt Willow2027h1, entry 991,720,277
    SHA-256 01be9960ddca30c8bf8689168a03748102d61ea1d8879d60ab2073f51041ead2
    Public key SHA-256 6790afc468b2ec0bc0df0065aa1c21926cebf3e4cfb2342edd26ad95ca7fc9ff
    PhishDestroy
    Addresses
    104.21.25.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.242, 172.67.134.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    carrefourtemis.ca
    Registered
    2026-08-21 · CENTRALNIC CANADA INC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  29. dev-website.aurum.foundation US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder aurum.foundation, listed by FSMA (cryptocurrency fraud)MX presentSPF -allDMARC policy noneRegistered 2 y ago
    DetailsHide
    Hostname
    dev-website.aurum.foundation
    First seen
    2026-11-07 20:51 UTC
    Listing
    FSMA warned about it 2026-07-06 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 15:40 UTC
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    FSMA, listing aurum.foundation and the names under it
    1. Warning by FSMA
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 19:49 UTC to 2027-02-05 20:47 UTC
    Logged 2026-11-07 20:49 UTC in Geomys Tuscolo2027h1, entry 519,145,746
    SHA-256 0559cb675e14b6a3db21e39186e46589d7a6a0cbb1f4dfbd863d32f07131b90b
    Public key SHA-256 c7f65242b89634ce4e3c7a1f698851018314729eb513cf289a703b1b74cca303
    Addresses
    104.21.38.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.184, 172.67.137.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aurum.foundation
    Registered
    2024-08-01 · NameCheap, Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 05:12 UTC

    Suggest a correction

  30. insegik.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    insegik.com
    First seen
    2026-11-07 20:51 UTC
    Listing
    CERT Polska listed it 2026-05-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 18:27 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 19:47 UTC to 2027-02-05 19:47 UTC
    Logged 2026-11-07 20:46 UTC in Geomys Tuscolo2027h1, entry 519,112,550
    SHA-256 03f3d2d51035c00d0f82e7cef326dcaf181b3072cb79f37e5d557ed18df68289
    Public key SHA-256 25ac3a879226a1a0970d3da3711dbef6b1e5ddcc50eda062f5b30564cccc839a
    Addresses
    104.21.10.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.145, 172.67.163.152): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    insegik.com
    Registered
    2026-05-14 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  31. reward-center.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    reward-center.net
    First seen
    2026-11-07 20:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 19:46 UTC to 2027-02-05 20:43 UTC
    Logged 2026-11-07 20:46 UTC in Google ParcelYard2027h1, entry 666,128,895
    SHA-256 1e780e8cac44d7f27d7f70de3e607056006011fed66fbbb5beb8c4b6f0da8b7b
    Public key SHA-256 bec3d8cbe22b9df75bb7bc1be3514651bb22ea6ffa44719df27433facd9eda9d
    Addresses
    104.21.34.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.31, 172.67.167.216): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    reward-center.net
    Registered
    2026-06-10 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  32. stg.reward-center.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder reward-center.net, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    stg.reward-center.net
    First seen
    2026-11-07 20:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask, listing reward-center.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 19:46 UTC to 2027-02-05 20:43 UTC
    Logged 2026-11-07 20:46 UTC in Google ParcelYard2027h1, entry 666,128,895
    SHA-256 1e780e8cac44d7f27d7f70de3e607056006011fed66fbbb5beb8c4b6f0da8b7b
    Public key SHA-256 bec3d8cbe22b9df75bb7bc1be3514651bb22ea6ffa44719df27433facd9eda9d
    Addresses
    104.21.34.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.31, 172.67.167.216): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    reward-center.net
    Registered
    2026-06-10 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  33. www-keepass.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    www-keepass.info
    First seen
    2026-11-07 20:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:46 UTC to 2027-02-05 20:44 UTC
    Logged 2026-11-07 20:46 UTC in Google ParcelYard2027h1, entry 666,126,845
    SHA-256 7b0552a211ba0a0db608ed4391b678c89335d0b58cc5fcbcc273d555fd5aeb4b
    Public key SHA-256 69e82ffa64ee2d8abbe5fb373a1eb0c58a667b407d3409c15924994082b9d457
    Addresses
    104.21.18.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.253, 172.67.184.73): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    www-keepass.info
    Registered
    2026-01-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  34. www.carrefourtemis.ca US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder carrefourtemis.ca, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.carrefourtemis.ca
    First seen
    2026-11-07 20:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing carrefourtemis.ca and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-07 19:48 UTC to 2027-02-05 19:48 UTC
    Logged 2026-11-07 20:46 UTC in Let's Encrypt Willow2027h1, entry 991,720,277
    SHA-256 01be9960ddca30c8bf8689168a03748102d61ea1d8879d60ab2073f51041ead2
    Public key SHA-256 6790afc468b2ec0bc0df0065aa1c21926cebf3e4cfb2342edd26ad95ca7fc9ff
    PhishDestroy
    Addresses
    104.21.25.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.242, 172.67.134.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    carrefourtemis.ca
    Registered
    2026-08-21 · CENTRALNIC CANADA INC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  35. 2.video-lezione.it US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder video-lezione.it, reported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    2.video-lezione.it
    First seen
    2026-11-07 20:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing video-lezione.it and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 19:41 UTC to 2027-02-05 20:39 UTC
    Logged 2026-11-07 20:41 UTC in DigiCert Wyvern2027h1, entry 445,599,225
    SHA-256 14b12cc1221a193120dacaaf1f8e512dc0f1cdfb1644bc514ea89c030cabedcf
    Public key SHA-256 4c9384278f66702a097a4c04e43128311d78e5ef1347dd4951aba8997bf9b884
    PhishDestroy
    Addresses
    104.21.29.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.164, 172.67.149.118): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    video-lezione.it
    MX
    Receives mail at mx00.ionos.it, mx01.ionos.it
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:27 UTC

    Suggest a correction

  36. avenspol.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    avenspol.digital
    First seen
    2026-11-07 20:46 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 18:27 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:42 UTC to 2027-02-05 20:40 UTC
    Logged 2026-11-07 20:42 UTC in Google PlumbersArms2027h1, entry 666,412,588
    SHA-256 caddc26e4dd907902e1b1bdf132ac922b87dff4aabd68aa6689dedd159813548
    Public key SHA-256 77f326bc2bdcb37d12352aec6f92cdbf6d50c2034c89e8599b43101176a5dce3
    Addresses
    104.21.26.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.26.126, 172.67.136.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    avenspol.digital
    Registered
    2026-07-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  37. balancer-fi.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    balancer-fi.com
    First seen
    2026-11-07 20:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 19:43 UTC to 2027-02-05 19:43 UTC
    Logged 2026-11-07 20:41 UTC in DigiCert Sphinx2027h1, entry 393,999,724
    SHA-256 1c1721e4642dcee25bfee15d0bd2bc92882609b6bd8a98214400666eac36ece6
    Public key SHA-256 b68990e20b5ebd85f048b681cd9b2df75cb935ae42b82b7d2e2f02b576b5672b
    Addresses
    104.21.82.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.103, 172.67.200.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    balancer-fi.com
    Registered
    2026-04-09 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  38. c.video-lezione.it US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder video-lezione.it, reported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    c.video-lezione.it
    First seen
    2026-11-07 20:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing video-lezione.it and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 19:45 UTC to 2027-02-05 20:43 UTC
    Logged 2026-11-07 20:45 UTC in Let's Encrypt Sycamore2027h1, entry 1,025,756,538
    SHA-256 04a042da72643ef1f5c71b57833def0fdc472e50a8eaeca5c4898010ae645df0
    Public key SHA-256 0987bc27bb33b805c655dd71430d6f22e8e4e17a1dcb24ea25b3f2b4733037d2
    PhishDestroy
    Addresses
    104.21.29.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.164, 172.67.149.118): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    video-lezione.it
    MX
    Receives mail at mx00.ionos.it, mx01.ionos.it
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:27 UTC

    Suggest a correction

  39. deanh.me US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    deanh.me
    First seen
    2026-11-07 20:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:40 UTC to 2027-02-05 20:39 UTC
    Logged 2026-11-07 20:40 UTC in Google ParcelYard2027h1, entry 666,059,845
    SHA-256 54700f65f6d0d8f98f5ba8415b9c26e0d879186376d9dbc195a24a1c055d5943
    Public key SHA-256 c1064ace419b7a129f81100ff4231b5a249563d71f0828ed631b07aff7260066
    Addresses
    104.21.85.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.88, 172.67.204.58): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    deanh.me
    Registered
    2026-09-09 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  40. fassets-flare.foundation US · AS13335 · Cloudflare, Inc.4 addressesFlare Network
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    fassets-flare.foundation
    First seen
    2026-11-07 20:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 19:46 UTC to 2027-02-05 19:46 UTC
    Logged 2026-11-07 20:45 UTC in Geomys Tuscolo2027h1, entry 519,103,949
    SHA-256 7e08702f98ce636c2f6c0f665cf34847d98598caabc01bfb3def9fabbbc90932
    Public key SHA-256 3d49a1287cc9a0fffc9e0331c1c7c559732c42b7b8e3eab6698cd827223b40c7
    Brand
    Flare Network
    Addresses
    104.21.61.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:d925
    2606:4700:3034::6815:3df2
    Cloudflare
    Cloudflare (104.21.61.242, 172.67.217.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fassets-flare.foundation
    Registered
    2026-05-14 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:47 UTC

    Suggest a correction

  41. kuneopa.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    kuneopa.shop
    First seen
    2026-11-07 20:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 13:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:41 UTC to 2027-02-05 20:40 UTC
    Logged 2026-11-07 20:41 UTC in Google PlumbersArms2027h1, entry 666,402,594
    SHA-256 1c7f5d1ebf03c00f423a4dbeca485c9fca5554b6b1cf10d7406dc1df80d33f0b
    Public key SHA-256 411b6d77ea741a85fca216add3817945c0a1ae2e057822c57edf5829f4788251
    Addresses
    104.21.4.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.58, 172.67.154.8): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kuneopa.shop
    Registered
    2025-11-18 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  42. live.aaveapp.us US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder aaveapp.us, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    live.aaveapp.us
    First seen
    2026-11-07 20:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    PhishDestroy: observed back in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 17:55 UTC · listed 2 times
    Earlier listing periods: 2026-10-25 to 2026-11-02 (8 days)
    Listed
    MetaMask, listing aaveapp.us and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 19:43 UTC to 2027-02-05 20:42 UTC
    Logged 2026-11-07 20:43 UTC in Let's Encrypt Sycamore2027h1, entry 1,025,711,025
    SHA-256 7112c45a59e08708880a43ce6bdf327c200db629d74caf5286e9c916d147bd83
    Public key SHA-256 635d3f9b08a395e40a99fac377332e20457e958e3d3e3b972e2be14aa807a546
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aaveapp.us
    Registered
    2026-04-09 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:07 UTC

    Suggest a correction

  43. mainnet-flare.com US · AS13335 · Cloudflare, Inc.2 addressesFlare Network
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    mainnet-flare.com
    First seen
    2026-11-07 20:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 19:46 UTC to 2027-02-05 19:46 UTC
    Logged 2026-11-07 20:45 UTC in Let's Encrypt Willow2027h1, entry 991,706,511
    SHA-256 044bd5ce576c4c21f9ce21121026e0a7b1a4f9b6d5f7c1c9897dba966b619088
    Public key SHA-256 74e96fe3eb2a11a043233e22112337c8609252e7ba38f97152a4bd4ba41b04af
    Brand
    Flare Network
    Addresses
    104.21.58.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.253, 172.67.167.7): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mainnet-flare.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:47 UTC

    Suggest a correction

  44. official-torzon.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    official-torzon.org
    First seen
    2026-11-07 20:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:45 UTC to 2027-02-05 20:44 UTC
    Logged 2026-11-07 20:45 UTC in Google PlumbersArms2027h1, entry 666,445,846
    SHA-256 78651c59024b2594aff320e8ea3ab163d905a7deff931bc3f9afd57ae2bf65c2
    Public key SHA-256 d6d61167555a83b2278770c6c19f6d56abef2c79bf3139d85464551c1bc88b44
    PhishDestroy
    Addresses
    104.21.64.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.64.201, 172.67.136.52): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    official-torzon.org
    Registered
    2026-01-03 · Internet Domain Service BS Corp
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  45. pn5rig.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    pn5rig.net
    First seen
    2026-11-07 20:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 19:42 UTC to 2027-02-05 20:40 UTC
    Logged 2026-11-07 20:42 UTC in Google PlumbersArms2027h1, entry 666,412,230
    SHA-256 32f03d2fff69320ee2c5195459962b0db494545470d7aa46db00186cb1d55bd7
    Public key SHA-256 ddbbb10167f89ab50c115f5963629a65f78cabef7bd2ca255c8ca353a5c71e03
    Addresses
    104.21.67.190 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.190, 172.67.179.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pn5rig.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:47 UTC

    Suggest a correction

  46. steamunderground.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    steamunderground.net
    First seen
    2026-11-07 20:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:40 UTC to 2027-02-05 20:39 UTC
    Logged 2026-11-07 20:40 UTC in Google PlumbersArms2027h1, entry 666,389,777
    SHA-256 1f1728f3c9316229320fd136b8a650a2f8465aa59662ffed68eae2d268d27d43
    Public key SHA-256 8206811775f9f3f8fa940eac2d6b55ac917eb6a0cad0ce477bd077f32ca80979
    PhishDestroy
    Addresses
    104.21.85.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.38, 172.67.201.229): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    steamunderground.net
    Registered
    2024-08-02 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:47 UTC

    Suggest a correction

  47. www.pn5rig.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder pn5rig.net, listed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.pn5rig.net
    First seen
    2026-11-07 20:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask, listing pn5rig.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 19:42 UTC to 2027-02-05 20:40 UTC
    Logged 2026-11-07 20:42 UTC in Google PlumbersArms2027h1, entry 666,412,230
    SHA-256 32f03d2fff69320ee2c5195459962b0db494545470d7aa46db00186cb1d55bd7
    Public key SHA-256 ddbbb10167f89ab50c115f5963629a65f78cabef7bd2ca255c8ca353a5c71e03
    Addresses
    104.21.67.190 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.190, 172.67.179.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pn5rig.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:47 UTC

    Suggest a correction

  48. yj520.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (phishing site)MX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    yj520.vip
    First seen
    2026-11-07 20:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 13:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 19:43 UTC to 2027-02-05 19:43 UTC
    Logged 2026-11-07 20:42 UTC in Google PlumbersArms2027h1, entry 666,407,043
    SHA-256 408128bd7a7b70e815bf799fb6b9564a68b75d7321f2929cd26f2d88456e499c
    Public key SHA-256 4e9c261c06e2c4d996408e70ce7c43da54543593cf6a6ffada0c220a58f08de1
    Addresses
    104.21.51.208 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.208, 172.67.185.228): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    yj520.vip
    Registered
    2026-03-16 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  49. lekkirendovikai.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    lekkirendovikai.net
    First seen
    2026-11-07 20:41 UTC
    Listing
    CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 18:27 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 19:40 UTC to 2027-02-05 19:40 UTC
    Logged 2026-11-07 20:39 UTC in Google PlumbersArms2027h1, entry 666,368,433
    SHA-256 31f99f1f59222156a3faccf9302393b44d83c0c93df08a7235396baf75a64f03
    Public key SHA-256 a04957e1dced5f25ad2a1b3b6d888c5d2cd78b7fa701f221e32e6237a3c071e0
    Addresses
    104.21.82.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.254, 172.67.166.114): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lekkirendovikai.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:42 UTC

    Suggest a correction

  50. nwealth-app-solution-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    nwealth-app-solution-com.financecryptoworld.com
    First seen
    2026-11-07 20:41 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 18:27 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:37 UTC to 2027-02-05 20:37 UTC
    Logged 2026-11-07 20:37 UTC in Google ParcelYard2027h1, entry 666,022,303
    SHA-256 2c693a53c3397d87592224b35c6d6f792319f890c888ee681ad396174e8a2125
    Public key SHA-256 01f927317ba612d2fab760ae513fe7b520ab4d183c3949851d43e2186cb15a5b
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  51. pounahe.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    pounahe.shop
    First seen
    2026-11-07 20:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 13:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:36 UTC to 2027-02-05 20:34 UTC
    Logged 2026-11-07 20:36 UTC in DigiCert Wyvern2027h1, entry 445,575,324
    SHA-256 a0141dfed36e52ce9bba93b5ec16b22bf9551caa0bbf44989d0f31be72663184
    Public key SHA-256 11cdeaf80750c8f24d8de813c587e3c3563d7e3f23ef366288989494bdbb3582
    Addresses
    104.21.27.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.90, 172.67.169.23): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pounahe.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:42 UTC

    Suggest a correction

  52. stake-link.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    stake-link.live
    First seen
    2026-11-07 20:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:37 UTC to 2027-02-05 20:35 UTC
    Logged 2026-11-07 20:37 UTC in Geomys Tuscolo2027h1, entry 519,027,785
    SHA-256 3e3685b84c68d8e2bb3020e9168ea2ba9e5ae967e2c257d9eb0e5b919f8a7371
    Public key SHA-256 400d86c4852107c03218725b67eda2591be8d04be43023ae67ffdf58ed95559f
    Addresses
    104.21.86.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.39, 172.67.214.126): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    stake-link.live
    Registered
    2026-07-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  53. appextrades.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF -allDMARC policy noneRegistered 11 mo ago
    DetailsHide
    Hostname
    appextrades.org
    First seen
    2026-11-07 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 19:33 UTC to 2027-02-05 19:33 UTC
    Logged 2026-11-07 20:32 UTC in DigiCert Sphinx2027h1, entry 393,946,304
    SHA-256 6689ec063a73c2f7e542ea3ebab0b9ad40280d77a9fe813d8f371d6ca43cd8c5
    Public key SHA-256 70c3e029ffaf985bcc065b6604c92fe7146dd9cf7ec1457b2841c8d563321c86
    PhishDestroy
    Addresses
    104.21.57.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.52, 172.67.141.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    appextrades.org
    Registered
    2025-12-20 · Dynadot Inc
    MX
    Receives mail at mx1.excelax.org, mx2.excelax.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  54. cpanel.appextrades.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder appextrades.org, reported by PhishDestroyMX presentSPF -allDMARC policy noneRegistered 11 mo ago
    DetailsHide
    Hostname
    cpanel.appextrades.org
    First seen
    2026-11-07 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing appextrades.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 19:33 UTC to 2027-02-05 19:33 UTC
    Logged 2026-11-07 20:32 UTC in DigiCert Sphinx2027h1, entry 393,946,304
    SHA-256 6689ec063a73c2f7e542ea3ebab0b9ad40280d77a9fe813d8f371d6ca43cd8c5
    Public key SHA-256 70c3e029ffaf985bcc065b6604c92fe7146dd9cf7ec1457b2841c8d563321c86
    PhishDestroy
    Addresses
    104.21.57.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.52, 172.67.141.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    appextrades.org
    Registered
    2025-12-20 · Dynadot Inc
    MX
    Receives mail at mx1.excelax.org, mx2.excelax.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  55. cpanel.qfsledgerdefi.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder qfsledgerdefi.com, reported by PhishDestroyMX presentSPF -allDMARC policy none
    DetailsHide
    Hostname
    cpanel.qfsledgerdefi.com
    First seen
    2026-11-07 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing qfsledgerdefi.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 19:34 UTC to 2027-02-05 19:34 UTC
    Logged 2026-11-07 20:33 UTC in Geomys Tuscolo2027h1, entry 518,996,276
    SHA-256 4be9741a2fb3308beaf7701a25a796ae64a56b745a7af58a03ca727defa79ed5
    Public key SHA-256 8735b13c6e284c2200588ec308c5a1b2b31db653af840e48aee3d6f32a3d968a
    PhishDestroy
    Addresses
    104.21.80.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.154, 172.67.151.86): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qfsledgerdefi.com
    MX
    Receives mail at mx1.excelax.org, mx2.excelax.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 20:37 UTC

    Suggest a correction

  56. cpcalendars.appextrades.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder appextrades.org, reported by PhishDestroyMX presentSPF -allDMARC policy noneRegistered 11 mo ago
    DetailsHide
    Hostname
    cpcalendars.appextrades.org
    First seen
    2026-11-07 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing appextrades.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 19:33 UTC to 2027-02-05 19:33 UTC
    Logged 2026-11-07 20:32 UTC in DigiCert Sphinx2027h1, entry 393,946,304
    SHA-256 6689ec063a73c2f7e542ea3ebab0b9ad40280d77a9fe813d8f371d6ca43cd8c5
    Public key SHA-256 70c3e029ffaf985bcc065b6604c92fe7146dd9cf7ec1457b2841c8d563321c86
    PhishDestroy
    Addresses
    104.21.57.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.52, 172.67.141.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    appextrades.org
    Registered
    2025-12-20 · Dynadot Inc
    MX
    Receives mail at mx1.excelax.org, mx2.excelax.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  57. cpcalendars.qfsledgerdefi.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder qfsledgerdefi.com, reported by PhishDestroyMX presentSPF -allDMARC policy none
    DetailsHide
    Hostname
    cpcalendars.qfsledgerdefi.com
    First seen
    2026-11-07 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing qfsledgerdefi.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 19:34 UTC to 2027-02-05 19:34 UTC
    Logged 2026-11-07 20:33 UTC in Geomys Tuscolo2027h1, entry 518,996,276
    SHA-256 4be9741a2fb3308beaf7701a25a796ae64a56b745a7af58a03ca727defa79ed5
    Public key SHA-256 8735b13c6e284c2200588ec308c5a1b2b31db653af840e48aee3d6f32a3d968a
    PhishDestroy
    Addresses
    104.21.80.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.154, 172.67.151.86): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qfsledgerdefi.com
    MX
    Receives mail at mx1.excelax.org, mx2.excelax.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 20:37 UTC

    Suggest a correction

  58. cpcontacts.appextrades.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder appextrades.org, reported by PhishDestroyMX presentSPF -allDMARC policy noneRegistered 11 mo ago
    DetailsHide
    Hostname
    cpcontacts.appextrades.org
    First seen
    2026-11-07 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing appextrades.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 19:33 UTC to 2027-02-05 19:33 UTC
    Logged 2026-11-07 20:32 UTC in DigiCert Sphinx2027h1, entry 393,946,304
    SHA-256 6689ec063a73c2f7e542ea3ebab0b9ad40280d77a9fe813d8f371d6ca43cd8c5
    Public key SHA-256 70c3e029ffaf985bcc065b6604c92fe7146dd9cf7ec1457b2841c8d563321c86
    PhishDestroy
    Addresses
    104.21.57.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.52, 172.67.141.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    appextrades.org
    Registered
    2025-12-20 · Dynadot Inc
    MX
    Receives mail at mx1.excelax.org, mx2.excelax.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  59. cpcontacts.qfsledgerdefi.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder qfsledgerdefi.com, reported by PhishDestroyMX presentSPF -allDMARC policy none
    DetailsHide
    Hostname
    cpcontacts.qfsledgerdefi.com
    First seen
    2026-11-07 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing qfsledgerdefi.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 19:34 UTC to 2027-02-05 19:34 UTC
    Logged 2026-11-07 20:33 UTC in Geomys Tuscolo2027h1, entry 518,996,276
    SHA-256 4be9741a2fb3308beaf7701a25a796ae64a56b745a7af58a03ca727defa79ed5
    Public key SHA-256 8735b13c6e284c2200588ec308c5a1b2b31db653af840e48aee3d6f32a3d968a
    PhishDestroy
    Addresses
    104.21.80.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.154, 172.67.151.86): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qfsledgerdefi.com
    MX
    Receives mail at mx1.excelax.org, mx2.excelax.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 20:37 UTC

    Suggest a correction

  60. gumboqqothazard.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    gumboqqothazard.info
    First seen
    2026-11-07 20:36 UTC
    Listing
    CERT Polska listed it 2026-10-06 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 18:27 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 19:37 UTC to 2027-02-05 19:36 UTC
    Logged 2026-11-07 20:35 UTC in Let's Encrypt Willow2027h1, entry 991,607,372
    SHA-256 427ac5d60361e6b8a829072a026dd26c7fa3063d521c0ca681c66cee39ba0b72
    Public key SHA-256 645d9483e6dc5c979dfabcd2c7b6f123733ada25175a07c32c760553a1df8c62
    Addresses
    104.21.62.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.62.97, 172.67.222.207): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gumboqqothazard.info
    Registered
    2026-01-12 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  61. ledger-com.io US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ledger-com.io
    First seen
    2026-11-07 20:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:32 UTC to 2027-02-05 20:31 UTC
    Logged 2026-11-07 20:32 UTC in Let's Encrypt Willow2027h1, entry 991,572,207
    SHA-256 05797a9892329d7b51d64ebdeaa81cbcd892c212da803c23648542d534b13249
    Public key SHA-256 67b7b7ad242c1b086e5225a75a9b68686f911c82597594575c87b4153ca31059
    Addresses
    104.21.9.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.137, 172.67.160.44): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ledger-com.io
    Registered
    2026-07-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  62. modernbox.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    modernbox.cc
    First seen
    2026-11-07 20:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 13:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:35 UTC to 2027-02-05 20:32 UTC
    Logged 2026-11-07 20:35 UTC in IPng Networks Halloumi2027h1, entry 403,309,778
    SHA-256 c375e2f3fd14afd315458a940b5f99f66e303e89e223d0999d8128ddc295f705
    Public key SHA-256 191dd990da2ac34ef91ffc4de10709b9f3d3733812964e12c51377d981c4e5a4
    Addresses
    104.21.96.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.96.74, 172.67.174.70): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    modernbox.cc
    Registered
    2025-11-17 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  63. qfsledgerdefi.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF -allDMARC policy none
    DetailsHide
    Hostname
    qfsledgerdefi.com
    First seen
    2026-11-07 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 19:34 UTC to 2027-02-05 19:34 UTC
    Logged 2026-11-07 20:33 UTC in Geomys Tuscolo2027h1, entry 518,996,276
    SHA-256 4be9741a2fb3308beaf7701a25a796ae64a56b745a7af58a03ca727defa79ed5
    Public key SHA-256 8735b13c6e284c2200588ec308c5a1b2b31db653af840e48aee3d6f32a3d968a
    PhishDestroy
    Addresses
    104.21.80.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.154, 172.67.151.86): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qfsledgerdefi.com
    MX
    Receives mail at mx1.excelax.org, mx2.excelax.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 20:37 UTC

    Suggest a correction

  64. webdisk.appextrades.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder appextrades.org, reported by PhishDestroyMX presentSPF -allDMARC policy noneRegistered 11 mo ago
    DetailsHide
    Hostname
    webdisk.appextrades.org
    First seen
    2026-11-07 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing appextrades.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 19:33 UTC to 2027-02-05 19:33 UTC
    Logged 2026-11-07 20:32 UTC in DigiCert Sphinx2027h1, entry 393,946,304
    SHA-256 6689ec063a73c2f7e542ea3ebab0b9ad40280d77a9fe813d8f371d6ca43cd8c5
    Public key SHA-256 70c3e029ffaf985bcc065b6604c92fe7146dd9cf7ec1457b2841c8d563321c86
    PhishDestroy
    Addresses
    104.21.57.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.52, 172.67.141.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    appextrades.org
    Registered
    2025-12-20 · Dynadot Inc
    MX
    Receives mail at mx1.excelax.org, mx2.excelax.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  65. webdisk.qfsledgerdefi.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder qfsledgerdefi.com, reported by PhishDestroyMX presentSPF -allDMARC policy none
    DetailsHide
    Hostname
    webdisk.qfsledgerdefi.com
    First seen
    2026-11-07 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing qfsledgerdefi.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 19:34 UTC to 2027-02-05 19:34 UTC
    Logged 2026-11-07 20:33 UTC in Geomys Tuscolo2027h1, entry 518,996,276
    SHA-256 4be9741a2fb3308beaf7701a25a796ae64a56b745a7af58a03ca727defa79ed5
    Public key SHA-256 8735b13c6e284c2200588ec308c5a1b2b31db653af840e48aee3d6f32a3d968a
    PhishDestroy
    Addresses
    104.21.80.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.154, 172.67.151.86): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qfsledgerdefi.com
    MX
    Receives mail at mx1.excelax.org, mx2.excelax.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 20:37 UTC

    Suggest a correction

  66. webmail.appextrades.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder appextrades.org, reported by PhishDestroyMX presentSPF -allDMARC policy noneRegistered 11 mo ago
    DetailsHide
    Hostname
    webmail.appextrades.org
    First seen
    2026-11-07 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing appextrades.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 19:33 UTC to 2027-02-05 19:33 UTC
    Logged 2026-11-07 20:32 UTC in DigiCert Sphinx2027h1, entry 393,946,304
    SHA-256 6689ec063a73c2f7e542ea3ebab0b9ad40280d77a9fe813d8f371d6ca43cd8c5
    Public key SHA-256 70c3e029ffaf985bcc065b6604c92fe7146dd9cf7ec1457b2841c8d563321c86
    PhishDestroy
    Addresses
    104.21.57.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.52, 172.67.141.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    appextrades.org
    Registered
    2025-12-20 · Dynadot Inc
    MX
    Receives mail at mx1.excelax.org, mx2.excelax.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  67. webmail.qfsledgerdefi.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder qfsledgerdefi.com, reported by PhishDestroyMX presentSPF -allDMARC policy none
    DetailsHide
    Hostname
    webmail.qfsledgerdefi.com
    First seen
    2026-11-07 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing qfsledgerdefi.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 19:34 UTC to 2027-02-05 19:34 UTC
    Logged 2026-11-07 20:33 UTC in Geomys Tuscolo2027h1, entry 518,996,276
    SHA-256 4be9741a2fb3308beaf7701a25a796ae64a56b745a7af58a03ca727defa79ed5
    Public key SHA-256 8735b13c6e284c2200588ec308c5a1b2b31db653af840e48aee3d6f32a3d968a
    PhishDestroy
    Addresses
    104.21.80.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.154, 172.67.151.86): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qfsledgerdefi.com
    MX
    Receives mail at mx1.excelax.org, mx2.excelax.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 20:37 UTC

    Suggest a correction

  68. www.appextrades.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder appextrades.org, reported by PhishDestroyMX presentSPF -allDMARC policy noneRegistered 11 mo ago
    DetailsHide
    Hostname
    www.appextrades.org
    First seen
    2026-11-07 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing appextrades.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 19:33 UTC to 2027-02-05 19:33 UTC
    Logged 2026-11-07 20:32 UTC in DigiCert Sphinx2027h1, entry 393,946,304
    SHA-256 6689ec063a73c2f7e542ea3ebab0b9ad40280d77a9fe813d8f371d6ca43cd8c5
    Public key SHA-256 70c3e029ffaf985bcc065b6604c92fe7146dd9cf7ec1457b2841c8d563321c86
    PhishDestroy
    Addresses
    104.21.57.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.52, 172.67.141.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    appextrades.org
    Registered
    2025-12-20 · Dynadot Inc
    MX
    Receives mail at mx1.excelax.org, mx2.excelax.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  69. www.k-h.co.il US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder k-h.co.il, reported by PhishDestroyMX presentSPF -allDMARC policy none
    DetailsHide
    Hostname
    www.k-h.co.il
    First seen
    2026-11-07 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing k-h.co.il and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 19:37 UTC to 2027-02-05 19:37 UTC
    Logged 2026-11-07 20:35 UTC in Let's Encrypt Willow2027h1, entry 991,610,422
    SHA-256 10dac87847ba4647548d1cf4cfc0f060a87847268e45a8e99d657907ca67ed54
    Public key SHA-256 6281842453039db96da195eed0ff2d51bef13cb5e1f95f24dc1907c9ae9eedbd
    PhishDestroy
    Addresses
    104.21.65.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.65.85, 172.67.160.162): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    k-h.co.il
    MX
    Receives mail at kh-co-il0c.mail.protection.outlook.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 07:26 UTC

    Suggest a correction

  70. www.qfsledgerdefi.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder qfsledgerdefi.com, reported by PhishDestroyMX presentSPF -allDMARC policy none
    DetailsHide
    Hostname
    www.qfsledgerdefi.com
    First seen
    2026-11-07 20:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing qfsledgerdefi.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 19:34 UTC to 2027-02-05 19:34 UTC
    Logged 2026-11-07 20:33 UTC in Geomys Tuscolo2027h1, entry 518,996,276
    SHA-256 4be9741a2fb3308beaf7701a25a796ae64a56b745a7af58a03ca727defa79ed5
    Public key SHA-256 8735b13c6e284c2200588ec308c5a1b2b31db653af840e48aee3d6f32a3d968a
    PhishDestroy
    Addresses
    104.21.80.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.154, 172.67.151.86): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qfsledgerdefi.com
    MX
    Receives mail at mx1.excelax.org, mx2.excelax.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 20:37 UTC

    Suggest a correction

  71. magasohoje.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishTankMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    magasohoje.com
    First seen
    2026-11-07 20:35 UTC
    Listing
    PhishTank: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 20:34 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Observed in the PhishTank feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 17:26 UTC to 2027-02-03 17:26 UTC
    Logged 2026-11-05 18:25 UTC in IPng Networks Gouda2027h1, entry 326,507,438
    SHA-256 2a18fb15947c9def54178e29e23bc65c4c330420c150dd6ded53c39d86c5d932
    Public key SHA-256 acf63009d1fd71d0dcf1a6328321b6cfaffb4bfb6d19ff7e08417b2d9a3f1747
    PhishTank
    PhishTank report #9556214
    Addresses
    104.21.51.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:3345
    2606:4700:3035::ac43:b0ef
    Cloudflare
    Cloudflare (104.21.51.69, 172.67.176.239): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    magasohoje.com
    Registered
    2026-11-05 · Squarespace Domains LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:40 UTC

    Suggest a correction

  72. ok-mymaxis.web.id US · AS13335 · Cloudflare, Inc.4 addressesMaxis
    ReportedCloudflareReported by PhishTankMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    ok-mymaxis.web.id
    First seen
    2026-11-07 20:35 UTC
    Listing
    PhishTank: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 20:34 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Observed in the PhishTank feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 21:56 UTC to 2027-02-04 22:54 UTC
    Logged 2026-11-06 22:56 UTC in Google ParcelYard2027h1, entry 651,162,363
    SHA-256 29049eaacb9399471951a69955a4c5920e9cd1cfe52f031ba569c1428a29a6d9
    Public key SHA-256 ed0cad7587675af7f5cf553ebbe8d990c02010a1e76b2f1f54ef2a0eddcb8b9a
    PhishTank
    PhishTank report #9556173
    Brand
    Maxis
    Addresses
    104.21.8.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::6815:894
    2606:4700:3037::ac43:8289
    Cloudflare
    Cloudflare (104.21.8.148, 172.67.130.137): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ok-mymaxis.web.id
    Registered
    2026-11-06 · PT Jagoan Hosting Indonesia
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:40 UTC

    Suggest a correction

  73. server-msftlogin.com US · AS13335 · Cloudflare, Inc.4 addressesMicrosoft
    ReportedCloudflareReported by PhishTank as imitating MicrosoftMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    server-msftlogin.com
    First seen
    2026-11-07 20:35 UTC
    Listing
    PhishTank: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 20:34 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Observed in the PhishTank feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 17:53 UTC to 2027-02-05 17:53 UTC
    Logged 2026-11-07 18:51 UTC in IPng Networks Gouda2027h1, entry 345,908,258
    SHA-256 c7e247ba98561c38181d21818440d317541612a590911a72be1b857c698bf577
    Public key SHA-256 2f126eb005c7cf55e1f9e99a807ed5b1e083793c076108873e9a06f9201554a0
    PhishTank
    PhishTank report #9556297
    Brand
    Microsoft
    Addresses
    104.21.63.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:a8f4
    2606:4700:3034::6815:3f04
    Cloudflare
    Cloudflare (104.21.63.4, 172.67.168.244): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    server-msftlogin.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:37 UTC

    Suggest a correction

  74. 876686.sbs US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    876686.sbs
    First seen
    2026-11-07 20:33 UTC
    Listing
    USOM listed it 2026-11-07 · still listed at the last successful feed check 2026-11-07 20:31 UTC
    Listed
    USOM
    1. Certificate logged in CT
    2. Listed by USOM
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 16:50 UTC to 2027-02-05 16:50 UTC
    Logged 2026-11-07 17:48 UTC in Geomys Tuscolo2027h1, entry 517,457,180
    SHA-256 77377a0c239bf56b9b84bff16c8051bb03ab484c5083b50ef61456e10617529d
    Public key SHA-256 1057593535e5490d230218bee257e85c7bd0e7281cebc9f46ecf84d360706d8c
    Addresses
    104.21.71.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:47eb
    2606:4700:3034::ac43:ac16
    Cloudflare
    Cloudflare (104.21.71.235, 172.67.172.22): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    876686.sbs
    Registered
    2026-11-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:21 UTC

    Suggest a correction

  75. hizlisgecisnayolsyukleyn.art US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    hizlisgecisnayolsyukleyn.art
    First seen
    2026-11-07 20:33 UTC
    Listing
    USOM listed it 2026-11-07 · still listed at the last successful feed check 2026-11-07 20:31 UTC
    Listed
    USOM
    1. Certificate logged in CT
    2. Listed by USOM
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-06 18:52 UTC to 2027-02-04 18:52 UTC
    Logged 2026-11-06 19:51 UTC in Google PlumbersArms2027h1, entry 649,334,236
    SHA-256 9d1fac3b4d92526c8df0721bb7a58a0207f5ef6d7ff37095e70533232f62885f
    Public key SHA-256 f321569f7f7b806a8287ec2edd6f8234ba7eef09eb92c792956eb7cb218e067c
    Addresses
    104.21.58.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:3a34
    2606:4700:3036::ac43:c912
    Cloudflare
    Cloudflare (104.21.58.52, 172.67.201.18): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hizlisgecisnayolsyukleyn.art
    Registered
    2026-11-06 · Squarespace Domains II LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  76. hlkrndrhberlri.cfd US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    hlkrndrhberlri.cfd
    First seen
    2026-11-07 20:33 UTC
    Listing
    USOM listed it 2026-11-07 · still listed at the last successful feed check 2026-11-07 20:31 UTC
    Listed
    USOM
    1. Certificate logged in CT
    2. Listed by USOM
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 15:34 UTC to 2027-02-05 15:34 UTC
    Logged 2026-11-07 16:32 UTC in Google PlumbersArms2027h1, entry 663,375,892
    SHA-256 08558464f02a42087e29f9cdf785edb8150aedc2870c3d8d8dfd4c23aa5d1270
    Public key SHA-256 eff4e557846de135f6d92fa32d41d2dcf22af22718e0b4fdae0bc29d0e3833f7
    Addresses
    104.21.52.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:34e5
    2606:4700:3031::ac43:cd39
    Cloudflare
    Cloudflare (104.21.52.229, 172.67.205.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hlkrndrhberlri.cfd
    Registered
    2026-11-07 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  77. hlksglkrhber.cfd US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    hlksglkrhber.cfd
    First seen
    2026-11-07 20:33 UTC
    Listing
    USOM listed it 2026-11-07 · still listed at the last successful feed check 2026-11-07 20:31 UTC
    Listed
    USOM
    1. Certificate logged in CT
    2. Listed by USOM
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 15:17 UTC to 2027-02-05 15:17 UTC
    Logged 2026-11-07 16:15 UTC in Google ParcelYard2027h1, entry 662,837,661
    SHA-256 003e365b12c397d18b6a3690af7297b5af59b4f2cf9873a8cab38d3824652f2a
    Public key SHA-256 5cd48e6264c34044f944faf268b4785a7c08b28866ed5169f971171f7b12e6a7
    Addresses
    104.21.36.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:2465
    2606:4700:3035::ac43:c051
    Cloudflare
    Cloudflare (104.21.36.101, 172.67.192.81): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hlksglkrhber.cfd
    Registered
    2026-11-07 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  78. saglkmhr.cfd US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    saglkmhr.cfd
    First seen
    2026-11-07 20:33 UTC
    Listing
    USOM listed it 2026-11-07 · still listed at the last successful feed check 2026-11-07 20:31 UTC
    Listed
    USOM
    1. Certificate logged in CT
    2. Listed by USOM
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 17:37 UTC to 2027-02-05 17:37 UTC
    Logged 2026-11-07 18:36 UTC in Google PlumbersArms2027h1, entry 664,899,461
    SHA-256 0f3c7a7f1c99b6eba7991a770ded5e8daf0a1cf843fd7159337e33368afa09e8
    Public key SHA-256 5dc5b10c311262550a2cb3852f5f6accef995d772839e0d968cf04e5d8337b85
    Addresses
    104.21.22.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:cc2f
    2606:4700:3037::6815:1667
    Cloudflare
    Cloudflare (104.21.22.103, 172.67.204.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    saglkmhr.cfd
    Registered
    2026-11-07 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  79. tr-siparis-ilan.online US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    tr-siparis-ilan.online
    First seen
    2026-11-07 20:33 UTC
    Listing
    USOM listed it 2026-11-07 · still listed at the last successful feed check 2026-11-07 20:31 UTC
    Listed
    USOM
    1. Certificate logged in CT
    2. Listed by USOM
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 13:00 UTC to 2027-02-05 13:00 UTC
    Logged 2026-11-07 13:59 UTC in Google PlumbersArms2027h1, entry 661,552,012
    SHA-256 55b4a90fa50b94226fe9956cd348eb703f59c2bc13d89dfea537f009eb17c1a1
    Public key SHA-256 47897516908be4f1b9a3d179a09c32eca670e14e75a56de1254f7feeb1bd6c04
    Addresses
    104.21.27.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:1b75
    2606:4700:3034::ac43:a942
    Cloudflare
    Cloudflare (104.21.27.117, 172.67.169.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tr-siparis-ilan.online
    Registered
    2026-11-07 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  80. askvenice.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    askvenice.com
    First seen
    2026-11-07 20:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 19:30 UTC to 2027-02-05 19:30 UTC
    Logged 2026-11-07 20:29 UTC in DigiCert Sphinx2027h1, entry 393,927,245
    SHA-256 10521d2d311bcebcb96e4f1b13abe96b2863c7e99eeb0745bc55f6f3ea92741c
    Public key SHA-256 1a192e84c15ec82ce95311e47158eaeddecfcad5e06228e6e72dd76784719122
    Addresses
    104.21.41.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.41.186, 172.67.166.150): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    askvenice.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:32 UTC

    Suggest a correction

  81. claim-asentum.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    claim-asentum.live
    First seen
    2026-11-07 20:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 19:30 UTC to 2027-02-05 19:30 UTC
    Logged 2026-11-07 20:28 UTC in Let's Encrypt Sycamore2027h1, entry 1,025,372,644
    SHA-256 85cc7d232402ca92eb158dfeaa3adc5211a383ee818e1144aa932e65278a2f84
    Public key SHA-256 1779f61e0710acbb28c32f69dcb36ce5ce410954f88a8abdc89558a615cf1b8b
    Addresses
    104.21.78.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.78.2, 172.67.214.64): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    claim-asentum.live
    Registered
    2026-05-14 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:32 UTC

    Suggest a correction

  82. eowjfsk.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    eowjfsk.online
    First seen
    2026-11-07 20:31 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 13:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 19:27 UTC to 2027-02-05 19:27 UTC
    Logged 2026-11-07 20:26 UTC in Google PlumbersArms2027h1, entry 666,221,458
    SHA-256 0112cdbb1f48b45b108754a97180596c4605717ca000f58c3d0e44cacb54a3ea
    Public key SHA-256 b2214bb7a88d570d8e0953941522912824493bc6438e316f74330de4ae34d96c
    Addresses
    104.21.86.245 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.245, 172.67.138.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eowjfsk.online
    Registered
    2026-05-14 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  83. flexacompliance.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    flexacompliance.com
    First seen
    2026-11-07 20:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:29 UTC to 2027-02-05 20:28 UTC
    Logged 2026-11-07 20:29 UTC in Geomys Tuscolo2027h1, entry 518,966,311
    SHA-256 ce1d34fb23b18e22e4c2fb0e7f3e70b2cb922190c15c7a297ef3e9f353f2d352
    Public key SHA-256 79d220548b9fa69fd245755b5b45ecdf6f85fc4aeb316c74d853123c1e7c05c3
    PhishDestroy
    Addresses
    104.21.13.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.198.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.13.62, 172.67.198.147): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    flexacompliance.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:32 UTC

    Suggest a correction

  84. link-ai-engine.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    link-ai-engine.shop
    First seen
    2026-11-07 20:31 UTC
    Listing
    CERT Polska listed it 2026-09-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 18:27 UTC
    PhishDestroy: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 19:28 UTC to 2027-02-05 19:28 UTC
    Logged 2026-11-07 20:26 UTC in DigiCert Wyvern2027h1, entry 445,497,408
    SHA-256 1f3c903b1c317dbb6e580c542e38e09049c231e5d19ed25693a94e461699025f
    Public key SHA-256 a01ffb5da4a9b83df20acdd8683a29e410fba34f1794c502fb351cc4ff008671
    Addresses
    104.21.27.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.112, 172.67.169.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    link-ai-engine.shop
    MX
    Receives mail at mail.link-ai-engine.shop
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:32 UTC

    Suggest a correction

  85. notes.hubskit.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder hubskit.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 22 mo ago
    DetailsHide
    Hostname
    notes.hubskit.com
    First seen
    2026-11-07 20:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy, listing hubskit.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 19:31 UTC to 2027-02-05 19:31 UTC
    Logged 2026-11-07 20:30 UTC in Google PlumbersArms2027h1, entry 666,269,491
    SHA-256 8562bd32d4d3af09e5288d7e380237676aed18c73280f0bc8db64b70c28f7b23
    Public key SHA-256 7eac5eba6a34e909c65e6d0e1207522e389a03491d08d203e1e2ad16cf8e1ae0
    PhishDestroy
    Addresses
    104.21.58.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.42, 172.67.200.52): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hubskit.com
    Registered
    2025-01-26 · Spaceship, Inc.
    MX
    Receives mail at mx1.privateemail.com, mx2.privateemail.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 08:04 UTC

    Suggest a correction

  86. privy.galacticfederation.co US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder galacticfederation.co, listed by MetaMaskMX presentSPF ~allDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    privy.galacticfederation.co
    First seen
    2026-11-07 20:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask, listing galacticfederation.co and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 19:31 UTC to 2027-02-05 19:31 UTC
    Logged 2026-11-07 20:30 UTC in DigiCert Wyvern2027h1, entry 445,527,247
    SHA-256 c42e1ee59e90c4e28c614ba8e489c03a53effd31d8a551d7827a83fdd424a35e
    Public key SHA-256 457471e7ad82f360c77c970415314bac35226fd755e83d8da109f9b9013915b9
    Addresses
    104.18.24.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.25.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.24.69, 104.18.25.69): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    galacticfederation.co
    Registered
    2026-03-15 · GoDaddy.com, LLC
    MX
    Receives mail at route3.mx.cloudflare.net, route2.mx.cloudflare.net, route1.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:24 UTC

    Suggest a correction

  87. stampiljka.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    stampiljka.info
    First seen
    2026-11-07 20:31 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 18:27 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:26 UTC to 2027-02-05 20:25 UTC
    Logged 2026-11-07 20:26 UTC in Let's Encrypt Willow2027h1, entry 991,503,059
    SHA-256 c0c1e3127b50068ff016a7ce26df1451169744e030d074f90c82510edd56838e
    Public key SHA-256 00c330db0caa02a439dea6a0e897d6c00ac8be7197fc13ce38483f9be8b54115
    Addresses
    104.21.10.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.58, 172.67.162.142): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    stampiljka.info
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:32 UTC

    Suggest a correction

  88. tevevyrav.help US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    tevevyrav.help
    First seen
    2026-11-07 20:31 UTC
    Listing
    CERT Polska listed it 2026-08-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 18:27 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 19:27 UTC to 2027-02-05 19:27 UTC
    Logged 2026-11-07 20:26 UTC in IPng Networks Gouda2027h1, entry 346,643,547
    SHA-256 019f904aa756ed985dacb9b45d26c64a424e66242591e0403e5c63510260dd9f
    Public key SHA-256 01811f9b01b22d585d4d46def01ca69668d92e2edc086f6fce57cd5c5176e0a7
    Addresses
    104.21.3.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.157, 172.67.130.233): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tevevyrav.help
    Registered
    2026-05-14 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  89. wlfi.sh US · AS13335 · Cloudflare, Inc.3 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    wlfi.sh
    First seen
    2026-11-07 20:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 19:29 UTC to 2027-02-05 19:29 UTC
    Logged 2026-11-07 20:27 UTC in Google PlumbersArms2027h1, entry 666,241,341
    SHA-256 27c72e9d8df564b6d62d5d67605ffb79693a5cf7a9a37930c67539273c16aa30
    Public key SHA-256 3697afb2cc80e60084067d17890ec8d945071db49f424e39210adbdfe3466fe8
    Addresses
    104.26.8.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.26.9.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.72.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.26.8.204, 104.26.9.204, 172.67.72.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wlfi.sh
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:32 UTC

    Suggest a correction

  90. www.rainbets-fi.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder rainbets-fi.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.rainbets-fi.com
    First seen
    2026-11-07 20:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask, listing rainbets-fi.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 19:29 UTC to 2027-02-05 20:28 UTC
    Logged 2026-11-07 20:29 UTC in Google ParcelYard2027h1, entry 665,928,554
    SHA-256 1e9888b300dfb30848722e28abcc556d06d0936afedaac6ecccc72178a645458
    Public key SHA-256 e023fd013b30977c683ae757a84de6c50fd53a9849458a46da574d15e919c182
    Addresses
    104.21.56.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.149, 172.67.152.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rainbets-fi.com
    Registered
    2026-09-08 · URL Solutions, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 13:48 UTC

    Suggest a correction

  91. ynhdb.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    ynhdb.com
    First seen
    2026-11-07 20:31 UTC
    Listing
    CERT Polska listed it 2026-05-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 18:27 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 19:30 UTC to 2027-02-05 19:30 UTC
    Logged 2026-11-07 20:29 UTC in IPng Networks Gouda2027h1, entry 346,670,838
    SHA-256 6531caf1e1fd9eac8fad9b80abf6aa79f9b222385acee93638079cc26db25e49
    Public key SHA-256 e5c1c2bd01373441217ce2684d65c20e9e4d2b98da54a8d03ffc6b203aa82f3c
    Addresses
    104.21.16.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.37, 172.67.166.20): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ynhdb.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:32 UTC

    Suggest a correction

  92. cncbetbrazil.bet US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    cncbetbrazil.bet
    First seen
    2026-11-07 20:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 19:22 UTC to 2027-02-05 20:21 UTC
    Logged 2026-11-07 20:22 UTC in DigiCert Sphinx2027h1, entry 393,873,730
    SHA-256 6e712b3cf6588736db4f75ed32bd5ca19016389d8afaba6842c93d353003f9a2
    Public key SHA-256 29d3cb07d0d47044a92dc960f6571289b923c7e55116bd9c697841f14322524f
    PhishDestroy
    Addresses
    104.21.62.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.62.169, 172.67.137.141): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cncbetbrazil.bet
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:27 UTC

    Suggest a correction

  93. coinexmarket.io US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    coinexmarket.io
    First seen
    2026-11-07 20:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 19:26 UTC to 2027-02-05 19:26 UTC
    Logged 2026-11-07 20:25 UTC in Let's Encrypt Willow2027h1, entry 991,483,153
    SHA-256 88b7ef66a8d426af5ccddfc5d5163abcd6cacfc69d3135325efb207a2a72b7dc
    Public key SHA-256 0e2e20f522102f0cb5dbe1e9630be20dfd5cdf42a67f8796b2042fcf618435fc
    Addresses
    104.21.59.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.9, 172.67.167.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    coinexmarket.io
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:27 UTC

    Suggest a correction

  94. polymarketselect.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    polymarketselect.com
    First seen
    2026-11-07 20:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:23 UTC to 2027-02-05 20:22 UTC
    Logged 2026-11-07 20:23 UTC in Google ParcelYard2027h1, entry 665,858,454
    SHA-256 4a626a345cb80f88f3906bf46f40b86da0bdd5bdbc7b79fe2f27e9d056a4ee21
    Public key SHA-256 6d6e5f093239b7c93a958a389c0bd6a5aebda6e21f3786fa8e0fbd773c73c983
    Addresses
    104.21.56.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.75, 172.67.180.72): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    polymarketselect.com
    MX
    Receives mail at route1.mx.cloudflare.net, route2.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 20:27 UTC

    Suggest a correction

  95. video-lezione.it US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    video-lezione.it
    First seen
    2026-11-07 20:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 19:25 UTC to 2027-02-05 20:21 UTC
    Logged 2026-11-07 20:25 UTC in DigiCert Wyvern2027h1, entry 445,482,482
    SHA-256 582799921325b8c4273ebaa3ef7f387e9eba16cd48b7be17a9218f484e05eb41
    Public key SHA-256 e92685e0f70c958ca4382b4b768a6ecf783477fbbab461a427dffab1854ba44b
    PhishDestroy
    Addresses
    104.21.29.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.164, 172.67.149.118): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    video-lezione.it
    MX
    Receives mail at mx00.ionos.it, mx01.ionos.it
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:27 UTC

    Suggest a correction

  96. voting-dexcsreener.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    voting-dexcsreener.com
    First seen
    2026-11-07 20:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 19:26 UTC to 2027-02-05 19:26 UTC
    Logged 2026-11-07 20:25 UTC in Google PlumbersArms2027h1, entry 666,206,851
    SHA-256 6d3af7c444e414ef2de4ebae16f43ab7fc52c3d7a2626016f5ce612e2db3479a
    Public key SHA-256 79163c4b113c17651a827474eb17883993566a33903d07a9814abc5e25c75fc9
    Addresses
    104.21.33.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.84, 172.67.160.128): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    voting-dexcsreener.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:27 UTC

    Suggest a correction

  97. mahjongwin138h.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF ~allDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    mahjongwin138h.vip
    First seen
    2026-11-07 20:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 19:21 UTC to 2027-02-05 19:21 UTC
    Logged 2026-11-07 20:19 UTC in Google ParcelYard2027h1, entry 665,809,037
    SHA-256 67c8c3baf8daf26c3cbd4db05a1ebdc624754f0adf0f6c77fc6d914500871d95
    Public key SHA-256 28a2eccf0fca01ea338c1f7c40f8767fb5684d054697724fb34e342dc6cb966b
    PhishDestroy
    Addresses
    104.21.55.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.25, 172.67.144.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mahjongwin138h.vip
    Registered
    2026-03-16 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 21:22 UTC

    Suggest a correction

  98. xrpl-proposal.live US · AS13335 · Cloudflare, Inc.2 addressesRipple (XRP)
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    xrpl-proposal.live
    First seen
    2026-11-07 20:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 17:56 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:17 UTC to 2027-02-05 20:14 UTC
    Logged 2026-11-07 20:17 UTC in DigiCert Sphinx2027h1, entry 393,823,648
    SHA-256 a108e490d4217f34c98bd59505edcac03c55ae10816a7531d7dcf1c1f2f8b52a
    Public key SHA-256 b64a2239b4a55e4c9adc4f81386b9cc73ec8f5480c22e6c819608212fd360288
    Brand
    Ripple (XRP)
    Addresses
    104.21.72.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.236, 172.67.187.211): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xrpl-proposal.live
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:22 UTC

    Suggest a correction

  99. zama-auction.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    zama-auction.app
    First seen
    2026-11-07 20:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 17:55 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-07 19:17 UTC to 2027-02-05 20:15 UTC
    Logged 2026-11-07 20:18 UTC in Google Argon2027h1, entry 915,518,505
    SHA-256 144a1a6faf0c88493d21a97baca7f05876dc7145ff84754b6b35c0ec1044b95a
    Public key SHA-256 1adf633799e8659ac0a82b767863217caa485e16e62ae031ad9db610821050d6
    PhishDestroy
    Addresses
    104.21.86.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.209, 172.67.136.222): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zama-auction.app
    Registered
    2026-01-16 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:22 UTC

    Suggest a correction

  100. alpition.ch US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    alpition.ch
    First seen
    2026-11-07 20:16 UTC
    Listing
    CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 18:27 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 19:13 UTC to 2027-02-05 20:11 UTC
    Logged 2026-11-07 20:13 UTC in IPng Networks Gouda2027h1, entry 346,539,330
    SHA-256 43c6d4240e300df169ec9ba7b1f58571607a8d39b2881b1e290ea08880dc52f0
    Public key SHA-256 a58857b52c3001ebe452a12f890ded040a51d671c9a989c325ccea3339c81a4d
    Addresses
    104.21.70.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.226, 172.67.140.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    alpition.ch
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:16 UTC

    Suggest a correction

Showing 1–100 of 2,578 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources